Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft
File: 5S2LXLp8LSuK8EbrfzEBBawMCaw.mft (raw, json)
Hash identifier: 8aCqJa45oVoFxG8m4RgLVG4+6OzP6PpWjCxGbABDoqM=
Subject key identifier: 8F:58:22:B8:B3:9E:85:75:6A:EC:36:3C:94:E1:AC:0A:DA:32:51:14
Authority key identifier: E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC
Certificate issuer: /CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac
Certificate serial: 01989147B2B652BCD1A9267B6F394C7CDD82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft
Manifest number: 0422
Signing time: Sun 10 Aug 2025 00:00:51 +0000
Manifest this update: Sun 10 Aug 2025 00:00:51 +0000
Manifest next update: Mon 11 Aug 2025 00:00:51 +0000
Files and hashes: 1: 5S2LXLp8LSuK8EbrfzEBBawMCaw.crl (hash: mN69PbzRsAfde7sGWBHc4C5rqtaKAN7m1R8Dcr1vlTY=)
2: GuglbdgQwP1s68zPxpBUKeDH1GE.roa (hash: Sf12fpSS/gSIfCrOMCQf0QxlhogqDHOYf+4YlIW4mDA=)
3: bXAo7mVEmX8iLg6GBEHUZO92vHY.roa (hash: VzCJRz8Ej6xsupU4wBQwIcnAcaQ/S8QtaCA4CMwW82M=)
4: xXGe4wyq05lrsF2tc38x8ySFe-g.roa (hash: ILPVEPIY9D2xyNF63XsnQpEMnM3xKobt0LuSW1aSmX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:47:b2:b6:52:bc:d1:a9:26:7b:6f:39:4c:7c:dd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac
Validity
Not Before: Aug 10 00:00:51 2025 GMT
Not After : Aug 11 00:00:51 2025 GMT
Subject: CN=8f5822b8b39e85756aec363c94e1ac0ada325114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:fe:38:00:cf:9d:be:09:e2:ae:6b:67:0a:
2e:de:df:f5:fb:1b:af:d7:bc:e1:67:c2:6d:5e:6b:
0e:4c:0e:a3:d6:1a:b2:a7:5d:e0:5f:3d:b7:cf:66:
a5:2a:54:5d:e0:6a:50:6f:7d:e5:5a:6d:0d:db:91:
85:92:94:30:50:2f:20:bb:a9:f2:74:1c:d7:cb:8d:
ef:30:a9:36:bf:bd:e7:11:1c:cb:5e:b3:a6:f6:ff:
3b:7a:dc:d3:44:bb:93:76:e1:17:39:67:50:f8:00:
88:20:89:98:0c:40:37:37:1a:de:29:2b:34:07:ad:
c0:2d:0c:6e:5f:a7:73:3c:72:11:59:c3:0f:59:6c:
86:14:aa:f8:8a:bd:4f:97:c7:1d:a0:23:9f:fe:0d:
c1:89:6a:53:67:4f:bd:45:cd:32:10:d3:da:8b:0d:
78:e1:78:1a:33:3e:e2:97:7f:c0:74:97:9b:64:4c:
d4:a9:7b:4e:df:eb:bd:23:c1:ff:72:9d:f2:fc:6c:
1f:9b:28:e1:c5:26:b0:ca:e8:85:42:6f:45:7b:95:
bb:86:6f:72:ea:24:8f:9e:5c:4b:09:3a:27:90:c7:
3a:24:83:20:69:8c:12:86:11:c1:d9:49:77:64:dd:
35:a2:14:d2:3a:b0:ad:58:d1:8d:83:d4:ee:69:00:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:58:22:B8:B3:9E:85:75:6A:EC:36:3C:94:E1:AC:0A:DA:32:51:14
X509v3 Authority Key Identifier:
keyid:E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:78:24:05:94:c6:0d:e7:21:0d:99:05:74:44:a2:9c:50:13:
74:f9:0a:b4:dd:44:33:e0:4e:c2:a0:cc:c4:f8:db:b9:af:3e:
50:61:eb:46:5a:da:08:12:66:09:6f:d0:dc:f1:44:94:db:54:
07:20:25:fc:a6:2d:dd:51:f7:07:20:ee:3d:7d:b0:42:31:ee:
b7:c6:8b:0c:a2:e2:b4:65:47:ea:5a:94:ee:4c:60:d6:6b:91:
fe:f0:df:ef:a2:5b:34:63:c9:15:d7:b4:e8:10:20:5c:45:b1:
56:9a:18:f7:59:9b:e9:38:b2:9a:21:2c:51:9d:17:ec:42:a5:
34:9a:08:aa:39:57:23:c3:1c:be:89:cb:23:37:3a:74:61:22:
74:64:06:d6:dd:ba:b4:2c:bd:59:9b:b4:43:82:87:83:e7:90:
44:a9:d2:05:ab:0f:5f:c9:bf:df:43:e3:06:20:e2:d8:42:93:
e2:9c:1c:8f:61:e9:93:ce:0a:d3:4e:1a:1f:63:67:3b:c1:12:
18:05:a2:e2:a1:27:77:fa:00:12:54:ce:b5:95:9b:44:7b:ab:
3e:e7:c5:9d:ef:57:7a:ee:1a:78:c4:dc:0c:16:be:2e:3b:e5:
60:ad:5c:b3:6a:24:8e:db:93:6e:f5:7e:6f:38:de:c2:97:7f:
64:a5:f1:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiRR7K2UrzRqSZ7bzlMfN2CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MmQ4YjVjYmE3YzJkMmI4YWYwNDZlYjdmMzEwMTA1YWMw
YzA5YWMwHhcNMjUwODEwMDAwMDUxWhcNMjUwODExMDAwMDUxWjAzMTEwLwYDVQQD
Eyg4ZjU4MjJiOGIzOWU4NTc1NmFlYzM2M2M5NGUxYWMwYWRhMzI1MTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySz+OADPnb4J4q5rZwou3t/1+xuv
17zhZ8JtXmsOTA6j1hqyp13gXz23z2alKlRd4GpQb33lWm0N25GFkpQwUC8gu6ny
dBzXy43vMKk2v73nERzLXrOm9v87etzTRLuTduEXOWdQ+ACIIImYDEA3NxreKSs0
B63ALQxuX6dzPHIRWcMPWWyGFKr4ir1Pl8cdoCOf/g3BiWpTZ0+9Rc0yENPaiw14
4XgaMz7il3/AdJebZEzUqXtO3+u9I8H/cp3y/GwfmyjhxSawyuiFQm9Fe5W7hm9y
6iSPnlxLCTonkMc6JIMgaYwShhHB2Ul3ZN01ohTSOrCtWNGNg9TuaQCGzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9YIriznoV1auw2PJThrAraMlEUMB8GA1UdIwQY
MBaAFOUti1y6fC0rivBG638xAQWsDAmsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNGY4M2QtZmI1My00MjRmLTg1MWQt
YzBkMDYyYTc1MzU0LzEvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kNGY4M2QtZmI1My00MjRmLTg1MWQtYzBkMDYyYTc1MzU0
LzEvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXgkBZTG
DechDZkFdESinFATdPkKtN1EM+BOwqDMxPjbua8+UGHrRlraCBJmCW/Q3PFElNtU
ByAl/KYt3VH3ByDuPX2wQjHut8aLDKLitGVH6lqU7kxg1muR/vDf76JbNGPJFde0
6BAgXEWxVpoY91mb6TiymiEsUZ0X7EKlNJoIqjlXI8McvonLIzc6dGEidGQG1t26
tCy9WZu0Q4KHg+eQRKnSBasPX8m/30PjBiDi2EKT4pwcj2Hpk84K004aH2NnO8ES
GAWi4qEnd/oAElTOtZWbRHurPufFne9Xeu4aeMTcDBa+LjvlYK1cs2okjtuTbvV+
bzjewpd/ZKXx9g==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:00:36 2025 by rpki-client