Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
File: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft (raw, json)
Hash identifier: pyolwUyJSQr+6lNzYHDVGtupb2S3dJvzYoasbp/s/Go=
Subject key identifier: 39:AA:97:DB:CE:EA:00:99:ED:21:DB:1D:95:81:5E:CE:38:0F:5C:5C
Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Certificate issuer: /CN=e58ff73925a23692847ed92bc66613fd47068dcf
Certificate serial: 019778D41FEF030256BF3D1C3CD1DABBDC2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
Manifest number: 0263
Signing time: Mon 16 Jun 2025 13:00:57 +0000
Manifest this update: Mon 16 Jun 2025 13:00:57 +0000
Manifest next update: Tue 17 Jun 2025 13:00:57 +0000
Files and hashes: 1: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl (hash: 3Jbxl2Eyik5TLWBiF7qgIQl49tlQ0B4kMz6b5cNKPpk=)
2: LyUeFaQumjkEXGwuTN3adk_CmUQ.roa (hash: 1oee/niCKCFU/8iZhol3JSIxvOFh3whzL0NQ6+tUdxg=)
3: ldrAy5A_M0tg2d0BXg7t_q2mTmY.roa (hash: PzgoMs0khlbRVil+vbEFVoeQZaszoG+3sW3UoJkJrfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d4:1f:ef:03:02:56:bf:3d:1c:3c:d1:da:bb:dc:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf
Validity
Not Before: Jun 16 13:00:57 2025 GMT
Not After : Jun 17 13:00:57 2025 GMT
Subject: CN=39aa97dbceea0099ed21db1d95815ece380f5c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:7d:d3:00:c5:3e:a8:9d:9a:a5:87:e7:8a:
79:d3:6f:08:8f:52:a0:e8:83:05:af:9b:93:85:44:
a5:74:22:49:16:36:c1:dd:71:e4:04:6f:ac:1a:ec:
a1:5c:8a:35:ba:4b:f0:e9:92:60:d4:56:fe:c5:58:
ea:d0:2c:15:c8:32:e3:64:33:9c:b8:af:94:f4:ec:
84:17:a6:9a:0d:e3:45:ed:dd:88:ed:b3:0a:7f:71:
d4:94:22:1f:06:44:2f:ed:18:98:b9:05:89:39:ad:
13:42:aa:b7:82:e2:27:f0:bb:c2:27:80:77:43:d3:
de:66:1f:ba:a1:d2:3e:07:4b:ac:85:69:cb:64:55:
79:c9:fc:f8:ad:46:28:45:ff:02:de:11:ca:f7:a8:
c4:d8:33:05:24:57:80:4b:44:2e:5a:ab:6d:4a:6d:
30:2b:0a:a8:06:35:ce:08:74:a2:84:dc:a9:5a:24:
05:bd:d3:a1:78:95:a7:6c:43:58:80:d4:6f:4d:5d:
90:b5:65:68:44:df:ab:ca:ab:4c:bd:32:78:fa:e1:
ac:06:87:ef:e8:98:80:a7:a7:84:78:3a:02:dd:29:
22:0b:71:96:85:7c:43:92:eb:44:0e:8c:09:c5:6b:
69:ba:20:d0:46:4b:96:4c:f4:a6:fd:74:f9:63:33:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AA:97:DB:CE:EA:00:99:ED:21:DB:1D:95:81:5E:CE:38:0F:5C:5C
X509v3 Authority Key Identifier:
keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6a:1b:94:24:56:ce:29:39:fe:46:00:5d:92:ea:e5:0b:76:
1a:25:82:af:e0:4e:d8:54:92:ef:ae:c8:7d:af:ed:34:69:8d:
d2:45:52:e0:8f:67:70:31:6f:bc:1e:11:6b:dc:d2:37:10:2e:
fb:92:45:44:a0:7f:55:f4:05:ad:e5:22:1f:ce:f0:92:81:ad:
34:cc:44:9e:6b:19:de:5f:25:6d:6c:27:ae:4a:81:2b:46:b1:
46:e5:33:12:96:b4:6e:4c:89:32:b0:b3:c1:29:40:e5:a3:df:
5e:b7:f7:78:83:a0:76:58:8a:1f:f0:6b:59:73:8d:3d:a5:5d:
fd:52:a3:38:17:4b:12:68:a5:3f:0a:13:ea:7c:c8:18:96:1c:
6d:58:fd:f9:37:98:35:8b:8b:8f:c9:d5:a3:6e:fe:16:ae:63:
99:a2:ca:17:15:b9:95:f4:ce:04:1c:54:36:8e:cf:f8:01:a9:
2c:63:9a:f9:56:85:50:e1:00:bc:e6:b9:0a:19:76:44:e8:e3:
6e:48:d2:a2:b8:a5:a9:15:b3:e0:78:16:a6:59:e6:4e:e7:1f:
91:88:c0:e8:f3:42:6d:c0:bd:6f:60:ae:a4:a2:38:56:fd:04:
97:7e:ef:7c:d3:82:f2:69:42:18:57:12:21:87:f8:3a:a5:33:
98:e9:e8:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd41B/vAwJWvz0cPNHau9wtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1OGZmNzM5MjVhMjM2OTI4NDdlZDkyYmM2NjYxM2ZkNDcw
NjhkY2YwHhcNMjUwNjE2MTMwMDU3WhcNMjUwNjE3MTMwMDU3WjAzMTEwLwYDVQQD
EygzOWFhOTdkYmNlZWEwMDk5ZWQyMWRiMWQ5NTgxNWVjZTM4MGY1YzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG590wDFPqidmqWH54p5028Ij1Kg
6IMFr5uThUSldCJJFjbB3XHkBG+sGuyhXIo1ukvw6ZJg1Fb+xVjq0CwVyDLjZDOc
uK+U9OyEF6aaDeNF7d2I7bMKf3HUlCIfBkQv7RiYuQWJOa0TQqq3guIn8LvCJ4B3
Q9PeZh+6odI+B0ushWnLZFV5yfz4rUYoRf8C3hHK96jE2DMFJFeAS0QuWqttSm0w
KwqoBjXOCHSihNypWiQFvdOheJWnbENYgNRvTV2QtWVoRN+ryqtMvTJ4+uGsBofv
6JiAp6eEeDoC3SkiC3GWhXxDkutEDowJxWtpuiDQRkuWTPSm/XT5YzNiuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmql9vO6gCZ7SHbHZWBXs44D1xcMB8GA1UdIwQY
MBaAFOWP9zklojaShH7ZK8ZmE/1HBo3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlfM09TV2lOcEtFZnRrcnhtWVRfVWNHamM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80MGYxYmItZTg2OC00NzljLWE1MTUt
N2I0N2I1YmE2YWVkLzEvNVlfM09TV2lOcEtFZnRrcnhtWVRfVWNHamM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi80MGYxYmItZTg2OC00NzljLWE1MTUtN2I0N2I1YmE2YWVk
LzEvNVlfM09TV2lOcEtFZnRrcnhtWVRfVWNHamM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmoblCRW
zik5/kYAXZLq5Qt2GiWCr+BO2FSS767Ifa/tNGmN0kVS4I9ncDFvvB4Ra9zSNxAu
+5JFRKB/VfQFreUiH87wkoGtNMxEnmsZ3l8lbWwnrkqBK0axRuUzEpa0bkyJMrCz
wSlA5aPfXrf3eIOgdliKH/BrWXONPaVd/VKjOBdLEmilPwoT6nzIGJYcbVj9+TeY
NYuLj8nVo27+Fq5jmaLKFxW5lfTOBBxUNo7P+AGpLGOa+VaFUOEAvOa5Chl2ROjj
bkjSorilqRWz4HgWplnmTucfkYjA6PNCbcC9b2CupKI4Vv0El37vfNOC8mlCGFcS
IYf4OqUzmOnolQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 19:28:19 2025 by rpki-client