Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
File: 5ag7QLP019MfszaNr6yhGZpEmJI.mft (raw, json)
Hash identifier: Ft6cWMwVz3xKm2tCgwp73yMOb6w8REMH5WmvrMnT9AQ=
Subject key identifier: D2:75:5F:4A:1D:6C:74:9F:BD:5B:CC:DE:DC:AF:4B:2D:0F:9F:25:5E
Authority key identifier: E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
Certificate issuer: /CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Certificate serial: 0197B70EF7F08F33621E92180784E52ACF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
Manifest number: 05C8
Signing time: Sat 28 Jun 2025 15:01:40 +0000
Manifest this update: Sat 28 Jun 2025 15:01:40 +0000
Manifest next update: Sun 29 Jun 2025 15:01:40 +0000
Files and hashes: 1: 5ag7QLP019MfszaNr6yhGZpEmJI.crl (hash: 2eVB8hSc8xt/24htbOUifaGGhrTu231pJ8i2mPjvV18=)
2: dFZMO2VP4AqySbEQh3NK_Is5BKQ.roa (hash: ROKbXrppvP4A8pHGDyWRJNx07Y7g4bd+83JBnGx3icI=)
3: g6-XvIXV3Eql3Coxvc-nq6Kly9Y.roa (hash: 2JhAFiPl0wmw6ysVFMQAoRoFcSMoEuXFJFM5vnLJ2+M=)
4: h1oyUSQHfCUnNhv3GPjMusMqBOQ.roa (hash: zVnvi6OzjNH5JWYjXPv16C0I43oqAW042jfOToOeKNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f7:f0:8f:33:62:1e:92:18:07:84:e5:2a:cf:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Validity
Not Before: Jun 28 15:01:40 2025 GMT
Not After : Jun 29 15:01:40 2025 GMT
Subject: CN=d2755f4a1d6c749fbd5bccdedcaf4b2d0f9f255e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:06:2d:4f:db:05:63:2a:47:f6:57:25:fe:
34:00:81:83:df:4f:6b:a8:8a:e5:07:63:df:e7:34:
9c:9b:e5:dc:e0:24:0d:e8:86:2d:ca:68:2d:c5:c5:
a7:68:76:ba:96:62:17:40:a2:8d:a5:8c:6d:8b:01:
91:46:ec:f0:0d:cb:82:68:31:ef:20:35:c2:59:e0:
5f:e1:9d:2d:74:d9:17:0b:00:24:d6:0f:bc:dd:59:
dd:9b:9e:86:e1:bd:2a:93:1a:f8:5e:23:7e:5c:24:
04:ac:ad:c9:7d:5e:83:8d:72:88:2c:72:1d:d2:89:
b0:90:b0:7e:61:02:29:46:0e:97:4b:ec:fc:05:58:
5f:d4:45:8f:fe:38:c4:65:2b:13:6c:83:9f:f2:63:
a0:c1:8c:d0:30:4b:a7:ae:47:1f:34:a7:a4:00:f4:
c6:fc:84:b0:51:f7:e9:28:14:fe:41:ca:bf:66:0e:
94:7c:cb:c9:43:04:56:4a:22:ef:ca:b7:02:51:be:
f2:99:e2:d1:8e:01:65:5b:aa:e8:df:5a:76:82:29:
46:8d:24:fc:c0:b9:1b:60:ad:5d:de:44:e1:00:e1:
fa:8e:11:a6:a9:a9:9e:9a:0e:11:54:95:d6:a1:c1:
e4:e4:c9:37:01:0d:1f:c4:4a:e0:ea:19:fd:50:5e:
ba:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:75:5F:4A:1D:6C:74:9F:BD:5B:CC:DE:DC:AF:4B:2D:0F:9F:25:5E
X509v3 Authority Key Identifier:
keyid:E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:99:aa:15:1e:1e:00:9f:a5:c1:93:8a:4a:5e:a2:1a:cc:3f:
