Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
File: R2Bl1x8emPmnynjmFOz19G1aZDw.mft (raw, json)
Hash identifier: occ0y2s1zcZvYMe/j2DLp/ryHBPPylxQPLUErb85MjI=
Subject key identifier: 8F:21:39:E4:C1:96:AE:1A:6F:75:DC:20:0F:64:25:42:25:B1:2E:45
Authority key identifier: 47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C
Certificate issuer: /CN=476065d71f1e98f9a7ca78e614ecf5f46d5a643c
Certificate serial: 019892C8228E145588CEBBF97E54A6CCD389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
Manifest number: C5
Signing time: Sun 10 Aug 2025 07:00:45 +0000
Manifest this update: Sun 10 Aug 2025 07:00:45 +0000
Manifest next update: Mon 11 Aug 2025 07:00:45 +0000
Files and hashes: 1: R2Bl1x8emPmnynjmFOz19G1aZDw.crl (hash: feztGWpS4SG1GuTvYO9AFMr5ysTS22h+WQy+uJLBhiM=)
2: lASkSWhNSFerShHIOly6CM5etwY.roa (hash: eTZvYlddER+/7D2hoV0jNRxfkb0vM+l4ayTlpERiEYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:22:8e:14:55:88:ce:bb:f9:7e:54:a6:cc:d3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476065d71f1e98f9a7ca78e614ecf5f46d5a643c
Validity
Not Before: Aug 10 07:00:45 2025 GMT
Not After : Aug 11 07:00:45 2025 GMT
Subject: CN=8f2139e4c196ae1a6f75dc200f64254225b12e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:b2:12:9f:64:db:27:c7:f3:50:26:f9:f2:
7c:3f:d8:00:6a:17:41:32:ba:fc:3d:88:8f:f0:9a:
9d:0c:7b:99:7a:68:33:36:06:20:89:d5:78:fa:56:
da:37:0f:0e:4a:d3:35:ca:3c:40:40:1c:a3:5c:14:
15:d8:ee:d5:a6:c2:65:0a:72:c5:64:5f:36:4b:b7:
92:1b:93:2f:13:2b:78:75:f8:ac:aa:e6:5e:aa:a3:
47:66:6b:a0:6e:f0:10:3e:a5:dd:dc:53:0c:2d:7d:
a3:f8:4b:a6:8a:20:2e:8e:8f:7c:6d:08:77:b1:5f:
f0:0e:0a:79:e1:90:c9:f5:2a:be:f4:24:84:a3:ed:
f7:e3:cc:9b:53:85:bb:cb:20:14:4a:1c:72:7a:b4:
e2:31:bd:60:58:72:cf:30:f6:91:55:02:b7:ba:a0:
09:37:1e:49:9a:0a:d4:19:61:b2:e1:a6:d0:17:4f:
cc:38:99:e4:ff:7e:5c:8a:2e:ae:ab:44:62:ed:5d:
25:0c:a2:7c:44:2e:91:fb:ef:cc:29:e3:c3:15:ee:
ea:f1:5f:8a:dd:70:d8:2b:1f:c0:1b:b3:85:8f:b6:
ef:b8:25:5a:58:37:30:14:76:3b:61:29:2a:88:50:
aa:b7:86:02:80:7f:c5:26:61:aa:13:7a:5f:98:b5:
b5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:21:39:E4:C1:96:AE:1A:6F:75:DC:20:0F:64:25:42:25:B1:2E:45
X509v3 Authority Key Identifier:
keyid:47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:08:a9:24:43:3f:71:aa:24:be:df:62:e5:26:f5:c7:27:71:
fe:48:ed:e1:5e:03:34:4c:8e:64:6d:bc:d4:90:2a:89:d5:50:
