Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
File: 5uGvN6YKmYaO-7qggXtJgPGaVPs.mft (raw, json)
Hash identifier: 90oAIxa039/0QomDFTKMg0jqHvpHgg8y989EaF0f8mE=
Subject key identifier: 34:38:CB:FF:02:05:85:D5:F3:EC:57:53:25:3F:6E:1C:E2:0B:57:D1
Authority key identifier: E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB
Certificate issuer: /CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
Certificate serial: 019848F78098257E7ED4CE3AB73043E456A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
Manifest number: 09E9
Signing time: Sat 26 Jul 2025 23:00:36 +0000
Manifest this update: Sat 26 Jul 2025 23:00:36 +0000
Manifest next update: Sun 27 Jul 2025 23:00:36 +0000
Files and hashes: 1: 04IK808ti0G_mrePZiLfyMd8LPg.roa (hash: KEsbMkessHVdMEPjooQbuvxux4M4IDtjKN92Pi/27Vo=)
2: 5uGvN6YKmYaO-7qggXtJgPGaVPs.crl (hash: dM20kYLwMX8S5ulwJVhmxrSQ5xPzwv0QLIO9X9LlnTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:80:98:25:7e:7e:d4:ce:3a:b7:30:43:e4:56:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
Validity
Not Before: Jul 26 23:00:36 2025 GMT
Not After : Jul 27 23:00:36 2025 GMT
Subject: CN=3438cbff020585d5f3ec5753253f6e1ce20b57d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:f1:cf:b0:e9:3a:e1:15:d0:c7:3b:e2:c1:
50:1e:0a:da:7c:89:81:a4:7c:db:4a:64:46:af:dd:
66:04:5a:04:5e:ab:0a:98:82:d2:33:0c:91:03:08:
7b:2e:98:bd:ca:81:e7:11:0a:25:11:1a:17:d0:1f:
22:23:a7:b0:30:06:28:1f:18:51:da:a1:2b:63:45:
d1:44:6b:2a:fb:53:12:f6:6a:01:77:dc:08:91:71:
09:63:60:cc:74:ae:a6:d2:6e:8d:8a:62:90:b1:47:
de:f9:83:80:dd:aa:7c:2e:41:be:31:5e:f1:53:1e:
13:b9:6b:be:24:81:b1:16:a2:aa:82:35:98:91:3e:
1c:a3:f7:06:10:22:49:86:37:71:53:96:3f:13:9c:
45:cc:95:ae:15:7f:29:e3:c3:2e:6a:a4:68:6d:db:
d5:e0:b9:70:f8:e7:09:db:77:9b:b9:cc:f8:f4:d3:
7e:8e:cd:36:4b:d8:cb:dd:60:48:d8:f7:97:9c:a8:
bf:dc:ae:48:cb:d4:73:3c:e2:91:9f:d3:cd:b8:94:
5b:bf:9e:a6:c3:7f:09:3d:2b:2c:52:76:70:f6:f6:
36:c9:bf:36:df:da:0f:9d:d0:bf:24:fc:eb:fc:3e:
77:42:bb:81:43:40:a8:a1:df:ea:c7:4a:17:95:df:
13:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:38:CB:FF:02:05:85:D5:F3:EC:57:53:25:3F:6E:1C:E2:0B:57:D1
X509v3 Authority Key Identifier:
keyid:E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ae:63:2e:ad:43:1b:a6:ad:81:e8:e7:10:23:de:62:e5:d1:
da:5f:ee:cd:9d:47:c2:42:53:a2:62:63:fa:61:75:67:9b:d0:
a2:ef:d0:b2:d8:37:12:d8:b0:5c:56:b1:c3:95:30:ba:06:eb:
91:ba:71:a3:bb:49:39:f2:b3:04:fd:9d:be:f8:78:ad:d5:49:
06:70:59:dd:84:45:bb:ed:27:c1:cc:f5:79:13:1d:4d:13:fb:
76:6e:1e:af:11:b5:d3:ed:c7:7e:e2:5d:dc:85:ee:0b:df:42:
47:87:dd:08:9b:43:51:9d:f5:35:ca:95:22:6d:42:a5:e6:db:
5c:b9:b0:40:4e:7f:82:61:9d:67:67:68:3a:28:bf:2d:5c:a0:
30:89:9c:b6:dd:b7:74:31:78:07:e8:be:80:73:10:64:28:81:
89:b4:33:af:2b:fc:02:08:d1:58:d7:66:eb:45:e8:0e:56:8e:
84:dd:f1:97:9b:ab:44:a3:bb:79:89:87:ea:a8:5b:21:7a:04:
58:9b:e2:17:12:ac:a5:0e:ad:4c:37:72:28:f9:bc:a5:fd:5a:
95:45:06:a2:a5:39:08:3d:0b:96:1e:cf:be:d3:2b:81:a8:2d:
c8:f7:a1:56:f3:d5:92:f0:bf:3a:ec:0a:b7:00:7c:de:03:9f:
b6:4a:2c:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI94CYJX5+1M46tzBD5FapMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZTFhZjM3YTYwYTk5ODY4ZWZiYmFhMDgxN2I0OTgwZjE5
YTU0ZmIwHhcNMjUwNzI2MjMwMDM2WhcNMjUwNzI3MjMwMDM2WjAzMTEwLwYDVQQD
EygzNDM4Y2JmZjAyMDU4NWQ1ZjNlYzU3NTMyNTNmNmUxY2UyMGI1N2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwenxz7DpOuEV0Mc74sFQHgrafImB
pHzbSmRGr91mBFoEXqsKmILSMwyRAwh7Lpi9yoHnEQolERoX0B8iI6ewMAYoHxhR
2qErY0XRRGsq+1MS9moBd9wIkXEJY2DMdK6m0m6NimKQsUfe+YOA3ap8LkG+MV7x
Ux4TuWu+JIGxFqKqgjWYkT4co/cGECJJhjdxU5Y/E5xFzJWuFX8p48MuaqRobdvV
4Llw+OcJ23ebucz49NN+js02S9jL3WBI2PeXnKi/3K5Iy9RzPOKRn9PNuJRbv56m
w38JPSssUnZw9vY2yb8239oPndC/JPzr/D53QruBQ0Cood/qx0oXld8TPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQ4y/8CBYXV8+xXUyU/bhziC1fRMB8GA1UdIwQY
MBaAFObhrzemCpmGjvu6oIF7SYDxmlT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXVHdk42WUttWWFPLTdxZ2dYdEpnUEdhVlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lNjU4MGItYmZmNy00MWU4LWIzMTQt
MTQwNDViNjRhZTI5LzEvNXVHdk42WUttWWFPLTdxZ2dYdEpnUEdhVlBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lNjU4MGItYmZmNy00MWU4LWIzMTQtMTQwNDViNjRhZTI5
LzEvNXVHdk42WUttWWFPLTdxZ2dYdEpnUEdhVlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe65jLq1D
G6atgejnECPeYuXR2l/uzZ1HwkJTomJj+mF1Z5vQou/Qstg3EtiwXFaxw5Uwugbr
kbpxo7tJOfKzBP2dvvh4rdVJBnBZ3YRFu+0nwcz1eRMdTRP7dm4erxG10+3HfuJd
3IXuC99CR4fdCJtDUZ31NcqVIm1CpebbXLmwQE5/gmGdZ2doOii/LVygMImctt23
dDF4B+i+gHMQZCiBibQzryv8AgjRWNdm60XoDlaOhN3xl5urRKO7eYmH6qhbIXoE
WJviFxKspQ6tTDdyKPm8pf1alUUGoqU5CD0Llh7PvtMrgagtyPehVvPVkvC/OuwK
twB83gOftkoswQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:28:17 2025 by rpki-client