Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
File: s5xw9844MbjyzOidsUon3aoOmcI.mft (raw, json)
Hash identifier: NF2sVoIm4ZHf0Lwk63PclNWUZmvErr4DO75OjE5DtCI=
Subject key identifier: 35:C7:41:0D:DC:8C:EC:89:5F:51:B2:89:98:E7:0E:A5:10:64:0F:3B
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Certificate issuer: /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial: 01988E0FAA1E5B530EB36B2A0CE2F3077767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 09:00:47 +0000
Manifest this update: Sat 09 Aug 2025 09:00:47 +0000
Manifest next update: Sun 10 Aug 2025 09:00:47 +0000
Files and hashes: 1: LrWKN25r7tthSunY280tDynhnBc.roa (hash: ub2N6aH2MytmGSybvR7g8dPW4ivkCLOi0sBC/uuJMOY=)
2: PQmLIVoeSOIwIoKz3RvYJrpb2xM.roa (hash: hlojli+o3fpj5DjUXvEZS5bdJMfuplLhFYrIdheEs5Q=)
3: cIwYeOItEbowyL16Fsd6dW6MTNw.roa (hash: 51f1FdiiRo4Oc5gbYzr2w1gPQFtv0wp9QesOtcNGq5w=)
4: s5xw9844MbjyzOidsUon3aoOmcI.crl (hash: awcLb7jJ3wgHcJ3mP3uyiLN6SlBOt7earw9Czv3uYlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:0f:aa:1e:5b:53:0e:b3:6b:2a:0c:e2:f3:07:77:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Validity
Not Before: Aug 9 09:00:47 2025 GMT
Not After : Aug 10 09:00:47 2025 GMT
Subject: CN=35c7410ddc8cec895f51b28998e70ea510640f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:eb:eb:d4:6e:4d:60:8a:f9:4a:97:6e:d9:
0a:76:21:58:df:f5:44:b2:a8:dc:d0:99:12:aa:48:
e2:e8:cb:00:57:02:f8:9b:be:c9:de:0b:09:1c:42:
f6:2a:3c:72:ae:4a:02:55:cc:a3:0a:fa:6c:f0:27:
e3:f9:a6:bc:f8:06:24:a9:b0:29:5c:02:2e:0c:56:
04:50:65:9a:66:60:39:44:5a:2b:5c:bd:ee:48:43:
e2:da:f7:43:bc:8e:10:0c:b4:d8:d7:36:fc:14:95:
92:ae:6d:2a:2e:8f:dd:8e:b0:13:71:59:3c:7b:9f:
ca:ef:d8:9e:05:2e:01:21:95:8b:d8:8a:5a:65:95:
47:10:55:a9:6a:02:84:1c:e2:3b:13:52:c0:24:35:
6a:5e:0d:c2:b3:9b:c5:bf:1c:ad:c0:5c:0f:ce:00:
23:c5:8a:86:6f:13:03:45:5a:38:b9:67:aa:54:66:
18:fc:a9:13:2f:ac:70:d2:eb:d8:fe:a9:16:38:a4:
38:31:d9:9e:68:0e:c8:14:7d:cc:cd:e0:08:5f:26:
50:fc:4a:95:da:bd:d9:68:c5:b2:3b:7c:51:96:0e:
f7:4a:69:fd:00:6e:9f:98:46:03:3c:01:d0:14:55:
21:b2:2f:5b:66:57:7c:29:69:97:4c:cc:3f:d7:69:
0a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C7:41:0D:DC:8C:EC:89:5F:51:B2:89:98:E7:0E:A5:10:64:0F:3B
X509v3 Authority Key Identifier:
keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:47:2e:9f:d6:65:b7:af:e6:90:f2:80:40:f1:82:6a:b6:97:
3e:bd:db:e9:01:92:7c:b2:15:59:98:74:64:64:e6:8d:5a:6f:
