Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
File: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft (raw, json)
Hash identifier: rHyD8OnCk1YoP3+x3yPLWXETyUYT2ry+bGeaZ1uO20o=
Subject key identifier: 5D:BF:04:C0:A5:CA:E1:18:7E:0E:1B:78:1C:F8:31:33:50:34:2F:B2
Authority key identifier: E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
Certificate issuer: /CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Certificate serial: 0197B7EABC98DC3F0487EB815714E40BCF23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:43 +0000
Manifest this update: Sat 28 Jun 2025 19:01:43 +0000
Manifest next update: Sun 29 Jun 2025 19:01:43 +0000
Files and hashes: 1: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl (hash: Z8J46GDzvTUDXjHZhL3SGvkVR+5OhsEUQ4Vkriso4Mo=)
2: orFnLXI1TH7Jt_MUuyCNlezlJcQ.roa (hash: hsQhpxV8CsTitmZs0YwImGnMA+twiLDEhUnDv5rariM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:bc:98:dc:3f:04:87:eb:81:57:14:e4:0b:cf:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Validity
Not Before: Jun 28 19:01:43 2025 GMT
Not After : Jun 29 19:01:43 2025 GMT
Subject: CN=5dbf04c0a5cae1187e0e1b781cf8313350342fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ed:15:2c:b1:9e:d0:3f:e6:05:ca:9d:aa:ab:
b2:51:d7:3d:f0:9d:5e:ba:18:58:ea:a7:03:78:de:
10:8d:ef:86:39:70:ee:5f:3f:96:12:f1:70:47:93:
52:63:13:f3:1f:ca:b1:07:a6:16:d3:62:00:e5:c6:
23:94:47:b7:60:4c:1f:eb:1b:24:07:64:8c:54:da:
0c:4e:a2:89:08:f9:dc:bd:9d:95:dd:f7:45:62:fa:
16:33:cb:f5:5d:1e:5e:5e:6f:0d:82:c0:d7:69:78:
78:6d:9d:4f:23:ac:b5:ed:87:28:1d:a6:ed:d6:6c:
84:49:5a:6c:99:0d:9b:d8:e3:05:7c:2c:d3:ec:02:
6c:9c:af:8e:ae:6f:be:3c:db:77:b8:fc:5b:1b:7b:
fb:5d:30:ae:b5:72:55:ad:2b:50:5e:3e:89:6a:29:
80:17:0b:26:d3:3b:7e:b5:a1:f8:a8:4b:39:2c:ee:
b2:4b:4e:02:2b:b4:26:b3:ce:b5:d0:58:d7:d9:8a:
08:aa:6d:bc:f4:71:84:6f:22:c1:16:11:fc:8b:0e:
f8:cd:8e:e8:a6:13:33:b4:5d:d5:1e:29:5d:fc:1c:
95:fb:ab:ba:9e:a5:fb:ea:af:e3:26:bb:48:4e:d2:
ee:47:3e:ab:ca:12:c5:28:fb:7d:b5:b7:49:6f:e2:
b7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BF:04:C0:A5:CA:E1:18:7E:0E:1B:78:1C:F8:31:33:50:34:2F:B2
X509v3 Authority Key Identifier:
keyid:E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e9:85:f6:4c:5b:5a:02:99:a0:49:1f:75:91:3b:01:8f:60:
5d:9b:12:66:77:eb:b7:68:f5:5d:57:b4:54:29:c0:69:d1:b1:
b8:cd:f2:d6:84:ef:fb:d8:e4:64:fe:78:6a:d6:c7:ec:d2:05:
e2:90:33:1f:84:91:7b:a1:fd:e8:e0:84:47:ea:1f:ac:f5:6e:
6e:51:43:97:99:41:46:86:86:fb:3b:e4:ff:95:56:aa:44:6b:
1f:33:60:cd:8f:41:b6:3d:e2:f0:65:c3:84:04:a3:b7:d6:54:
b3:1b:c6:aa:50:9a:a8:10:a2:76:59:b5:35:90:a3:3b:b1:0d:
42:c0:f2:43:f3:a9:94:a8:af:62:ce:64:10:2f:3f:ae:78:88:
55:82:0b:1f:80:c4:45:ac:cd:77:c8:78:34:24:08:26:4b:e5:
0a:cb:8f:bc:14:bb:23:42:64:6c:ae:69:52:67:0e:66:5c:69:
f5:16:ef:05:c3:6c:4f:31:7c:7a:ed:80:15:d2:d5:ca:46:d5:
7e:db:e9:bf:77:4a:94:8f:b0:e7:5b:4b:ad:a7:1a:b4:87:66:
84:5b:80:d7:39:ca:5d:03:15:59:29:08:fa:65:88:37:eb:5d:
6f:1a:8e:94:3f:a5:48:e6:d1:0b:83:d7:90:e6:f2:72:47:11:
9d:b7:f6:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36ryY3D8Eh+uBVxTkC88jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzczMWVhODU3YjkwM2FhNDBhOGU1ZmQ4ZDg4NDQ2NTA1
YjUyMzMwHhcNMjUwNjI4MTkwMTQzWhcNMjUwNjI5MTkwMTQzWjAzMTEwLwYDVQQD
Eyg1ZGJmMDRjMGE1Y2FlMTE4N2UwZTFiNzgxY2Y4MzEzMzUwMzQyZmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie0VLLGe0D/mBcqdqquyUdc98J1e
uhhY6qcDeN4Qje+GOXDuXz+WEvFwR5NSYxPzH8qxB6YW02IA5cYjlEe3YEwf6xsk
B2SMVNoMTqKJCPncvZ2V3fdFYvoWM8v1XR5eXm8NgsDXaXh4bZ1PI6y17YcoHabt
1myESVpsmQ2b2OMFfCzT7AJsnK+Orm++PNt3uPxbG3v7XTCutXJVrStQXj6JaimA
Fwsm0zt+taH4qEs5LO6yS04CK7Qms8610FjX2YoIqm289HGEbyLBFhH8iw74zY7o
phMztF3VHild/ByV+6u6nqX76q/jJrtITtLuRz6ryhLFKPt9tbdJb+K3FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2/BMClyuEYfg4beBz4MTNQNC+yMB8GA1UdIwQY
MBaAFOV3MeqFe5A6pAqOX9jYhEZQW1IzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhjeDZvVjdrRHFrQ281ZjJOaUVSbEJiVWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hZmJiNjItMDA5OC00MmIzLTgxYWUt
ZjBiYjJlMTVmNmQwLzEvNVhjeDZvVjdrRHFrQ281ZjJOaUVSbEJiVWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hZmJiNjItMDA5OC00MmIzLTgxYWUtZjBiYjJlMTVmNmQw
LzEvNVhjeDZvVjdrRHFrQ281ZjJOaUVSbEJiVWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKemF9kxb
WgKZoEkfdZE7AY9gXZsSZnfrt2j1XVe0VCnAadGxuM3y1oTv+9jkZP54atbH7NIF
4pAzH4SRe6H96OCER+ofrPVublFDl5lBRoaG+zvk/5VWqkRrHzNgzY9Btj3i8GXD
hASjt9ZUsxvGqlCaqBCidlm1NZCjO7ENQsDyQ/OplKivYs5kEC8/rniIVYILH4DE
RazNd8h4NCQIJkvlCsuPvBS7I0JkbK5pUmcOZlxp9RbvBcNsTzF8eu2AFdLVykbV
ftvpv3dKlI+w51tLracatIdmhFuA1znKXQMVWSkI+mWIN+tdbxqOlD+lSObRC4PX
kObyckcRnbf2MQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:34:55 2025 by rpki-client