Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
File: 5Q5mktlyjagfXE9J4VB3Phr7yAs.mft (raw, json)
Hash identifier: 880gvTmUeND7PaFDRbvHwjQuXEX7MXweHtm0TiqSv7M=
Subject key identifier: 86:FF:57:ED:FF:D6:8A:C1:81:6C:E2:42:12:57:57:1A:41:A9:8F:B3
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Certificate issuer: /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial: 0198D54E84DCCD255FEBCBF0C17E901ACFCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
Manifest number: 0E68
Signing time: Sat 23 Aug 2025 05:02:29 +0000
Manifest this update: Sat 23 Aug 2025 05:02:29 +0000
Manifest next update: Sun 24 Aug 2025 05:02:29 +0000
Files and hashes: 1: 5Q5mktlyjagfXE9J4VB3Phr7yAs.crl (hash: U6K8yVLpHXI3Zx3Ify10JJW4vCdN/EHoG8WwMc0lqdM=)
2: fn36UtRGyW0zYJnxw32sGSj82q0.roa (hash: xdl6b5qAk+Coe4SCUR+/MRlwgbDH8F0nUd5jIICGFyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:84:dc:cd:25:5f:eb:cb:f0:c1:7e:90:1a:cf:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Validity
Not Before: Aug 23 05:02:29 2025 GMT
Not After : Aug 24 05:02:29 2025 GMT
Subject: CN=86ff57edffd68ac1816ce2421257571a41a98fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:26:fb:1b:73:4b:e2:63:f2:3e:2b:3d:6f:5b:
bc:4f:f2:d9:71:ec:25:f6:da:9d:dd:14:ed:b0:e9:
d6:17:bc:be:dc:0f:14:cf:25:d0:7f:10:c9:97:a6:
e1:52:d3:35:7b:4e:45:2e:62:83:f1:68:76:ea:72:
1a:8c:0b:9a:d9:97:96:03:2c:ae:57:a2:56:fb:d3:
78:17:40:87:1c:9d:6d:19:65:32:10:e9:9f:ff:eb:
e6:04:ac:c7:1c:46:73:aa:d8:83:9e:18:c2:c5:91:
97:f0:af:63:86:4b:31:ce:9a:05:53:1c:cf:6e:4b:
87:e4:2f:09:c3:0d:0b:a7:17:a4:d8:09:8d:db:66:
01:c2:69:38:f2:d4:11:44:10:7a:04:fe:fd:db:33:
66:b1:5b:fb:b8:1c:5a:e6:f3:98:51:3c:21:60:d7:
70:b0:aa:fe:d4:fa:28:ef:ab:02:d2:8b:09:1f:74:
07:4b:b1:af:7a:f2:67:fc:09:4d:fa:8b:65:12:ac:
8f:48:bf:b5:03:8f:4f:80:60:93:26:cd:4a:d8:48:
ec:25:25:07:22:ba:90:1f:01:3c:61:50:b9:5c:68:
4b:47:82:c2:cf:b1:a5:a0:bf:21:db:40:85:a0:a7:
c1:36:76:50:86:70:d5:c4:00:d8:fb:54:38:b3:c0:
80:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FF:57:ED:FF:D6:8A:C1:81:6C:E2:42:12:57:57:1A:41:A9:8F:B3
X509v3 Authority Key Identifier:
keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ef:ff:17:e2:3e:be:79:4b:03:54:92:d4:63:43:86:b6:16:
3c:c2:bf:ef:b5:54:52:8f:9a:b5:21:1e:0a:f7:43:e8:ef:3c:
db:b9:19:11:1b:75:25:7e:64:bb:ec:4b:bf:2b:40:0a:a4:7c:
