Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
File: p5ROOKJ1k6RvXEoqli9YO49r5GA.mft (raw, json)
Hash identifier: Z8wSGXQXKgY+zIUbynJAbrH2IeHVsjQF27V9/oeXxQ0=
Subject key identifier: DF:B3:6B:0D:AD:F3:5D:49:13:09:21:5C:B3:3F:B8:56:E5:6C:3E:7C
Authority key identifier: A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
Certificate issuer: /CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Certificate serial: 019883554D147EA72B430C663D90AB39E862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
Manifest number: 120C
Signing time: Thu 07 Aug 2025 07:01:01 +0000
Manifest this update: Thu 07 Aug 2025 07:01:01 +0000
Manifest next update: Fri 08 Aug 2025 07:01:01 +0000
Files and hashes: 1: p5ROOKJ1k6RvXEoqli9YO49r5GA.crl (hash: XbJOXeidUQUvtFY0tneCIV6edgm5CCpCkCeXQkCBhns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:4d:14:7e:a7:2b:43:0c:66:3d:90:ab:39:e8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Validity
Not Before: Aug 7 07:01:01 2025 GMT
Not After : Aug 8 07:01:01 2025 GMT
Subject: CN=dfb36b0dadf35d491309215cb33fb856e56c3e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:80:e0:b0:fe:0d:da:ec:d1:e1:55:12:42:40:
01:91:d4:f2:48:d9:40:b9:60:aa:94:98:da:8b:1d:
2f:41:ec:28:d3:f6:1b:05:5b:59:9a:0b:72:94:7e:
8e:f1:81:87:cb:71:c0:7e:7b:b1:e0:e0:dc:8c:41:
ef:3b:cd:23:c8:fc:ef:65:f1:62:bd:81:29:e3:3a:
e9:80:20:81:63:df:08:74:6f:42:c8:eb:af:90:89:
92:91:32:f4:b9:b7:ba:d4:48:d5:87:93:62:60:a3:
38:79:ed:16:67:f4:c6:47:4f:b7:10:bc:f0:56:5f:
a5:81:12:e2:24:73:c1:f9:6e:1a:c2:50:7f:87:d0:
44:78:8a:4b:c3:54:ee:ac:8b:dc:90:c0:60:f5:47:
5b:4f:69:ab:09:d9:de:d9:50:c6:49:0c:e4:06:20:
4f:a7:c4:36:38:f1:82:48:19:9e:ae:f4:95:70:49:
01:53:96:5f:8b:17:9e:b4:0c:51:71:c1:0b:5c:99:
05:db:d4:e8:25:83:f0:93:ef:d8:2a:82:b6:7f:e0:
09:e7:73:88:0f:db:f9:93:20:b3:45:10:d1:3c:e3:
51:58:5f:15:73:14:24:63:80:95:27:d2:43:e0:8c:
4a:56:6d:fd:58:b6:51:df:b0:c4:67:c4:c6:f6:34:
bf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B3:6B:0D:AD:F3:5D:49:13:09:21:5C:B3:3F:B8:56:E5:6C:3E:7C
X509v3 Authority Key Identifier:
keyid:A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0d:65:f1:39:5d:ed:bf:b6:a6:7b:97:98:19:ff:39:fa:ec:
68:24:f2:31:34:91:cf:f3:d9:40:85:f4:8e:fa:71:60:18:0d:
49:7e:05:6d:b9:80:ac:f0:38:70:31:c5:2b:24:39:51:8b:e0:
4a:3c:e1:7d:1c:a9:cd:e9:22:01:ab:3e:04:be:75:18:71:65:
27:a8:69:2b:5a:d9:0e:d3:1d:66:b5:aa:92:ef:45:89:77:34:
c0:c7:a8:98:73:87:74:97:29:77:e9:37:ac:89:e7:0e:a5:97:
59:87:ba:95:c1:3b:30:5b:6b:a9:64:13:64:4a:29:8d:76:da:
48:34:13:93:c4:82:4b:4d:63:21:25:48:a6:12:02:57:8b:08:
1d:9e:ee:f7:c7:d5:dd:8c:b4:d9:0b:e8:a2:83:f7:df:4a:8e:
02:44:0d:29:55:43:06:46:bf:e2:77:de:8a:fe:6e:1e:6f:a9:
3e:d7:97:0e:7d:f4:70:65:f0:1a:5b:21:9d:c6:3c:34:65:bf:
c6:55:29:f1:0e:22:42:34:aa:2e:36:cd:f2:a5:06:32:59:ab:
91:87:28:e6:08:af:9a:c9:3a:19:8a:35:7b:24:28:31:74:37:
7d:13:de:9b:58:dc:bb:88:0c:da:bd:f2:41:f6:1c:69:e7:01:
83:9e:6b:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDVU0UfqcrQwxmPZCrOehiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OTQ0ZTM4YTI3NTkzYTQ2ZjVjNGEyYTk2MmY1ODNiOGY2
YmU0NjAwHhcNMjUwODA3MDcwMTAxWhcNMjUwODA4MDcwMTAxWjAzMTEwLwYDVQQD
EyhkZmIzNmIwZGFkZjM1ZDQ5MTMwOTIxNWNiMzNmYjg1NmU1NmMzZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoDgsP4N2uzR4VUSQkABkdTySNlA
uWCqlJjaix0vQewo0/YbBVtZmgtylH6O8YGHy3HAfnux4ODcjEHvO80jyPzvZfFi
vYEp4zrpgCCBY98IdG9CyOuvkImSkTL0ube61EjVh5NiYKM4ee0WZ/TGR0+3ELzw
Vl+lgRLiJHPB+W4awlB/h9BEeIpLw1TurIvckMBg9UdbT2mrCdne2VDGSQzkBiBP
p8Q2OPGCSBmervSVcEkBU5ZfixeetAxRccELXJkF29ToJYPwk+/YKoK2f+AJ53OI
D9v5kyCzRRDRPONRWF8VcxQkY4CVJ9JD4IxKVm39WLZR37DEZ8TG9jS/QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+zaw2t811JEwkhXLM/uFblbD58MB8GA1UdIwQY
MBaAFKeUTjiidZOkb1xKKpYvWDuPa+RgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDVST09LSjFrNlJ2WEVvcWxpOVlPNDlyNUdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83MWQ4OWYtMWYxOS00ZWJlLTlhMDIt
ZWU4YWU4ODJjNWM3LzEvcDVST09LSjFrNlJ2WEVvcWxpOVlPNDlyNUdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS83MWQ4OWYtMWYxOS00ZWJlLTlhMDItZWU4YWU4ODJjNWM3
LzEvcDVST09LSjFrNlJ2WEVvcWxpOVlPNDlyNUdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcA1l8Tld
7b+2pnuXmBn/OfrsaCTyMTSRz/PZQIX0jvpxYBgNSX4FbbmArPA4cDHFKyQ5UYvg
SjzhfRypzekiAas+BL51GHFlJ6hpK1rZDtMdZrWqku9FiXc0wMeomHOHdJcpd+k3
rInnDqWXWYe6lcE7MFtrqWQTZEopjXbaSDQTk8SCS01jISVIphICV4sIHZ7u98fV
3Yy02QvoooP330qOAkQNKVVDBka/4nfeiv5uHm+pPteXDn30cGXwGlshncY8NGW/
xlUp8Q4iQjSqLjbN8qUGMlmrkYco5givmsk6GYo1eyQoMXQ3fRPem1jcu4gM2r3y
QfYcaecBg55rMQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:07:06 2025 by rpki-client