Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
File: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft (raw, json)
Hash identifier: E/LXUoekvgpZJ6aFkpJ+3G8pXmDZyu1986bnpYwshvU=
Subject key identifier: 3E:6F:BD:BF:21:7B:C4:53:84:CE:BB:A6:02:24:91:35:71:AF:98:77
Authority key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
Certificate issuer: /CN=e5503498ff185d0c607353f43f55e911f62a6802
Certificate serial: 0198D5837EC1AFFB06DCD900E4BF50996D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
Manifest number: 165A
Signing time: Sat 23 Aug 2025 06:00:21 +0000
Manifest this update: Sat 23 Aug 2025 06:00:21 +0000
Manifest next update: Sun 24 Aug 2025 06:00:21 +0000
Files and hashes: 1: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl (hash: JQXwy1FA3UOp296PLfq6hftFxhNiF8tQcK7Temdb77k=)
2: KZNT-sZZNOeQ3ZQO6BjaXLuoD9g.roa (hash: +2sZTVLc367S2ob/w+tSdpZn/g4nvkTyjPLtfOVjhN8=)
3: o-NtXLRHL-S0Y-O2GlCnHQAffNw.roa (hash: dxc+WfWonf57/frz8JHxuwGakdxRPwah5tbEWGWiZgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:7e:c1:af:fb:06:dc:d9:00:e4:bf:50:99:6d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5503498ff185d0c607353f43f55e911f62a6802
Validity
Not Before: Aug 23 06:00:21 2025 GMT
Not After : Aug 24 06:00:21 2025 GMT
Subject: CN=3e6fbdbf217bc45384cebba60224913571af9877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:44:d7:6e:58:7e:69:a8:8f:6b:96:39:44:89:
76:5a:7c:01:a0:4a:c3:98:88:05:ba:06:bd:d5:91:
e7:d1:75:3c:31:f6:c2:f7:45:9d:ed:91:b5:f9:b4:
3f:c3:a2:2d:f3:32:85:40:4a:e8:bf:30:fe:03:51:
77:bd:35:aa:c5:c9:f5:f8:c3:b5:9e:90:92:91:2a:
3e:e8:2e:71:4b:6f:f4:37:1f:fd:5a:6d:1f:e7:28:
b9:64:54:0b:ce:79:a8:3b:e1:26:01:44:53:ee:e9:
cf:f6:e4:3b:27:46:8d:15:d9:81:15:57:37:06:7d:
d9:14:76:7d:f7:2d:2f:e7:e9:11:87:e9:2e:35:ca:
c7:a8:b6:7d:b1:96:83:3b:43:a6:8b:e6:2d:e5:ef:
e9:63:76:58:3b:f5:7d:63:28:99:13:3a:7f:eb:de:
4d:bd:0b:47:0f:73:73:87:4b:df:16:13:9f:df:21:
3b:f8:b2:38:48:65:e5:7c:ca:9a:85:60:61:05:38:
9a:b9:27:9c:5f:5f:99:c2:02:de:44:c6:06:26:f5:
f3:db:f6:c6:fc:22:e5:1e:7b:6d:0a:3d:43:4a:ff:
13:2a:8a:75:e6:d4:d6:9d:51:ab:0a:ff:bc:2f:d9:
df:5f:95:2d:34:db:d1:94:1c:37:38:0d:c5:f3:cd:
ec:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6F:BD:BF:21:7B:C4:53:84:CE:BB:A6:02:24:91:35:71:AF:98:77
X509v3 Authority Key Identifier:
keyid:E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d4:c4:26:49:10:48:0a:18:ce:85:75:a3:65:56:4e:69:cd:
5d:84:ca:7c:97:4d:58:94:b8:3c:be:6a:37:12:7e:ad:bc:01:
b3:05:e0:d9:43:3a:87:12:90:30:8c:9f:e9:24:b2:58:ff:fe:
b4:a9:7c:ad:21:e3:cc:bf:46:63:06:c8:a7:e1:4c:28:a8:fc:
63:73:cc:6c:36:e4:b7:3f:c8:44:6b:5e:3f:2f:bb:28:44:86:
d6:00:b6:08:ad:c5:eb:b8:8b:d8:87:8e:ae:4a:e2:09:8c:00:
6b:fc:e4:7a:6a:20:d4:86:23:e6:b4:bd:4b:98:42:0b:b0:b8:
6f:e4:ab:38:f3:61:42:af:0f:1f:97:8f:90:5c:53:ef:97:ae:
25:95:07:12:99:3f:e9:c4:88:3c:78:89:c1:a7:2a:84:2a:9a:
5b:f2:c0:2b:13:a5:a7:13:2d:a9:1f:33:b9:0b:b5:ef:c8:ff:
8b:b9:8d:d6:15:ae:4d:c2:87:e5:fc:d3:e2:4e:59:a0:cc:ab:
d8:5f:ee:0f:a0:9f:3f:d5:de:29:91:5c:6b:a1:e3:c0:af:b3:
b5:bb:9d:26:1c:39:5d:01:fe:d4:a9:20:e3:8c:2b:42:03:51:
81:ef:66:22:de:0d:0e:17:ea:58:56:4d:91:99:97:4d:80:46:
ff:c0:7b:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg37Br/sG3NkA5L9QmW1+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NTAzNDk4ZmYxODVkMGM2MDczNTNmNDNmNTVlOTExZjYy
YTY4MDIwHhcNMjUwODIzMDYwMDIxWhcNMjUwODI0MDYwMDIxWjAzMTEwLwYDVQQD
EygzZTZmYmRiZjIxN2JjNDUzODRjZWJiYTYwMjI0OTEzNTcxYWY5ODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUTXblh+aaiPa5Y5RIl2WnwBoErD
mIgFuga91ZHn0XU8MfbC90Wd7ZG1+bQ/w6It8zKFQErovzD+A1F3vTWqxcn1+MO1
npCSkSo+6C5xS2/0Nx/9Wm0f5yi5ZFQLznmoO+EmAURT7unP9uQ7J0aNFdmBFVc3
Bn3ZFHZ99y0v5+kRh+kuNcrHqLZ9sZaDO0Omi+Yt5e/pY3ZYO/V9YyiZEzp/695N
vQtHD3Nzh0vfFhOf3yE7+LI4SGXlfMqahWBhBTiauSecX1+ZwgLeRMYGJvXz2/bG
/CLlHnttCj1DSv8TKop15tTWnVGrCv+8L9nfX5UtNNvRlBw3OA3F883s/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5vvb8he8RThM67pgIkkTVxr5h3MB8GA1UdIwQY
MBaAFOVQNJj/GF0MYHNT9D9V6RH2KmgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVZBMG1QOFlYUXhnYzFQMFAxWHBFZllxYUFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85N2IwYmMtZjRmOC00ZjkwLTg1NTQt
MWUyNzlmN2I2MDIzLzEvNVZBMG1QOFlYUXhnYzFQMFAxWHBFZllxYUFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC85N2IwYmMtZjRmOC00ZjkwLTg1NTQtMWUyNzlmN2I2MDIz
LzEvNVZBMG1QOFlYUXhnYzFQMFAxWHBFZllxYUFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdTEJkkQ
SAoYzoV1o2VWTmnNXYTKfJdNWJS4PL5qNxJ+rbwBswXg2UM6hxKQMIyf6SSyWP/+
tKl8rSHjzL9GYwbIp+FMKKj8Y3PMbDbktz/IRGtePy+7KESG1gC2CK3F67iL2IeO
rkriCYwAa/zkemog1IYj5rS9S5hCC7C4b+SrOPNhQq8PH5ePkFxT75euJZUHEpk/
6cSIPHiJwacqhCqaW/LAKxOlpxMtqR8zuQu178j/i7mN1hWuTcKH5fzT4k5ZoMyr
2F/uD6CfP9XeKZFca6HjwK+ztbudJhw5XQH+1Kkg44wrQgNRge9mIt4NDhfqWFZN
kZmXTYBG/8B7xA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:48 2025 by rpki-client