Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
File: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft (raw, json)
Hash identifier: 1jGpvWII7SL/HW8p1hI71L3z5Cpz/wsZV3aiV9jdoSQ=
Subject key identifier: ED:A8:1D:0A:2E:00:4C:2E:32:F0:0B:F0:41:D7:30:52:66:0A:A7:0B
Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
Certificate issuer: /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Certificate serial: 019A71B82AD90C18681B8050086B3F253642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
Manifest number: 11D5
Signing time: Tue 11 Nov 2025 07:01:26 +0000
Manifest this update: Tue 11 Nov 2025 07:01:26 +0000
Manifest next update: Wed 12 Nov 2025 07:01:26 +0000
Files and hashes: 1: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl (hash: n5qjqaKU11CtIiBEF43VlGzBv2WHgVceqSfdQ7IHD5g=)
2: V60g_4Hl1O4ws6xObJRepK5WbCI.roa (hash: WQJN9PGlNp52w8KNVApuftRmLkpbyYXJ0S9Q2EedPcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:2a:d9:0c:18:68:1b:80:50:08:6b:3f:25:36:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Validity
Not Before: Nov 11 07:01:26 2025 GMT
Not After : Nov 12 07:01:26 2025 GMT
Subject: CN=eda81d0a2e004c2e32f00bf041d73052660aa70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f0:fb:a7:84:e5:9b:7f:2f:b3:c7:2d:86:bd:
fc:fb:20:88:68:69:7c:2a:a4:2c:3c:79:93:1a:e0:
fa:2c:85:6b:b9:0c:93:74:d4:e0:14:13:14:5c:8d:
07:a0:97:2d:61:4e:ef:30:03:6a:f0:8f:de:9e:c3:
23:79:a2:34:d1:f2:05:f7:e9:26:ed:2b:52:73:28:
49:31:c7:ba:76:c7:00:a6:7a:02:51:e1:4d:13:d1:
58:74:5f:bf:1a:89:2c:8b:99:89:ed:cd:c2:79:2b:
9f:a7:a3:7f:55:e9:96:dd:eb:52:f4:c6:fc:3a:2e:
54:dc:e9:ce:6e:b2:5f:7e:54:29:95:59:c7:8c:7b:
4f:66:4a:2d:a6:cd:a0:40:56:9e:36:8f:ce:65:bf:
a1:1e:e7:5a:f7:ff:9a:6d:3b:7d:c4:54:db:a0:2f:
a7:db:2e:80:63:a1:01:28:1e:59:8c:81:4f:a0:59:
f0:3d:57:2f:69:2d:ba:7d:88:9d:29:ad:c7:9a:af:
b8:df:07:56:67:85:5a:e3:28:ab:d8:cd:bd:64:72:
a4:e0:89:78:31:56:2b:c6:96:62:2c:80:c1:8f:ff:
9d:1d:f0:f6:cd:7d:18:41:cd:e5:c5:0c:18:8e:d0:
d4:cb:e3:6f:51:ef:20:be:2f:33:72:ea:7a:99:be:
db:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A8:1D:0A:2E:00:4C:2E:32:F0:0B:F0:41:D7:30:52:66:0A:A7:0B
X509v3 Authority Key Identifier:
keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a2:58:c1:d0:74:0d:8a:77:ef:18:3a:2d:ca:7a:37:b0:e6:
ba:1c:f5:77:2c:77:c8:9c:5f:8f:40:20:6e:6e:c0:e9:69:11:
ee:89:c7:f2:4a:55:11:52:db:61:9d:2e:dc:45:ae:d8:48:5a:
7b:be:ac:ff:52:4b:dc:2a:57:42:1d:2d:10:26:53:c0:c7:f6:
e8:bd:4e:4e:31:c5:c7:bb:8d:c9:3d:48:8f:8d:ed:85:db:5e:
51:6a:88:ad:fa:da:f6:48:b8:a4:c5:fb:80:7f:ce:96:09:0f:
d9:34:a8:42:f4:83:6e:a1:7c:72:00:c4:6d:1d:dc:47:fb:df:
3c:3b:47:a4:15:75:3e:49:86:0b:41:5a:85:66:7e:92:e6:cf:
9f:a0:8b:dd:42:1f:60:07:c9:25:cf:25:c0:35:7b:04:33:51:
a1:fb:19:63:97:da:f3:8b:65:cb:20:87:70:23:0e:e1:68:e4:
75:5a:30:18:af:19:99:f8:0c:28:3b:c5:ab:1d:22:32:2a:db:
7b:cc:42:62:a0:7b:f0:f4:3f:12:18:a0:12:90:e9:92:bf:07:
5e:f7:41:a4:f4:60:0f:58:81:f3:9e:31:e1:7f:fd:2d:d4:07:
b0:8d:fc:9e:2d:1e:7a:42:5d:0c:c4:ca:b1:01:9c:60:26:1f:
f4:92:1e:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuCrZDBhoG4BQCGs/JTZCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmQ5OTA5ZDE2YmFmMTFjYjk1OGM4ZDI3NGUyNGVjOTk0
NzQyMmYwHhcNMjUxMTExMDcwMTI2WhcNMjUxMTEyMDcwMTI2WjAzMTEwLwYDVQQD
EyhlZGE4MWQwYTJlMDA0YzJlMzJmMDBiZjA0MWQ3MzA1MjY2MGFhNzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvD7p4Tlm38vs8cthr38+yCIaGl8
KqQsPHmTGuD6LIVruQyTdNTgFBMUXI0HoJctYU7vMANq8I/ensMjeaI00fIF9+km
7StScyhJMce6dscApnoCUeFNE9FYdF+/Goksi5mJ7c3CeSufp6N/VemW3etS9Mb8
Oi5U3OnObrJfflQplVnHjHtPZkotps2gQFaeNo/OZb+hHuda9/+abTt9xFTboC+n
2y6AY6EBKB5ZjIFPoFnwPVcvaS26fYidKa3Hmq+43wdWZ4Va4yir2M29ZHKk4Il4
MVYrxpZiLIDBj/+dHfD2zX0YQc3lxQwYjtDUy+NvUe8gvi8zcup6mb7biQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2oHQouAEwuMvAL8EHXMFJmCqcLMB8GA1UdIwQY
MBaAFOf9mQnRa68Ry5WMjSdOJOyZR0IvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xZjAxZTMtNzdkMy00Y2Y3LWFlYTgt
MTIyZmVlY2RlM2VhLzEvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8xZjAxZTMtNzdkMy00Y2Y3LWFlYTgtMTIyZmVlY2RlM2Vh
LzEvNV8yWkNkRnJyeEhMbFl5TkowNGs3SmxIUWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUaJYwdB0
DYp37xg6Lcp6N7Dmuhz1dyx3yJxfj0Agbm7A6WkR7onH8kpVEVLbYZ0u3EWu2Eha
e76s/1JL3CpXQh0tECZTwMf26L1OTjHFx7uNyT1Ij43thdteUWqIrfra9ki4pMX7
gH/OlgkP2TSoQvSDbqF8cgDEbR3cR/vfPDtHpBV1PkmGC0FahWZ+kubPn6CL3UIf
YAfJJc8lwDV7BDNRofsZY5fa84tlyyCHcCMO4WjkdVowGK8ZmfgMKDvFqx0iMirb
e8xCYqB78PQ/EhigEpDpkr8HXvdBpPRgD1iB854x4X/9LdQHsI38ni0eekJdDMTK
sQGcYCYf9JIeQA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:35 2025 by rpki-client