Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
File: 5rtLno321mTvy3e0EEFcg0phd4I.mft (raw, json)
Hash identifier: y5PqFXUPfAYuw17Rwps9DdGO4f8++DM1cD27zwuEwtc=
Subject key identifier: B7:6C:14:9F:1A:0C:03:A8:A8:B9:84:EE:D1:32:F7:45:1C:75:B2:A4
Authority key identifier: E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
Certificate issuer: /CN=e6bb4b9e8df6d664efcb77b410415c834a617782
Certificate serial: 019747796EFF1362B90653CA1EB96E787D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
Manifest number: 0366
Signing time: Fri 06 Jun 2025 23:00:29 +0000
Manifest this update: Fri 06 Jun 2025 23:00:29 +0000
Manifest next update: Sat 07 Jun 2025 23:00:29 +0000
Files and hashes: 1: 5rtLno321mTvy3e0EEFcg0phd4I.crl (hash: 7CjuKLuiNWfXs0fO/Fts67K+t2gzCioTS4VfOPBjQo4=)
2: XkaKfqFoJaO-K5J7EjOD-dhdRPc.roa (hash: HO99X4r00WVlX046g40bOu9XiDJVwjKinGN75tp1pVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:6e:ff:13:62:b9:06:53:ca:1e:b9:6e:78:7d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6bb4b9e8df6d664efcb77b410415c834a617782
Validity
Not Before: Jun 6 23:00:29 2025 GMT
Not After : Jun 7 23:00:29 2025 GMT
Subject: CN=b76c149f1a0c03a8a8b984eed132f7451c75b2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2c:c9:ba:e9:d6:44:08:2d:70:b2:42:ab:4b:
39:4e:49:d6:aa:95:49:c3:7a:d8:10:06:df:b0:c9:
2d:68:d8:f3:8f:bc:7c:fb:14:1b:23:e5:02:1e:0a:
24:db:9c:aa:f7:de:09:65:ff:a4:5b:5a:b9:3a:fb:
ed:65:33:4e:1f:bf:d1:76:6b:05:77:47:46:8c:6a:
b1:28:c5:f2:54:b2:36:e3:e4:00:1b:3d:a0:b4:15:
12:c4:14:c2:17:96:6d:d9:dd:0f:db:da:6b:fa:cb:
94:09:69:eb:09:bd:6f:7f:f5:f2:fe:65:e8:48:a6:
1c:78:b2:29:0a:b3:0b:a6:64:73:8f:af:71:53:5f:
a4:1e:c1:81:3b:0b:73:19:14:4c:07:9e:fe:bc:ef:
af:71:41:ea:00:b3:98:38:66:67:b4:80:a7:b9:6b:
5c:b6:9c:9a:e0:bb:e0:4b:96:c8:b6:07:50:13:ef:
37:03:0d:a2:42:f9:2d:1b:5b:7e:19:66:fa:8b:8b:
e5:3f:7a:67:be:aa:06:42:3a:3f:72:14:fc:81:69:
15:6e:01:05:32:70:89:66:a5:44:89:62:3b:b9:ba:
b0:c3:2d:5a:07:02:cf:53:b5:c3:a2:d4:2f:dc:f3:
89:a4:8d:a4:99:1f:9a:c7:67:57:76:4e:93:c2:b7:
b7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6C:14:9F:1A:0C:03:A8:A8:B9:84:EE:D1:32:F7:45:1C:75:B2:A4
X509v3 Authority Key Identifier:
keyid:E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:af:4a:74:76:d5:35:98:40:d2:f5:8d:4b:89:19:cf:4c:b3:
f2:85:61:03:cd:95:fb:2a:ff:5c:08:13:42:d9:33:6f:4a:53:
9e:5d:a6:bd:fd:06:88:c6:24:d8:18:fc:fd:99:c0:f2:a3:c2:
f7:dc:da:28:dc:15:f0:cc:bf:45:fd:d9:1e:1d:22:b7:ce:c4:
5a:e3:ff:f6:71:71:2c:bd:67:70:5c:55:74:80:de:c4:30:18:
35:45:4f:f8:74:37:be:69:12:85:f0:9c:e6:bd:2e:fe:52:99:
5b:31:9c:ac:73:80:07:99:30:e5:db:bd:1e:ec:3b:79:e0:75:
1c:1a:0e:26:ac:d9:76:18:c3:5e:2a:b1:f8:46:89:74:cb:2f:
f4:43:32:42:00:12:d4:b1:b4:15:5c:13:1b:e1:a7:d0:35:a0:
5a:0a:8f:48:92:bc:5d:6c:f6:0b:d3:aa:89:74:dc:88:27:65:
98:79:5d:ca:ce:6f:15:bb:20:8f:b7:fa:a3:09:02:ef:e2:31:
71:3e:21:0d:c7:f7:2d:f7:1d:cb:d0:11:d5:e8:9e:44:1c:b0:
bb:71:f8:b1:bb:4a:a7:55:eb:bd:dd:41:5d:ee:99:0c:28:2c:
c6:f8:f8:af:50:c5:63:9b:31:af:9b:52:a9:35:37:2a:d3:7f:
d6:51:28:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeW7/E2K5BlPKHrlueH0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YmI0YjllOGRmNmQ2NjRlZmNiNzdiNDEwNDE1YzgzNGE2
MTc3ODIwHhcNMjUwNjA2MjMwMDI5WhcNMjUwNjA3MjMwMDI5WjAzMTEwLwYDVQQD
EyhiNzZjMTQ5ZjFhMGMwM2E4YThiOTg0ZWVkMTMyZjc0NTFjNzViMmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCzJuunWRAgtcLJCq0s5TknWqpVJ
w3rYEAbfsMktaNjzj7x8+xQbI+UCHgok25yq994JZf+kW1q5OvvtZTNOH7/RdmsF
d0dGjGqxKMXyVLI24+QAGz2gtBUSxBTCF5Zt2d0P29pr+suUCWnrCb1vf/Xy/mXo
SKYceLIpCrMLpmRzj69xU1+kHsGBOwtzGRRMB57+vO+vcUHqALOYOGZntICnuWtc
tpya4LvgS5bItgdQE+83Aw2iQvktG1t+GWb6i4vlP3pnvqoGQjo/chT8gWkVbgEF
MnCJZqVEiWI7ubqwwy1aBwLPU7XDotQv3POJpI2kmR+ax2dXdk6Twre3kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdsFJ8aDAOoqLmE7tEy90UcdbKkMB8GA1UdIwQY
MBaAFOa7S56N9tZk78t3tBBBXINKYXeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXJ0TG5vMzIxbVR2eTNlMEVFRmNnMHBoZDRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81Y2EwN2EtYjI0Mi00MTQ0LWEyNjQt
N2Q1NDdlYzg0MTE0LzEvNXJ0TG5vMzIxbVR2eTNlMEVFRmNnMHBoZDRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC81Y2EwN2EtYjI0Mi00MTQ0LWEyNjQtN2Q1NDdlYzg0MTE0
LzEvNXJ0TG5vMzIxbVR2eTNlMEVFRmNnMHBoZDRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq69KdHbV
NZhA0vWNS4kZz0yz8oVhA82V+yr/XAgTQtkzb0pTnl2mvf0GiMYk2Bj8/ZnA8qPC
99zaKNwV8My/Rf3ZHh0it87EWuP/9nFxLL1ncFxVdIDexDAYNUVP+HQ3vmkShfCc
5r0u/lKZWzGcrHOAB5kw5du9Huw7eeB1HBoOJqzZdhjDXiqx+EaJdMsv9EMyQgAS
1LG0FVwTG+Gn0DWgWgqPSJK8XWz2C9OqiXTciCdlmHldys5vFbsgj7f6owkC7+Ix
cT4hDcf3Lfcdy9AR1eieRBywu3H4sbtKp1Xrvd1BXe6ZDCgsxvj4r1DFY5sxr5tS
qTU3KtN/1lEoOQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:37 2025 by rpki-client