Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
File: v5ulghwIWljj4dM6TvQem3YQXuU.mft (raw, json)
Hash identifier: HdlVpiqhqzqLYkUnFuG75km1oEpZje1XqDEHuL9K67I=
Subject key identifier: 08:5B:FC:84:F1:66:8E:45:8C:58:32:DA:53:81:B8:8F:79:17:5A:71
Authority key identifier: BF:9B:A5:82:1C:08:5A:58:E3:E1:D3:3A:4E:F4:1E:9B:76:10:5E:E5
Certificate issuer: /CN=bf9ba5821c085a58e3e1d33a4ef41e9b76105ee5
Certificate serial: 019A71B90913E3658822A382465EB5C81A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
Manifest number: 12E3
Signing time: Tue 11 Nov 2025 07:02:23 +0000
Manifest this update: Tue 11 Nov 2025 07:02:23 +0000
Manifest next update: Wed 12 Nov 2025 07:02:23 +0000
Files and hashes: 1: v5ulghwIWljj4dM6TvQem3YQXuU.crl (hash: 7x1cqDybYvDOl4sAtIs+n1hq/E1YcbMCj2uLeem017I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:09:13:e3:65:88:22:a3:82:46:5e:b5:c8:1a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf9ba5821c085a58e3e1d33a4ef41e9b76105ee5
Validity
Not Before: Nov 11 07:02:23 2025 GMT
Not After : Nov 12 07:02:23 2025 GMT
Subject: CN=085bfc84f1668e458c5832da5381b88f79175a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9a:76:35:7f:d3:9d:16:54:9c:87:ff:0a:d3:
fa:68:11:cd:09:2a:e2:4f:61:70:16:27:2b:82:65:
7b:33:a4:d8:dc:84:8d:e0:af:b1:35:85:6d:4b:9c:
c6:3b:d3:25:d8:85:d3:7d:2c:8e:63:90:7c:05:a2:
d8:80:04:78:79:14:14:89:69:bc:ed:07:35:95:12:
a4:cf:aa:e5:8e:8a:69:a2:a4:c6:eb:a6:55:7c:3d:
83:31:aa:d4:a6:55:3a:9a:5a:c1:f4:2a:79:b4:93:
ef:bb:3f:67:13:64:23:3d:a7:f8:6f:87:33:cc:7b:
59:cf:95:43:f1:97:52:5b:68:32:bc:d6:40:27:69:
29:1a:28:f1:8a:f7:52:f7:60:32:4e:98:23:d5:33:
e0:fc:38:dc:6a:bc:67:bd:d8:0c:99:51:97:78:db:
77:c9:a7:fc:74:72:31:35:49:1b:d0:28:77:0d:cf:
8c:29:59:e4:08:35:ae:8e:7b:39:83:3c:98:33:b3:
2d:43:52:b5:79:71:3b:17:8d:83:5f:ab:6c:76:ac:
c4:11:6c:97:49:60:30:ec:29:81:65:01:30:35:cc:
20:33:de:b4:f1:bf:dc:7a:d5:2c:02:71:6a:fa:09:
bc:f6:11:b3:be:37:ce:2b:30:a2:31:f0:d7:65:4d:
3b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5B:FC:84:F1:66:8E:45:8C:58:32:DA:53:81:B8:8F:79:17:5A:71
X509v3 Authority Key Identifier:
keyid:BF:9B:A5:82:1C:08:5A:58:E3:E1:D3:3A:4E:F4:1E:9B:76:10:5E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a4:88:35:dc:c8:b7:0a:59:0d:d3:0a:2f:bc:f4:2f:f7:c9:
29:5f:66:52:5f:39:1e:af:fa:b1:f3:03:0b:2e:74:5b:5a:29:
e5:b0:a1:85:65:0d:8f:4e:e2:61:ae:a5:ee:bd:26:12:a8:83:
1f:79:47:0e:0a:72:92:5d:9c:a1:32:73:6a:b2:eb:45:49:ae:
8f:79:cf:59:58:17:1a:3b:5e:ea:78:e0:62:e9:05:3a:61:9a:
88:fc:a1:8f:f8:16:d0:a2:d4:b0:1c:fd:d4:58:8d:87:f4:9c:
be:e9:05:d5:c1:9a:02:4c:0e:bd:3c:b0:e9:28:9c:e6:0a:34:
15:f2:21:af:6c:c7:41:a5:2b:1c:54:7f:32:a2:40:f6:63:b6:
d9:92:da:d8:26:ad:d5:da:a7:f3:7a:21:1a:3b:54:df:e7:99:
9d:16:17:5d:1a:fc:1d:08:48:b0:a1:a7:56:76:3e:74:72:1a:
35:4b:3e:30:3a:39:ce:9a:1d:54:97:95:d8:bb:14:1c:6a:0c:
12:29:20:50:5f:5d:70:52:09:ba:98:01:e4:46:68:82:c1:e9:
f4:f3:da:25:84:b6:a5:be:33:da:b7:bf:da:6c:e2:f1:78:15:
66:fd:93:98:8d:57:4a:d0:eb:3d:9e:80:8c:e7:fe:3f:c7:53:
c9:f7:39:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuQkT42WIIqOCRl61yBoDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmOWJhNTgyMWMwODVhNThlM2UxZDMzYTRlZjQxZTliNzYx
MDVlZTUwHhcNMjUxMTExMDcwMjIzWhcNMjUxMTEyMDcwMjIzWjAzMTEwLwYDVQQD
EygwODViZmM4NGYxNjY4ZTQ1OGM1ODMyZGE1MzgxYjg4Zjc5MTc1YTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZp2NX/TnRZUnIf/CtP6aBHNCSri
T2FwFicrgmV7M6TY3ISN4K+xNYVtS5zGO9Ml2IXTfSyOY5B8BaLYgAR4eRQUiWm8
7Qc1lRKkz6rljoppoqTG66ZVfD2DMarUplU6mlrB9Cp5tJPvuz9nE2QjPaf4b4cz
zHtZz5VD8ZdSW2gyvNZAJ2kpGijxivdS92AyTpgj1TPg/DjcarxnvdgMmVGXeNt3
yaf8dHIxNUkb0Ch3Dc+MKVnkCDWujns5gzyYM7MtQ1K1eXE7F42DX6tsdqzEEWyX
SWAw7CmBZQEwNcwgM9608b/cetUsAnFq+gm89hGzvjfOKzCiMfDXZU079wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhb/ITxZo5FjFgy2lOBuI95F1pxMB8GA1UdIwQY
MBaAFL+bpYIcCFpY4+HTOk70Hpt2EF7lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjV1bGdod0lXbGpqNGRNNlR2UWVtM1lRWHVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mYmM4YjUtYzVmNS00MGI4LThhNzQt
YmZhZmIyOTM3MWNmLzEvdjV1bGdod0lXbGpqNGRNNlR2UWVtM1lRWHVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mYmM4YjUtYzVmNS00MGI4LThhNzQtYmZhZmIyOTM3MWNm
LzEvdjV1bGdod0lXbGpqNGRNNlR2UWVtM1lRWHVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaSINdzI
twpZDdMKL7z0L/fJKV9mUl85Hq/6sfMDCy50W1op5bChhWUNj07iYa6l7r0mEqiD
H3lHDgpykl2coTJzarLrRUmuj3nPWVgXGjte6njgYukFOmGaiPyhj/gW0KLUsBz9
1FiNh/ScvukF1cGaAkwOvTyw6Sic5go0FfIhr2zHQaUrHFR/MqJA9mO22ZLa2Cat
1dqn83ohGjtU3+eZnRYXXRr8HQhIsKGnVnY+dHIaNUs+MDo5zpodVJeV2LsUHGoM
EikgUF9dcFIJupgB5EZogsHp9PPaJYS2pb4z2re/2mzi8XgVZv2TmI1XStDrPZ6A
jOf+P8dTyfc5UQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:38 2025 by rpki-client