b9:52:2f:96:f6:8c:f4:41:26:17:df:d3:63:1a:7d:44:f4:f2:
52:5a:70:0d:fd:51:e0:85:f2:59:c9:eb:b1:a9:1f:ec:ae:37:
26:95:76:61:24:c8:b3:d1:59:3c:ad:6a:1e:28:3d:95:02:10:
ef:ed:85:01:50:7d:7a:92:7e:04:f3:ae:b9:59:5e:b1:3b:cb:
be:4f:4a:01:b9:5c:dd:ec:18:21:36:fd:7c:50:dc:f0:4e:8d:
48:39:22:5a:72:25:25:0a:ef:1f:68:94:27:76:0c:41:05:2a:
51:c0:b8:f3:a2:94:de:ac:22:a0:29:d8:51:3c:ea:b1:e9:d1:
f0:20:40:f8:63:10:8f:37:1d:95:8b:5e:a3:7f:b9:65:d6:f3:
fd:3f:39:55:71:8a:89:54:8e:7f:a7:ed:9d:f0:ac:bc:9d:6f:
94:28:83:9f:64:f9:96:3b:19:c7:97:f6:d9:06:79:a1:6c:7f:
98:b2:50:92:0e:59:94:0b:b4:7a:1e:f0:24:db:21:57:86:9c:
41:43:59:7b:6f:94:1f:fa:bc:c8:2f:a9:d0:a1:37:e7:06:cf:
5c:d8:5c:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSyCKOFFWIzrv5flSmzNOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjA2NWQ3MWYxZTk4ZjlhN2NhNzhlNjE0ZWNmNWY0NmQ1
YTY0M2MwHhcNMjUwODEwMDcwMDQ1WhcNMjUwODExMDcwMDQ1WjAzMTEwLwYDVQQD
Eyg4ZjIxMzllNGMxOTZhZTFhNmY3NWRjMjAwZjY0MjU0MjI1YjEyZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrWyEp9k2yfH81Am+fJ8P9gAahdB
Mrr8PYiP8JqdDHuZemgzNgYgidV4+lbaNw8OStM1yjxAQByjXBQV2O7VpsJlCnLF
ZF82S7eSG5MvEyt4dfisquZeqqNHZmugbvAQPqXd3FMMLX2j+EumiiAujo98bQh3
sV/wDgp54ZDJ9Sq+9CSEo+3348ybU4W7yyAUShxyerTiMb1gWHLPMPaRVQK3uqAJ
Nx5JmgrUGWGy4abQF0/MOJnk/35cii6uq0Ri7V0lDKJ8RC6R++/MKePDFe7q8V+K
3XDYKx/AG7OFj7bvuCVaWDcwFHY7YSkqiFCqt4YCgH/FJmGqE3pfmLW1SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8hOeTBlq4ab3XcIA9kJUIlsS5FMB8GA1UdIwQY
MBaAFEdgZdcfHpj5p8p45hTs9fRtWmQ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJCbDF4OGVtUG1ueW5qbUZPejE5RzFhWkR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81MjZmM2UtODkyNC00OGJkLWE3NzIt
YjUxOTUzMDM3OTkzLzEvUjJCbDF4OGVtUG1ueW5qbUZPejE5RzFhWkR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81MjZmM2UtODkyNC00OGJkLWE3NzItYjUxOTUzMDM3OTkz
LzEvUjJCbDF4OGVtUG1ueW5qbUZPejE5RzFhWkR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgipJEM/
caokvt9i5Sb1xydx/kjt4V4DNEyOZG281JAqidVQuVIvlvaM9EEmF9/TYxp9RPTy
UlpwDf1R4IXyWcnrsakf7K43JpV2YSTIs9FZPK1qHig9lQIQ7+2FAVB9epJ+BPOu
uVlesTvLvk9KAblc3ewYITb9fFDc8E6NSDkiWnIlJQrvH2iUJ3YMQQUqUcC486KU
3qwioCnYUTzqsenR8CBA+GMQjzcdlYteo3+5Zdbz/T85VXGKiVSOf6ftnfCsvJ1v
lCiDn2T5ljsZx5f22QZ5oWx/mLJQkg5ZlAu0eh7wJNshV4acQUNZe2+UH/q8yC+p
0KE35wbPXNhcSQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:21 2025 by rpki-client