Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
File: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft (raw, json)
Hash identifier: KZaqYse3f5SsaDO5pfdXFb3V7xfkcGFo+0DEz/1fh9Y=
Subject key identifier: E8:B2:76:ED:19:FE:65:34:CB:E8:E5:BC:8E:AD:88:10:EB:4D:7A:71
Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
Certificate issuer: /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Certificate serial: 019827EC6B31736EA8EDFBC5DA8ED9EF0F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
Manifest number: 10D0
Signing time: Sun 20 Jul 2025 13:01:02 +0000
Manifest this update: Sun 20 Jul 2025 13:01:02 +0000
Manifest next update: Mon 21 Jul 2025 13:01:02 +0000
Files and hashes: 1: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl (hash: Zub53nYlaov1jhk65hxlc54aPyIvPDTTrvvZduU5qYg=)
2: 5RNQOoYI7rp8d4nASoBcHUOUpY8.roa (hash: FG1C0t8LdLpHD2f41qfi65AEKFEoAI1fPmg3pwTrSAI=)
3: 9sR2L5tWHl9nYIOa3aPDj2epTyM.roa (hash: DVpf87jmOmV1usbZpIj3EdX+MCp0oX2EtW5xng4U88Q=)
4: eQWgmPYrRyxmbW7jic8MtUc1Zpo.roa (hash: QgtMWXIUrz6jvt1nPBxlt0MfdGFiSY2UtDQz0hujdYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:6b:31:73:6e:a8:ed:fb:c5:da:8e:d9:ef:0f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Validity
Not Before: Jul 20 13:01:02 2025 GMT
Not After : Jul 21 13:01:02 2025 GMT
Subject: CN=e8b276ed19fe6534cbe8e5bc8ead8810eb4d7a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bf:d7:09:07:d5:6f:de:94:f4:dc:b4:f7:f8:
c5:9e:b4:2a:85:bb:3f:90:e5:03:6e:a6:80:df:37:
d7:47:d2:c8:4e:36:8a:22:c2:d4:41:21:12:b6:83:
0f:02:1c:51:2c:9f:ed:9a:ac:de:6b:57:66:9e:fb:
91:1b:a2:41:b0:08:c4:7c:c0:4b:05:b1:04:bc:9b:
21:be:12:96:d8:d0:62:31:26:01:35:51:48:91:07:
a5:68:f4:e6:97:84:8e:d6:3e:f6:4f:c2:f4:52:b2:
67:7f:de:25:f2:b2:e1:6b:80:da:f5:ce:b3:ac:81:
49:fa:a0:5d:7d:3c:5f:e1:41:c6:b9:61:dc:87:05:
c7:1b:03:53:01:50:1a:ef:e2:58:3c:ea:67:40:f1:
8a:8a:21:4f:99:e8:bb:1c:8d:24:b8:ef:88:59:2a:
d3:db:95:f7:56:0e:3f:cd:13:f2:84:41:60:f8:05:
b5:0d:e4:4d:67:72:17:3c:52:7b:ab:f9:c7:7b:b4:
a2:bc:64:64:d3:f1:59:df:6c:5c:1f:78:ab:9d:36:
74:33:b5:54:fd:92:e8:87:d1:7a:84:11:0f:7c:db:
a7:58:1e:ea:d2:15:0d:4a:3e:4f:36:d4:8a:c5:14:
04:62:9c:27:d3:11:ea:a7:5a:13:97:cd:6f:31:6d:
aa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B2:76:ED:19:FE:65:34:CB:E8:E5:BC:8E:AD:88:10:EB:4D:7A:71
