
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
File: 5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json)
Hash identifier: V/F2/ws0FPVlwmMhS8UZe8lNlshUisRYqp6Fcg+BLYw=
Subject key identifier: D3:38:AA:83:6E:5C:60:88:94:4B:8A:FD:4D:E4:2A:31:12:83:AF:84
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 019A0FDE8BA10CAC1D619DA5B3B9E603FCFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
Manifest number: 16B2
Signing time: Thu 23 Oct 2025 07:00:34 +0000
Manifest this update: Thu 23 Oct 2025 07:00:34 +0000
Manifest next update: Fri 24 Oct 2025 07:00:34 +0000
Files and hashes: 1: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: eQZGQALK/QFA8AdbkdPFofL7AngJ/a1kyqHtHGE9ac0=)
2: B6snV1O7L6xN7jjaiNZWbxtP82Q.roa (hash: Z+4+/9OXk8fDzA3Dm2Dl/g02UpTK3tqTpOQvWThJM1E=)
3: MYlZiK8j4I-CRpNK84XFADjqS_Q.roa (hash: sHYzc9/ggp3cDmlo2cdq6sgs+CvgzddIutlRUEG3Jro=)
4: P8Q-dEsRs4H8f4xsbLowkJwmY-M.roa (hash: dvuvjztjSPRyovxa6mOiurUCRvnf3SsP4Zst2kQEuLU=)
5: bFYSJ_I4YgMVW4I9mBgSvFA_y-8.roa (hash: H2VlaHHW6c4b4Aq4JHISuCEj338oIr6DsQEFdgqSCMc=)
6: fUwIM0sp1GFSdwqWjPbX7BRcPzQ.roa (hash: Xh0ESEMvO/UeKqHJNYyYyUnRbpIWXGZSxLiX7rQbHOo=)
7: hnPMD0kJyESSkpzLaNH091YhR5k.roa (hash: reehn+NC4fwGIk+sTumI22RgUJ8t2cZVaMoj+4y8WfY=)
8: z2F52wGzH9BMrpqKt2YykAg8u8Y.roa (hash: bvYJ2BHirZKw/0tfOS28eGnj6Ugji4ZaJ639S6rbz9g=)
9: zBe1zgNHDCKtxdrkxgm3eBXCBPU.roa (hash: BXmYyj4eoSdWaSTfE6Ragmw+4eV3ZTlYx1CDpgMgYSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:de:8b:a1:0c:ac:1d:61:9d:a5:b3:b9:e6:03:fc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Oct 23 07:00:34 2025 GMT
Not After : Oct 24 07:00:34 2025 GMT
Subject: CN=d338aa836e5c6088944b8afd4de42a311283af84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:47:97:7e:0a:6b:fd:3a:51:34:d8:2e:6b:2c:
48:08:16:01:57:43:cf:8e:6a:d2:f2:37:8a:8c:65:
06:32:f3:75:08:d3:cc:b6:9e:53:59:3c:4a:4e:74:
67:b9:7e:67:86:12:8a:d3:9f:b0:c0:13:ae:cc:96:
09:b2:9a:9d:77:da:38:bd:1d:65:5d:b2:04:ee:02:
ce:68:57:71:19:81:03:4c:9d:b1:92:fd:f6:3b:c6:
59:0a:76:d3:b5:ad:64:87:c5:dc:a0:ed:cb:d4:d1:
cf:f9:99:00:73:aa:fd:86:fe:26:9f:aa:8f:a0:36:
a4:b2:da:ea:3a:c5:22:be:76:62:55:0b:a0:21:5a:
66:3c:fb:fd:89:0d:cb:e7:4c:31:5b:be:68:20:ee:
86:14:33:de:40:f2:1d:aa:45:92:01:fe:0e:2b:9b:
dc:c1:93:25:f8:23:ad:a9:ac:69:f1:8f:3f:92:db:
97:76:c9:64:2a:99:17:7d:ae:40:57:47:fb:86:76:
6e:83:0c:ce:c1:34:d3:5c:2d:37:14:27:fb:ef:56:
a6:69:7f:31:15:a8:cc:61:77:1e:07:95:83:87:b0:
8b:26:6b:71:3c:e9:b0:fd:ef:f2:83:72:18:8e:06:
fb:73:6c:e1:3b:1b:29:1d:61:e1:93:80:52:a9:e3:
52:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:38:AA:83:6E:5C:60:88:94:4B:8A:FD:4D:E4:2A:31:12:83:AF:84
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bc:28:c9:8f:5d:70:6e:e2:5c:3b:b0:71:7d:5a:2c:f9:d4:
12:59:24:d3:c8:96:e2:39:3e:aa:7d:fb:df:eb:b0:6c:59:ca:
3f:d5:4f:ff:e8:fb:70:e0:c8:a3:8b:33:29:7b:0c:2a:80:c5:
06:10:f3:b1:59:74:f2:31:5f:d0:dc:78:e4:e9:9a:6b:f8:29:
ae:f0:51:a3:4c:89:c7:8f:38:7b:fe:fb:0a:b3:e2:0f:94:e3:
3b:9e:c8:33:fc:87:2b:38:5e:81:e4:93:f5:72:95:79:b4:35:
e4:09:85:74:61:02:7d:73:6a:79:4f:0d:ae:3d:94:f0:58:1f:
bd:5c:33:96:1e:30:27:9c:87:15:8d:33:2f:22:d3:72:17:aa:
a3:65:8c:81:8f:9a:08:bc:9e:da:90:97:54:47:5d:d9:72:ea:
1f:96:a3:5a:af:b9:13:8e:5e:26:b2:68:7a:87:16:0c:68:27:
76:eb:33:86:85:f7:8e:5c:2c:f7:81:29:8e:cc:db:50:ae:af:
ee:eb:d8:b9:e6:6b:98:d0:84:e7:32:f0:4e:17:f6:25:55:60:
df:39:a7:82:77:7a:f0:e7:f9:bd:30:26:d5:35:c9:42:bf:47:
ae:9f:27:78:28:72:98:e2:10:84:fd:03:85:00:39:e8:01:3c:
2f:64:be:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoP3ouhDKwdYZ2ls7nmA/z9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjUxMDIzMDcwMDM0WhcNMjUxMDI0MDcwMDM0WjAzMTEwLwYDVQQD
EyhkMzM4YWE4MzZlNWM2MDg4OTQ0YjhhZmQ0ZGU0MmEzMTEyODNhZjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UeXfgpr/TpRNNguayxICBYBV0PP
jmrS8jeKjGUGMvN1CNPMtp5TWTxKTnRnuX5nhhKK05+wwBOuzJYJspqdd9o4vR1l
XbIE7gLOaFdxGYEDTJ2xkv32O8ZZCnbTta1kh8XcoO3L1NHP+ZkAc6r9hv4mn6qP
oDakstrqOsUivnZiVQugIVpmPPv9iQ3L50wxW75oIO6GFDPeQPIdqkWSAf4OK5vc
wZMl+COtqaxp8Y8/ktuXdslkKpkXfa5AV0f7hnZugwzOwTTTXC03FCf771amaX8x
FajMYXceB5WDh7CLJmtxPOmw/e/yg3IYjgb7c2zhOxspHWHhk4BSqeNSnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNM4qoNuXGCIlEuK/U3kKjESg6+EMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbwoyY9d
cG7iXDuwcX1aLPnUElkk08iW4jk+qn373+uwbFnKP9VP/+j7cODIo4szKXsMKoDF
BhDzsVl08jFf0Nx45Omaa/gprvBRo0yJx484e/77CrPiD5TjO57IM/yHKzhegeST
9XKVebQ15AmFdGECfXNqeU8Nrj2U8FgfvVwzlh4wJ5yHFY0zLyLTcheqo2WMgY+a
CLye2pCXVEdd2XLqH5ajWq+5E45eJrJoeocWDGgnduszhoX3jlws94EpjszbUK6v
7uvYueZrmNCE5zLwThf2JVVg3zmngnd68Of5vTAm1TXJQr9Hrp8neChymOIQhP0D
hQA56AE8L2S+zg==
-----END CERTIFICATE-----
Generated at Thu Oct 23 16:59:32 2025 by rpki-client