Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
File: 5GWsyQgJ77RczaJQoQV2GElLhus.mft (raw, json)
Hash identifier: xhZLzxmTokavFkMWiqITihisuw7rEYCiQbR3EBJrdMQ=
Subject key identifier: CD:8A:F4:C0:15:C1:DC:3D:F0:1C:B9:42:E2:ED:9A:68:40:AE:B6:A2
Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
Certificate issuer: /CN=e465acc90809efb45ccda250a1057618494b86eb
Certificate serial: 0197B6327363519E6C34CD9CBACA7A9075E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 11:00:48 +0000
Manifest this update: Sat 28 Jun 2025 11:00:48 +0000
Manifest next update: Sun 29 Jun 2025 11:00:48 +0000
Files and hashes: 1: 5GWsyQgJ77RczaJQoQV2GElLhus.crl (hash: bSFUy4U/tHW3SZXJKERqFR/sReQdOk2gMLNkhFvmbHI=)
2: HXkMZsrBmT3pdly4pNHClnxxiAs.roa (hash: uINrlSFHfmPOAUFp+GFnrxpC6bCJm76Z7RhHxB80xWI=)
3: g56Uh-QZpNYvH0QrLNbigssPnrQ.roa (hash: wrpYwLhb1No98RIDJLncVQMkGDqMDtvmrpGIa2b7nWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:73:63:51:9e:6c:34:cd:9c:ba:ca:7a:90:75:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb
Validity
Not Before: Jun 28 11:00:48 2025 GMT
Not After : Jun 29 11:00:48 2025 GMT
Subject: CN=cd8af4c015c1dc3df01cb942e2ed9a6840aeb6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d2:af:32:74:c2:d8:fb:84:c5:59:c9:e9:59:
3a:05:a5:5c:8f:9e:b8:51:79:76:de:a7:b4:49:2e:
ad:e5:7e:c8:f0:1c:80:3e:3e:59:3e:41:4f:26:05:
b4:ab:ea:1e:b8:29:63:77:49:78:e1:bf:8a:74:83:
0c:01:c5:df:58:b7:d3:46:38:04:07:ae:e6:4e:ca:
8d:ea:60:90:92:1e:71:7f:10:7e:4a:dc:a7:05:e0:
a3:af:2e:4f:dd:b7:6d:d3:b3:65:50:56:0d:64:e2:
54:ad:8c:21:02:13:71:3c:a7:01:4b:be:f5:64:ad:
09:98:d9:46:31:75:5b:c3:f4:99:1f:2e:5e:74:a4:
67:90:09:c8:ec:31:da:84:36:b3:01:ff:39:60:f4:
6a:66:c6:e7:67:af:03:52:00:c2:53:65:98:2a:8c:
23:dd:28:f8:5c:19:6c:6e:cc:44:c7:f5:d2:9f:32:
a6:b6:ea:c8:56:e1:7d:a0:d3:3a:f9:01:d8:7e:4d:
a1:c4:30:1e:aa:3b:29:72:e0:b0:d0:00:92:55:59:
86:e2:e4:e5:93:20:d1:55:6a:1f:6d:6a:19:3f:e8:
07:2b:34:fd:ed:f6:1f:8b:b5:0c:83:21:aa:62:78:
9f:7e:47:f3:74:6a:aa:2b:17:21:c8:d2:a5:fe:89:
16:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8A:F4:C0:15:C1:DC:3D:F0:1C:B9:42:E2:ED:9A:68:40:AE:B6:A2
X509v3 Authority Key Identifier:
keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:98:1a:5b:24:fb:39:f4:cf:45:7f:ac:a8:c2:22:ba:82:82:
ff:1a:3a:de:63:21:0c:e5:f5:4d:25:5f:17:be:82:61:12:97:
1d:c0:3c:b2:1b:ad:af:c2:9d:75:f3:b7:46:35:6a:d2:ae:c5:
cb:f0:3f:90:4f:66:cf:5d:41:61:3e:24:94:56:c8:8c:89:5a:
87:62:47:6f:4d:78:17:3b:5e:6d:77:76:2e:49:32:fc:b1:52:
66:62:8a:75:5a:79:9c:c0:ba:7c:a9:73:ff:4d:60:e3:5d:82:
4a:f0:ab:86:72:0e:62:ba:08:50:89:03:95:37:9b:cd:03:ad:
91:b2:8d:d1:10:ff:e7:42:d6:ea:e5:e8:3d:7b:f0:4b:c1:f7:
73:66:eb:c5:59:04:44:31:2a:bf:ba:87:06:72:fd:3a:f2:43:
95:45:91:1e:35:22:de:48:1a:4b:51:4c:71:af:ec:75:b2:b8:
90:e6:fd:7a:a4:65:44:2d:17:58:d1:c8:c7:4d:a1:cb:e2:3b:
0d:1a:18:2b:bf:c9:2f:1f:42:d7:4e:8f:dd:12:6e:45:45:53:
32:99:3d:29:6f:7a:db:65:a2:07:80:4a:2c:e7:19:54:2f:bb:
66:64:38:41:3f:b4:bb:12:07:9b:8a:90:d9:58:52:a1:b6:9d:
38:b1:32:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MnNjUZ5sNM2cusp6kHXkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NjVhY2M5MDgwOWVmYjQ1Y2NkYTI1MGExMDU3NjE4NDk0
Yjg2ZWIwHhcNMjUwNjI4MTEwMDQ4WhcNMjUwNjI5MTEwMDQ4WjAzMTEwLwYDVQQD
EyhjZDhhZjRjMDE1YzFkYzNkZjAxY2I5NDJlMmVkOWE2ODQwYWViNmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NKvMnTC2PuExVnJ6Vk6BaVcj564
UXl23qe0SS6t5X7I8ByAPj5ZPkFPJgW0q+oeuCljd0l44b+KdIMMAcXfWLfTRjgE
B67mTsqN6mCQkh5xfxB+StynBeCjry5P3bdt07NlUFYNZOJUrYwhAhNxPKcBS771
ZK0JmNlGMXVbw/SZHy5edKRnkAnI7DHahDazAf85YPRqZsbnZ68DUgDCU2WYKowj
3Sj4XBlsbsxEx/XSnzKmturIVuF9oNM6+QHYfk2hxDAeqjspcuCw0ACSVVmG4uTl
kyDRVWofbWoZP+gHKzT97fYfi7UMgyGqYniffkfzdGqqKxchyNKl/okWGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2K9MAVwdw98By5QuLtmmhArraiMB8GA1UdIwQY
MBaAFORlrMkICe+0XM2iUKEFdhhJS4brMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUdXc3lRZ0o3N1JjemFKUW9RVjJHRWxMaHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85ZWY2MGEtNzNlZS00MGUxLTkwMDYt
YzBiM2IwZjU0YmViLzEvNUdXc3lRZ0o3N1JjemFKUW9RVjJHRWxMaHVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi85ZWY2MGEtNzNlZS00MGUxLTkwMDYtYzBiM2IwZjU0YmVi
LzEvNUdXc3lRZ0o3N1JjemFKUW9RVjJHRWxMaHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZgaWyT7
OfTPRX+sqMIiuoKC/xo63mMhDOX1TSVfF76CYRKXHcA8shutr8KddfO3RjVq0q7F
y/A/kE9mz11BYT4klFbIjIlah2JHb014FztebXd2Lkky/LFSZmKKdVp5nMC6fKlz
/01g412CSvCrhnIOYroIUIkDlTebzQOtkbKN0RD/50LW6uXoPXvwS8H3c2brxVkE
RDEqv7qHBnL9OvJDlUWRHjUi3kgaS1FMca/sdbK4kOb9eqRlRC0XWNHIx02hy+I7
DRoYK7/JLx9C106P3RJuRUVTMpk9KW9622WiB4BKLOcZVC+7ZmQ4QT+0uxIHm4qQ
2VhSobadOLEyQw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:06:44 2025 by rpki-client