66:7a:86:54:b0:28:04:1b:c5:ef:16:fd:35:b0:a1:95:5c:85:
d7:0a:f0:f1:32:52:b0:f3:80:8c:98:0f:ea:cc:4a:64:1c:e4:
02:c5:b2:f5:bc:d7:8c:c8:ac:86:a5:a4:6b:2d:5e:30:84:0b:
0b:66:6a:35:64:c8:18:4c:69:fb:af:b5:8a:de:c2:b5:14:34:
d7:02:ff:88:42:ac:ba:bc:73:2d:4c:b1:27:07:7c:64:85:03:
9f:9b:4d:5f:4d:70:80:29:3c:49:19:0a:b5:aa:b3:dd:6d:6d:
4c:e0:1d:75:a5:4b:72:de:75:d0:b0:5c:c7:26:9d:49:81:d4:
5d:62:a8:05:3b:98:ab:f3:46:bc:3d:c4:e0:c1:db:bc:8d:4e:
f4:30:a2:5f:f1:bd:1d:70:40:2a:30:05:a1:60:81:02:63:1d:
35:0e:68:b7:0f:48:46:80:7e:d9:ea:7f:c5:5a:4a:09:79:53:
62:76:ce:dd:32:f7:87:d6:6f:b5:12:c6:29:7b:ed:de:47:68:
f6:dd:fa:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVToTczSVf68vwwX6QGs/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MGU2NjkyZDk3MjhkYTgxZjVjNGY0OWUxNTA3NzNlMWFm
YmM4MGIwHhcNMjUwODIzMDUwMjI5WhcNMjUwODI0MDUwMjI5WjAzMTEwLwYDVQQD
Eyg4NmZmNTdlZGZmZDY4YWMxODE2Y2UyNDIxMjU3NTcxYTQxYTk4ZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Sb7G3NL4mPyPis9b1u8T/LZcewl
9tqd3RTtsOnWF7y+3A8UzyXQfxDJl6bhUtM1e05FLmKD8Wh26nIajAua2ZeWAyyu
V6JW+9N4F0CHHJ1tGWUyEOmf/+vmBKzHHEZzqtiDnhjCxZGX8K9jhksxzpoFUxzP
bkuH5C8Jww0Lpxek2AmN22YBwmk48tQRRBB6BP792zNmsVv7uBxa5vOYUTwhYNdw
sKr+1Poo76sC0osJH3QHS7GvevJn/AlN+otlEqyPSL+1A49PgGCTJs1K2EjsJSUH
IrqQHwE8YVC5XGhLR4LCz7GloL8h20CFoKfBNnZQhnDVxADY+1Q4s8CAzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIb/V+3/1orBgWziQhJXVxpBqY+zMB8GA1UdIwQY
MBaAFOUOZpLZco2oH1xPSeFQdz4a+8gLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVE1bWt0bHlqYWdmWEU5SjRWQjNQaHI3eUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9mMmVkNTAtNGM5YS00MzQ0LTkxNDgt
MDM5YzE0MDVlMTc1LzEvNVE1bWt0bHlqYWdmWEU5SjRWQjNQaHI3eUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9mMmVkNTAtNGM5YS00MzQ0LTkxNDgtMDM5YzE0MDVlMTc1
LzEvNVE1bWt0bHlqYWdmWEU5SjRWQjNQaHI3eUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm+//F+I+
vnlLA1SS1GNDhrYWPMK/77VUUo+atSEeCvdD6O8827kZERt1JX5ku+xLvytACqR8
ZnqGVLAoBBvF7xb9NbChlVyF1wrw8TJSsPOAjJgP6sxKZBzkAsWy9bzXjMishqWk
ay1eMIQLC2ZqNWTIGExp+6+1it7CtRQ01wL/iEKsurxzLUyxJwd8ZIUDn5tNX01w
gCk8SRkKtaqz3W1tTOAddaVLct510LBcxyadSYHUXWKoBTuYq/NGvD3E4MHbvI1O
9DCiX/G9HXBAKjAFoWCBAmMdNQ5otw9IRoB+2ep/xVpKCXlTYnbO3TL3h9ZvtRLG
KXvt3kdo9t36Kg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:43:28 2025 by rpki-client