
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
File: N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft (raw, json)
Hash identifier: omm0STZcln5IyuwRld69gWN7Vrws4cOCmaEzmI+e1sc=
Subject key identifier: 05:85:61:9B:50:5D:10:8A:F6:8B:25:72:42:68:A2:21:D6:73:6C:05
Authority key identifier: 37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D
Certificate issuer: /CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d
Certificate serial: 0196C1CB110407F87BC2FE279C4F73445890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
Manifest number: 06C9
Signing time: Mon 12 May 2025 00:00:32 +0000
Manifest this update: Mon 12 May 2025 00:00:32 +0000
Manifest next update: Tue 13 May 2025 00:00:32 +0000
Files and hashes: 1: N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl (hash: bSP00g6Vu0MoaHZ9A/8rospY8EqVhXlFFpD5sdTmyDs=)
2: hS4qE69cRzq1LeuTH9FbxF7EdCM.roa (hash: CNvb1FlCruFxVWACj7/lI66W2B3Fn96cjXQxKd7K6v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:11:04:07:f8:7b:c2:fe:27:9c:4f:73:44:58:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d
Validity
Not Before: May 12 00:00:32 2025 GMT
Not After : May 13 00:00:32 2025 GMT
Subject: CN=0585619b505d108af68b25724268a221d6736c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:0b:fc:e1:31:90:eb:20:01:c4:c4:5d:81:
35:29:a4:b7:6a:f4:d7:97:1d:16:ac:08:bb:db:f0:
50:20:c3:8b:c0:92:bf:b3:cf:a7:53:a3:1b:fa:ef:
08:4e:54:03:5f:9b:87:25:48:0f:0c:36:d9:fb:90:
47:93:f9:7a:02:16:2d:d4:a3:63:38:6a:7d:03:76:
75:25:09:10:be:fd:02:45:77:42:49:fb:02:2a:5c:
6a:0b:bc:2d:54:85:a9:40:59:85:f4:c6:e8:20:55:
a0:65:00:9e:09:35:e8:0e:01:8b:41:21:78:5d:e8:
0f:60:39:96:0e:a5:39:5f:51:a3:54:31:14:05:10:
e3:ae:8f:eb:db:d4:08:b9:92:a2:e7:5d:e0:b0:9c:
c1:f9:31:f7:ef:47:c0:a2:7f:8e:8c:7a:61:48:34:
1b:c9:e7:74:f3:a1:7b:6c:62:4a:c0:3c:24:3b:55:
13:93:47:b0:74:5d:0c:5b:14:a7:9f:11:80:f0:54:
70:59:7a:b2:0d:ca:f1:be:25:9d:5e:d3:2a:e6:2d:
3a:21:f3:3a:2b:1d:9e:e8:e9:94:f4:fc:10:37:79:
e6:3a:6d:d0:98:08:03:d1:85:3c:2f:35:33:b0:b0:
04:e2:4f:a7:20:82:ba:a9:7c:4b:d7:31:11:b2:57:
4c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:85:61:9B:50:5D:10:8A:F6:8B:25:72:42:68:A2:21:D6:73:6C:05
X509v3 Authority Key Identifier:
keyid:37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:72:f2:e4:e1:fb:9e:f8:b3:d9:0f:a7:8d:6f:6e:3c:df:53:
1d:1d:3a:5a:3c:42:e0:d5:ed:a0:e4:a1:db:b9:c1:bc:7a:19:
7b:4a:a6:21:7e:24:b8:6c:2c:aa:e7:a8:8c:dc:68:16:5c:35:
9a:4d:60:e4:51:c4:ca:1a:74:5a:74:05:f6:64:a3:ff:af:30:
f2:06:52:ec:9e:d3:53:ec:0c:cc:84:4c:2b:75:03:f6:e4:34:
73:2c:73:1c:8f:e1:6f:3d:52:f4:16:3a:fb:f6:0b:5b:3a:90:
22:0e:2a:c1:ce:29:01:d2:31:36:b1:f9:d4:06:1a:27:48:78:
f6:2c:71:1f:45:6a:b6:16:58:10:04:bb:4e:0f:61:ac:24:9a:
e6:0f:db:4b:7f:7f:93:c8:a2:37:c6:99:32:32:82:84:9a:3f:
60:2d:eb:6c:df:52:a9:9d:77:be:d3:51:81:7a:b0:77:28:2b:
f1:54:b3:83:97:fd:ad:fe:7e:4a:9c:8e:3f:e1:9f:52:91:20:
7e:aa:d6:44:37:32:28:c1:6e:01:93:a0:81:40:51:1b:51:ca:
24:db:98:ff:14:11:6f:fe:24:cb:bf:6a:56:89:e8:4e:5e:83:
62:60:81:9d:cd:e1:aa:4e:b2:1b:9e:a8:a6:c2:60:ea:93:32:
1e:f8:b9:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbByxEEB/h7wv4nnE9zRFiQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZjRiOTFhM2ZmY2U5Zjk3NTA1YTczY2ZkNWU0YWQ0ZTM1
ZTA0MmQwHhcNMjUwNTEyMDAwMDMyWhcNMjUwNTEzMDAwMDMyWjAzMTEwLwYDVQQD
EygwNTg1NjE5YjUwNWQxMDhhZjY4YjI1NzI0MjY4YTIyMWQ2NzM2YzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV0L/OExkOsgAcTEXYE1KaS3avTX
lx0WrAi72/BQIMOLwJK/s8+nU6Mb+u8ITlQDX5uHJUgPDDbZ+5BHk/l6AhYt1KNj
OGp9A3Z1JQkQvv0CRXdCSfsCKlxqC7wtVIWpQFmF9MboIFWgZQCeCTXoDgGLQSF4
XegPYDmWDqU5X1GjVDEUBRDjro/r29QIuZKi513gsJzB+TH370fAon+OjHphSDQb
yed086F7bGJKwDwkO1UTk0ewdF0MWxSnnxGA8FRwWXqyDcrxviWdXtMq5i06IfM6
Kx2e6OmU9PwQN3nmOm3QmAgD0YU8LzUzsLAE4k+nIIK6qXxL1zERsldMPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWFYZtQXRCK9oslckJooiHWc2wFMB8GA1UdIwQY
MBaAFDf0uRo//On5dQWnPP1eStTjXgQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTl9TNUdqXzg2ZmwxQmFjOF9WNUsxT05lQkMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS84NWEwM2QtODdjMy00NDAxLTlhMGQt
YWIyYmFmYTFhZTRkLzEvTl9TNUdqXzg2ZmwxQmFjOF9WNUsxT05lQkMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS84NWEwM2QtODdjMy00NDAxLTlhMGQtYWIyYmFmYTFhZTRk
LzEvTl9TNUdqXzg2ZmwxQmFjOF9WNUsxT05lQkMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXLy5OH7
nviz2Q+njW9uPN9THR06WjxC4NXtoOSh27nBvHoZe0qmIX4kuGwsqueojNxoFlw1
mk1g5FHEyhp0WnQF9mSj/68w8gZS7J7TU+wMzIRMK3UD9uQ0cyxzHI/hbz1S9BY6
+/YLWzqQIg4qwc4pAdIxNrH51AYaJ0h49ixxH0VqthZYEAS7Tg9hrCSa5g/bS39/
k8iiN8aZMjKChJo/YC3rbN9SqZ13vtNRgXqwdygr8VSzg5f9rf5+SpyOP+GfUpEg
fqrWRDcyKMFuAZOggUBRG1HKJNuY/xQRb/4ky79qVonoTl6DYmCBnc3hqk6yG56o
psJg6pMyHvi5Vw==
-----END CERTIFICATE-----
Generated at Mon May 12 02:14:56 2025 by rpki-client