Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
File: 5_2MB2tTpxIbVBePW2p-KRNbzOw.mft (raw, json)
Hash identifier: JFupPRA4WBvfhB1YXRkkNx/YwEh61jKyFGViXTyfFjs=
Subject key identifier: 77:1B:BF:36:DA:EB:8D:3E:3E:DA:97:7C:72:7D:41:34:DE:B4:91:A7
Authority key identifier: E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC
Certificate issuer: /CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
Certificate serial: 01993537820850F47F945579D0834EB859BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
Manifest number: 012B
Signing time: Wed 10 Sep 2025 20:00:54 +0000
Manifest this update: Wed 10 Sep 2025 20:00:54 +0000
Manifest next update: Thu 11 Sep 2025 20:00:54 +0000
Files and hashes: 1: 5_2MB2tTpxIbVBePW2p-KRNbzOw.crl (hash: 3zcko6hyJzGvFlo7lKnsR0dbB/yc9u5wIBpByE3nxK0=)
2: G8yJSDi_qI6C3zmPW3k-kpCis5w.roa (hash: qlE3sGxxzJA/T2NGOl/URoTdfcV9KKmY+S6/Dr5mN74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:82:08:50:f4:7f:94:55:79:d0:83:4e:b8:59:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd8c076b53a7121b54178f5b6a7e29135bccec
Validity
Not Before: Sep 10 20:00:54 2025 GMT
Not After : Sep 11 20:00:54 2025 GMT
Subject: CN=771bbf36daeb8d3e3eda977c727d4134deb491a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1d:39:6b:12:4d:44:bf:c6:44:c9:55:ac:c3:
5f:16:7c:b7:ad:15:6b:6e:26:f4:68:1b:14:65:7c:
d4:6d:28:70:3d:36:18:64:eb:ab:d8:2b:bd:bf:49:
4a:e9:ee:ae:eb:b7:6d:ff:b0:22:50:82:73:3d:ed:
c9:76:a0:5a:bc:03:2f:b4:b0:76:37:3e:da:48:12:
84:b7:45:ab:1d:8b:f7:ed:ee:75:83:a2:bd:fb:4c:
d6:71:16:7e:9e:07:38:1c:cd:cc:56:3a:c1:63:7c:
89:af:bc:4a:6e:8e:5b:de:7a:52:16:a0:d9:09:c8:
3e:6f:53:62:49:6d:31:b4:0d:56:2b:7e:04:d5:29:
0f:07:5f:08:e4:40:00:87:cc:32:54:cb:6e:6b:ce:
11:f9:bf:5e:db:19:2c:72:a2:6f:b3:0b:ed:12:8f:
71:b8:ea:94:df:94:73:86:90:b4:6c:62:6e:57:2c:
b7:c9:c7:6f:0f:f5:b7:1a:9b:b0:58:ba:f9:63:c1:
86:49:1b:07:df:9a:4e:70:be:79:f0:12:65:82:c6:
fd:09:9e:f9:c1:8f:80:9b:b3:f8:a6:a4:48:00:69:
7b:08:83:41:ce:ee:6b:29:37:ac:96:18:36:92:1b:
35:a4:06:c7:c7:1d:37:69:b5:1c:1a:46:4c:ff:76:
dd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1B:BF:36:DA:EB:8D:3E:3E:DA:97:7C:72:7D:41:34:DE:B4:91:A7
X509v3 Authority Key Identifier:
keyid:E7:FD:8C:07:6B:53:A7:12:1B:54:17:8F:5B:6A:7E:29:13:5B:CC:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2MB2tTpxIbVBePW2p-KRNbzOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b6ab7b-b348-4763-97ec-16c63c426c33/1/5_2MB2tTpxIbVBePW2p-KRNbzOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5c:e0:ea:ef:a5:19:dc:47:a4:48:9d:01:dc:58:69:90:da:
72:7c:99:42:4a:71:12:cd:d2:27:a3:44:1d:9c:b7:b0:b1:03:
ad:2d:fb:9a:16:21:f6:6b:70:82:df:55:8e:73:75:8d:5c:52:
b7:86:c8:93:d6:c1:f0:03:5c:6b:59:52:c8:cd:7c:5f:95:e2:
8e:44:22:06:99:1b:80:cf:3a:c6:19:63:fb:a2:83:3c:31:12:
37:58:76:6d:78:e3:a0:d0:60:38:1b:e8:f2:ee:7a:41:8c:8f:
39:b2:db:73:6e:f0:17:15:5d:c7:3b:5f:86:c9:75:a9:7a:71:
b9:eb:57:30:c3:8f:d0:a9:22:e7:18:a1:a0:59:2f:60:5c:bb:
6f:7c:e6:c0:83:06:0a:8e:a4:1a:c7:00:b5:3c:2d:60:ad:e7:
e1:7a:32:7b:f5:6a:22:b0:72:c7:02:1c:4d:87:4f:0e:dd:f8:
4d:4f:94:04:63:1c:67:db:1e:76:ee:6b:b8:0d:85:c1:a4:4e:
a8:f4:61:fd:38:ac:bc:ef:6f:b0:d7:2b:d4:c8:29:33:73:65:
a7:38:85:a8:95:d1:4d:ba:4a:7b:43:38:5e:36:68:a6:7b:48:
1f:68:e6:94:e8:f7:a9:48:4f:c2:ce:94:7e:53:f7:d5:48:54:
05:c1:4d:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1N4IIUPR/lFV50INOuFm6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmQ4YzA3NmI1M2E3MTIxYjU0MTc4ZjViNmE3ZTI5MTM1
YmNjZWMwHhcNMjUwOTEwMjAwMDU0WhcNMjUwOTExMjAwMDU0WjAzMTEwLwYDVQQD
Eyg3NzFiYmYzNmRhZWI4ZDNlM2VkYTk3N2M3MjdkNDEzNGRlYjQ5MWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h05axJNRL/GRMlVrMNfFny3rRVr
bib0aBsUZXzUbShwPTYYZOur2Cu9v0lK6e6u67dt/7AiUIJzPe3JdqBavAMvtLB2
Nz7aSBKEt0WrHYv37e51g6K9+0zWcRZ+ngc4HM3MVjrBY3yJr7xKbo5b3npSFqDZ
Ccg+b1NiSW0xtA1WK34E1SkPB18I5EAAh8wyVMtua84R+b9e2xkscqJvswvtEo9x
uOqU35RzhpC0bGJuVyy3ycdvD/W3GpuwWLr5Y8GGSRsH35pOcL558BJlgsb9CZ75
wY+Am7P4pqRIAGl7CINBzu5rKTeslhg2khs1pAbHxx03abUcGkZM/3bd+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcbvzba640+PtqXfHJ9QTTetJGnMB8GA1UdIwQY
MBaAFOf9jAdrU6cSG1QXj1tqfikTW8zsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9iNmFiN2ItYjM0OC00NzYzLTk3ZWMt
MTZjNjNjNDI2YzMzLzEvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9iNmFiN2ItYjM0OC00NzYzLTk3ZWMtMTZjNjNjNDI2YzMz
LzEvNV8yTUIydFRweEliVkJlUFcycC1LUk5iek93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVzg6u+l
GdxHpEidAdxYaZDacnyZQkpxEs3SJ6NEHZy3sLEDrS37mhYh9mtwgt9VjnN1jVxS
t4bIk9bB8ANca1lSyM18X5XijkQiBpkbgM86xhlj+6KDPDESN1h2bXjjoNBgOBvo
8u56QYyPObLbc27wFxVdxztfhsl1qXpxuetXMMOP0Kki5xihoFkvYFy7b3zmwIMG
Co6kGscAtTwtYK3n4Xoye/VqIrByxwIcTYdPDt34TU+UBGMcZ9sedu5ruA2FwaRO
qPRh/TisvO9vsNcr1MgpM3NlpziFqJXRTbpKe0M4XjZopntIH2jmlOj3qUhPws6U
flP31UhUBcFNGg==
-----END CERTIFICATE-----
Generated at Thu Sep 11 04:19:44 2025 by rpki-client