Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: jXYUA79kU+02q3z54H2jxGOaMxqfrD9Di6xE+mWH0+A=
Subject key identifier: B7:6C:7A:96:5B:31:47:E8:8F:01:35:FE:38:FA:AF:AA:71:F7:40:4A
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 0198D4E067B39769176EEF661E9C81C27FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 06DC
Signing time: Sat 23 Aug 2025 03:02:12 +0000
Manifest this update: Sat 23 Aug 2025 03:02:12 +0000
Manifest next update: Sun 24 Aug 2025 03:02:12 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: zwihSuuuljOozpL5FPdhmAA0ZJqF5dmKrmqDzzBlSgE=)
2: FUn2t9ppYu0Wn0pkoCRZ-HiUy7U.roa (hash: IgKhBAHaInAK8D+wEDHgOoVh2qEqWhDFRzWVOdnNaSE=)
3: H4hpUNA2nrrRur4Tk2W8HjJVqu4.roa (hash: oa7awxP7blKcpEGQ8hgbpBoX6kUOq34Ta41x1XECaFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:67:b3:97:69:17:6e:ef:66:1e:9c:81:c2:7f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Aug 23 03:02:12 2025 GMT
Not After : Aug 24 03:02:12 2025 GMT
Subject: CN=b76c7a965b3147e88f0135fe38faafaa71f7404a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3a:31:4c:11:4d:ae:24:19:96:27:6e:af:bd:
49:30:9e:45:7f:88:b0:1c:ab:4c:d5:70:fc:89:6f:
e8:b2:fb:40:49:8f:f3:da:32:a7:6f:81:14:b7:7b:
c3:c9:42:64:80:11:d0:69:f8:63:d9:64:93:1d:90:
69:83:6e:ba:2b:58:d4:80:e9:00:9b:99:c1:ba:33:
5e:b0:74:44:04:ff:b0:1d:80:79:20:0d:97:05:46:
2e:14:8f:e6:3e:94:af:38:ee:f2:2a:74:e8:e4:f8:
04:31:6c:18:08:1a:43:20:63:62:e7:9c:f9:88:74:
39:04:28:5f:73:f8:7a:de:69:1d:49:16:93:a5:3e:
61:6e:62:4f:35:d8:be:3b:97:46:6b:94:aa:db:7d:
b6:ac:1f:80:1e:41:f8:ab:82:0a:69:76:38:90:f4:
71:9d:09:7c:4c:1a:27:ec:cc:f6:d0:5d:da:f0:ea:
75:f3:2a:3a:41:7d:43:eb:51:15:01:66:9a:13:3a:
ef:24:2c:85:9f:cc:f6:0c:20:a8:c3:8f:9e:0c:64:
57:8c:19:d3:09:14:76:95:bb:16:ce:3c:31:81:7b:
72:f8:d6:3c:ab:b0:27:6c:56:23:48:b7:e4:89:5a:
a9:19:9b:1a:76:b9:c7:24:e4:2e:94:01:ff:33:79:
6d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6C:7A:96:5B:31:47:E8:8F:01:35:FE:38:FA:AF:AA:71:F7:40:4A
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7b:4f:ad:00:21:03:48:98:05:2f:70:35:73:ef:4b:d4:9f:
ef:9e:75:d0:46:60:d6:55:dd:56:2a:85:72:d5:65:6b:b3:f3:
f8:ef:43:88:1c:d4:e8:64:7b:27:c3:e7:18:59:97:a8:ac:be:
57:b2:1f:77:2f:b4:83:99:77:a7:7c:3e:71:08:5b:61:cb:ba:
9f:af:34:52:88:81:e8:e3:66:4f:7a:56:45:1e:76:a7:23:9e:
c5:88:52:7d:a4:19:45:cc:50:d9:28:a7:df:5d:a4:0e:37:4b:
d0:3e:1b:79:e0:3e:c0:6e:ef:ce:46:65:15:a5:18:dc:73:1f:
fa:25:51:96:07:13:66:41:01:53:a7:9d:3c:13:31:9d:68:6a:
d8:77:0d:a2:92:51:d7:71:0b:1f:ab:a1:51:1d:e3:5b:d8:70:
1c:fb:d3:b6:8d:c8:67:e5:25:ac:96:31:9c:e8:28:08:38:0c:
c7:e2:97:31:47:89:85:2b:4a:21:bc:00:79:76:9f:50:46:27:
1d:88:82:73:df:e2:29:83:23:ae:96:8c:db:2d:a8:03:4f:3e:
78:9b:40:d1:1b:2d:c7:2d:3f:e4:78:93:77:c5:ac:16:75:49:
b4:1a:28:36:25:00:d3:ca:73:5f:36:22:51:b3:ba:f8:c4:85:
d9:d4:c3:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4Gezl2kXbu9mHpyBwn/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2JhYWZjNjRiMzNlNDNkYjc4ZGM3YWVkNjA1ZWY3MDQw
NmQ5YWYwHhcNMjUwODIzMDMwMjEyWhcNMjUwODI0MDMwMjEyWjAzMTEwLwYDVQQD
EyhiNzZjN2E5NjViMzE0N2U4OGYwMTM1ZmUzOGZhYWZhYTcxZjc0MDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjoxTBFNriQZlidur71JMJ5Ff4iw
HKtM1XD8iW/osvtASY/z2jKnb4EUt3vDyUJkgBHQafhj2WSTHZBpg266K1jUgOkA
m5nBujNesHREBP+wHYB5IA2XBUYuFI/mPpSvOO7yKnTo5PgEMWwYCBpDIGNi55z5
iHQ5BChfc/h63mkdSRaTpT5hbmJPNdi+O5dGa5Sq2322rB+AHkH4q4IKaXY4kPRx
nQl8TBon7Mz20F3a8Op18yo6QX1D61EVAWaaEzrvJCyFn8z2DCCow4+eDGRXjBnT
CRR2lbsWzjwxgXty+NY8q7AnbFYjSLfkiVqpGZsadrnHJOQulAH/M3ltpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdsepZbMUfojwE1/jj6r6px90BKMB8GA1UdIwQY
MBaAFOQ7qvxksz5D23jceu1gXvcEBtmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTIt
ZTY4MTJkYWI2OTk5LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTItZTY4MTJkYWI2OTk5
LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHtPrQAh
A0iYBS9wNXPvS9Sf75510EZg1lXdViqFctVla7Pz+O9DiBzU6GR7J8PnGFmXqKy+
V7Ifdy+0g5l3p3w+cQhbYcu6n680UoiB6ONmT3pWRR52pyOexYhSfaQZRcxQ2Sin
312kDjdL0D4beeA+wG7vzkZlFaUY3HMf+iVRlgcTZkEBU6edPBMxnWhq2HcNopJR
13ELH6uhUR3jW9hwHPvTto3IZ+UlrJYxnOgoCDgMx+KXMUeJhStKIbwAeXafUEYn
HYiCc9/iKYMjrpaM2y2oA08+eJtA0Rstxy0/5HiTd8WsFnVJtBooNiUA08pzXzYi
UbO6+MSF2dTDmg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:15 2025 by rpki-client