
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
File: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft (raw, json)
Hash identifier: 5hM1TshpNDJAWmdHYQJ+uEO5yX5XU3MX4iIGI8Txx4c=
Subject key identifier: 4D:63:FC:6F:84:25:D1:EF:8F:B5:CE:F0:77:9C:0C:C0:C8:D5:3C:BC
Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
Certificate issuer: /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Certificate serial: 01974E207A44F5288251A3ABABCEC4A5814F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
Manifest number: 1035
Signing time: Sun 08 Jun 2025 06:00:40 +0000
Manifest this update: Sun 08 Jun 2025 06:00:40 +0000
Manifest next update: Mon 09 Jun 2025 06:00:40 +0000
Files and hashes: 1: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl (hash: uHM2sCCtHGQuYwI0hKpWORCNymUcPV+pLUHDXf6AeEI=)
2: V60g_4Hl1O4ws6xObJRepK5WbCI.roa (hash: WQJN9PGlNp52w8KNVApuftRmLkpbyYXJ0S9Q2EedPcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:7a:44:f5:28:82:51:a3:ab:ab:ce:c4:a5:81:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Validity
Not Before: Jun 8 06:00:40 2025 GMT
Not After : Jun 9 06:00:40 2025 GMT
Subject: CN=4d63fc6f8425d1ef8fb5cef0779c0cc0c8d53cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e1:0a:dd:42:d9:db:bb:7b:29:6b:4d:1d:41:
76:bf:dd:b6:f2:e0:65:c9:aa:2b:3b:01:71:71:9e:
3d:5d:82:70:eb:57:83:29:89:b9:a6:f3:bf:e7:1d:
d2:4e:a9:d1:24:4b:23:8a:0e:b4:cd:8d:72:47:5c:
03:74:f7:32:e2:f7:f5:83:45:4b:4e:fe:4c:70:8f:
45:8e:79:6d:51:4a:2c:48:64:d7:70:ff:07:38:f9:
f8:ab:6e:ec:78:eb:61:c8:75:63:0e:2a:90:d2:8d:
97:7b:71:15:dc:b5:4e:bb:81:cf:f8:78:c1:98:ad:
0b:68:26:18:3c:0b:7a:3d:fb:36:be:1c:b2:7a:24:
d3:e3:7a:23:3b:c4:dc:d7:88:4c:c6:e5:e6:23:74:
f0:9f:e6:d4:b1:45:2c:12:ee:fb:6e:db:4d:b5:65:
ec:b6:ca:f8:6d:3e:e0:5d:02:d8:52:4f:03:4e:21:
d2:11:6a:86:31:29:ae:27:12:84:fa:90:9e:ea:79:
49:b8:00:31:56:e5:d2:ef:3c:02:c5:bd:c8:93:2a:
48:12:fd:dd:6b:01:98:c6:9b:e5:bf:f1:f2:18:69:
bb:27:f8:87:07:30:03:8c:50:9f:10:8a:82:f1:52:
e7:9e:6c:35:dd:9c:60:09:98:a6:ea:23:26:13:3e:
44:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:63:FC:6F:84:25:D1:EF:8F:B5:CE:F0:77:9C:0C:C0:C8:D5:3C:BC
X509v3 Authority Key Identifier:
keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9a:c0:ba:d0:7d:c5:d6:51:5c:f7:02:1c:1b:15:75:64:9c:
aa:4e:8d:5d:b9:3e:56:a4:86:c7:8b:6a:30:e0:7f:1a:6e:bb:
94:ad:35:cc:38:26:1f:ca:bd:a3:9d:13:db:62:f8:2f:7d:6d:
a3:d4:51:91:ab:13:9f:f5:64:d6:8d:58:18:fb:b6:8a:64:49:
c3:0c:32:32:c0:4a:45:dd:f0:39:df:80:30:12:9c:d7:84:64:
3e:70:a0:f4:f0:63:80:74:0a:93:2a:05:fa:66:62:cc:67:dd:
9d:96:17:26:cd:af:0a:a6:94:79:97:4c:fd:fa:e6:e4:9f:72:
f8:a3:65:38:7d:dc:cb:78:1c:86:47:db:98:31:0a:61:8a:3e:
83:fd:41:0d:6d:f5:99:f8:30:4d:5d:37:8c:db:2d:97:6f:3e:
74:8e:84:0d:9e:5e:70:a9:ab:53:28:b1:ed:43:aa:ed:e0:0d:
ec:13:e8:d3:30:22:fd:ac:79:14:3a:7d:eb:90:51:d0:41:3c:
a0:31:d2:99:66:cb:b9:96:ec:6a:cb:20:a7:fd:40:8b:37:b5:
31:d6:03:bd:4c:b4:7c:80:0d:2f:d5:60:cf:71:68:08:39:b6:
f5:83:82:a2:9e:3b:13:e4:08:c9:cc:00:ad:c4:7a:8d:ed:d1:
8b:50:e7:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOIHpE9SiCUaOrq87EpYFPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmQ5OTA5ZDE2YmFmMTFjYjk1OGM4ZDI3NGUyNGVjOTk0
NzQyMmYwHhcNMjUwNjA4MDYwMDQwWhcNMjUwNjA5MDYwMDQwWjAzMTEwLwYDVQQD
Eyg0ZDYzZmM2Zjg0MjVkMWVmOGZiNWNlZjA3NzljMGNjMGM4ZDUzY2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OEK3ULZ27t7KWtNHUF2v9228uBl
yaorOwFxcZ49XYJw61eDKYm5pvO/5x3STqnRJEsjig60zY1yR1wDdPcy4vf1g0VL
Tv5McI9FjnltUUosSGTXcP8HOPn4q27seOthyHVjDiqQ0o2Xe3EV3LVOu4HP+HjB
mK0LaCYYPAt6Pfs2vhyyeiTT43ojO8Tc14hMxuXmI3Twn+bUsUUsEu77bttNtWXs
tsr4bT7gXQLYUk8DTiHSEWqGMSmuJxKE+pCe6nlJuAAxVuXS7zwCxb3IkypIEv3d
awGYxpvlv/HyGGm7J/iHBzADjFCfEIqC8VLnnmw13ZxgCZim6iMmEz5EMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1j/G+EJdHvj7XO8HecDMDI1Ty8MB8GA1UdIwQY
MBaAFOf9mQnRa68Ry5WMjSdOJOyZR0IvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xZjAxZTMtNzdkMy00Y2Y3LWFlYTgt
MTIyZmVlY2RlM2VhLzEvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8xZjAxZTMtNzdkMy00Y2Y3LWFlYTgtMTIyZmVlY2RlM2Vh
LzEvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoprAutB9
xdZRXPcCHBsVdWScqk6NXbk+VqSGx4tqMOB/Gm67lK01zDgmH8q9o50T22L4L31t
o9RRkasTn/Vk1o1YGPu2imRJwwwyMsBKRd3wOd+AMBKc14RkPnCg9PBjgHQKkyoF
+mZizGfdnZYXJs2vCqaUeZdM/frm5J9y+KNlOH3cy3gchkfbmDEKYYo+g/1BDW31
mfgwTV03jNstl28+dI6EDZ5ecKmrUyix7UOq7eAN7BPo0zAi/ax5FDp965BR0EE8
oDHSmWbLuZbsassgp/1Aize1MdYDvUy0fIANL9Vgz3FoCDm29YOCop47E+QIycwA
rcR6je3Ri1DnJQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:52:14 2025 by rpki-client