Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
File: 5snUihjDwNLk5jp7g4haeWd1WCY.mft (raw, json)
Hash identifier: pvdMbixpP6KihJC+A7JfFp0pyjhaLaTQwh3D6EPvy9w=
Subject key identifier: 7D:79:29:A8:11:C7:F5:F9:5E:5E:84:1D:A4:81:2B:30:EC:27:5C:56
Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
Certificate issuer: /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Certificate serial: 019768BC1225AAF28E3883E7F00E072AE681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 10:00:45 +0000
Manifest this update: Fri 13 Jun 2025 10:00:45 +0000
Manifest next update: Sat 14 Jun 2025 10:00:45 +0000
Files and hashes: 1: 5snUihjDwNLk5jp7g4haeWd1WCY.crl (hash: rr+lSash6oN3AJtgKlGbrxKlhCxYA+uFuZVSONDZRdw=)
2: zohWKsAJg1AB7BcLgO5mP203ZJ8.roa (hash: qyr9zS4mbTGjUUiqIIIhploYFAxZHgevrVarc4Vt5k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:12:25:aa:f2:8e:38:83:e7:f0:0e:07:2a:e6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Validity
Not Before: Jun 13 10:00:45 2025 GMT
Not After : Jun 14 10:00:45 2025 GMT
Subject: CN=7d7929a811c7f5f95e5e841da4812b30ec275c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c7:77:da:0f:ad:cb:02:7f:3a:7d:bf:1d:ca:
75:dc:19:7e:bf:0c:35:f0:86:b7:80:de:5d:e8:73:
ab:c5:27:1b:fe:40:f8:00:42:68:df:7e:bb:f3:8b:
fe:20:d0:a5:bd:b8:c8:e5:a8:9d:f1:57:9a:77:e6:
ce:5c:c3:35:a0:77:4e:78:ee:b8:96:b7:07:9d:e5:
91:58:8d:d2:56:83:15:b4:b1:bd:88:8e:f9:46:a8:
78:65:b4:c3:54:2d:04:fa:08:56:ce:e8:35:b2:53:
b8:60:01:d7:90:db:7d:ea:7d:1a:6a:49:2d:38:27:
7d:c6:22:e4:6a:4a:f9:25:84:b1:be:ea:b5:77:73:
bd:35:2d:9a:23:10:cb:a3:07:5b:b2:ae:db:0f:f5:
a1:f1:d1:44:6b:23:05:fe:d8:d2:1d:2a:c2:96:9b:
50:29:d4:10:b3:33:05:9b:34:0f:8f:84:84:e7:80:
1b:1a:8d:7d:f0:05:e5:1f:fa:1e:ec:fb:50:87:25:
9f:45:74:f8:df:ce:db:26:42:06:0d:74:70:2c:d8:
0c:36:b8:7b:93:24:23:c9:84:84:ac:b8:61:74:2a:
32:b9:11:e6:f2:26:67:73:aa:f0:b3:a1:d0:21:9c:
c2:0f:f1:b0:64:0f:3d:6f:15:f0:52:f0:28:fd:a8:
44:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:79:29:A8:11:C7:F5:F9:5E:5E:84:1D:A4:81:2B:30:EC:27:5C:56
X509v3 Authority Key Identifier:
keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:dd:40:f1:a9:40:70:a0:93:33:f4:c2:42:b7:e1:95:ca:21:
2c:60:f6:9a:b7:c7:83:eb:0e:aa:a5:e8:7a:18:6d:de:38:dc:
9d:b4:2c:a6:b6:29:bc:6a:c6:ee:3f:03:a4:e0:c4:db:af:1c:
ae:1c:9d:3d:a8:8e:f9:97:56:be:c2:e3:16:02:b1:0b:0d:41:
62:18:55:f7:c6:4c:23:5d:2c:8e:8e:c6:78:7b:73:75:f3:65:
d3:8d:1d:39:a3:59:9b:bb:aa:68:9b:d4:c3:b4:f7:23:1a:3c:
c0:93:72:04:0d:df:19:0a:00:6d:08:92:80:eb:40:af:f1:17:
ba:2b:dd:50:1e:d3:7f:6a:58:d7:89:56:eb:8e:33:ef:fd:c6:
da:56:4b:2b:10:0a:0f:54:8b:e9:c0:4a:92:4d:5d:ed:1c:9c:
80:6b:4c:03:ef:1e:8f:85:50:0f:46:d3:f3:0a:5b:e0:9e:32:
2c:11:88:2e:34:3e:e3:d6:52:1c:3c:3d:eb:59:60:7c:fc:55:
ef:f4:ba:44:32:e1:eb:9b:53:ab:b7:e8:bc:97:b3:0c:c5:fa:
09:d2:08:44:65:bd:06:aa:07:26:c3:a6:7c:1f:37:3e:d1:49:
fa:99:9c:b3:7b:ef:76:1a:c7:a4:f2:1d:5a:47:21:74:8c:5e:
e4:58:1f:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdovBIlqvKOOIPn8A4HKuaBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YzlkNDhhMThjM2MwZDJlNGU2M2E3YjgzODg1YTc5Njc3
NTU4MjYwHhcNMjUwNjEzMTAwMDQ1WhcNMjUwNjE0MTAwMDQ1WjAzMTEwLwYDVQQD
Eyg3ZDc5MjlhODExYzdmNWY5NWU1ZTg0MWRhNDgxMmIzMGVjMjc1YzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cd32g+tywJ/On2/Hcp13Bl+vww1
8Ia3gN5d6HOrxScb/kD4AEJo336784v+INClvbjI5aid8Vead+bOXMM1oHdOeO64
lrcHneWRWI3SVoMVtLG9iI75Rqh4ZbTDVC0E+ghWzug1slO4YAHXkNt96n0aakkt
OCd9xiLkakr5JYSxvuq1d3O9NS2aIxDLowdbsq7bD/Wh8dFEayMF/tjSHSrClptQ
KdQQszMFmzQPj4SE54AbGo198AXlH/oe7PtQhyWfRXT4387bJkIGDXRwLNgMNrh7
kyQjyYSErLhhdCoyuRHm8iZnc6rws6HQIZzCD/GwZA89bxXwUvAo/ahEEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH15KagRx/X5Xl6EHaSBKzDsJ1xWMB8GA1UdIwQY
MBaAFObJ1IoYw8DS5OY6e4OIWnlndVgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMt
ODQ4ZjczZGY4YjIwLzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMtODQ4ZjczZGY4YjIw
LzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOd1A8alA
cKCTM/TCQrfhlcohLGD2mrfHg+sOqqXoehht3jjcnbQsprYpvGrG7j8DpODE268c
rhydPaiO+ZdWvsLjFgKxCw1BYhhV98ZMI10sjo7GeHtzdfNl040dOaNZm7uqaJvU
w7T3Ixo8wJNyBA3fGQoAbQiSgOtAr/EXuivdUB7Tf2pY14lW644z7/3G2lZLKxAK
D1SL6cBKkk1d7RycgGtMA+8ej4VQD0bT8wpb4J4yLBGILjQ+49ZSHDw961lgfPxV
7/S6RDLh65tTq7fovJezDMX6CdIIRGW9BqoHJsOmfB83PtFJ+pmcs3vvdhrHpPId
WkchdIxe5Fgf1Q==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:16:28 2025 by rpki-client