Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
File: 5J_xmt1LshEp7ogjFL5zy3jM7bM.mft (raw, json)
Hash identifier: dGoihMh6ZvIV3qspv/t/8mhGo1UETyw/IlNPLhcvPSc=
Subject key identifier: 8E:11:2F:DC:A1:1C:1B:D3:4A:94:F0:04:94:3A:D2:CD:DA:0B:DD:E4
Authority key identifier: E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3
Certificate issuer: /CN=e49ff19add4bb21129ee882314be73cb78ccedb3
Certificate serial: 019891ECD3F59A7C8678548AFBAA8861AB0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
Manifest number: 0718
Signing time: Sun 10 Aug 2025 03:01:13 +0000
Manifest this update: Sun 10 Aug 2025 03:01:13 +0000
Manifest next update: Mon 11 Aug 2025 03:01:13 +0000
Files and hashes: 1: 5J_xmt1LshEp7ogjFL5zy3jM7bM.crl (hash: Wf1B4zVxFQcFH+yP6t7bajuiPji6NzkSrF1XGvK48Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:ec:d3:f5:9a:7c:86:78:54:8a:fb:aa:88:61:ab:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49ff19add4bb21129ee882314be73cb78ccedb3
Validity
Not Before: Aug 10 03:01:13 2025 GMT
Not After : Aug 11 03:01:13 2025 GMT
Subject: CN=8e112fdca11c1bd34a94f004943ad2cdda0bdde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:2e:db:e0:2c:26:36:09:a4:c7:38:98:68:
17:3f:7a:57:e7:71:47:d3:59:44:1c:56:f7:1b:9b:
3a:4c:4d:97:91:44:34:06:e2:c6:d7:3a:76:39:a6:
cd:d2:8f:16:12:e7:60:9a:1b:ab:91:45:df:63:25:
9d:1d:89:e5:e8:4b:56:f5:f3:1e:96:a8:e1:b2:44:
dd:88:af:2c:28:e9:76:9f:4b:e6:b1:42:c3:78:2d:
7f:dd:52:6c:b3:b1:fb:6f:f9:53:51:94:a6:df:90:
ed:16:f6:35:9d:bf:d8:9d:a5:41:a3:b3:ca:34:43:
21:a6:aa:1b:76:a6:39:b4:95:88:3b:02:e3:b0:d7:
60:fe:a5:9c:7c:1f:43:df:3b:a9:a6:7c:2d:36:f5:
03:7f:4d:ba:1c:5c:65:1a:aa:e2:88:25:ad:7c:88:
c0:07:9b:93:d6:9e:94:2d:56:80:d8:05:5c:dc:05:
13:5b:e6:80:a7:c3:86:76:1b:cc:9d:b4:fc:69:4f:
f9:88:0c:c5:44:1a:49:ff:a7:d5:0c:b4:6d:66:ef:
86:07:01:79:8f:d1:1a:e8:b5:cc:14:2a:01:df:74:
6e:e3:73:c1:29:5b:83:13:5a:73:f3:8e:f4:4b:76:
a5:b0:3e:85:90:d3:0d:28:5d:a3:3f:e0:7c:4b:d5:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:11:2F:DC:A1:1C:1B:D3:4A:94:F0:04:94:3A:D2:CD:DA:0B:DD:E4
X509v3 Authority Key Identifier:
keyid:E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c8:d7:56:5d:85:0f:0c:95:e4:4f:6d:23:f6:5d:7e:35:be:
0d:63:b5:32:a4:35:9a:c5:52:73:ca:0a:38:90:20:93:39:4a:
17:64:79:e9:6d:4b:57:e9:ed:5b:23:63:2d:60:f4:54:81:c2:
3a:c8:ad:99:c9:7d:7e:26:48:f5:b5:bf:9d:21:90:76:c5:16:
1b:7b:88:ef:1f:6b:cf:9c:9e:bc:01:fc:ab:0d:13:08:e0:28:
ce:f0:88:1f:0c:87:1b:80:68:46:55:32:40:7c:15:51:66:2f:
27:dd:fb:97:99:08:9b:4c:a1:e0:04:32:de:62:d3:35:6f:ea:
0d:05:b1:ec:da:2e:fc:bf:f1:94:ed:60:91:70:e3:18:bb:2b:
34:05:b9:92:92:40:8d:50:7b:16:bf:91:27:42:b9:83:2f:d7:
e4:6c:7d:c8:ea:b2:eb:b0:fa:fd:f0:a1:06:22:34:55:a7:4d:
5c:a4:96:fa:ac:23:4e:8a:64:14:ca:d7:24:a4:8a:46:71:91:
63:4a:b7:f1:83:a2:ff:ab:39:22:0b:67:50:31:1a:fb:6e:76:
de:b7:66:c5:12:b7:22:90:2c:d6:78:fe:78:26:f1:d9:c1:88:
2b:56:a9:28:58:da:b3:b0:6a:8a:4c:78:3c:35:fc:86:fc:3c:
c0:ce:b9:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiR7NP1mnyGeFSK+6qIYasKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OWZmMTlhZGQ0YmIyMTEyOWVlODgyMzE0YmU3M2NiNzhj
Y2VkYjMwHhcNMjUwODEwMDMwMTEzWhcNMjUwODExMDMwMTEzWjAzMTEwLwYDVQQD
Eyg4ZTExMmZkY2ExMWMxYmQzNGE5NGYwMDQ5NDNhZDJjZGRhMGJkZGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpEu2+AsJjYJpMc4mGgXP3pX53FH
01lEHFb3G5s6TE2XkUQ0BuLG1zp2OabN0o8WEudgmhurkUXfYyWdHYnl6EtW9fMe
lqjhskTdiK8sKOl2n0vmsULDeC1/3VJss7H7b/lTUZSm35DtFvY1nb/YnaVBo7PK
NEMhpqobdqY5tJWIOwLjsNdg/qWcfB9D3zuppnwtNvUDf026HFxlGqriiCWtfIjA
B5uT1p6ULVaA2AVc3AUTW+aAp8OGdhvMnbT8aU/5iAzFRBpJ/6fVDLRtZu+GBwF5
j9Ea6LXMFCoB33Ru43PBKVuDE1pz8470S3alsD6FkNMNKF2jP+B8S9UbuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4RL9yhHBvTSpTwBJQ60s3aC93kMB8GA1UdIwQY
MBaAFOSf8ZrdS7IRKe6IIxS+c8t4zO2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUpfeG10MUxzaEVwN29nakZMNXp5M2pNN2JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yODAyNmYtYmM4Yi00NGE4LWJlNDIt
ZDZiMDU1ZGFiNDdiLzEvNUpfeG10MUxzaEVwN29nakZMNXp5M2pNN2JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8yODAyNmYtYmM4Yi00NGE4LWJlNDItZDZiMDU1ZGFiNDdi
LzEvNUpfeG10MUxzaEVwN29nakZMNXp5M2pNN2JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScjXVl2F
DwyV5E9tI/ZdfjW+DWO1MqQ1msVSc8oKOJAgkzlKF2R56W1LV+ntWyNjLWD0VIHC
Ositmcl9fiZI9bW/nSGQdsUWG3uI7x9rz5yevAH8qw0TCOAozvCIHwyHG4BoRlUy
QHwVUWYvJ937l5kIm0yh4AQy3mLTNW/qDQWx7Nou/L/xlO1gkXDjGLsrNAW5kpJA
jVB7Fr+RJ0K5gy/X5Gx9yOqy67D6/fChBiI0VadNXKSW+qwjTopkFMrXJKSKRnGR
Y0q38YOi/6s5IgtnUDEa+2523rdmxRK3IpAs1nj+eCbx2cGIK1apKFjas7Bqikx4
PDX8hvw8wM65SQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 10:41:01 2025 by rpki-client