Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
File: 5hbHsgGVYH8nsT2I-Svx0Os45g8.mft (raw, json)
Hash identifier: rqu/DwTzaix8PrdGMsP05jHDUohmimu3mCYLPUe5gB8=
Subject key identifier: 9E:B4:D3:DD:A4:8C:D8:BD:77:B2:B8:22:9B:27:A3:55:6B:AF:D6:3D
Authority key identifier: E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
Certificate issuer: /CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Certificate serial: 0197B820D336ADBC11DA8B57BE8AC35AA8B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
Manifest number: 6A
Signing time: Sat 28 Jun 2025 20:00:48 +0000
Manifest this update: Sat 28 Jun 2025 20:00:48 +0000
Manifest next update: Sun 29 Jun 2025 20:00:48 +0000
Files and hashes: 1: 5hbHsgGVYH8nsT2I-Svx0Os45g8.crl (hash: DTATQbv1JcQY4/b4ch1wpMA4oZNPFrcmYlR+XTQzb3g=)
2: kGI3GYIY0x4KUvkaQBv3fV9ynWg.roa (hash: gmJPfaxRI83koFjZWztv8K0vXqe3xOaLvXeiVBQz3Ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d3:36:ad:bc:11:da:8b:57:be:8a:c3:5a:a8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e616c7b20195607f27b13d88f92bf1d0eb38e60f
Validity
Not Before: Jun 28 20:00:48 2025 GMT
Not After : Jun 29 20:00:48 2025 GMT
Subject: CN=9eb4d3dda48cd8bd77b2b8229b27a3556bafd63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:04:70:0a:84:1d:15:d6:33:6b:d4:c6:82:21:
bc:ba:b1:c1:29:eb:04:7b:16:d9:81:90:ca:79:f9:
1c:25:d8:06:a9:e2:be:4c:d4:fc:7f:4d:be:01:31:
af:cf:24:ee:33:22:0e:71:2c:7b:88:5c:02:fa:8d:
da:5a:1d:8c:d4:50:a2:71:a1:48:8e:fc:0f:ff:f5:
b2:a5:51:11:a4:d6:f1:11:4e:a1:c0:9d:9b:49:4c:
75:91:ad:a8:66:81:2a:71:15:e3:5b:e6:89:39:6b:
4d:84:57:7f:a0:86:83:d9:33:3f:93:4e:68:aa:53:
df:fb:34:3d:01:69:d7:00:8c:84:cf:95:a2:72:f9:
5f:e8:05:43:c0:d6:e3:29:9e:34:75:4e:5c:a7:1d:
f9:6b:cb:07:01:0a:62:88:af:c2:38:64:fb:34:58:
04:84:f5:35:a5:fb:df:b2:8b:89:28:a9:57:ad:ce:
19:ee:0b:b6:1c:e9:54:6d:ce:e2:f9:f2:c8:27:ae:
24:72:5b:e7:dd:85:c1:c3:e5:17:95:00:47:ac:77:
33:7a:b6:46:bf:3b:95:ea:d7:4d:de:8a:e9:81:9f:
1d:87:a2:0c:85:cf:ab:d2:64:8e:33:dd:f9:2c:c9:
e2:9d:3e:ea:9f:d2:26:ee:5f:51:92:7a:06:80:ae:
07:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B4:D3:DD:A4:8C:D8:BD:77:B2:B8:22:9B:27:A3:55:6B:AF:D6:3D
X509v3 Authority Key Identifier:
keyid:E6:16:C7:B2:01:95:60:7F:27:B1:3D:88:F9:2B:F1:D0:EB:38:E6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hbHsgGVYH8nsT2I-Svx0Os45g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/036380-7fbe-4444-84d9-5cd004d6e366/1/5hbHsgGVYH8nsT2I-Svx0Os45g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bb:9b:9f:85:0c:87:00:0c:af:ba:b5:13:27:8e:a1:36:50:
