Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
File: f5tM_cmw2ePDHg67gebxscu9yeQ.mft (raw, json)
Hash identifier: nwnjAPsHgPYUdU3T3QqfUZzyGoTO6Q2NxcbGF1QpI0o=
Subject key identifier: 4B:75:35:65:7C:80:E1:95:D7:19:D2:98:E6:77:3F:EC:2F:6A:34:80
Authority key identifier: 7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4
Certificate issuer: /CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
Certificate serial: 019A714A275A8851BCE02278F5DC4B86AC66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
Manifest number: 0CFE
Signing time: Tue 11 Nov 2025 05:01:16 +0000
Manifest this update: Tue 11 Nov 2025 05:01:16 +0000
Manifest next update: Wed 12 Nov 2025 05:01:16 +0000
Files and hashes: 1: f5tM_cmw2ePDHg67gebxscu9yeQ.crl (hash: LUQm+76wy+0XwwLKIKWHiHoYezFSFDKvjFK7znM7AsU=)
2: zalftAHY0_vxWVcBQe7AUMKmyP4.roa (hash: IBVaMGf4826YIxpRZf58g0sJemKA+k9XLc2S0P/3S8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:27:5a:88:51:bc:e0:22:78:f5:dc:4b:86:ac:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
Validity
Not Before: Nov 11 05:01:16 2025 GMT
Not After : Nov 12 05:01:16 2025 GMT
Subject: CN=4b7535657c80e195d719d298e6773fec2f6a3480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:99:2e:3f:f2:65:aa:bc:b3:d2:50:96:1d:18:
ad:49:df:43:94:51:a9:2e:ea:45:3d:60:29:c2:d3:
cc:d3:49:62:da:0c:29:0c:25:01:6d:d6:08:8c:a0:
d8:11:9c:cd:87:4b:dc:ce:a6:e1:f1:64:29:e2:e1:
0a:ed:18:02:da:f0:09:56:35:ed:60:76:f1:7c:1c:
62:05:a8:8d:8f:c1:6a:b3:0a:a1:c6:eb:83:ca:55:
2c:5f:4a:c5:b1:26:b9:fd:b5:4c:8e:a5:9a:9e:17:
4e:c8:19:9f:25:65:51:df:70:f4:8e:8f:36:d8:1f:
2f:dd:1b:db:d1:48:74:4d:96:e9:f1:6e:f7:2b:29:
69:88:a8:e5:03:5f:51:29:ee:4b:e1:b5:5f:ac:19:
e1:e8:af:cf:07:2b:39:03:01:c1:90:2e:c5:f6:46:
62:79:c7:6a:29:dc:25:69:f4:77:90:f5:84:0f:08:
d4:65:6e:3f:31:88:8d:69:d0:fd:f6:ff:40:72:64:
37:9e:f3:06:1d:e5:b8:1e:33:9b:93:6c:e0:7b:d5:
a2:10:e8:83:71:d8:a4:37:de:7d:ec:7a:2a:92:1e:
e5:b8:32:94:22:b7:37:d9:ad:5b:54:b8:48:34:fb:
b0:88:ba:a8:e7:66:8f:94:2d:54:32:b4:a4:9c:1d:
3a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:75:35:65:7C:80:E1:95:D7:19:D2:98:E6:77:3F:EC:2F:6A:34:80
X509v3 Authority Key Identifier:
keyid:7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fa:77:e9:52:ba:de:f2:11:46:e0:80:eb:33:d9:8e:1d:51:
11:38:d4:c8:d3:ef:7b:a5:20:b3:d0:a2:da:f3:ec:9d:31:46:
