Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
File: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft (raw, json)
Hash identifier: bzVPPFNScS/IVL5FrK39yho3v0ZHFcTL6fp1uzkRmb8=
Subject key identifier: D1:43:44:B1:D5:BD:71:C9:40:67:53:E6:38:16:0A:EF:5E:C4:FA:26
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 0197B7452A70088C0E0C65F1585233EBB311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
Manifest number: 15C0
Signing time: Sat 28 Jun 2025 16:00:52 +0000
Manifest this update: Sat 28 Jun 2025 16:00:52 +0000
Manifest next update: Sun 29 Jun 2025 16:00:52 +0000
Files and hashes: 1: 5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl (hash: JT+QGnAX2tnzyenOAmqsFugm2gTaMM4RlgPFUbouyqA=)
2: Q5lprEAu1AjZg8eC8e9vCRTQc5c.roa (hash: 1TVaYcq6pwwmReP0rlqvmkebRDkja4y3qu5GJXEAYFk=)
3: ScDiG1bEMg_iYAnwZ5RqZ9iuBfE.roa (hash: M8oZJ8Uj/JF9chZaxOYRuKYLCgT5+KWo335qmSJiUXs=)
4: _jwv_lcEjeP6obJDvR7tAaQUU-k.roa (hash: 5K6HFH8TXSLWVxpMWf5RIreFCOahhdZCzVwIY3yAflg=)
5: a3iaEBF86wbe5VjQTp-OMfHJc1E.roa (hash: nuf4ev5fGHCC4PXZAB5L19yGP986oYjP7JfQB1/fdXU=)
6: a9_bN0F2h_Kug5sgN-Kpf5AuF0Y.roa (hash: f6TkQWvmEWMglWzfpXp6gmToVC7S2f1cCbDqMTnyBzg=)
7: lihzuQoSb7FSiRKzRwb1us4H1SM.roa (hash: KHb+Gcf8LKwRqmsQV3Dwa1dFj1b8D+2+U6h0xyQG13I=)
8: qi8JXs2yo200PkF0ybkWzT5gLbA.roa (hash: rDwlWPK/DQ56zjNjEs53TpTRvG/Y0OQ9Sl2iycPDuH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2a:70:08:8c:0e:0c:65:f1:58:52:33:eb:b3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Jun 28 16:00:52 2025 GMT
Not After : Jun 29 16:00:52 2025 GMT
Subject: CN=d14344b1d5bd71c9406753e638160aef5ec4fa26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a6:a8:58:1f:0a:7a:46:06:d9:0e:be:95:01:
ba:89:51:06:77:c3:12:a1:ec:d3:1e:ae:3d:f6:d7:
26:a3:ef:d2:c1:9d:6e:18:4f:7e:43:04:87:79:e6:
fa:87:ae:54:12:38:a1:dd:c1:f2:98:68:32:3f:30:
4a:f7:ea:3c:47:c5:77:2b:7a:e6:b5:ce:ed:ef:36:
bc:82:00:38:d7:9f:3e:78:85:88:0c:df:21:e1:15:
fa:48:9f:38:dd:ad:72:e0:19:a2:2d:35:0c:6c:5b:
3d:dd:52:8a:3e:e9:77:7e:99:b5:5a:88:81:ee:96:
bf:93:4c:93:37:4d:d7:41:1d:9a:e8:e9:60:a2:20:
f8:dc:ec:53:6d:1e:4b:6b:60:c6:de:c9:56:7e:6c:
f2:83:aa:cb:53:3b:eb:ce:23:6e:21:4d:91:95:ff:
32:82:ed:60:4f:7b:e3:85:1d:55:c3:fe:02:13:0d:
7b:2b:8f:08:e3:11:e5:aa:4a:c9:4e:f6:64:93:e2:
44:ea:66:6b:55:b6:c3:40:de:f8:c9:e3:b2:81:3e:
ec:ea:70:e4:4e:6c:5b:bf:9f:c1:0c:08:c3:11:13:
29:04:ea:cd:30:71:c7:06:fd:bb:99:4c:a1:58:53:
61:17:f1:a2:e8:bf:1e:d8:40:6f:89:df:13:b4:1a:
1f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:43:44:B1:D5:BD:71:C9:40:67:53:E6:38:16:0A:EF:5E:C4:FA:26
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b2:cc:ab:d4:6f:61:15:ee:d9:1f:07:88:47:29:e7:3a:ab:
9b:90:73:a0:e3:81:3c:f5:05:91:1e:1c:df:4c:06:6d:9b:39:
70:40:8d:dd:f6:07:e4:0c:1c:3a:58:1f:0e:ae:fc:58:41:cc:
89:69:76:c3:c2:ab:73:35:8d:eb:ed:19:86:eb:62:01:d7:a9:
71:7f:b2:69:05:50:86:b4:e8:4f:86:84:06:57:98:09:78:b2:
9b:ec:45:c7:97:04:fc:8f:1e:30:2c:1d:99:1b:26:76:23:f0:
27:d9:83:d1:fd:fb:23:7a:0b:57:cf:c4:6a:38:f1:29:2b:71:
c7:f3:c8:f5:c4:88:f5:0c:8c:93:96:ea:b6:b5:60:7d:cd:65:
00:93:42:e4:1d:a4:cb:22:dc:ee:6a:8f:78:ac:41:54:01:3b:
f7:71:c5:5a:f2:73:67:d9:d0:f9:f2:a4:0b:c4:e1:61:ae:e9:
8f:2b:c4:80:0f:24:32:8b:49:62:23:91:97:b4:d9:1a:96:18:
14:1d:70:ad:7c:49:7a:08:d0:9a:fc:33:01:14:c6:74:ac:ef:
40:06:e5:92:c7:5b:ca:9b:65:f9:c2:f5:8d:9c:b9:41:0c:8a:
37:1a:98:54:0f:d6:13:4c:2a:1b:fb:82:2b:17:d1:f2:05:03:
e7:e6:4c:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RSpwCIwODGXxWFIz67MRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTFiMzY1NTJmOWRhY2NiOTJhYzVjM2I0NGI0MjZkNjQz
NzQ5ZTIwHhcNMjUwNjI4MTYwMDUyWhcNMjUwNjI5MTYwMDUyWjAzMTEwLwYDVQQD
EyhkMTQzNDRiMWQ1YmQ3MWM5NDA2NzUzZTYzODE2MGFlZjVlYzRmYTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66aoWB8KekYG2Q6+lQG6iVEGd8MS
oezTHq499tcmo+/SwZ1uGE9+QwSHeeb6h65UEjih3cHymGgyPzBK9+o8R8V3K3rm
tc7t7za8ggA4158+eIWIDN8h4RX6SJ843a1y4BmiLTUMbFs93VKKPul3fpm1WoiB
7pa/k0yTN03XQR2a6OlgoiD43OxTbR5La2DG3slWfmzyg6rLUzvrziNuIU2Rlf8y
gu1gT3vjhR1Vw/4CEw17K48I4xHlqkrJTvZkk+JE6mZrVbbDQN74yeOygT7s6nDk
Tmxbv5/BDAjDERMpBOrNMHHHBv27mUyhWFNhF/Gi6L8e2EBvid8TtBofRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFDRLHVvXHJQGdT5jgWCu9exPomMB8GA1UdIwQY
MBaAFOWhs2VS+drMuSrFw7RLQm1kN0niMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMt
YzVlNmQyM2Y4YjA5LzEvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMtYzVlNmQyM2Y4YjA5
LzEvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbLMq9Rv
YRXu2R8HiEcp5zqrm5BzoOOBPPUFkR4c30wGbZs5cECN3fYH5AwcOlgfDq78WEHM
iWl2w8KrczWN6+0ZhutiAdepcX+yaQVQhrToT4aEBleYCXiym+xFx5cE/I8eMCwd
mRsmdiPwJ9mD0f37I3oLV8/EajjxKStxx/PI9cSI9QyMk5bqtrVgfc1lAJNC5B2k
yyLc7mqPeKxBVAE793HFWvJzZ9nQ+fKkC8ThYa7pjyvEgA8kMotJYiORl7TZGpYY
FB1wrXxJegjQmvwzARTGdKzvQAblksdbyptl+cL1jZy5QQyKNxqYVA/WE0wqG/uC
KxfR8gUD5+ZMvg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:21 2025 by rpki-client