f1:11:13:96:f1:c3:86:49:8f:41:0e:b8:d0:78:1a:58:3b:46:
fa:55:e2:62:5f:0f:d2:d4:e6:97:87:20:1a:d6:5d:a0:80:50:
c6:19:b2:33:a6:4c:76:93:e4:1f:73:e6:2f:d3:3a:53:e9:0f:
4c:f8:08:c4:58:c6:c0:f7:d0:a7:a3:88:25:57:2d:da:71:0e:
0c:e2:54:d4:e2:cc:71:c7:60:ac:8a:ee:ee:36:90:d2:f3:8f:
75:17:47:92:2b:b6:93:0c:4e:6a:88:e3:f8:1e:38:89:e9:f5:
a6:81:03:bd:3e:43:a0:89:d6:70:2c:ed:8a:c9:11:1e:8e:24:
49:3f:a0:76:5c:83:38:44:f2:ad:2b:45:ee:68:60:83:98:96:
e6:4c:6e:d4:cf:e6:67:42:f0:1b:65:6d:c7:81:47:fd:92:bf:
7d:ae:4d:c2:48:af:c8:52:f9:fd:b4:98:df:62:0d:32:ba:08:
dd:be:85:43:fd:4c:25:2e:c0:5b:82:3d:e9:ae:a2:17:12:ce:
d0:55:23:68:ad:bf:49:0b:da:bd:36:7e:b0:9d:1b:8f:d5:65:
4d:fd:d5:9e:9b:dd:9f:04:d4:a5:da:f3:70:b1:b4:30:b9:72:
d6:03:f4:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4INM2rbwR2otXvorDWqixMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MTZjN2IyMDE5NTYwN2YyN2IxM2Q4OGY5MmJmMWQwZWIz
OGU2MGYwHhcNMjUwNjI4MjAwMDQ4WhcNMjUwNjI5MjAwMDQ4WjAzMTEwLwYDVQQD
Eyg5ZWI0ZDNkZGE0OGNkOGJkNzdiMmI4MjI5YjI3YTM1NTZiYWZkNjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ARwCoQdFdYza9TGgiG8urHBKesE
exbZgZDKefkcJdgGqeK+TNT8f02+ATGvzyTuMyIOcSx7iFwC+o3aWh2M1FCicaFI
jvwP//WypVERpNbxEU6hwJ2bSUx1ka2oZoEqcRXjW+aJOWtNhFd/oIaD2TM/k05o
qlPf+zQ9AWnXAIyEz5Wicvlf6AVDwNbjKZ40dU5cpx35a8sHAQpiiK/COGT7NFgE
hPU1pfvfsouJKKlXrc4Z7gu2HOlUbc7i+fLIJ64kclvn3YXBw+UXlQBHrHczerZG
vzuV6tdN3orpgZ8dh6IMhc+r0mSOM935LMninT7qn9Im7l9RknoGgK4HLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ60092kjNi9d7K4Ipsno1Vrr9Y9MB8GA1UdIwQY
MBaAFOYWx7IBlWB/J7E9iPkr8dDrOOYPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWhiSHNnR1ZZSDhuc1QySS1TdngwT3M0NWc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wMzYzODAtN2ZiZS00NDQ0LTg0ZDkt
NWNkMDA0ZDZlMzY2LzEvNWhiSHNnR1ZZSDhuc1QySS1TdngwT3M0NWc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8wMzYzODAtN2ZiZS00NDQ0LTg0ZDktNWNkMDA0ZDZlMzY2
LzEvNWhiSHNnR1ZZSDhuc1QySS1TdngwT3M0NWc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7ubn4UM
hwAMr7q1EyeOoTZQ8RETlvHDhkmPQQ640HgaWDtG+lXiYl8P0tTml4cgGtZdoIBQ
xhmyM6ZMdpPkH3PmL9M6U+kPTPgIxFjGwPfQp6OIJVct2nEODOJU1OLMccdgrIru
7jaQ0vOPdRdHkiu2kwxOaojj+B44ien1poEDvT5DoInWcCztiskRHo4kST+gdlyD
OETyrStF7mhgg5iW5kxu1M/mZ0LwG2Vtx4FH/ZK/fa5NwkivyFL5/bSY32INMroI
3b6FQ/1MJS7AW4I96a6iFxLO0FUjaK2/SQvavTZ+sJ0bj9VlTf3VnpvdnwTUpdrz
cLG0MLly1gP0zA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:39:28 2025 by rpki-client