
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
File: r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft (raw, json)
Hash identifier: qLkr83dRp9Eq7+E1YMSiVF1ZBnm5n/3d3btQILHM6YE=
Subject key identifier: 76:EB:9B:49:00:8D:2B:17:02:A4:FF:B3:A1:A0:A6:19:B1:EF:45:4E
Authority key identifier: AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
Certificate issuer: /CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Certificate serial: 01985B34E327AF8BE4A2D5A4F04D2464D67F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
Manifest number: 0A76
Signing time: Wed 30 Jul 2025 12:00:49 +0000
Manifest this update: Wed 30 Jul 2025 12:00:49 +0000
Manifest next update: Thu 31 Jul 2025 12:00:49 +0000
Files and hashes: 1: QyIQhrwBc_E0RzmwfCK0p-xEPL8.roa (hash: KU05TYN4aOywUPeCIgZViB5uKUpefnNLinujip3r7Ws=)
2: r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl (hash: a7LFmd6fgBUWmlntb7EA7DTOZ7Dlf7yFgu2jDAdmm3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:34:e3:27:af:8b:e4:a2:d5:a4:f0:4d:24:64:d6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Validity
Not Before: Jul 30 12:00:49 2025 GMT
Not After : Jul 31 12:00:49 2025 GMT
Subject: CN=76eb9b49008d2b1702a4ffb3a1a0a619b1ef454e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6b:57:da:b8:b8:4e:3f:08:c1:c8:87:fb:b6:
3d:35:d8:72:6c:ce:7c:8a:f9:34:d7:f5:6a:a7:aa:
ee:4d:53:10:2d:9d:62:31:b7:81:b0:0a:ca:fc:e2:
49:d0:7c:e5:1d:0d:53:03:63:a5:f5:df:9a:a4:32:
57:d3:10:1e:cd:be:da:61:df:e7:65:80:8a:e4:58:
0a:fa:0d:07:35:27:c3:ff:9d:57:a3:2a:1f:d8:a2:
35:6b:98:68:0e:9b:f3:5a:6d:12:29:22:49:f3:b5:
b7:66:eb:27:86:cd:f3:d1:79:77:d3:00:ab:48:73:
82:ff:56:be:5b:2b:67:44:ef:55:54:d5:17:5b:66:
1e:c4:a8:0c:d8:51:52:63:0b:7e:d4:3f:3a:9a:0d:
ea:2d:54:d9:38:ff:02:68:7c:a7:e1:1e:4a:fa:c9:
f8:60:58:a9:13:f4:4d:f1:ca:48:5b:63:80:cc:ac:
d0:c3:64:b6:cd:6c:28:b4:dd:e0:f5:8e:ab:b0:b8:
8b:b5:66:6c:7e:ba:79:83:74:d4:7d:2e:27:51:c3:
6e:57:4f:1d:4d:c9:56:d7:48:db:46:3b:54:4b:e5:
14:2b:d6:48:16:68:f4:22:b7:e9:4c:7b:d2:3a:ca:
55:83:a9:14:10:ce:04:98:a4:3f:1d:da:b2:0d:e6:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EB:9B:49:00:8D:2B:17:02:A4:FF:B3:A1:A0:A6:19:B1:EF:45:4E
X509v3 Authority Key Identifier:
keyid:AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5f:3b:2c:f0:e9:53:1e:59:6d:2a:37:c9:4a:c2:55:5a:ef:
96:9a:ee:22:0c:a9:79:d1:f6:8f:89:af:d5:d7:3e:00:97:a4:
7e:56:d3:c8:4b:3a:b0:84:bf:53:a9:43:f5:20:48:a5:11:67:
24:ec:77:c9:89:da:b1:c9:c4:07:05:e3:93:16:6d:22:5e:11:
f4:42:f0:8b:b6:70:64:8d:6e:62:0c:28:62:2c:f3:83:5c:96:
65:e8:ef:72:93:60:e1:45:07:d2:f8:c2:f4:e3:13:4f:b2:01:
e2:f5:56:ef:f1:74:c7:67:86:61:bb:92:53:ec:1e:2d:75:3c:
8e:a2:b8:98:e3:c4:1b:01:d3:63:13:ad:2c:f3:34:a5:4d:5c:
43:75:19:3e:f2:50:ca:a3:e5:3c:0b:cf:89:68:57:35:0c:f7:
c6:a7:1d:c6:0c:5f:8a:d5:33:30:d1:05:e7:6a:cf:5f:26:41:
b2:60:5e:3a:56:29:10:de:49:e0:56:34:6f:6f:25:4a:35:48:
94:bc:e5:69:82:9f:71:e9:29:5d:42:1a:9b:16:1e:e6:b7:07:
a5:14:fd:89:55:a1:c7:36:3b:ce:f7:fb:a1:03:69:f2:01:70:
f3:7d:9b:e4:4d:19:4b:72:e9:60:f7:a7:c4:61:20:37:60:44:
c4:dc:bb:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhbNOMnr4vkotWk8E0kZNZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOTMxMDI1MTFlNjYwMjYzZjhlZjZlNGMxZjlhYjMyMzkz
ODM5YjIwHhcNMjUwNzMwMTIwMDQ5WhcNMjUwNzMxMTIwMDQ5WjAzMTEwLwYDVQQD
Eyg3NmViOWI0OTAwOGQyYjE3MDJhNGZmYjNhMWEwYTYxOWIxZWY0NTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmtX2ri4Tj8IwciH+7Y9NdhybM58
ivk01/Vqp6ruTVMQLZ1iMbeBsArK/OJJ0HzlHQ1TA2Ol9d+apDJX0xAezb7aYd/n
ZYCK5FgK+g0HNSfD/51Xoyof2KI1a5hoDpvzWm0SKSJJ87W3Zusnhs3z0Xl30wCr
SHOC/1a+WytnRO9VVNUXW2YexKgM2FFSYwt+1D86mg3qLVTZOP8CaHyn4R5K+sn4
YFipE/RN8cpIW2OAzKzQw2S2zWwotN3g9Y6rsLiLtWZsfrp5g3TUfS4nUcNuV08d
TclW10jbRjtUS+UUK9ZIFmj0IrfpTHvSOspVg6kUEM4EmKQ/HdqyDeaYpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbrm0kAjSsXAqT/s6Ggphmx70VOMB8GA1UdIwQY
MBaAFK+TECUR5mAmP4725MH5qzI5ODmyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVNUUpSSG1ZQ1lfanZia3dmbXJNams0T2JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kMTZlOTYtMDMxMy00YzliLTljMDkt
YTk1ZmUzMTAyNjQ1LzEvcjVNUUpSSG1ZQ1lfanZia3dmbXJNams0T2JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kMTZlOTYtMDMxMy00YzliLTljMDktYTk1ZmUzMTAyNjQ1
LzEvcjVNUUpSSG1ZQ1lfanZia3dmbXJNams0T2JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcl87LPDp
Ux5ZbSo3yUrCVVrvlpruIgypedH2j4mv1dc+AJekflbTyEs6sIS/U6lD9SBIpRFn
JOx3yYnascnEBwXjkxZtIl4R9ELwi7ZwZI1uYgwoYizzg1yWZejvcpNg4UUH0vjC
9OMTT7IB4vVW7/F0x2eGYbuSU+weLXU8jqK4mOPEGwHTYxOtLPM0pU1cQ3UZPvJQ
yqPlPAvPiWhXNQz3xqcdxgxfitUzMNEF52rPXyZBsmBeOlYpEN5J4FY0b28lSjVI
lLzlaYKfcekpXUIamxYe5rcHpRT9iVWhxzY7zvf7oQNp8gFw832b5E0ZS3LpYPen
xGEgN2BExNy7Xw==
-----END CERTIFICATE-----
Generated at Wed Jul 30 20:54:51 2025 by rpki-client