Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier: 5erwl9ZnB1cXC2UWiwqNNOO8Zx0dfykv9vbCWBkQSyY=
Subject key identifier: 5D:06:D0:06:85:8E:C7:C5:B3:03:65:66:90:48:27:9E:E0:F4:2B:20
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 019A72CA9E966537AF6F3D995231D2102437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number: 1318
Signing time: Tue 11 Nov 2025 12:01:12 +0000
Manifest this update: Tue 11 Nov 2025 12:01:12 +0000
Manifest next update: Wed 12 Nov 2025 12:01:12 +0000
Files and hashes: 1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: a7KHH1NdsbAlQcPa0D4XIT5UEG8pIT2lV5KSsDol+54=)
2: heGVk36ucrG4MWNpzqidvrKZ7YQ.roa (hash: m5uFEBEQAoAGMceOf2ib4bFCfxUv5uqZ6mZG8baGWlk=)
3: vKXgeHxyf9Ij8PbBtwAWk4PkSNM.roa (hash: FZfpvGBPzqeBXQfd0+/kWA7PAyR+Gx7rv6DgDmnZlfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:9e:96:65:37:af:6f:3d:99:52:31:d2:10:24:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Nov 11 12:01:12 2025 GMT
Not After : Nov 12 12:01:12 2025 GMT
Subject: CN=5d06d006858ec7c5b30365669048279ee0f42b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:80:90:99:01:8f:44:09:3b:87:3d:b0:70:
ab:9e:42:c7:4d:20:d0:78:7d:38:7f:f3:0b:a8:5c:
2d:3f:f3:c0:58:de:ed:63:65:92:8c:47:48:9b:f3:
61:ba:73:09:8c:a1:de:7a:0e:08:6c:da:bb:d1:8a:
1c:03:2c:75:28:ec:c7:a9:2f:c8:d1:6d:4f:9e:36:
a4:25:7a:c0:42:e3:af:4a:ba:5e:ce:7d:95:b1:7d:
62:be:f4:a6:ef:38:4e:7b:d7:d0:51:1e:b8:d4:c4:
66:eb:0d:b5:70:d0:d4:36:4a:ae:a8:0b:01:53:f2:
ca:5f:a5:a1:91:ac:1f:6f:b8:c9:1e:4a:f0:88:74:
42:d6:1a:e2:00:c0:a1:b9:96:f2:21:3d:6d:13:0e:
da:11:c9:62:da:6d:ea:15:aa:12:f6:5a:4e:88:63:
f2:01:2d:d9:be:00:fb:75:5a:3d:6d:00:3f:e2:e5:
cb:da:fd:c4:10:86:54:c8:25:be:b3:b0:23:6e:42:
cf:61:2b:04:fc:9f:40:d5:ac:35:25:7f:5a:0a:13:
90:c7:ea:13:d8:8c:fc:ff:5c:5a:47:86:19:3a:c7:
20:78:78:ec:a9:7b:7a:ca:f4:0d:2e:59:0a:f9:4c:
5f:03:d9:53:ae:dd:21:82:ae:b6:8f:09:24:ab:4f:
6b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:06:D0:06:85:8E:C7:C5:B3:03:65:66:90:48:27:9E:E0:F4:2B:20
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4c:2b:41:88:99:32:a6:2f:60:29:ba:3b:67:97:3c:27:e4:
b6:ec:93:ff:01:8f:4f:99:8f:ee:e5:fb:4d:55:3a:ad:17:a8:
8d:f9:c8:04:76:09:b4:91:d8:24:e5:f7:b8:11:5c:f1:66:27:
42:da:96:22:41:97:9f:60:a9:23:a0:60:5a:2f:11:42:6e:24:
f4:c7:32:bb:e1:81:ec:1f:3d:59:08:d5:7f:54:a7:9f:ba:2a:
0b:12:ea:cd:71:98:e5:8b:d7:1e:49:f8:a5:eb:4c:93:e1:3b:
2e:96:be:5e:70:d0:f8:3f:ea:3c:4a:c5:1b:00:79:4a:ab:41:
fe:d0:fc:82:c1:ab:30:0c:f5:94:96:7a:3c:65:36:e1:85:15:
83:4c:f3:b5:ab:54:ab:56:5d:fe:63:e3:6a:01:ca:d1:cf:f3:
43:ce:59:a6:91:6d:ca:5f:20:26:d1:b1:e5:8f:33:46:45:95:
0f:ff:c5:2e:78:33:06:0d:8a:4e:ca:90:93:13:28:4d:75:3f:
68:d8:ff:36:17:2e:24:b5:f3:ab:a0:89:8b:ed:46:7e:54:55:
11:37:09:c1:d8:47:bc:c2:ab:76:60:dd:04:dc:cb:dc:a9:66:
05:ab:b2:d1:a8:ce:96:8d:ad:53:e7:57:50:cc:9f:86:6b:76:
39:93:26:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyp6WZTevbz2ZUjHSECQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MTM1ZDYzOTc2OGEzYTYzZWQ5YzVmZjQwYWY1ZWQwMWRm
NzQxY2IwHhcNMjUxMTExMTIwMTEyWhcNMjUxMTEyMTIwMTEyWjAzMTEwLwYDVQQD
Eyg1ZDA2ZDAwNjg1OGVjN2M1YjMwMzY1NjY5MDQ4Mjc5ZWUwZjQyYjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5iAkJkBj0QJO4c9sHCrnkLHTSDQ
eH04f/MLqFwtP/PAWN7tY2WSjEdIm/NhunMJjKHeeg4IbNq70YocAyx1KOzHqS/I
0W1PnjakJXrAQuOvSrpezn2VsX1ivvSm7zhOe9fQUR641MRm6w21cNDUNkquqAsB
U/LKX6Whkawfb7jJHkrwiHRC1hriAMChuZbyIT1tEw7aEcli2m3qFaoS9lpOiGPy
AS3ZvgD7dVo9bQA/4uXL2v3EEIZUyCW+s7AjbkLPYSsE/J9A1aw1JX9aChOQx+oT
2Iz8/1xaR4YZOscgeHjsqXt6yvQNLlkK+UxfA9lTrt0hgq62jwkkq09rqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0G0AaFjsfFswNlZpBIJ57g9CsgMB8GA1UdIwQY
MBaAFOYTXWOXaKOmPtnF/0CvXtAd90HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2Et
MGE3NzBmMGM3NjA4LzEvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2EtMGE3NzBmMGM3NjA4
LzEvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0wrQYiZ
MqYvYCm6O2eXPCfktuyT/wGPT5mP7uX7TVU6rReojfnIBHYJtJHYJOX3uBFc8WYn
QtqWIkGXn2CpI6BgWi8RQm4k9Mcyu+GB7B89WQjVf1Snn7oqCxLqzXGY5YvXHkn4
petMk+E7Lpa+XnDQ+D/qPErFGwB5SqtB/tD8gsGrMAz1lJZ6PGU24YUVg0zztatU
q1Zd/mPjagHK0c/zQ85ZppFtyl8gJtGx5Y8zRkWVD//FLngzBg2KTsqQkxMoTXU/
aNj/NhcuJLXzq6CJi+1GflRVETcJwdhHvMKrdmDdBNzL3KlmBauy0ajOlo2tU+dX
UMyfhmt2OZMmYw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:13:07 2025 by rpki-client