Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
File: s5HsSXtk1hEkn95Zel7ofpM31e4.mft (raw, json)
Hash identifier: CpwC/Usp5JEVKf+uh1ZcbERdHFZUMYlkbdIOYPhu0O0=
Subject key identifier: C7:04:CE:1E:5E:3F:A9:12:5F:47:4F:9D:52:31:0D:88:98:8D:A8:55
Authority key identifier: B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
Certificate issuer: /CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Certificate serial: 0198530D262B696942A28BA502C4771E5F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
Manifest number: 05A8
Signing time: Mon 28 Jul 2025 22:00:27 +0000
Manifest this update: Mon 28 Jul 2025 22:00:27 +0000
Manifest next update: Tue 29 Jul 2025 22:00:27 +0000
Files and hashes: 1: 1SuRt4iJivWgTKWmk3XGm23S3is.roa (hash: QUGPW65YoJ5GDg5KCzuvySius0jxym8E1db1Hk83LWE=)
2: s5HsSXtk1hEkn95Zel7ofpM31e4.crl (hash: De+7L+q3xkefA99E20RKnHJCFR0qd8NLLSsIiT0S/6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:26:2b:69:69:42:a2:8b:a5:02:c4:77:1e:5f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Validity
Not Before: Jul 28 22:00:27 2025 GMT
Not After : Jul 29 22:00:27 2025 GMT
Subject: CN=c704ce1e5e3fa9125f474f9d52310d88988da855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:94:79:d8:21:96:ff:d3:ae:c7:d5:45:44:
a6:f8:65:83:c5:91:a1:f2:0a:ae:61:b7:6f:e3:47:
9e:f7:33:2f:aa:24:c5:56:70:05:4a:19:9c:8d:6f:
9d:20:4b:35:0b:45:23:92:ef:b1:5d:be:d3:9a:a7:
1e:41:b0:db:26:fe:e3:d4:5f:16:22:1d:0f:98:78:
bc:b1:f5:3e:4e:0b:1e:26:89:cc:9a:fa:7c:15:1a:
63:ad:41:8e:bf:11:9e:ad:18:d9:71:c3:3c:51:9a:
bd:39:a6:44:6a:e1:c3:5c:e1:0b:9a:80:36:5f:b6:
4f:db:fa:d5:f0:12:f9:d5:c4:56:e8:27:65:7b:83:
99:6b:da:44:14:20:dc:b4:f9:e1:8b:55:e8:b2:a6:
9e:15:71:e3:33:41:a4:4e:ca:91:99:41:4e:55:2e:
16:5c:1c:d7:97:8d:18:c6:24:c0:a5:48:f9:ec:82:
0d:f3:44:1f:c7:1d:fa:97:7a:11:9f:2b:24:c6:91:
15:d0:94:b1:49:00:73:14:e0:38:ce:18:74:79:8b:
eb:a9:84:1b:d7:33:56:10:be:83:71:ca:e6:fb:aa:
bc:48:e2:23:0f:67:e4:9c:5b:4e:61:29:4a:1b:b5:
31:ea:ae:eb:c3:56:9d:25:0f:34:69:95:b4:18:2e:
95:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:04:CE:1E:5E:3F:A9:12:5F:47:4F:9D:52:31:0D:88:98:8D:A8:55
X509v3 Authority Key Identifier:
keyid:B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5d:c0:60:38:87:95:66:d2:e2:68:3a:df:12:88:8f:ff:8b:
78:8c:ea:d2:99:1b:ee:2c:e1:df:37:f4:2e:f2:d1:89:49:f5:
50:d6:75:22:82:80:a4:8b:3c:3a:8f:36:58:21:7e:0f:e7:b4:
c4:8d:38:08:5b:d1:d4:d3:89:0f:66:43:e0:e9:ce:cc:25:6a:
25:a9:0e:a8:bc:61:1e:6d:fa:de:bd:ed:e9:15:1d:1d:e7:23:
b2:b9:98:3c:2c:f8:9e:ad:f9:03:29:14:97:7b:ae:0c:e5:2c:
b1:2d:f9:28:a7:69:c5:78:63:3f:0a:e8:6c:bb:27:ca:90:8b:
41:2f:1a:21:46:79:72:6f:f8:a9:8c:d0:34:3b:34:c6:3e:d7:
e8:93:59:6f:a6:72:50:9f:7e:bb:f7:ab:b1:53:99:fe:cb:c9:
0d:0a:a4:fe:5b:cf:c2:13:90:58:76:68:b4:24:8e:5f:89:ca:
7d:ab:d0:b7:5e:00:60:58:35:96:b4:c4:e7:7d:5c:75:47:0e:
fc:50:e0:cc:bb:c3:71:7c:43:93:da:25:7e:b1:8c:df:42:3a:
8d:54:d7:db:2d:56:74:0f:58:d9:3c:5f:09:da:2c:bd:d7:7e:
07:c5:46:c0:01:9b:41:16:41:1c:89:12:f1:0d:ac:65:0a:37:
b3:d3:be:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDSYraWlCooulAsR3Hl+dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOTFlYzQ5N2I2NGQ2MTEyNDlmZGU1OTdhNWVlODdlOTMz
N2Q1ZWUwHhcNMjUwNzI4MjIwMDI3WhcNMjUwNzI5MjIwMDI3WjAzMTEwLwYDVQQD
EyhjNzA0Y2UxZTVlM2ZhOTEyNWY0NzRmOWQ1MjMxMGQ4ODk4OGRhODU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskCUedghlv/TrsfVRUSm+GWDxZGh
8gquYbdv40ee9zMvqiTFVnAFShmcjW+dIEs1C0Ujku+xXb7TmqceQbDbJv7j1F8W
Ih0PmHi8sfU+TgseJonMmvp8FRpjrUGOvxGerRjZccM8UZq9OaZEauHDXOELmoA2
X7ZP2/rV8BL51cRW6Cdle4OZa9pEFCDctPnhi1XosqaeFXHjM0GkTsqRmUFOVS4W
XBzXl40YxiTApUj57IIN80Qfxx36l3oRnyskxpEV0JSxSQBzFOA4zhh0eYvrqYQb
1zNWEL6Dccrm+6q8SOIjD2fknFtOYSlKG7Ux6q7rw1adJQ80aZW0GC6VRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcEzh5eP6kSX0dPnVIxDYiYjahVMB8GA1UdIwQY
MBaAFLOR7El7ZNYRJJ/eWXpe6H6TN9XuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczVIc1NYdGsxaEVrbjk1WmVsN29mcE0zMWU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi82ZGMxMjEtMGE2Zi00NWFkLThhZjkt
ZTFhNDI5MzUyMGJlLzEvczVIc1NYdGsxaEVrbjk1WmVsN29mcE0zMWU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi82ZGMxMjEtMGE2Zi00NWFkLThhZjktZTFhNDI5MzUyMGJl
LzEvczVIc1NYdGsxaEVrbjk1WmVsN29mcE0zMWU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ13AYDiH
lWbS4mg63xKIj/+LeIzq0pkb7izh3zf0LvLRiUn1UNZ1IoKApIs8Oo82WCF+D+e0
xI04CFvR1NOJD2ZD4OnOzCVqJakOqLxhHm363r3t6RUdHecjsrmYPCz4nq35AykU
l3uuDOUssS35KKdpxXhjPwrobLsnypCLQS8aIUZ5cm/4qYzQNDs0xj7X6JNZb6Zy
UJ9+u/ersVOZ/svJDQqk/lvPwhOQWHZotCSOX4nKfavQt14AYFg1lrTE531cdUcO
/FDgzLvDcXxDk9olfrGM30I6jVTX2y1WdA9Y2TxfCdosvdd+B8VGwAGbQRZBHIkS
8Q2sZQo3s9O+/g==
-----END CERTIFICATE-----
Generated at Tue Jul 29 02:53:39 2025 by rpki-client