Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
File: 5INFqgzXAm1iHFAIT52du1ucwvA.mft (raw, json)
Hash identifier: VOorIquiSDZBsIlTwMaiM9gQi3cgzHqGXUR9hn9Ld+Q=
Subject key identifier: F9:CB:28:B8:EE:5F:24:4C:59:E1:95:45:A6:BC:81:70:08:C6:58:6C
Authority key identifier: E4:83:45:AA:0C:D7:02:6D:62:1C:50:08:4F:9D:9D:BB:5B:9C:C2:F0
Certificate issuer: /CN=e48345aa0cd7026d621c50084f9d9dbb5b9cc2f0
Certificate serial: 019A7293B36D0D04EB80C42E2C268DB69DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
Manifest number: 0E3D
Signing time: Tue 11 Nov 2025 11:01:13 +0000
Manifest this update: Tue 11 Nov 2025 11:01:13 +0000
Manifest next update: Wed 12 Nov 2025 11:01:13 +0000
Files and hashes: 1: 5INFqgzXAm1iHFAIT52du1ucwvA.crl (hash: 6fxffpzf3HbnoqG8Q89p3Hp+ad8/+UN3u/Uy7Q6anJ0=)
2: kUe56rRopp_KQsUYDln6H32rpVA.roa (hash: Nqm32SYb89EX8JBzdHqkHyeFXZStjUKylm9CZ3PRcrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b3:6d:0d:04:eb:80:c4:2e:2c:26:8d:b6:9d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e48345aa0cd7026d621c50084f9d9dbb5b9cc2f0
Validity
Not Before: Nov 11 11:01:13 2025 GMT
Not After : Nov 12 11:01:13 2025 GMT
Subject: CN=f9cb28b8ee5f244c59e19545a6bc817008c6586c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:ae:7f:ae:01:09:92:fb:34:aa:3e:28:aa:
0b:ce:be:b2:3d:c9:33:84:bd:c8:1e:0b:0c:20:2e:
49:6f:2d:7e:fb:b4:bb:4b:2d:e6:67:ff:73:41:5a:
d0:ae:94:90:a9:2c:80:96:19:4f:ca:37:5a:57:9e:
61:67:39:38:a1:38:1b:b2:dd:ac:99:90:13:f6:18:
fb:1d:e5:14:8c:80:ce:28:cd:43:82:e5:f2:eb:32:
07:69:07:42:2d:7b:cf:93:17:5a:61:ab:90:6c:80:
e6:e5:52:db:09:de:43:90:89:ec:7f:0b:2d:b6:d5:
00:92:5b:86:8f:66:46:9c:84:8d:53:0d:b6:e4:11:
54:56:ef:f3:ff:93:65:b8:df:c9:0c:c2:d3:74:cc:
c5:3d:ad:ed:57:b3:af:fd:4f:bc:7f:c9:4d:31:44:
ee:fe:0e:fe:0b:49:70:df:ef:05:05:c8:19:45:f3:
ec:00:06:26:da:a3:5a:68:91:cc:4f:04:8d:aa:01:
a5:d5:1e:1a:5d:8c:6d:12:c1:93:f2:13:d0:7e:24:
0a:9d:74:dc:ea:47:a0:ef:e5:f6:b7:4c:36:ba:1a:
23:d5:8f:c2:67:11:d0:3b:62:c3:0d:31:00:37:04:
8f:d9:f5:ff:1b:5f:b9:fb:a9:29:14:91:74:66:2a:
22:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CB:28:B8:EE:5F:24:4C:59:E1:95:45:A6:BC:81:70:08:C6:58:6C
X509v3 Authority Key Identifier:
keyid:E4:83:45:AA:0C:D7:02:6D:62:1C:50:08:4F:9D:9D:BB:5B:9C:C2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5INFqgzXAm1iHFAIT52du1ucwvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/174f32-1ad1-44f8-8a7f-5fdb9563113c/1/5INFqgzXAm1iHFAIT52du1ucwvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ca:f1:f7:69:3c:7e:a8:bb:1f:a6:f6:a4:44:a6:88:2b:e4:
d7:b3:6c:65:6c:17:a6:bf:c3:78:a9:c7:e1:c4:5a:ce:67:a1:
66:37:eb:3d:04:c8:35:2b:01:9d:f0:ff:61:5f:31:bf:41:a9:
55:c4:8c:d9:8a:31:b5:4e:0a:97:2f:6a:20:fb:3d:c6:fe:7e:
5a:aa:3a:61:32:09:7a:3d:ef:f8:5c:cf:7a:73:19:6c:2e:5d:
09:b2:4f:e3:2a:e5:a2:aa:68:35:fe:dc:0e:03:3f:3c:fe:4d:
32:8a:4c:67:d7:23:aa:d2:05:95:4b:cb:48:71:fc:c3:94:f4:
71:7c:44:ec:d4:8b:e1:36:2c:25:59:3f:5c:90:01:50:2b:36:
6c:2c:1e:06:01:6d:bf:a5:a7:1f:db:f6:58:1e:fe:3f:3c:32:
f6:82:3c:0c:f9:03:2d:13:d3:c4:e6:1d:16:14:cd:54:3b:37:
04:d6:7f:60:dd:e4:72:7a:ff:48:58:eb:06:7b:28:5a:2c:dd:
f8:60:e4:5c:bd:78:4f:d8:5b:08:69:e8:b1:2e:61:b0:8b:26:
b6:a4:ec:6a:fd:3e:0c:ed:97:f5:03:6d:46:ea:d1:21:bb:24:
50:1c:f6:f0:1a:df:67:dd:f5:0d:26:c2:c3:61:c4:34:ba:0a:
ce:b1:8a:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk7NtDQTrgMQuLCaNtp3BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ODM0NWFhMGNkNzAyNmQ2MjFjNTAwODRmOWQ5ZGJiNWI5
Y2MyZjAwHhcNMjUxMTExMTEwMTEzWhcNMjUxMTEyMTEwMTEzWjAzMTEwLwYDVQQD
EyhmOWNiMjhiOGVlNWYyNDRjNTllMTk1NDVhNmJjODE3MDA4YzY1ODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMCuf64BCZL7NKo+KKoLzr6yPckz
hL3IHgsMIC5Jby1++7S7Sy3mZ/9zQVrQrpSQqSyAlhlPyjdaV55hZzk4oTgbst2s
mZAT9hj7HeUUjIDOKM1DguXy6zIHaQdCLXvPkxdaYauQbIDm5VLbCd5DkInsfwst
ttUAkluGj2ZGnISNUw225BFUVu/z/5NluN/JDMLTdMzFPa3tV7Ov/U+8f8lNMUTu
/g7+C0lw3+8FBcgZRfPsAAYm2qNaaJHMTwSNqgGl1R4aXYxtEsGT8hPQfiQKnXTc
6keg7+X2t0w2uhoj1Y/CZxHQO2LDDTEANwSP2fX/G1+5+6kpFJF0ZioiaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnLKLjuXyRMWeGVRaa8gXAIxlhsMB8GA1UdIwQY
MBaAFOSDRaoM1wJtYhxQCE+dnbtbnMLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUlORnFnelhBbTFpSEZBSVQ1MmR1MXVjd3ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNzRmMzItMWFkMS00NGY4LThhN2Yt
NWZkYjk1NjMxMTNjLzEvNUlORnFnelhBbTFpSEZBSVQ1MmR1MXVjd3ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xNzRmMzItMWFkMS00NGY4LThhN2YtNWZkYjk1NjMxMTNj
LzEvNUlORnFnelhBbTFpSEZBSVQ1MmR1MXVjd3ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicrx92k8
fqi7H6b2pESmiCvk17NsZWwXpr/DeKnH4cRazmehZjfrPQTINSsBnfD/YV8xv0Gp
VcSM2YoxtU4Kly9qIPs9xv5+Wqo6YTIJej3v+FzPenMZbC5dCbJP4yrloqpoNf7c
DgM/PP5NMopMZ9cjqtIFlUvLSHH8w5T0cXxE7NSL4TYsJVk/XJABUCs2bCweBgFt
v6WnH9v2WB7+Pzwy9oI8DPkDLRPTxOYdFhTNVDs3BNZ/YN3kcnr/SFjrBnsoWizd
+GDkXL14T9hbCGnosS5hsIsmtqTsav0+DO2X9QNtRurRIbskUBz28BrfZ931DSbC
w2HENLoKzrGK7w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:01 2025 by rpki-client