Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
File: 5yHQ6mg8xnWULAmPWcQRyGDorto.mft (raw, json)
Hash identifier: 4Ju/ykKzF9GvC/CjUEFlrwM89jsbGhUAmbL6ThxRId0=
Subject key identifier: DF:C3:AE:8E:5C:2B:3E:8A:A4:25:06:BD:91:83:0B:55:EE:FF:4F:3F
Authority key identifier: E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
Certificate issuer: /CN=e721d0ea683cc675942c098f59c411c860e8aeda
Certificate serial: 019892FF0E812CB469A3133C3E2CFF50C5EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
Manifest number: 0208
Signing time: Sun 10 Aug 2025 08:00:45 +0000
Manifest this update: Sun 10 Aug 2025 08:00:45 +0000
Manifest next update: Mon 11 Aug 2025 08:00:45 +0000
Files and hashes: 1: 5yHQ6mg8xnWULAmPWcQRyGDorto.crl (hash: twG/3DGTt2o8h3wDQgccDZqSOEs+mrck3DfklatKZes=)
2: jgoeY3coRJMRVNj7rT_gdCxKrt4.roa (hash: HO7ymkMaYgqdA88q8uGMkiN43bUDJb9bwGWjnqtMFDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:0e:81:2c:b4:69:a3:13:3c:3e:2c:ff:50:c5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e721d0ea683cc675942c098f59c411c860e8aeda
Validity
Not Before: Aug 10 08:00:45 2025 GMT
Not After : Aug 11 08:00:45 2025 GMT
Subject: CN=dfc3ae8e5c2b3e8aa42506bd91830b55eeff4f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6e:78:ba:85:96:c3:ff:3e:2a:6c:76:03:5d:
79:e1:fd:6b:07:af:78:80:40:08:ce:e3:aa:e2:69:
19:41:12:8f:7d:c0:97:3d:74:17:cb:3c:7f:72:9e:
ee:09:6b:c6:28:ba:44:d6:5e:23:69:a8:79:8e:88:
7a:71:17:a8:f0:60:a0:b8:47:c5:60:01:72:a4:8b:
05:93:3d:bc:a7:f3:e5:1e:f0:93:e0:9d:4a:e3:68:
ec:92:1c:bf:30:c1:1a:9b:a6:a4:64:f6:cc:e2:d8:
b0:1e:95:ae:87:b7:70:93:6f:77:5f:c6:e6:6e:83:
6d:ac:d3:49:58:33:f7:96:72:6d:b6:9e:a4:e6:24:
3b:dc:a1:aa:00:b7:60:52:3b:a9:47:2e:57:ab:7c:
01:fa:25:80:60:4c:0d:99:bb:b1:f1:fe:82:a0:74:
52:29:32:00:e3:8a:c4:2a:c1:d0:d6:62:98:d7:0b:
fe:5a:66:ff:50:24:a1:db:17:cd:27:c4:30:8a:b8:
99:3b:6a:e0:6d:c8:18:b8:4d:e7:5c:8d:20:98:82:
a6:bd:04:86:49:ee:86:ed:c0:3f:e4:3a:1e:e7:85:
ff:84:9f:fb:55:af:ab:45:9a:b6:0a:90:04:82:cd:
8e:df:8b:12:3d:b8:9a:52:c3:7f:41:e5:60:a5:34:
d3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C3:AE:8E:5C:2B:3E:8A:A4:25:06:BD:91:83:0B:55:EE:FF:4F:3F
X509v3 Authority Key Identifier:
keyid:E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:39:71:07:3e:e4:8d:67:dd:94:f6:21:eb:aa:6b:e2:f0:37:
a6:2d:c4:36:80:0e:e0:5f:32:d1:de:f5:11:19:29:23:6c:25:
90:b2:53:3a:ec:a6:94:d6:e7:e6:71:92:9e:83:61:e2:c2:06:
2c:88:59:51:57:78:ee:05:44:9c:58:1f:bc:a1:24:53:36:15:
56:b7:d2:e7:0d:e3:04:10:f9:d7:f0:86:26:7c:b4:78:1b:c3:
70:37:22:05:4f:e2:1e:2f:6a:1f:18:42:20:a8:b1:37:e0:1d:
f6:8a:81:c0:98:a4:ea:3a:30:73:83:2a:a7:15:3f:38:6f:49:
90:11:c9:2e:8f:b4:c6:96:a6:8f:e3:3a:bb:0c:e1:4f:f0:af:
e0:34:91:77:df:6c:a8:e8:63:bb:46:95:0d:8d:c4:d0:4d:85:
f6:19:5e:ff:48:97:5f:84:0d:2b:a9:46:41:64:31:ea:bc:a4:
ef:07:f8:3d:c0:03:e1:2b:64:c7:6b:a3:63:10:d8:bc:0e:75:
d3:14:49:50:bd:08:ce:10:eb:74:7c:1a:72:4a:b3:5e:5d:69:
2a:11:90:53:81:74:27:c3:5e:38:50:32:3b:2c:84:5b:20:1b:
c1:f8:f1:97:06:73:63:54:c0:50:76:9e:5f:bb:b9:21:45:75:
48:af:98:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiS/w6BLLRpoxM8Piz/UMXvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MjFkMGVhNjgzY2M2NzU5NDJjMDk4ZjU5YzQxMWM4NjBl
OGFlZGEwHhcNMjUwODEwMDgwMDQ1WhcNMjUwODExMDgwMDQ1WjAzMTEwLwYDVQQD
EyhkZmMzYWU4ZTVjMmIzZThhYTQyNTA2YmQ5MTgzMGI1NWVlZmY0ZjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG54uoWWw/8+Kmx2A1154f1rB694
gEAIzuOq4mkZQRKPfcCXPXQXyzx/cp7uCWvGKLpE1l4jaah5joh6cReo8GCguEfF
YAFypIsFkz28p/PlHvCT4J1K42jskhy/MMEam6akZPbM4tiwHpWuh7dwk293X8bm
boNtrNNJWDP3lnJttp6k5iQ73KGqALdgUjupRy5Xq3wB+iWAYEwNmbux8f6CoHRS
KTIA44rEKsHQ1mKY1wv+Wmb/UCSh2xfNJ8QwiriZO2rgbcgYuE3nXI0gmIKmvQSG
Se6G7cA/5Doe54X/hJ/7Va+rRZq2CpAEgs2O34sSPbiaUsN/QeVgpTTTXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/Dro5cKz6KpCUGvZGDC1Xu/08/MB8GA1UdIwQY
MBaAFOch0OpoPMZ1lCwJj1nEEchg6K7aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXlIUTZtZzh4bldVTEFtUFdjUVJ5R0RvcnRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84NDEyNTctOWQ5My00OTE4LWE4YWUt
NzJjYTEzZGZhZDJiLzEvNXlIUTZtZzh4bldVTEFtUFdjUVJ5R0RvcnRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS84NDEyNTctOWQ5My00OTE4LWE4YWUtNzJjYTEzZGZhZDJi
LzEvNXlIUTZtZzh4bldVTEFtUFdjUVJ5R0RvcnRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjlxBz7k
jWfdlPYh66pr4vA3pi3ENoAO4F8y0d71ERkpI2wlkLJTOuymlNbn5nGSnoNh4sIG
LIhZUVd47gVEnFgfvKEkUzYVVrfS5w3jBBD51/CGJny0eBvDcDciBU/iHi9qHxhC
IKixN+Ad9oqBwJik6jowc4MqpxU/OG9JkBHJLo+0xpamj+M6uwzhT/Cv4DSRd99s
qOhju0aVDY3E0E2F9hle/0iXX4QNK6lGQWQx6ryk7wf4PcAD4Stkx2ujYxDYvA51
0xRJUL0IzhDrdHwackqzXl1pKhGQU4F0J8NeOFAyOyyEWyAbwfjxlwZzY1TAUHae
X7u5IUV1SK+YyA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:13 2025 by rpki-client