Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
File: d5LD_GkVSsfVFbysnaoH54vCKcw.mft (raw, json)
Hash identifier: 6wPbjS1A6mX2ZvI6SosXNktoPe3sadoMAe8n+4D2dGQ=
Subject key identifier: CD:98:FE:53:71:FB:5E:45:50:2E:4B:8E:2A:2F:03:A8:72:A1:B4:2F
Authority key identifier: 77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC
Certificate issuer: /CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
Certificate serial: 01974BFB81433FAD129BEC16C83B9C3361AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 20:01:03 +0000
Manifest this update: Sat 07 Jun 2025 20:01:03 +0000
Manifest next update: Sun 08 Jun 2025 20:01:03 +0000
Files and hashes: 1: XufdK4JaU0kijhaCZqp6MWC7lI8.roa (hash: tAIQSyAZo/oGjmfexz3lVWcMQblwf+06mjxANWC5dis=)
2: d5LD_GkVSsfVFbysnaoH54vCKcw.crl (hash: PaIJvtBBksEd960pjO66epuLB04A/I4CzuTXpEwvryw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:81:43:3f:ad:12:9b:ec:16:c8:3b:9c:33:61:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
Validity
Not Before: Jun 7 20:01:03 2025 GMT
Not After : Jun 8 20:01:03 2025 GMT
Subject: CN=cd98fe5371fb5e45502e4b8e2a2f03a872a1b42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:c3:7a:0b:06:bf:d8:53:03:1e:29:21:56:
b9:2b:41:75:80:2e:0c:30:bd:8d:6b:e3:c8:1b:9a:
a6:9a:f4:16:64:38:08:d8:e5:5d:4d:06:4c:ef:1e:
0c:64:33:54:5e:17:7e:f1:62:6b:16:c8:4f:18:b9:
e1:68:24:95:94:72:d9:bb:a7:9a:a3:59:00:ca:21:
cf:ff:e9:03:c0:2c:e9:6c:73:23:7c:01:38:fe:1d:
6a:b3:57:94:15:0e:63:bb:2d:c3:d2:95:eb:eb:69:
cd:40:17:ef:e1:f7:b6:53:e4:57:9f:44:ae:33:b7:
52:97:fe:3d:59:a1:0e:9d:7d:07:cb:b0:4d:57:7b:
c5:c5:cd:ec:f9:9d:00:a0:04:65:6a:8e:4d:8f:47:
04:3b:59:7b:c6:40:66:d5:2b:5c:b9:1e:10:74:21:
05:6d:2a:25:26:80:a8:c4:70:79:0e:5f:54:ba:34:
26:06:4c:99:9b:f7:ef:4e:d9:a3:0c:fd:1e:b9:84:
13:fa:8b:23:fb:bd:8f:76:33:e3:3b:92:ee:35:2a:
96:61:7d:41:84:15:56:9c:19:09:69:f2:cb:d5:c4:
02:38:8d:e6:68:25:fc:64:eb:cb:7f:41:16:95:76:
55:1b:45:b9:72:0d:ec:af:9e:61:48:c9:9b:b9:64:
71:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:98:FE:53:71:FB:5E:45:50:2E:4B:8E:2A:2F:03:A8:72:A1:B4:2F
X509v3 Authority Key Identifier:
keyid:77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b8:ca:8d:90:f3:c2:5d:7d:e5:d4:7b:69:46:57:71:1b:6d:
43:55:1d:bf:ca:33:03:1d:10:01:c8:9b:95:93:1b:ce:d9:0d:
6b:63:fa:10:9b:34:32:57:00:de:2b:7f:e7:c6:2b:08:d7:82:
69:97:27:a7:0a:14:98:35:7e:5a:a9:3a:34:f3:38:02:db:d3:
f4:68:18:f9:1c:c6:0f:f2:ee:af:01:6e:5f:1f:23:e0:c7:ab:
95:0f:6a:fc:1f:4c:45:90:98:63:45:43:9a:a5:68:cc:d4:dd:
51:24:ba:b0:14:6f:55:11:e2:de:f6:5d:d1:df:27:84:e3:b6:
2e:1f:84:ea:f7:f2:94:42:d3:80:a4:65:48:db:ef:8f:b4:24:
c1:76:24:56:44:3e:90:e5:bf:c6:ce:24:9d:54:3b:e0:20:83:
f1:7b:35:e9:f3:9e:28:25:18:6b:ba:42:00:1d:fb:fd:9a:14:
00:81:5c:56:ad:35:50:f5:26:12:d9:95:48:f5:57:19:2d:be:
f3:2c:9b:67:e5:e7:9b:ad:e6:07:97:77:fe:ec:dc:9c:32:bd:
cb:09:5d:85:f6:56:7b:50:a8:ed:a3:31:fa:e8:4f:f3:e7:e2:
dc:63:8a:02:e6:08:76:56:84:4c:43:59:4a:81:c0:33:fa:93:
ec:6a:31:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+4FDP60Sm+wWyDucM2GuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OTJjM2ZjNjkxNTRhYzdkNTE1YmNhYzlkYWEwN2U3OGJj
MjI5Y2MwHhcNMjUwNjA3MjAwMTAzWhcNMjUwNjA4MjAwMTAzWjAzMTEwLwYDVQQD
EyhjZDk4ZmU1MzcxZmI1ZTQ1NTAyZTRiOGUyYTJmMDNhODcyYTFiNDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszvDegsGv9hTAx4pIVa5K0F1gC4M
ML2Na+PIG5qmmvQWZDgI2OVdTQZM7x4MZDNUXhd+8WJrFshPGLnhaCSVlHLZu6ea
o1kAyiHP/+kDwCzpbHMjfAE4/h1qs1eUFQ5juy3D0pXr62nNQBfv4fe2U+RXn0Su
M7dSl/49WaEOnX0Hy7BNV3vFxc3s+Z0AoARlao5Nj0cEO1l7xkBm1StcuR4QdCEF
bSolJoCoxHB5Dl9UujQmBkyZm/fvTtmjDP0euYQT+osj+72PdjPjO5LuNSqWYX1B
hBVWnBkJafLL1cQCOI3maCX8ZOvLf0EWlXZVG0W5cg3sr55hSMmbuWRxCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2Y/lNx+15FUC5LjiovA6hyobQvMB8GA1UdIwQY
MBaAFHeSw/xpFUrH1RW8rJ2qB+eLwinMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC81MmI0OGQtMjhhOC00OGY1LWE0ZGYt
NGRiNDBhMzY1NjNlLzEvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC81MmI0OGQtMjhhOC00OGY1LWE0ZGYtNGRiNDBhMzY1NjNl
LzEvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbjKjZDz
wl195dR7aUZXcRttQ1Udv8ozAx0QAciblZMbztkNa2P6EJs0MlcA3it/58YrCNeC
aZcnpwoUmDV+Wqk6NPM4AtvT9GgY+RzGD/LurwFuXx8j4MerlQ9q/B9MRZCYY0VD
mqVozNTdUSS6sBRvVRHi3vZd0d8nhOO2Lh+E6vfylELTgKRlSNvvj7QkwXYkVkQ+
kOW/xs4knVQ74CCD8Xs16fOeKCUYa7pCAB37/ZoUAIFcVq01UPUmEtmVSPVXGS2+
8yybZ+Xnm63mB5d3/uzcnDK9ywldhfZWe1Co7aMx+uhP8+fi3GOKAuYIdlaETENZ
SoHAM/qT7GoxTQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:39:16 2025 by rpki-client