Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
File: 5b86csrW9LPcMFtMvjEIcFHZg_Y.mft (raw, json)
Hash identifier: 0GnzjXOTngIBrxkKxGIsXigFMNuWFyU5dbDerf1fiEA=
Subject key identifier: CC:7C:39:19:76:F7:D7:9A:33:78:05:42:F3:01:F0:56:5C:FB:9F:89
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 0198D4E0F4F2EA98BAFAC3AC091C34721E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
Manifest number: 0F4C
Signing time: Sat 23 Aug 2025 03:02:49 +0000
Manifest this update: Sat 23 Aug 2025 03:02:49 +0000
Manifest next update: Sun 24 Aug 2025 03:02:49 +0000
Files and hashes: 1: 0RZPruEGTKhoR1hKNPIRExdYXzg.roa (hash: Ylgp4cjK+Zluy/09si0hlIXpapeYNCr3ajFNEzNms3k=)
2: 5b86csrW9LPcMFtMvjEIcFHZg_Y.crl (hash: r9+Q79z6RYqtn8SdjvZa313m7Co2Ti5OuQ/foR4NhKM=)
3: FZgBPNc92MthOGwVWSdqr1P0HSA.roa (hash: KZQtxJF/nJvZgDa2DTtteEZwkrQ1v1OtGNXAavMBEZw=)
4: VwQVaP5PIxPzgzQslxsV-wlq09Y.roa (hash: WHonlIhX4uSQGOOrCo26yMPlgaauP4nxJI/ozD4levU=)
5: XdxSdG11uJFuStkGGDZEuqDpedA.roa (hash: cY0Wtfs/4ERYCWgjaGMffb7og7Xm7Edv+oFQtm2dqsY=)
6: gjjNG2AUNgoUUT8zwJCb0qV39gA.roa (hash: gKOOsRGMh8IWKlduiqod4keZzvv275i5NBRO12AH9MA=)
7: xUGm3kpTiMAlzgkonjqufuYlmQk.roa (hash: 3q3AXsJge0KIrT2tTs/ggx0aF7QEDS7JWPpyt1gZZ38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:f4:f2:ea:98:ba:fa:c3:ac:09:1c:34:72:1e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Aug 23 03:02:49 2025 GMT
Not After : Aug 24 03:02:49 2025 GMT
Subject: CN=cc7c391976f7d79a33780542f301f0565cfb9f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:05:48:b5:e8:6d:15:8c:f7:af:ea:9e:08:1f:
11:ca:70:5c:5d:95:72:6b:fd:a4:ed:14:4c:d0:a3:
66:91:3a:4b:27:65:77:ff:b0:0f:48:68:93:bc:2a:
48:7e:65:bd:b9:a8:43:fe:6e:5f:8b:97:dd:c3:88:
30:0d:f0:2b:c7:cc:0a:c5:85:7b:0a:b5:07:f3:d4:
37:46:fb:ce:50:8e:de:2a:3f:77:a6:5d:39:87:55:
ed:00:24:52:74:7d:0f:56:2b:10:9b:ac:6a:98:a4:
4d:7a:ef:2c:00:1c:f7:ca:86:3a:36:af:ce:20:8f:
05:41:48:6d:51:6b:27:f3:4f:90:02:b8:42:96:f8:
cd:a2:97:70:dd:9b:0c:04:e6:bb:ec:b4:1c:8a:e7:
7b:7a:43:a7:84:e7:62:8c:ec:4a:ec:a6:29:bf:a3:
44:2b:2b:24:0a:4e:a4:46:6c:f0:15:69:67:23:2c:
03:8a:dd:56:6c:2d:f4:ec:e2:30:c5:55:34:c2:62:
5f:c6:9f:fb:a5:09:74:69:97:28:64:f2:2f:51:fa:
66:03:12:f0:f1:79:d4:3f:83:8b:d1:2a:d0:59:d9:
f2:98:f7:81:8f:ac:b7:98:e8:54:b9:f9:98:1b:ab:
da:9a:e2:94:68:16:68:6a:c9:25:95:2a:d2:ad:68:
5a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7C:39:19:76:F7:D7:9A:33:78:05:42:F3:01:F0:56:5C:FB:9F:89
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1f:bf:cf:5b:1c:67:23:a1:a5:18:88:57:61:00:25:58:f7:
50:dd:f5:12:60:bd:ff:3b:b6:6d:72:33:09:e2:5c:fa:e8:80:
73:2e:70:b3:01:ba:f6:21:64:54:e3:14:a5:9c:1a:5c:1d:bd:
45:aa:b7:96:58:99:38:5f:58:cc:f6:d5:b8:53:db:2f:93:6b:
43:34:3e:5c:05:80:91:54:fb:2e:1b:83:cb:a1:bc:b4:35:50:
4c:e2:d7:1d:e9:81:a7:9e:7c:31:79:db:a0:23:1f:34:7e:3b:
ff:52:be:56:22:f4:3a:33:de:42:21:5c:d7:e3:46:19:49:83:
fd:6b:1c:c2:ea:bf:36:bb:ee:52:f2:6b:39:d5:f1:56:a5:a2:
20:06:98:e8:43:5c:20:42:5a:9e:cb:c6:c9:2a:74:d4:e6:5d:
a3:5d:a7:ab:cd:45:8b:3c:10:33:83:56:8c:78:9a:2b:1b:8a:
5e:18:fd:0e:37:06:f0:14:63:e1:06:20:47:ce:a8:00:ae:25:
9c:37:d6:7d:be:53:ef:b9:32:14:99:6d:c9:28:a4:77:bf:64:
55:23:33:c3:b1:65:a3:1c:a5:2d:05:e1:cf:c4:2c:9a:d4:f5:
3c:14:f3:6d:48:77:22:f4:c8:68:9f:9d:1c:60:81:2e:53:02:
c3:b1:85:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4PTy6pi6+sOsCRw0ch48MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YmYzYTcyY2FkNmY0YjNkYzMwNWI0Y2JlMzEwODcwNTFk
OTgzZjYwHhcNMjUwODIzMDMwMjQ5WhcNMjUwODI0MDMwMjQ5WjAzMTEwLwYDVQQD
EyhjYzdjMzkxOTc2ZjdkNzlhMzM3ODA1NDJmMzAxZjA1NjVjZmI5Zjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngVItehtFYz3r+qeCB8RynBcXZVy
a/2k7RRM0KNmkTpLJ2V3/7APSGiTvCpIfmW9uahD/m5fi5fdw4gwDfArx8wKxYV7
CrUH89Q3RvvOUI7eKj93pl05h1XtACRSdH0PVisQm6xqmKRNeu8sABz3yoY6Nq/O
II8FQUhtUWsn80+QArhClvjNopdw3ZsMBOa77LQciud7ekOnhOdijOxK7KYpv6NE
KyskCk6kRmzwFWlnIywDit1WbC307OIwxVU0wmJfxp/7pQl0aZcoZPIvUfpmAxLw
8XnUP4OL0SrQWdnymPeBj6y3mOhUufmYG6vamuKUaBZoaskllSrSrWha2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMx8ORl299eaM3gFQvMB8FZc+5+JMB8GA1UdIwQY
MBaAFOW/OnLK1vSz3DBbTL4xCHBR2YP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEt
MDliZTlkYjExZjY2LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEtMDliZTlkYjExZjY2
LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAax+/z1sc
ZyOhpRiIV2EAJVj3UN31EmC9/zu2bXIzCeJc+uiAcy5wswG69iFkVOMUpZwaXB29
Raq3lliZOF9YzPbVuFPbL5NrQzQ+XAWAkVT7LhuDy6G8tDVQTOLXHemBp558MXnb
oCMfNH47/1K+ViL0OjPeQiFc1+NGGUmD/Wscwuq/NrvuUvJrOdXxVqWiIAaY6ENc
IEJansvGySp01OZdo12nq81FizwQM4NWjHiaKxuKXhj9DjcG8BRj4QYgR86oAK4l
nDfWfb5T77kyFJltySikd79kVSMzw7FloxylLQXhz8QsmtT1PBTzbUh3IvTIaJ+d
HGCBLlMCw7GFSg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:50 2025 by rpki-client