Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
File: 5vgk5Lxc2BiG7CS14VJm6V-N35M.mft (raw, json)
Hash identifier: dGJlHwblKMKMt6iovPZT3Ct2Nh/6uNoG1j5KRBwTFBI=
Subject key identifier: F1:44:32:E3:51:59:71:C0:F9:6C:CB:FB:9F:F2:A3:B7:35:33:FD:87
Authority key identifier: E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
Certificate issuer: /CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Certificate serial: 019A714A2C8AE08905006E45EE0B1567684D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
Manifest number: 0C93
Signing time: Tue 11 Nov 2025 05:01:17 +0000
Manifest this update: Tue 11 Nov 2025 05:01:17 +0000
Manifest next update: Wed 12 Nov 2025 05:01:17 +0000
Files and hashes: 1: 5vgk5Lxc2BiG7CS14VJm6V-N35M.crl (hash: rR41SlPbI312499MUHQMuj7TXGkqU28QDY4ztBfTuZM=)
2: rf8xmxH0lxQMZaEoNGLhxRtMOZM.roa (hash: 8uXylOlK6BkO3v7SWg2Pp+uIEZNpg7MPKeK8yn1WMAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:2c:8a:e0:89:05:00:6e:45:ee:0b:15:67:68:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Validity
Not Before: Nov 11 05:01:17 2025 GMT
Not After : Nov 12 05:01:17 2025 GMT
Subject: CN=f14432e3515971c0f96ccbfb9ff2a3b73533fd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:27:ca:8c:fa:a1:37:90:2b:93:7a:d7:be:be:
1c:01:3e:0e:aa:3c:a7:b7:c1:16:5d:39:cd:43:70:
7c:61:61:25:8e:0f:39:d9:78:13:b0:a9:6a:7c:55:
93:a0:0d:46:26:bb:72:ff:bc:6e:1c:fb:b8:9a:f8:
4b:6d:d8:3f:0e:38:d3:fd:24:7c:30:ba:14:9e:82:
a9:90:7d:77:7d:ee:fc:ef:ca:13:30:07:65:aa:46:
3f:5b:f5:6c:25:2c:c4:e9:d5:ae:d9:54:fa:b9:84:
07:f4:ae:7e:b2:35:ab:0e:c3:66:08:76:61:03:c1:
8c:9e:53:d1:11:2f:8a:77:2d:7f:b0:4b:d5:dc:72:
20:79:e3:cc:dc:46:87:f0:ee:c3:4b:e2:bc:16:8c:
e0:7c:12:77:8e:fc:06:e7:eb:f6:7a:e5:3d:19:e6:
f8:e0:93:74:21:bf:7c:f2:3d:e4:01:36:e8:06:75:
91:fa:17:72:06:05:01:7a:f8:5e:c8:0d:36:6d:d7:
1b:e9:02:10:bc:7c:2e:65:73:8f:11:d4:8b:8f:51:
40:47:0a:e7:0b:cf:e5:ea:87:0a:00:cd:7f:df:5f:
6c:ac:30:db:ee:80:b5:eb:91:4b:a9:1d:c1:92:6e:
dc:03:b4:53:41:c6:1f:b3:9d:34:2d:ae:9c:e3:ad:
9d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:44:32:E3:51:59:71:C0:F9:6C:CB:FB:9F:F2:A3:B7:35:33:FD:87
X509v3 Authority Key Identifier:
keyid:E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5c:27:89:73:54:85:0d:8c:d4:e1:ef:b1:c7:aa:08:50:0c:
da:35:65:76:e5:c9:cf:eb:d4:3b:b8:20:c4:7f:0d:7c:27:cc:
0b:5f:be:02:92:96:05:cc:06:94:05:11:fa:9a:ef:ae:17:c3:
0d:a1:d7:f5:6a:bf:76:de:9c:99:8e:17:73:e9:bd:53:79:17:
f3:81:fa:1a:4b:65:e4:cf:64:2b:f6:96:38:93:dd:5e:20:47:
4a:14:78:b5:fe:9f:9d:e1:55:92:9b:cb:e4:d5:f2:5b:00:94:
68:76:9e:e2:2f:04:96:21:4f:02:5f:0b:a9:82:6b:a6:de:7a:
7a:94:b7:c0:22:9d:f5:be:ba:a6:ab:67:ef:80:df:49:2a:22:
ee:c0:d8:34:0d:04:ce:4b:33:60:32:e9:4f:5e:c1:a3:d9:4a:
4e:1d:ca:11:06:90:fc:69:eb:8b:2b:ed:61:c4:81:80:a1:2d:
0c:7f:bb:a3:40:97:04:b1:f9:0d:e6:94:ac:f1:9e:51:3c:21:
e2:25:2b:1d:37:81:c6:1e:5b:7d:19:28:d1:35:40:ae:30:7e:
aa:ea:58:b1:5a:4d:cd:c4:76:36:8f:78:e9:0d:43:13:84:d4:
95:b7:51:dd:c3:32:e1:d3:84:d0:4a:f1:84:17:20:f3:3d:6f:
57:cd:9c:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSiyK4IkFAG5F7gsVZ2hNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZjgyNGU0YmM1Y2Q4MTg4NmVjMjRiNWUxNTI2NmU5NWY4
ZGRmOTMwHhcNMjUxMTExMDUwMTE3WhcNMjUxMTEyMDUwMTE3WjAzMTEwLwYDVQQD
EyhmMTQ0MzJlMzUxNTk3MWMwZjk2Y2NiZmI5ZmYyYTNiNzM1MzNmZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yfKjPqhN5Ark3rXvr4cAT4Oqjyn
t8EWXTnNQ3B8YWEljg852XgTsKlqfFWToA1GJrty/7xuHPu4mvhLbdg/DjjT/SR8
MLoUnoKpkH13fe7878oTMAdlqkY/W/VsJSzE6dWu2VT6uYQH9K5+sjWrDsNmCHZh
A8GMnlPRES+Kdy1/sEvV3HIgeePM3EaH8O7DS+K8FozgfBJ3jvwG5+v2euU9Geb4
4JN0Ib988j3kATboBnWR+hdyBgUBevheyA02bdcb6QIQvHwuZXOPEdSLj1FARwrn
C8/l6ocKAM1/319srDDb7oC165FLqR3Bkm7cA7RTQcYfs500La6c462dmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFEMuNRWXHA+WzL+5/yo7c1M/2HMB8GA1UdIwQY
MBaAFOb4JOS8XNgYhuwkteFSZulfjd+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXZnazVMeGMyQmlHN0NTMTRWSm02Vi1OMzVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hZDM3OTctMzM0Ni00NzhmLTllOWQt
YTg5Zjk1OWJlMjA0LzEvNXZnazVMeGMyQmlHN0NTMTRWSm02Vi1OMzVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hZDM3OTctMzM0Ni00NzhmLTllOWQtYTg5Zjk1OWJlMjA0
LzEvNXZnazVMeGMyQmlHN0NTMTRWSm02Vi1OMzVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFwniXNU
hQ2M1OHvsceqCFAM2jVlduXJz+vUO7ggxH8NfCfMC1++ApKWBcwGlAUR+prvrhfD
DaHX9Wq/dt6cmY4Xc+m9U3kX84H6Gktl5M9kK/aWOJPdXiBHShR4tf6fneFVkpvL
5NXyWwCUaHae4i8EliFPAl8LqYJrpt56epS3wCKd9b66pqtn74DfSSoi7sDYNA0E
zkszYDLpT17Bo9lKTh3KEQaQ/GnriyvtYcSBgKEtDH+7o0CXBLH5DeaUrPGeUTwh
4iUrHTeBxh5bfRko0TVArjB+qupYsVpNzcR2No946Q1DE4TUlbdR3cMy4dOE0Erx
hBcg8z1vV82cMQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:36 2025 by rpki-client