11:ce:3b:d5:b0:1c:3e:56:9e:9f:90:d6:30:1c:b5:94:ce:e2:
b3:c6:b1:de:61:c1:8e:37:82:7b:72:fa:27:c8:2c:43:3a:05:
44:e1:31:19:af:97:35:93:c9:ae:b1:f1:06:3c:75:27:2c:28:
e3:15:81:49:3e:0c:d3:17:89:10:9e:bf:13:1b:88:30:2f:79:
db:7a:8b:84:39:eb:eb:5a:85:6a:53:28:52:1f:26:77:ba:84:
ac:9e:ff:61:36:7a:40:33:4c:90:cc:13:42:c9:38:51:07:d1:
57:7d:e7:e3:70:ae:c4:e9:ad:f7:17:2a:9a:ff:33:49:54:63:
57:85:e5:81:19:d0:50:c6:75:cb:4b:92:74:d5:9c:25:04:81:
b8:55:9e:af:e4:be:df:85:47:f8:4d:57:01:2a:0a:c6:57:86:
c6:04:a2:79:89:9c:0d:56:a2:a8:54:e3:95:ff:82:30:bf:77:
57:5a:29:4a:7e:db:66:9b:51:80:9c:7f:d7:61:66:56:6b:50:
9a:2f:ff:02:1f:b5:da:98:ee:1e:14:7e:97:3a:55:5e:19:cd:
72:0f:bd:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSidaiFG84CJ49dxLhqxmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmOWI0Y2ZkYzliMGQ5ZTNjMzFlMGViYjgxZTZmMWIxY2Ji
ZGM5ZTQwHhcNMjUxMTExMDUwMTE2WhcNMjUxMTEyMDUwMTE2WjAzMTEwLwYDVQQD
Eyg0Yjc1MzU2NTdjODBlMTk1ZDcxOWQyOThlNjc3M2ZlYzJmNmEzNDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZkuP/Jlqryz0lCWHRitSd9DlFGp
LupFPWApwtPM00li2gwpDCUBbdYIjKDYEZzNh0vczqbh8WQp4uEK7RgC2vAJVjXt
YHbxfBxiBaiNj8FqswqhxuuDylUsX0rFsSa5/bVMjqWanhdOyBmfJWVR33D0jo82
2B8v3Rvb0Uh0TZbp8W73KylpiKjlA19RKe5L4bVfrBnh6K/PBys5AwHBkC7F9kZi
ecdqKdwlafR3kPWEDwjUZW4/MYiNadD99v9AcmQ3nvMGHeW4HjObk2zge9WiEOiD
cdikN9597Hoqkh7luDKUIrc32a1bVLhINPuwiLqo52aPlC1UMrSknB06JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEt1NWV8gOGV1xnSmOZ3P+wvajSAMB8GA1UdIwQY
MBaAFH+bTP3JsNnjwx4Ou4Hm8bHLvcnkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjV0TV9jbXcyZVBESGc2N2dlYnhzY3U5eWVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84MjQ2ZWItODQ2OS00MmRmLWEwOGYt
OTBjNDIxZjU1YWRiLzEvZjV0TV9jbXcyZVBESGc2N2dlYnhzY3U5eWVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi84MjQ2ZWItODQ2OS00MmRmLWEwOGYtOTBjNDIxZjU1YWRi
LzEvZjV0TV9jbXcyZVBESGc2N2dlYnhzY3U5eWVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPp36VK6
3vIRRuCA6zPZjh1RETjUyNPve6Ugs9Ci2vPsnTFGEc471bAcPlaen5DWMBy1lM7i
s8ax3mHBjjeCe3L6J8gsQzoFROExGa+XNZPJrrHxBjx1Jywo4xWBST4M0xeJEJ6/
ExuIMC9523qLhDnr61qFalMoUh8md7qErJ7/YTZ6QDNMkMwTQsk4UQfRV33n43Cu
xOmt9xcqmv8zSVRjV4XlgRnQUMZ1y0uSdNWcJQSBuFWer+S+34VH+E1XASoKxleG
xgSieYmcDVaiqFTjlf+CML93V1opSn7bZptRgJx/12FmVmtQmi//Ah+12pjuHhR+
lzpVXhnNcg+9vQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:56 2025 by rpki-client