Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier: xVDh7BpidlU0Elo9cF+TZCjgi2q/FwL0LZzeU4xFLqg=
Subject key identifier: A3:7C:59:4A:9A:C5:AE:26:23:32:A3:1F:77:8D:8C:E6:AF:D6:32:24
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 0197CDCD4401F38FC53C1027820CF231FAFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number: 15C1
Signing time: Thu 03 Jul 2025 01:01:10 +0000
Manifest this update: Thu 03 Jul 2025 01:01:10 +0000
Manifest next update: Fri 04 Jul 2025 01:01:10 +0000
Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: 1ksqx4wq+75hd7puxP25rUyXPb5u2K8dmWLeMOa6dmM=)
2: O7xkMgYDWmT39_oyZPNETli4dGo.roa (hash: BJVxC4UljGsK/BbuRqwBk8+Scbbux5UgI7xaPeJbQCA=)
3: mTHF4xRS849mOw36faqzyw4dbV0.roa (hash: wG6gmT9BywW9Amqbl4suJT23ZQUJGIpmhCizynoZqms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:44:01:f3:8f:c5:3c:10:27:82:0c:f2:31:fa:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: Jul 3 01:01:10 2025 GMT
Not After : Jul 4 01:01:10 2025 GMT
Subject: CN=a37c594a9ac5ae262332a31f778d8ce6afd63224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:23:56:97:6f:41:5c:a1:f2:db:fd:ff:d3:a3:
0b:f8:cd:50:29:cf:c4:f0:dd:73:ce:a4:1c:c5:6a:
2a:fc:4e:1d:85:28:a9:67:25:2a:7c:e1:07:e7:60:
34:7d:e6:35:7a:a2:d9:91:4f:ec:76:6f:ba:e8:1c:
04:db:c4:b2:74:83:0b:02:99:12:b9:7a:2b:ff:64:
f2:16:ad:9d:ab:c4:e7:22:64:94:41:90:08:3d:ea:
9f:9d:40:ed:6f:a2:66:45:41:20:b1:d8:39:c7:60:
22:6e:6c:10:c2:48:13:ff:d3:55:41:a3:40:71:d8:
87:36:ca:d1:65:ad:45:d6:d6:c3:df:71:c2:03:da:
6b:c2:77:80:2c:61:8b:7b:ea:1c:d8:ca:a8:2d:de:
8f:16:d2:10:c5:9f:fa:ab:cf:29:b7:a5:4a:c2:dc:
d5:5d:e3:30:17:0a:a7:52:b9:db:3b:cc:eb:10:10:
45:a7:ff:c6:5a:e8:95:a9:14:02:0b:d5:72:1a:ea:
21:0d:dc:b5:05:aa:f4:f7:19:8d:79:b0:ce:7f:17:
d0:9e:4c:a4:4c:ba:0e:c8:8f:65:79:a2:c4:c0:e2:
6c:ad:05:ef:13:6c:a7:b1:dc:5b:f4:e6:2c:c8:fb:
85:ab:2e:6d:65:72:68:9e:70:2b:eb:db:4f:d7:f1:
b5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7C:59:4A:9A:C5:AE:26:23:32:A3:1F:77:8D:8C:E6:AF:D6:32:24
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c8:56:c3:3d:9f:70:e5:26:d4:98:ac:09:b6:83:96:f2:b3:
2a:4f:4c:4f:26:6f:26:b2:19:d9:0f:67:df:ba:5c:20:a7:fb:
f6:6a:43:16:ed:cb:34:57:00:ba:2e:59:cf:5f:46:c7:d1:17:
b3:98:dd:fd:65:46:55:56:ee:69:ce:f1:05:ac:f5:a8:25:82:
cc:c0:c8:43:c5:70:8c:b6:71:43:b2:7d:05:6c:59:58:9f:39:
1f:8d:30:d4:0e:5d:b4:e1:69:5f:fe:1f:6d:6a:64:6e:32:02:
5f:a7:54:81:3d:61:3d:9e:05:9f:cc:0b:39:f7:d3:9f:a5:52:
75:25:b8:70:c2:29:2a:a9:d7:7c:9c:97:11:99:cc:cc:c3:f9:
9a:59:0b:39:fb:e4:33:b7:d7:a5:17:92:19:e9:b5:95:12:76:
f9:58:dc:38:7d:c6:34:d1:69:4e:6f:42:46:8a:eb:3b:79:fe:
d6:e1:6a:0b:46:87:47:e7:13:e4:48:3b:72:44:96:fc:20:75:
79:89:eb:e9:9b:eb:cd:e9:76:53:00:6d:bc:f8:e9:69:35:59:
f4:96:93:9b:84:37:ca:46:9b:86:40:30:dc:a8:19:49:69:a4:
75:95:c3:ae:9b:fd:35:d6:cf:91:fd:5c:1e:86:b3:d0:7c:ba:
f5:6a:b5:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfNzUQB84/FPBAnggzyMfr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZmUwMmYyYWE3NmM0MDJiN2Q3NmExMTRkYzc3MzVkNWY5
MzViODgwHhcNMjUwNzAzMDEwMTEwWhcNMjUwNzA0MDEwMTEwWjAzMTEwLwYDVQQD
EyhhMzdjNTk0YTlhYzVhZTI2MjMzMmEzMWY3NzhkOGNlNmFmZDYzMjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSNWl29BXKHy2/3/06ML+M1QKc/E
8N1zzqQcxWoq/E4dhSipZyUqfOEH52A0feY1eqLZkU/sdm+66BwE28SydIMLApkS
uXor/2TyFq2dq8TnImSUQZAIPeqfnUDtb6JmRUEgsdg5x2AibmwQwkgT/9NVQaNA
cdiHNsrRZa1F1tbD33HCA9prwneALGGLe+oc2MqoLd6PFtIQxZ/6q88pt6VKwtzV
XeMwFwqnUrnbO8zrEBBFp//GWuiVqRQCC9VyGuohDdy1Bar09xmNebDOfxfQnkyk
TLoOyI9leaLEwOJsrQXvE2ynsdxb9OYsyPuFqy5tZXJonnAr69tP1/G10wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKN8WUqaxa4mIzKjH3eNjOav1jIkMB8GA1UdIwQY
MBaAFOX+AvKqdsQCt9dqEU3Hc11fk1uIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgt
ZmM2MGZiMTI1NTczLzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgtZmM2MGZiMTI1NTcz
LzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlshWwz2f
cOUm1JisCbaDlvKzKk9MTyZvJrIZ2Q9n37pcIKf79mpDFu3LNFcAui5Zz19Gx9EX
s5jd/WVGVVbuac7xBaz1qCWCzMDIQ8VwjLZxQ7J9BWxZWJ85H40w1A5dtOFpX/4f
bWpkbjICX6dUgT1hPZ4Fn8wLOffTn6VSdSW4cMIpKqnXfJyXEZnMzMP5mlkLOfvk
M7fXpReSGem1lRJ2+VjcOH3GNNFpTm9CRorrO3n+1uFqC0aHR+cT5Eg7ckSW/CB1
eYnr6Zvrzel2UwBtvPjpaTVZ9JaTm4Q3ykabhkAw3KgZSWmkdZXDrpv9NdbPkf1c
Hoaz0Hy69Wq1kA==
-----END CERTIFICATE-----
Generated at Thu Jul 3 05:54:03 2025 by rpki-client