Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
File: 5ARKnRChnmsaztrJ_3eNT0CQaMs.mft (raw, json)
Hash identifier: wO6YZ2vAfCDVPZY5U7icDUTT7agYtkyBiRNUtAVzb20=
Subject key identifier: A9:45:85:D1:1C:92:F4:23:83:B7:06:7E:45:86:CA:66:C4:31:C2:E7
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Certificate issuer: /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial: 019A714A0477C5964111E4E9A234A32C29FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
Manifest number: 0C71
Signing time: Tue 11 Nov 2025 05:01:07 +0000
Manifest this update: Tue 11 Nov 2025 05:01:07 +0000
Manifest next update: Wed 12 Nov 2025 05:01:07 +0000
Files and hashes: 1: 5ARKnRChnmsaztrJ_3eNT0CQaMs.crl (hash: /R8fRzaMjA9wvQyQAHLlv2DatCorey1v+uAkNARjiUo=)
2: ZEltVn27Wr_tDWWUDsnoIPSexys.roa (hash: nTpT1tYnBssg4bHieTQOF2MWxJ4AkBKr1Y7xxrvK7kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:04:77:c5:96:41:11:e4:e9:a2:34:a3:2c:29:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Validity
Not Before: Nov 11 05:01:07 2025 GMT
Not After : Nov 12 05:01:07 2025 GMT
Subject: CN=a94585d11c92f42383b7067e4586ca66c431c2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2e:07:0d:dd:7f:19:8a:a9:ca:8f:0d:9c:be:
46:ba:20:37:9a:49:fb:1e:84:da:e4:65:1d:ac:0a:
2c:1f:25:1f:fd:04:4a:05:65:ed:50:43:c0:6a:e4:
22:25:51:4b:62:e3:45:47:b2:3e:f4:89:06:64:6c:
5e:17:1d:d8:91:77:5a:a4:a6:ba:85:8d:fb:1f:84:
b7:5e:19:75:02:90:23:90:21:67:75:f1:44:c3:bd:
99:9d:28:bf:6e:96:f2:73:cf:bd:3a:20:08:f1:f4:
d8:b1:35:f8:d3:92:b5:8c:25:a2:10:30:29:01:7a:
1e:f4:6f:8a:fb:0c:8f:73:a3:1f:52:a3:7f:13:f1:
37:4c:0f:b7:74:d0:b0:30:b8:fb:55:05:e7:a1:e6:
a2:f5:8c:a5:4c:09:7b:6d:c0:51:6f:65:9d:11:67:
b6:71:13:54:ef:c0:1e:64:0e:a5:6c:3d:7e:ca:82:
c7:e1:36:6f:a0:75:db:8e:64:1f:40:41:a7:7b:6b:
d7:a8:96:88:00:34:a3:ac:26:48:29:e0:c3:b8:0f:
5c:64:90:43:d3:52:bd:7d:33:a6:78:07:03:68:b9:
91:97:d3:69:0f:e5:ba:ea:81:62:65:2c:87:09:4e:
b4:cf:18:b5:a3:b6:e7:b2:77:1a:02:16:49:69:ac:
a4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:45:85:D1:1C:92:F4:23:83:B7:06:7E:45:86:CA:66:C4:31:C2:E7
X509v3 Authority Key Identifier:
keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:bb:6a:bb:d9:39:59:e8:64:e7:43:0e:51:29:ea:5f:d1:b7:
3f:e1:fd:44:f1:70:71:4b:75:c0:b5:f4:f7:57:b2:35:18:3d:
af:98:63:29:e9:6c:41:5c:35:99:21:3b:87:41:0f:a3:b3:34:
d3:45:f7:4b:e2:9f:0f:0d:5e:2f:3a:1d:8f:42:88:c7:98:00:
53:c1:d2:c9:b4:51:3c:91:74:b4:d9:20:60:b8:f2:1c:00:21:
e6:d9:83:15:cf:09:1b:3e:d5:7d:ee:10:cf:a0:02:54:b8:dc:
2c:86:2a:bc:8e:7c:98:bd:99:f2:29:34:30:6b:bb:8b:54:81:
ce:88:08:f1:66:cb:90:7c:ca:51:a0:fc:c3:04:d3:d5:72:90:
2a:73:ff:4d:42:b9:11:22:fa:a5:28:18:b4:27:09:4c:8c:72:
9c:fb:5f:8d:99:b3:6a:1a:75:4c:fa:b4:2c:fc:e0:4f:8f:0e:
e1:a7:75:f4:aa:e1:70:77:b0:7e:7b:be:bd:8c:83:26:b8:a5:
a1:df:e7:07:bb:9c:55:82:be:f3:88:17:f7:10:88:10:75:b1:
cf:93:ce:dd:f7:2f:39:27:73:45:97:a7:74:d3:3c:db:2c:bc:
65:54:b3:6a:e8:c9:f5:49:66:a7:57:61:0a:2c:95:29:bd:71:
fe:6f:a5:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSgR3xZZBEeTpojSjLCn9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MDQ0YTlkMTBhMTllNmIxYWNlZGFjOWZmNzc4ZDRmNDA5
MDY4Y2IwHhcNMjUxMTExMDUwMTA3WhcNMjUxMTEyMDUwMTA3WjAzMTEwLwYDVQQD
EyhhOTQ1ODVkMTFjOTJmNDIzODNiNzA2N2U0NTg2Y2E2NmM0MzFjMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6C4HDd1/GYqpyo8NnL5GuiA3mkn7
HoTa5GUdrAosHyUf/QRKBWXtUEPAauQiJVFLYuNFR7I+9IkGZGxeFx3YkXdapKa6
hY37H4S3Xhl1ApAjkCFndfFEw72ZnSi/bpbyc8+9OiAI8fTYsTX405K1jCWiEDAp
AXoe9G+K+wyPc6MfUqN/E/E3TA+3dNCwMLj7VQXnoeai9YylTAl7bcBRb2WdEWe2
cRNU78AeZA6lbD1+yoLH4TZvoHXbjmQfQEGne2vXqJaIADSjrCZIKeDDuA9cZJBD
01K9fTOmeAcDaLmRl9NpD+W66oFiZSyHCU60zxi1o7bnsncaAhZJaaykTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlFhdEckvQjg7cGfkWGymbEMcLnMB8GA1UdIwQY
MBaAFOQESp0QoZ5rGs7ayf93jU9AkGjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUFSS25SQ2hubXNhenRySl8zZU5UMENRYU1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wZThiNWQtZWU5OC00N2ZiLWEzODkt
MDNmYTdhOWMzNzFlLzEvNUFSS25SQ2hubXNhenRySl8zZU5UMENRYU1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wZThiNWQtZWU5OC00N2ZiLWEzODktMDNmYTdhOWMzNzFl
LzEvNUFSS25SQ2hubXNhenRySl8zZU5UMENRYU1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtbtqu9k5
Wehk50MOUSnqX9G3P+H9RPFwcUt1wLX091eyNRg9r5hjKelsQVw1mSE7h0EPo7M0
00X3S+KfDw1eLzodj0KIx5gAU8HSybRRPJF0tNkgYLjyHAAh5tmDFc8JGz7Vfe4Q
z6ACVLjcLIYqvI58mL2Z8ik0MGu7i1SBzogI8WbLkHzKUaD8wwTT1XKQKnP/TUK5
ESL6pSgYtCcJTIxynPtfjZmzahp1TPq0LPzgT48O4ad19KrhcHewfnu+vYyDJril
od/nB7ucVYK+84gX9xCIEHWxz5PO3fcvOSdzRZendNM82yy8ZVSzaujJ9Ulmp1dh
CiyVKb1x/m+lPg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:11 2025 by rpki-client