6d:e6:a7:88:c5:a5:05:73:54:14:02:81:33:66:17:33:5c:9b:
f3:5f:31:fb:b6:de:17:13:ab:95:fd:f7:e3:8a:85:e6:8c:1e:
1d:00:89:fe:45:31:65:c3:37:bb:04:88:70:e3:42:45:e6:0c:
74:4c:ba:76:3b:9a:cf:b5:ec:ba:6d:80:45:0f:92:49:0c:62:
66:0c:06:8a:12:90:c5:eb:34:1d:63:5b:7a:08:8e:aa:b8:e9:
85:44:1c:a8:3a:b4:d3:47:56:b4:1e:82:77:5a:9e:e9:01:e9:
99:bf:82:be:4b:14:6e:55:f2:38:e9:0b:61:e2:86:49:cf:27:
47:3f:e3:d6:96:ff:ec:d8:ab:ee:7b:5e:74:e8:3f:67:c3:00:
9d:1f:1b:ee:ce:76:0a:27:ad:79:6c:9e:8f:c6:9b:27:48:e4:
39:2f:0e:13:96:1c:ba:b4:e9:b1:52:03:23:1b:d0:b5:c2:69:
c8:b9:88:7c:00:b7:b5:8b:a1:5e:61:3d:81:60:aa:3a:f2:82:
c6:9d:69:1e:33:70:18:54:61:a3:53:a8:92:bf:63:64:2f:ac:
f0:a5:6e:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiOD6oeW1MOs2sqDOLzB3dnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOWM3MGY3Y2UzODMxYjhmMmNjZTg5ZGIxNGEyN2RkYWEw
ZTk5YzIwHhcNMjUwODA5MDkwMDQ3WhcNMjUwODEwMDkwMDQ3WjAzMTEwLwYDVQQD
EygzNWM3NDEwZGRjOGNlYzg5NWY1MWIyODk5OGU3MGVhNTEwNjQwZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy/r69RuTWCK+UqXbtkKdiFY3/VE
sqjc0JkSqkji6MsAVwL4m77J3gsJHEL2KjxyrkoCVcyjCvps8Cfj+aa8+AYkqbAp
XAIuDFYEUGWaZmA5RForXL3uSEPi2vdDvI4QDLTY1zb8FJWSrm0qLo/djrATcVk8
e5/K79ieBS4BIZWL2IpaZZVHEFWpagKEHOI7E1LAJDVqXg3Cs5vFvxytwFwPzgAj
xYqGbxMDRVo4uWeqVGYY/KkTL6xw0uvY/qkWOKQ4MdmeaA7IFH3MzeAIXyZQ/EqV
2r3ZaMWyO3xRlg73Smn9AG6fmEYDPAHQFFUhsi9bZld8KWmXTMw/12kKpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXHQQ3cjOyJX1GyiZjnDqUQZA87MB8GA1UdIwQY
MBaAFLOccPfOODG48szonbFKJ92qDpnCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczV4dzk4NDRNYmp5ek9pZHNVb24zYW9PbWNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lOTE4MTMtOTI3ZS00N2E1LWI3MDIt
ZGU1Mzc4NDYxZmVlLzEvczV4dzk4NDRNYmp5ek9pZHNVb24zYW9PbWNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lOTE4MTMtOTI3ZS00N2E1LWI3MDItZGU1Mzc4NDYxZmVl
LzEvczV4dzk4NDRNYmp5ek9pZHNVb24zYW9PbWNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0cun9Zl
t6/mkPKAQPGCaraXPr3b6QGSfLIVWZh0ZGTmjVpvbeaniMWlBXNUFAKBM2YXM1yb
818x+7beFxOrlf3344qF5oweHQCJ/kUxZcM3uwSIcONCReYMdEy6djuaz7Xsum2A
RQ+SSQxiZgwGihKQxes0HWNbegiOqrjphUQcqDq000dWtB6Cd1qe6QHpmb+CvksU
blXyOOkLYeKGSc8nRz/j1pb/7Nir7ntedOg/Z8MAnR8b7s52CieteWyej8abJ0jk
OS8OE5YcurTpsVIDIxvQtcJpyLmIfAC3tYuhXmE9gWCqOvKCxp1pHjNwGFRho1Oo
kr9jZC+s8KVuRw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:25:59 2025 by rpki-client