Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
File: 5WzVePQvjeBnI2dnxs_CusvBbgU.mft (raw, json)
Hash identifier: 6+0oU9PGvxhoOBN+Bo0SzOm2pCdI5ndMutfMRd9jCTM=
Subject key identifier: 6B:06:32:1C:80:88:C3:7D:F4:39:03:12:5B:4F:83:DC:90:12:60:C9
Authority key identifier: E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05
Certificate issuer: /CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
Certificate serial: 019A2B1EB59C688C00F0EED574D2F6BEE817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
Manifest number: 1678
Signing time: Tue 28 Oct 2025 14:00:24 +0000
Manifest this update: Tue 28 Oct 2025 14:00:24 +0000
Manifest next update: Wed 29 Oct 2025 14:00:24 +0000
Files and hashes: 1: 5WzVePQvjeBnI2dnxs_CusvBbgU.crl (hash: X0sK9wiYwgYI8s9OVX+q8omPlhos1f3/L4/Z7FWTR6E=)
2: QNHfp-QpZNwcvnNXnGl6CZVZ8Tc.roa (hash: 6rWKjyivZLws8Y1JTJaRv4be4dA3ijdzaWgzmRI12KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1e:b5:9c:68:8c:00:f0:ee:d5:74:d2:f6:be:e8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
Validity
Not Before: Oct 28 14:00:24 2025 GMT
Not After : Oct 29 14:00:24 2025 GMT
Subject: CN=6b06321c8088c37df43903125b4f83dc901260c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:18:ee:7b:42:74:8f:bd:f1:0e:86:57:92:3e:
0d:12:ed:91:b3:fc:54:c6:91:2b:e5:08:76:c3:1f:
60:08:a1:1e:c8:a2:80:e7:57:34:f2:41:dc:63:41:
3f:6b:d8:45:5e:f9:11:f1:0a:33:52:17:83:b6:ff:
a6:c6:ab:6e:c2:d8:2a:8b:61:25:43:d2:9d:4f:7a:
a9:c2:f8:83:a7:64:23:2a:fc:ce:32:06:84:22:c0:
2c:ed:58:fd:74:fe:ae:05:1f:91:74:0d:e6:db:26:
ca:0c:89:58:8b:e1:d1:98:35:74:ee:15:62:f2:69:
15:31:c1:ed:31:5a:d1:10:ec:14:70:58:b5:68:c0:
f1:ec:73:21:0e:4c:4e:19:83:2a:3e:2e:b4:2c:2d:
13:33:4d:fa:ec:c4:36:f3:46:fa:42:dd:72:44:fb:
a4:f4:7f:ca:83:53:db:61:06:aa:3e:a0:12:5f:ee:
23:2c:c0:15:34:2b:0a:ec:05:5c:16:36:1a:61:f6:
b2:a6:1e:0a:c5:6c:e8:ea:ef:77:44:aa:1a:49:a8:
67:da:20:83:97:21:06:e4:11:9f:22:41:e4:b9:e3:
c6:4e:3c:e3:26:24:ba:85:7e:cc:2c:0c:f2:b5:d1:
41:e1:79:a9:08:b5:1e:23:7e:db:ae:2c:3d:e3:ce:
95:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:06:32:1C:80:88:C3:7D:F4:39:03:12:5B:4F:83:DC:90:12:60:C9
X509v3 Authority Key Identifier:
keyid:E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:45:ee:07:74:9c:6c:d2:fa:26:f7:c7:2c:18:14:40:43:6c:
e6:f0:e7:08:d3:7b:f4:59:a4:c8:87:9a:ab:56:e4:ff:62:90:
13:4a:ed:05:ba:5f:a2:e5:bb:d9:2b:b5:30:c2:45:93:32:0d:
c2:25:31:90:01:f3:01:21:92:53:00:8b:d9:39:a8:d6:fe:33:
9b:35:8f:c5:43:e8:6b:93:de:0e:8c:9c:55:1c:2f:83:b5:4b:
18:1f:f5:ed:ba:7f:5e:25:51:66:4a:8a:66:5c:65:e0:57:20:
ed:4b:74:2b:ea:b6:2e:4e:5e:9b:da:7d:2f:57:1f:d2:30:f4:
63:04:e0:cb:62:f5:ed:e0:2e:8e:a8:18:f7:51:eb:cb:9f:06:
84:45:24:2d:11:31:99:2f:20:0d:28:90:de:39:5e:5b:de:46:
ce:ae:f1:c3:a4:f4:a8:f8:cf:6d:b0:09:92:aa:a0:c3:4b:4f:
ad:ee:29:fa:b6:81:14:09:50:7b:93:b9:b6:74:5f:93:68:eb:
c6:ae:a3:0e:56:40:31:c3:2a:dc:45:92:f7:dc:76:44:c4:ed:
76:eb:05:67:d4:cd:05:00:18:95:72:3a:57:a2:29:e6:b0:20:
c2:ec:6b:42:53:56:e7:2d:b8:0b:1a:9f:8f:64:a8:fa:98:b1:
8c:c3:ec:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZorHrWcaIwA8O7VdNL2vugXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NmNkNTc4ZjQyZjhkZTA2NzIzNjc2N2M2Y2ZjMmJhY2Jj
MTZlMDUwHhcNMjUxMDI4MTQwMDI0WhcNMjUxMDI5MTQwMDI0WjAzMTEwLwYDVQQD
Eyg2YjA2MzIxYzgwODhjMzdkZjQzOTAzMTI1YjRmODNkYzkwMTI2MGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxjue0J0j73xDoZXkj4NEu2Rs/xU
xpEr5Qh2wx9gCKEeyKKA51c08kHcY0E/a9hFXvkR8QozUheDtv+mxqtuwtgqi2El
Q9KdT3qpwviDp2QjKvzOMgaEIsAs7Vj9dP6uBR+RdA3m2ybKDIlYi+HRmDV07hVi
8mkVMcHtMVrREOwUcFi1aMDx7HMhDkxOGYMqPi60LC0TM0367MQ280b6Qt1yRPuk
9H/Kg1PbYQaqPqASX+4jLMAVNCsK7AVcFjYaYfayph4KxWzo6u93RKoaSahn2iCD
lyEG5BGfIkHkuePGTjzjJiS6hX7MLAzytdFB4XmpCLUeI37briw9486VPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsGMhyAiMN99DkDEltPg9yQEmDJMB8GA1UdIwQY
MBaAFOVs1Xj0L43gZyNnZ8bPwrrLwW4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVd6VmVQUXZqZUJuSTJkbnhzX0N1c3ZCYmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yOWRlNDYtYzJlOS00OGZiLTkyZDQt
YjdhNTY0YWZiMDRiLzEvNVd6VmVQUXZqZUJuSTJkbnhzX0N1c3ZCYmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8yOWRlNDYtYzJlOS00OGZiLTkyZDQtYjdhNTY0YWZiMDRi
LzEvNVd6VmVQUXZqZUJuSTJkbnhzX0N1c3ZCYmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqUXuB3Sc
bNL6JvfHLBgUQENs5vDnCNN79FmkyIeaq1bk/2KQE0rtBbpfouW72Su1MMJFkzIN
wiUxkAHzASGSUwCL2Tmo1v4zmzWPxUPoa5PeDoycVRwvg7VLGB/17bp/XiVRZkqK
Zlxl4Fcg7Ut0K+q2Lk5em9p9L1cf0jD0YwTgy2L17eAujqgY91Hry58GhEUkLREx
mS8gDSiQ3jleW95Gzq7xw6T0qPjPbbAJkqqgw0tPre4p+raBFAlQe5O5tnRfk2jr
xq6jDlZAMcMq3EWS99x2RMTtdusFZ9TNBQAYlXI6V6Ip5rAgwuxrQlNW5y24Cxqf
j2So+pixjMPs+g==
-----END CERTIFICATE-----
Generated at Tue Oct 28 17:14:56 2025 by rpki-client