Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
File: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft (raw, json)
Hash identifier: RrR3GS3MEjBHIQaxoIacrU9yt8MIW9myXi6F2XXxki8=
Subject key identifier: BD:BC:17:96:34:EC:1A:C3:C8:BE:69:4A:9A:92:44:1D:07:95:68:E8
Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
Certificate issuer: /CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Certificate serial: 019A72932BD098FD9F7CC442440B94E8B5DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
Manifest number: 16B9
Signing time: Tue 11 Nov 2025 11:00:38 +0000
Manifest this update: Tue 11 Nov 2025 11:00:38 +0000
Manifest next update: Wed 12 Nov 2025 11:00:38 +0000
Files and hashes: 1: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl (hash: HBKxm8KQMo8ChynDtOhU9n/1clb/53jZq1Od6NrF37Q=)
2: 80LgJ-bt-JVgl28q8iQu1JZiGBg.roa (hash: SbBL53O4850VvEVexpsOte6oujPeOQsBp7gTPoi1dqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:2b:d0:98:fd:9f:7c:c4:42:44:0b:94:e8:b5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Validity
Not Before: Nov 11 11:00:38 2025 GMT
Not After : Nov 12 11:00:38 2025 GMT
Subject: CN=bdbc179634ec1ac3c8be694a9a92441d079568e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:9d:03:fa:a5:09:c4:17:05:31:5a:27:42:
0f:44:02:d6:ce:91:04:25:b6:da:04:74:86:b7:30:
3f:21:aa:0d:56:ce:b6:9d:93:12:9a:85:f2:73:98:
f9:81:40:79:94:17:0c:14:e9:89:e3:b4:40:cf:c0:
54:3a:b6:50:7e:e6:5b:23:be:da:64:2c:74:a2:3d:
f0:a4:cb:2e:3e:ce:77:4e:a8:67:15:6c:62:5e:aa:
0d:43:06:30:f7:28:d8:b6:9e:1a:ca:d9:5f:52:7e:
40:88:07:ef:9c:de:1a:14:f1:42:c4:66:79:f5:4a:
d9:41:3f:9e:96:cb:fc:e3:d9:80:80:1e:41:7c:3f:
2e:9f:02:f9:43:78:f8:3c:63:be:2b:94:f6:ee:df:
64:c3:c7:00:3f:d2:93:01:93:35:68:06:72:ba:27:
ab:f0:b2:d7:23:ba:c8:09:f5:e0:a0:84:12:43:b0:
76:14:51:c8:fa:6e:60:f9:62:5d:59:d8:1d:50:04:
30:d8:f7:26:d4:4a:47:3c:c4:fb:75:bd:31:80:b1:
a9:d7:b3:df:5d:fe:60:0e:8c:e3:61:f9:21:73:ca:
97:bb:df:b8:4b:a0:19:62:ba:df:6e:95:89:ff:ad:
2f:23:90:fe:b5:d8:6b:07:53:e0:38:03:7a:fb:b1:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BC:17:96:34:EC:1A:C3:C8:BE:69:4A:9A:92:44:1D:07:95:68:E8
X509v3 Authority Key Identifier:
keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:56:47:34:9d:f0:43:7f:99:16:6f:a1:ae:dd:f1:6a:63:e9:
83:a7:7b:5a:1c:54:ff:08:12:97:8c:d7:ff:f9:83:55:c6:2c:
68:07:77:2c:2d:4a:d4:f4:55:c8:97:44:ff:03:c2:ad:f0:bf:
9c:23:fe:0c:07:00:1f:03:3e:ab:4c:ba:fc:5b:4b:bd:cb:12:
ec:4f:5e:97:cc:33:cc:36:da:02:11:df:73:a0:ea:78:90:ba:
5d:24:7c:7e:2e:24:79:f9:ac:3b:f9:37:07:87:a8:a8:85:fc:
da:71:11:2a:8d:72:93:98:0f:43:6a:24:e7:5f:03:e4:0b:28:
81:29:0a:93:c8:13:3c:6a:58:19:2a:d4:da:63:91:34:02:a0:
35:47:b4:45:0d:11:fb:3b:fe:ae:d6:02:09:7c:4d:33:11:8b:
93:02:e3:73:fa:59:2b:09:1b:13:8f:d9:ac:97:32:21:1f:58:
0a:b9:65:cc:9f:19:6d:93:ee:48:a4:26:f6:f7:45:7c:fb:81:
bf:48:73:af:17:af:a8:52:78:98:b9:91:fb:cd:b9:79:a3:ad:
ec:4b:45:d9:35:79:ef:7f:51:62:8d:12:22:bc:a9:cb:9e:ed:
cd:dc:0b:69:6f:0b:f9:3d:9f:6c:72:8c:1c:b7:23:04:04:e5:
f8:c8:98:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpykyvQmP2ffMRCRAuU6LXaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NDNmYzIwM2Y3MDZmOTczMTQxMjc2MWIyN2ExYTRiMzk1
Y2ZjMWUwHhcNMjUxMTExMTEwMDM4WhcNMjUxMTEyMTEwMDM4WjAzMTEwLwYDVQQD
EyhiZGJjMTc5NjM0ZWMxYWMzYzhiZTY5NGE5YTkyNDQxZDA3OTU2OGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupydA/qlCcQXBTFaJ0IPRALWzpEE
JbbaBHSGtzA/IaoNVs62nZMSmoXyc5j5gUB5lBcMFOmJ47RAz8BUOrZQfuZbI77a
ZCx0oj3wpMsuPs53TqhnFWxiXqoNQwYw9yjYtp4aytlfUn5AiAfvnN4aFPFCxGZ5
9UrZQT+elsv849mAgB5BfD8unwL5Q3j4PGO+K5T27t9kw8cAP9KTAZM1aAZyuier
8LLXI7rICfXgoIQSQ7B2FFHI+m5g+WJdWdgdUAQw2Pcm1EpHPMT7db0xgLGp17Pf
Xf5gDozjYfkhc8qXu9+4S6AZYrrfbpWJ/60vI5D+tdhrB1PgOAN6+7EUXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL28F5Y07BrDyL5pSpqSRB0HlWjoMB8GA1UdIwQY
MBaAFORD/CA/cG+XMUEnYbJ6Gks5XPweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wNjg5ZWEtY2RkOS00NzkwLTlmOWIt
YzBmOWQwODdmYzEwLzEvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wNjg5ZWEtY2RkOS00NzkwLTlmOWItYzBmOWQwODdmYzEw
LzEvNUVQOElEOXdiNWN4UVNkaHNub2FTemxjX0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlZHNJ3w
Q3+ZFm+hrt3xamPpg6d7WhxU/wgSl4zX//mDVcYsaAd3LC1K1PRVyJdE/wPCrfC/
nCP+DAcAHwM+q0y6/FtLvcsS7E9el8wzzDbaAhHfc6DqeJC6XSR8fi4kefmsO/k3
B4eoqIX82nERKo1yk5gPQ2ok518D5AsogSkKk8gTPGpYGSrU2mORNAKgNUe0RQ0R
+zv+rtYCCXxNMxGLkwLjc/pZKwkbE4/ZrJcyIR9YCrllzJ8ZbZPuSKQm9vdFfPuB
v0hzrxevqFJ4mLmR+825eaOt7EtF2TV5739RYo0SIrypy57tzdwLaW8L+T2fbHKM
HLcjBATl+MiYZQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:40 2025 by rpki-client