Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
File: 5uGvN6YKmYaO-7qggXtJgPGaVPs.mft (raw, json)
Hash identifier: hJkFHpjyFS/smLoetn90x48ENR8duGNMYy5Zq6kjqrg=
Subject key identifier: 77:11:36:90:7C:28:E4:DA:B0:15:77:B0:C6:A4:38:70:BD:7D:39:3A
Authority key identifier: E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB
Certificate issuer: /CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
Certificate serial: 019A73385E8C169A0F58FC2C88EDB649CF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
Manifest number: 0B08
Signing time: Tue 11 Nov 2025 14:01:05 +0000
Manifest this update: Tue 11 Nov 2025 14:01:05 +0000
Manifest next update: Wed 12 Nov 2025 14:01:05 +0000
Files and hashes: 1: 04IK808ti0G_mrePZiLfyMd8LPg.roa (hash: KEsbMkessHVdMEPjooQbuvxux4M4IDtjKN92Pi/27Vo=)
2: 5uGvN6YKmYaO-7qggXtJgPGaVPs.crl (hash: FBlBzK4kDxfesofcK83HQ4wjwj1czqYOalajLiJjnH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:5e:8c:16:9a:0f:58:fc:2c:88:ed:b6:49:cf:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
Validity
Not Before: Nov 11 14:01:05 2025 GMT
Not After : Nov 12 14:01:05 2025 GMT
Subject: CN=771136907c28e4dab01577b0c6a43870bd7d393a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:31:6e:fc:9f:17:80:01:a9:61:bc:01:67:d4:
b3:ab:c3:4f:31:79:55:b1:1f:b9:2e:6b:28:6f:9c:
34:39:e7:2b:bb:9e:ea:50:f1:32:47:0f:cc:31:8d:
1a:fe:73:5a:01:55:0f:31:2c:69:ef:e7:2b:52:ec:
d8:11:16:97:1f:fb:41:81:4d:60:cf:3d:45:1c:8c:
6e:a4:44:f6:7c:29:91:f7:fa:68:d0:bd:c0:f5:4e:
5b:4b:69:c1:a6:43:a3:30:3c:de:86:ca:de:9f:f6:
1a:b4:62:a1:5d:86:d5:31:f0:58:bc:cd:bd:ed:8c:
1a:53:59:7a:f9:c6:61:13:c3:74:3c:a3:1e:fe:13:
1e:38:e0:e5:9e:24:77:0e:1d:45:be:06:9f:ec:be:
4c:d3:3a:39:1c:ff:bb:e1:ce:28:cb:b0:36:aa:8c:
6c:ce:84:e0:67:df:56:4f:44:78:f3:04:75:1e:dc:
24:15:a5:a7:1f:31:74:42:48:a8:31:b6:37:e5:84:
8f:1f:0a:30:93:a0:cc:7b:28:a7:bb:a1:81:fc:85:
c9:65:45:db:7a:3a:0a:50:e0:b1:9a:17:48:7a:ab:
e6:4b:b4:b1:80:5b:61:11:45:4b:3e:92:ea:c8:ea:
78:78:14:7a:2d:d4:bd:d0:4e:16:e5:3c:ae:42:bd:
df:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:11:36:90:7C:28:E4:DA:B0:15:77:B0:C6:A4:38:70:BD:7D:39:3A
X509v3 Authority Key Identifier:
keyid:E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a8:b3:48:c6:46:e4:c1:87:5d:42:49:39:ce:83:ce:b5:15:
45:f7:d6:a7:9a:c3:aa:d4:57:36:0c:ba:e1:f5:9d:5a:ee:5d:
31:43:07:eb:9f:e5:87:4a:65:a0:7c:da:94:6d:05:f6:18:e2:
03:87:02:0e:ae:4e:ef:db:78:c6:07:57:ca:84:8a:fe:d0:e4:
0d:06:f1:0e:78:e5:b6:d0:a4:d6:53:4f:a4:52:79:62:46:86:
98:4e:8e:62:3a:46:63:96:4e:f1:32:25:16:d2:08:bf:31:24:
8e:ea:5e:4e:a0:55:0d:34:a8:63:88:94:d9:28:f8:d6:47:67:
59:30:e8:6d:bc:3b:33:35:cb:6d:ef:d2:8c:ea:3b:de:a2:4c:
2b:12:75:cd:50:c2:50:5b:dc:84:c7:63:0a:24:41:f4:98:81:
8f:79:8d:83:0d:b4:fe:2a:97:3d:25:1f:17:3c:fe:50:ea:09:
6d:ef:68:69:d8:aa:83:5a:58:3c:64:bc:60:e5:3a:ed:61:7b:
18:1f:32:74:70:1a:be:f0:6b:d8:05:f6:c3:9f:3c:a3:8d:ef:
47:a3:52:33:be:0b:9c:a1:1b:00:e7:75:6b:29:8f:85:db:05:
dd:0e:20:63:a4:19:54:62:de:cf:3b:f1:64:44:1d:bb:84:54:
de:87:91:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzOF6MFpoPWPwsiO22Sc8IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZTFhZjM3YTYwYTk5ODY4ZWZiYmFhMDgxN2I0OTgwZjE5
YTU0ZmIwHhcNMjUxMTExMTQwMTA1WhcNMjUxMTEyMTQwMTA1WjAzMTEwLwYDVQQD
Eyg3NzExMzY5MDdjMjhlNGRhYjAxNTc3YjBjNmE0Mzg3MGJkN2QzOTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljFu/J8XgAGpYbwBZ9Szq8NPMXlV
sR+5Lmsob5w0Oecru57qUPEyRw/MMY0a/nNaAVUPMSxp7+crUuzYERaXH/tBgU1g
zz1FHIxupET2fCmR9/po0L3A9U5bS2nBpkOjMDzehsren/YatGKhXYbVMfBYvM29
7YwaU1l6+cZhE8N0PKMe/hMeOODlniR3Dh1Fvgaf7L5M0zo5HP+74c4oy7A2qoxs
zoTgZ99WT0R48wR1HtwkFaWnHzF0QkioMbY35YSPHwowk6DMeyinu6GB/IXJZUXb
ejoKUOCxmhdIeqvmS7SxgFthEUVLPpLqyOp4eBR6LdS90E4W5TyuQr3frwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcRNpB8KOTasBV3sMakOHC9fTk6MB8GA1UdIwQY
MBaAFObhrzemCpmGjvu6oIF7SYDxmlT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXVHdk42WUttWWFPLTdxZ2dYdEpnUEdhVlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lNjU4MGItYmZmNy00MWU4LWIzMTQt
MTQwNDViNjRhZTI5LzEvNXVHdk42WUttWWFPLTdxZ2dYdEpnUEdhVlBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lNjU4MGItYmZmNy00MWU4LWIzMTQtMTQwNDViNjRhZTI5
LzEvNXVHdk42WUttWWFPLTdxZ2dYdEpnUEdhVlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaizSMZG
5MGHXUJJOc6DzrUVRffWp5rDqtRXNgy64fWdWu5dMUMH65/lh0ploHzalG0F9hji
A4cCDq5O79t4xgdXyoSK/tDkDQbxDnjlttCk1lNPpFJ5YkaGmE6OYjpGY5ZO8TIl
FtIIvzEkjupeTqBVDTSoY4iU2Sj41kdnWTDobbw7MzXLbe/SjOo73qJMKxJ1zVDC
UFvchMdjCiRB9JiBj3mNgw20/iqXPSUfFzz+UOoJbe9oadiqg1pYPGS8YOU67WF7
GB8ydHAavvBr2AX2w588o43vR6NSM74LnKEbAOd1aymPhdsF3Q4gY6QZVGLezzvx
ZEQdu4RU3oeR8g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:06 2025 by rpki-client