X509v3 Authority Key Identifier:
keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:53:01:10:58:7a:00:8d:90:7a:e3:6c:f9:79:7f:83:26:18:
b8:0c:90:0f:ef:4b:17:f4:60:3f:70:f2:62:71:48:7f:03:f8:
96:2c:bf:c3:70:f5:c6:37:3e:d4:0d:f5:3a:b1:e8:ff:e8:d7:
3a:c9:71:7d:28:2a:6a:72:36:d5:c8:eb:a2:91:bd:bc:c0:ec:
2c:18:8f:63:48:cd:7f:4f:e3:1c:8a:44:1b:a0:c5:98:64:fa:
b5:35:b0:b0:c1:a4:3c:37:c4:97:af:10:92:b6:18:84:86:54:
71:8f:4c:38:8d:a1:a0:68:49:0e:d4:fb:ae:9a:48:0d:d9:7e:
0a:71:19:85:d5:db:8f:15:dd:02:42:8c:e1:f4:85:3e:a2:fe:
26:61:a8:3d:b2:0c:8d:6d:f4:1f:24:72:29:6e:dd:06:bd:cf:
73:ef:e3:dc:6b:4c:70:52:63:e1:0f:d1:8a:3c:be:60:72:e4:
b9:10:c9:2d:bf:38:af:48:90:55:2d:fd:4f:e0:42:da:45:8f:
b0:61:e2:b0:04:6d:6f:1c:02:ef:b2:d1:67:c6:48:2e:68:a8:
b2:70:15:3d:f9:cb:99:5d:5c:a4:60:68:1b:5c:9b:8f:36:cf:
c7:73:fe:43:b6:68:ba:a8:23:39:d8:88:f6:19:55:5e:cb:e2:
e9:82:dc:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgn7Gsxc26o7fvF2o7Z7w9HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTcxNGZmYzU5OGIxNTY0N2JiYWZlMmM2NDYwYTg3ZWFm
YmNmOTcwHhcNMjUwNzIwMTMwMTAyWhcNMjUwNzIxMTMwMTAyWjAzMTEwLwYDVQQD
EyhlOGIyNzZlZDE5ZmU2NTM0Y2JlOGU1YmM4ZWFkODgxMGViNGQ3YTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL/XCQfVb96U9Ny09/jFnrQqhbs/
kOUDbqaA3zfXR9LITjaKIsLUQSEStoMPAhxRLJ/tmqzea1dmnvuRG6JBsAjEfMBL
BbEEvJshvhKW2NBiMSYBNVFIkQelaPTml4SO1j72T8L0UrJnf94l8rLha4Da9c6z
rIFJ+qBdfTxf4UHGuWHchwXHGwNTAVAa7+JYPOpnQPGKiiFPmei7HI0kuO+IWSrT
25X3Vg4/zRPyhEFg+AW1DeRNZ3IXPFJ7q/nHe7SivGRk0/FZ32xcH3irnTZ0M7VU
/ZLoh9F6hBEPfNunWB7q0hUNSj5PNtSKxRQEYpwn0xHqp1oTl81vMW2qGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiydu0Z/mU0y+jlvI6tiBDrTXpxMB8GA1UdIwQY
MBaAFOSnFP/FmLFWR7uv4sZGCofq+8+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTkt
N2NiMzQ1ZTg1NDFhLzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTktN2NiMzQ1ZTg1NDFh
LzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4VMBEFh6
AI2QeuNs+Xl/gyYYuAyQD+9LF/RgP3DyYnFIfwP4liy/w3D1xjc+1A31OrHo/+jX
OslxfSgqanI21cjropG9vMDsLBiPY0jNf0/jHIpEG6DFmGT6tTWwsMGkPDfEl68Q
krYYhIZUcY9MOI2hoGhJDtT7rppIDdl+CnEZhdXbjxXdAkKM4fSFPqL+JmGoPbIM
jW30HyRyKW7dBr3Pc+/j3GtMcFJj4Q/Rijy+YHLkuRDJLb84r0iQVS39T+BC2kWP
sGHisARtbxwC77LRZ8ZILmiosnAVPfnLmV1cpGBoG1ybjzbPx3P+Q7ZouqgjOdiI
9hlVXsvi6YLcJA==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:24:49 2025 by rpki-client