Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
File: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft (raw, json)
Hash identifier: TEWhqn21uZTEA2J2OTIEjExM7cssn6g3j6K/e5MxXTY=
Subject key identifier: 7A:A8:55:88:A9:07:9B:C3:5E:06:0B:80:30:75:03:2E:66:46:67:7F
Authority key identifier: E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
Certificate issuer: /CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Certificate serial: 01989712A3DF6F5C7DC1277A73511E975B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
Manifest number: 0299
Signing time: Mon 11 Aug 2025 03:00:37 +0000
Manifest this update: Mon 11 Aug 2025 03:00:37 +0000
Manifest next update: Tue 12 Aug 2025 03:00:37 +0000
Files and hashes: 1: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl (hash: Z8B1PghfSSI9AbEfTGQ5kru9E1psQimIIfi28Bd9p1M=)
2: sh2pFLFRXQ_LNHY8Z6kE6uVGJsM.roa (hash: LOYuvxv+r/IWU8gCda5GHcFP5KoGM8hEkOX7ufXWF5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:a3:df:6f:5c:7d:c1:27:7a:73:51:1e:97:5b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Validity
Not Before: Aug 11 03:00:37 2025 GMT
Not After : Aug 12 03:00:37 2025 GMT
Subject: CN=7aa85588a9079bc35e060b803075032e6646677f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:62:f2:9b:af:43:19:59:15:6c:fa:44:f4:
81:80:08:a2:6d:80:36:d5:d9:50:6d:6c:76:31:f7:
9e:c0:38:dc:57:43:cd:66:fb:f7:01:06:f0:5d:b8:
84:bd:a1:83:36:55:9b:f2:fd:63:8e:d7:70:8d:37:
d6:70:ec:98:05:c1:6f:be:31:dc:6e:ff:e9:10:04:
7d:f5:21:36:c2:7b:a0:5d:37:7f:b4:fe:af:52:5d:
64:e4:e1:7e:8a:a0:51:05:97:8e:e4:13:15:fa:b0:
fb:93:06:51:89:d9:ce:99:1a:51:12:bf:e2:6d:4b:
3a:aa:9b:06:dc:ec:ca:19:1d:21:55:0e:81:68:01:
a9:93:29:3a:ea:c1:c6:43:4c:1a:4d:96:52:ee:bc:
7e:a9:3d:16:d6:ff:2a:5a:74:e2:d0:d4:16:37:df:
97:ce:0f:9d:10:5b:e9:c2:36:20:b4:d3:a7:93:43:
c3:df:ec:53:75:e5:9e:bd:53:3b:af:a0:78:bc:9b:
05:6c:93:bf:a0:0e:84:c3:26:a0:80:79:3d:8a:c6:
e9:8f:53:e1:c8:43:b1:c6:6b:77:ff:fa:12:b6:65:
12:9f:08:4e:23:9a:66:c9:77:7d:a3:cc:0a:83:5b:
09:48:2e:ad:2a:6d:fe:7a:6b:35:18:e5:a0:3b:0d:
a9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A8:55:88:A9:07:9B:C3:5E:06:0B:80:30:75:03:2E:66:46:67:7F
X509v3 Authority Key Identifier:
keyid:E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2e:ff:c1:e5:e3:37:a7:76:1f:d9:32:ef:be:f1:68:2c:c3:
a7:c7:13:6b:00:9a:bd:b9:01:e6:36:ec:f9:44:00:5c:e6:ef:
0f:79:e9:48:fe:37:00:c2:1b:f2:7c:ab:3e:ef:9d:db:17:62:
ba:4e:b1:54:d6:a7:ce:42:21:a0:d8:92:07:f7:60:bc:e5:62:
7b:af:0d:c7:e6:f5:23:ff:49:90:e5:d2:8e:cc:fb:9c:dc:58:
9a:76:73:06:0a:1b:96:df:52:56:f3:f8:42:43:89:1c:cc:a2:
fa:fd:4d:6f:ee:fe:1b:d1:a1:d7:1d:62:fe:04:46:ed:7b:6d:
6c:f9:4f:44:7b:6b:71:39:44:9c:36:2d:07:fd:49:c4:fc:c4:
ee:73:e0:4a:09:22:78:c9:28:a8:52:3b:22:8a:15:f5:e8:21:
3b:a9:0e:c5:f6:5c:fa:e3:87:a9:19:2a:fe:ec:e4:e8:e3:c7:
c2:2e:3f:0b:08:1f:c7:21:cc:45:29:79:f5:bf:56:c5:3c:b2:
95:a4:f7:48:cd:2e:b1:4a:9d:d5:e0:08:bd:2d:57:5b:be:1a:
f6:2d:d7:61:6f:ca:33:a0:41:d8:8a:d7:2b:d0:f8:3f:4f:f6:
37:3b:59:85:ff:7c:05:7b:9f:31:a4:1f:07:c5:04:f2:9d:88:
c7:8d:eb:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXEqPfb1x9wSd6c1Eel1s4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NmIzZDYxZmU0M2FiNjgwNGI2ZjFlMzI5N2E4Y2RjYzI2
YjlkNmMwHhcNMjUwODExMDMwMDM3WhcNMjUwODEyMDMwMDM3WjAzMTEwLwYDVQQD
Eyg3YWE4NTU4OGE5MDc5YmMzNWUwNjBiODAzMDc1MDMyZTY2NDY2NzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyBi8puvQxlZFWz6RPSBgAiibYA2
1dlQbWx2MfeewDjcV0PNZvv3AQbwXbiEvaGDNlWb8v1jjtdwjTfWcOyYBcFvvjHc
bv/pEAR99SE2wnugXTd/tP6vUl1k5OF+iqBRBZeO5BMV+rD7kwZRidnOmRpREr/i
bUs6qpsG3OzKGR0hVQ6BaAGpkyk66sHGQ0waTZZS7rx+qT0W1v8qWnTi0NQWN9+X
zg+dEFvpwjYgtNOnk0PD3+xTdeWevVM7r6B4vJsFbJO/oA6EwyaggHk9isbpj1Ph
yEOxxmt3//oStmUSnwhOI5pmyXd9o8wKg1sJSC6tKm3+ems1GOWgOw2p4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqoVYipB5vDXgYLgDB1Ay5mRmd/MB8GA1UdIwQY
MBaAFORrPWH+Q6toBLbx4yl6jNzCa51sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUdzOVlmNURxMmdFdHZIaktYcU0zTUpybld3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xYTAyNGMtNmI3NS00YWQ4LWI1OWQt
YWY5YmIzZDEyNWQ4LzEvNUdzOVlmNURxMmdFdHZIaktYcU0zTUpybld3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8xYTAyNGMtNmI3NS00YWQ4LWI1OWQtYWY5YmIzZDEyNWQ4
LzEvNUdzOVlmNURxMmdFdHZIaktYcU0zTUpybld3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqi7/weXj
N6d2H9ky777xaCzDp8cTawCavbkB5jbs+UQAXObvD3npSP43AMIb8nyrPu+d2xdi
uk6xVNanzkIhoNiSB/dgvOVie68Nx+b1I/9JkOXSjsz7nNxYmnZzBgoblt9SVvP4
QkOJHMyi+v1Nb+7+G9Gh1x1i/gRG7XttbPlPRHtrcTlEnDYtB/1JxPzE7nPgSgki
eMkoqFI7IooV9eghO6kOxfZc+uOHqRkq/uzk6OPHwi4/CwgfxyHMRSl59b9WxTyy
laT3SM0usUqd1eAIvS1XW74a9i3XYW/KM6BB2IrXK9D4P0/2NztZhf98BXufMaQf
B8UE8p2Ix43rkg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 06:28:17 2025 by rpki-client