ea:56:e8:db:98:73:c3:82:05:3b:e7:e1:57:e8:fc:32:87:48:
06:fb:e7:e0:92:c0:21:1d:ff:5a:45:45:a9:21:8a:04:be:09:
54:6a:7e:5f:a1:d1:5a:14:ef:90:c8:f7:99:21:0e:19:ab:13:
8a:06:52:03:53:8b:bc:4e:7e:fc:c7:d8:3a:39:b6:f1:dc:99:
67:64:b4:94:9f:39:46:66:ce:7c:be:cf:af:57:e7:86:e2:3c:
75:b5:b5:d5:c4:3c:cd:2d:7a:13:42:b7:fe:f7:92:a3:ab:5a:
ae:18:0f:93:a2:e7:e0:3c:5c:97:4c:8b:e2:88:31:e5:bc:42:
e8:4c:bb:5d:79:27:48:3b:a4:dd:c1:5c:00:9e:24:ee:8c:80:
97:ea:17:1b:b9:30:b7:2e:38:7b:8f:06:ef:15:9f:05:fc:b9:
06:28:76:2b:ad:54:60:62:87:ba:ce:83:99:10:df:ca:9c:a6:
2e:1c:80:aa:94:b6:ee:39:76:a1:09:5c:44:be:49:8d:e7:70:
7d:26:0d:83:e6:77:6e:68:71:74:32:e8:ff:95:e3:49:b7:11:
a0:67:4d:1a:29:a0:25:e4:b7:79:28:10:c3:7c:87:80:a3:3f:
e8:92:90:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DvfwjzNiHpIYB4TlKs8IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTgzYjQwYjNmNGQ3ZDMxZmIzMzY4ZGFmYWNhMTE5OWE0
NDk4OTIwHhcNMjUwNjI4MTUwMTQwWhcNMjUwNjI5MTUwMTQwWjAzMTEwLwYDVQQD
EyhkMjc1NWY0YTFkNmM3NDlmYmQ1YmNjZGVkY2FmNGIyZDBmOWYyNTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE0GLU/bBWMqR/ZXJf40AIGD309r
qIrlB2Pf5zScm+Xc4CQN6IYtymgtxcWnaHa6lmIXQKKNpYxtiwGRRuzwDcuCaDHv
IDXCWeBf4Z0tdNkXCwAk1g+83Vndm56G4b0qkxr4XiN+XCQErK3JfV6DjXKILHId
0omwkLB+YQIpRg6XS+z8BVhf1EWP/jjEZSsTbIOf8mOgwYzQMEunrkcfNKekAPTG
/ISwUffpKBT+Qcq/Zg6UfMvJQwRWSiLvyrcCUb7ymeLRjgFlW6ro31p2gilGjST8
wLkbYK1d3kThAOH6jhGmqamemg4RVJXWocHk5Mk3AQ0fxErg6hn9UF66fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJ1X0odbHSfvVvM3tyvSy0PnyVeMB8GA1UdIwQY
MBaAFOWoO0Cz9NfTH7M2ja+soRmaRJiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFnN1FMUDAxOU1mc3phTnI2eWhHWnBFbUpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yNGNhYjQtMDEyNS00MzgzLTg1ZmEt
M2QzODg2MDZkYTEyLzEvNWFnN1FMUDAxOU1mc3phTnI2eWhHWnBFbUpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8yNGNhYjQtMDEyNS00MzgzLTg1ZmEtM2QzODg2MDZkYTEy
LzEvNWFnN1FMUDAxOU1mc3phTnI2eWhHWnBFbUpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZmqFR4e
AJ+lwZOKSl6iGsw/6lbo25hzw4IFO+fhV+j8ModIBvvn4JLAIR3/WkVFqSGKBL4J
VGp+X6HRWhTvkMj3mSEOGasTigZSA1OLvE5+/MfYOjm28dyZZ2S0lJ85RmbOfL7P
r1fnhuI8dbW11cQ8zS16E0K3/veSo6tarhgPk6Ln4Dxcl0yL4ogx5bxC6Ey7XXkn
SDuk3cFcAJ4k7oyAl+oXG7kwty44e48G7xWfBfy5Bih2K61UYGKHus6DmRDfypym
LhyAqpS27jl2oQlcRL5JjedwfSYNg+Z3bmhxdDLo/5XjSbcRoGdNGimgJeS3eSgQ
w3yHgKM/6JKQRw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:55 2025 by rpki-client