Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
File: A5D0YbjFGyArIQDfLMQzD2kiGME.mft (raw, json)
Hash identifier: 05KqNub+sprFtJkG/7/DFoHIc12KpZzYa+tEjXGni6c=
Subject key identifier: A6:5F:4C:C6:D8:F7:AB:90:BB:8E:DA:CD:39:24:15:E1:8B:BE:5B:11
Authority key identifier: 03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
Certificate issuer: /CN=0390f461b8c51b202b2100df2cc4330f692218c1
Certificate serial: 0198733D154EB6476A3D528FD3FF24B4DD25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
Manifest number: 15A4
Signing time: Mon 04 Aug 2025 04:00:39 +0000
Manifest this update: Mon 04 Aug 2025 04:00:39 +0000
Manifest next update: Tue 05 Aug 2025 04:00:39 +0000
Files and hashes: 1: A5D0YbjFGyArIQDfLMQzD2kiGME.crl (hash: K2lTDIp+rctUr9clgQDxYREJeSE6LaK/WFYJdpeSmlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:15:4e:b6:47:6a:3d:52:8f:d3:ff:24:b4:dd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0390f461b8c51b202b2100df2cc4330f692218c1
Validity
Not Before: Aug 4 04:00:39 2025 GMT
Not After : Aug 5 04:00:39 2025 GMT
Subject: CN=a65f4cc6d8f7ab90bb8edacd392415e18bbe5b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:df:0a:d2:2e:a0:6f:8f:2f:1c:4d:7d:5f:f5:
c6:0f:1c:44:bd:51:d3:14:cb:f5:ff:3f:b4:d3:e6:
de:7a:c0:18:a7:83:84:91:2d:2c:cb:f4:78:32:38:
77:f7:a3:45:8e:1d:2a:21:cc:8b:ce:63:10:8e:85:
f0:cc:7b:a1:dc:e7:4d:04:46:9e:ef:79:26:55:38:
c0:0a:a5:03:e4:3b:31:55:97:7b:72:d2:0a:9c:e4:
30:07:9a:c1:5c:2b:e9:04:27:c3:45:a9:85:8e:58:
47:11:c6:54:8d:7a:c3:f1:42:07:4d:5f:d3:7a:ab:
b0:90:41:57:c0:d8:88:d0:e7:e0:85:96:ef:c8:ab:
61:be:ca:af:c0:33:d0:21:ef:22:61:40:b2:8c:ba:
0c:7a:43:e5:78:bc:71:24:fb:b9:26:aa:32:2d:8d:
a1:d2:16:44:cc:2a:55:15:fb:2d:bb:39:2b:c0:c9:
dd:e3:a9:8b:aa:7b:7b:31:0f:7a:bb:6b:df:99:0a:
31:80:c8:8b:8f:60:82:54:58:e6:77:bc:81:48:26:
29:ec:15:9e:0e:69:4a:48:36:98:64:9d:52:f8:3c:
28:54:d7:1a:19:b7:3c:ea:3c:b7:34:3a:c9:9c:8a:
5b:2a:95:75:f0:c7:ff:21:69:58:18:4c:e0:51:fd:
c1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5F:4C:C6:D8:F7:AB:90:BB:8E:DA:CD:39:24:15:E1:8B:BE:5B:11
X509v3 Authority Key Identifier:
keyid:03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:76:31:0e:0f:ea:52:f6:60:89:21:f9:d4:26:0f:51:28:e4:
c9:9b:88:67:8f:fe:b2:ae:d2:e7:4f:66:4b:8d:2d:06:70:fd:
64:49:50:dd:0f:b2:7d:f9:05:6d:cf:d3:19:90:98:52:a7:81:
db:4d:9a:56:85:d1:67:5f:d0:5b:ae:58:cb:aa:b6:a5:9b:08:
bf:c7:b1:91:81:fc:04:1e:95:4a:b5:e9:3a:74:f4:c0:37:f7:
dc:61:54:ac:f0:ba:ca:fb:2d:02:ef:42:59:4a:02:86:af:ae:
35:50:6a:66:73:30:8b:33:b3:24:8d:11:48:90:18:7a:36:ba:
36:b4:f3:48:05:7a:09:35:56:ae:5f:5d:8a:44:72:fc:43:26:
ff:eb:d0:f6:88:23:7c:d5:67:4d:d9:23:34:a5:81:a6:c3:96:
f4:27:25:b4:7c:2f:b8:8f:ea:23:b9:b8:22:38:a9:e3:a4:c9:
8c:2a:ee:08:b5:92:f9:7c:bd:01:a3:bb:f0:28:5c:02:a6:c0:
6e:3b:23:3a:47:e6:28:5e:52:db:25:70:23:79:70:7a:31:29:
7e:67:6c:68:60:fc:1f:b3:80:9b:72:bf:b6:76:5c:c7:18:f1:
39:f6:c5:a5:ea:57:be:1f:eb:77:cd:69:62:22:f9:5d:b0:ce:
b9:c2:42:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPRVOtkdqPVKP0/8ktN0lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOTBmNDYxYjhjNTFiMjAyYjIxMDBkZjJjYzQzMzBmNjky
MjE4YzEwHhcNMjUwODA0MDQwMDM5WhcNMjUwODA1MDQwMDM5WjAzMTEwLwYDVQQD
EyhhNjVmNGNjNmQ4ZjdhYjkwYmI4ZWRhY2QzOTI0MTVlMThiYmU1YjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud8K0i6gb48vHE19X/XGDxxEvVHT
FMv1/z+00+beesAYp4OEkS0sy/R4Mjh396NFjh0qIcyLzmMQjoXwzHuh3OdNBEae
73kmVTjACqUD5DsxVZd7ctIKnOQwB5rBXCvpBCfDRamFjlhHEcZUjXrD8UIHTV/T
equwkEFXwNiI0OfghZbvyKthvsqvwDPQIe8iYUCyjLoMekPleLxxJPu5JqoyLY2h
0hZEzCpVFfstuzkrwMnd46mLqnt7MQ96u2vfmQoxgMiLj2CCVFjmd7yBSCYp7BWe
DmlKSDaYZJ1S+DwoVNcaGbc86jy3NDrJnIpbKpV18Mf/IWlYGEzgUf3B2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZfTMbY96uQu47azTkkFeGLvlsRMB8GA1UdIwQY
MBaAFAOQ9GG4xRsgKyEA3yzEMw9pIhjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTVEMFliakZHeUFySVFEZkxNUXpEMmtpR01FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mNzJhNmMtZGEyNy00MmM3LTk0ODMt
ZDAwMTdmY2Q0MmYxLzEvQTVEMFliakZHeUFySVFEZkxNUXpEMmtpR01FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9mNzJhNmMtZGEyNy00MmM3LTk0ODMtZDAwMTdmY2Q0MmYx
LzEvQTVEMFliakZHeUFySVFEZkxNUXpEMmtpR01FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnYxDg/q
UvZgiSH51CYPUSjkyZuIZ4/+sq7S509mS40tBnD9ZElQ3Q+yffkFbc/TGZCYUqeB
202aVoXRZ1/QW65Yy6q2pZsIv8exkYH8BB6VSrXpOnT0wDf33GFUrPC6yvstAu9C
WUoChq+uNVBqZnMwizOzJI0RSJAYeja6NrTzSAV6CTVWrl9dikRy/EMm/+vQ9ogj
fNVnTdkjNKWBpsOW9CcltHwvuI/qI7m4Ijip46TJjCruCLWS+Xy9AaO78ChcAqbA
bjsjOkfmKF5S2yVwI3lwejEpfmdsaGD8H7OAm3K/tnZcxxjxOfbFpepXvh/rd81p
YiL5XbDOucJCcw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:05 2025 by rpki-client