Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
File: cA5JDhDqN72DSWKGM7WIVmHmegI.mft (raw, json)
Hash identifier: 0iWE1hGOFPM9mygV11G05zfbiUY7zzgdAO8F9UzyADA=
Subject key identifier: 5D:DF:4C:0D:85:8C:77:99:F3:F7:90:6E:F9:83:FB:84:A9:90:B1:0A
Authority key identifier: 70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02
Certificate issuer: /CN=700e490e10ea37bd8349628633b5885661e67a02
Certificate serial: 019A71B7AD9B6305C62D042CEBE14FF6E87A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
Manifest number: 0229
Signing time: Tue 11 Nov 2025 07:00:54 +0000
Manifest this update: Tue 11 Nov 2025 07:00:54 +0000
Manifest next update: Wed 12 Nov 2025 07:00:54 +0000
Files and hashes: 1: cA5JDhDqN72DSWKGM7WIVmHmegI.crl (hash: +5L84ryGza1QAf+Yk1TDLlWt4JmDuCAvFeTFIB8OX4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ad:9b:63:05:c6:2d:04:2c:eb:e1:4f:f6:e8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700e490e10ea37bd8349628633b5885661e67a02
Validity
Not Before: Nov 11 07:00:54 2025 GMT
Not After : Nov 12 07:00:54 2025 GMT
Subject: CN=5ddf4c0d858c7799f3f7906ef983fb84a990b10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:90:01:8d:f1:3e:e3:97:7e:32:40:c7:3b:a9:
94:a6:e5:39:a3:ad:e1:59:50:2b:05:20:70:43:6f:
01:1b:c0:8d:0f:7b:ab:b1:fd:25:d0:a3:4b:eb:68:
5e:8f:1e:b9:57:a7:13:34:0e:8e:1a:6f:ac:51:2a:
ba:21:aa:26:d3:ce:1d:06:6f:69:46:e7:40:74:eb:
28:9d:76:0b:55:a6:74:0a:62:2f:4d:45:59:37:bd:
23:8b:bf:cf:ba:4e:e6:37:f3:61:e9:7a:5a:ec:fe:
6b:d8:bf:e8:0c:77:c6:dd:e7:94:f8:8f:ad:63:ab:
82:bd:14:a0:b7:52:60:b2:65:02:32:ae:31:15:56:
6b:6c:24:d4:bb:b2:15:82:c1:a1:99:cd:2f:ea:f2:
2e:c4:f7:5c:f8:69:a0:78:9d:05:50:2a:94:78:ec:
6a:a0:e6:7b:78:21:5b:f9:3d:f4:13:44:76:3a:10:
3a:91:7c:4e:c9:a6:d1:cd:5a:a5:ce:80:ee:aa:24:
ba:54:8b:e8:fc:af:d6:c7:62:ad:24:f6:fb:3e:29:
4d:99:a8:e2:d8:f9:97:83:3e:84:3d:06:62:f4:c6:
09:c2:b2:57:30:62:1b:0b:3f:fc:7d:f4:69:b3:56:
31:25:08:a2:f2:78:ca:52:c3:4b:a6:e7:24:5d:50:
f3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DF:4C:0D:85:8C:77:99:F3:F7:90:6E:F9:83:FB:84:A9:90:B1:0A
X509v3 Authority Key Identifier:
keyid:70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a7:7b:be:8d:a7:dc:a1:74:87:ff:76:cc:e1:33:04:29:25:
0d:b1:aa:52:9e:ed:50:5f:e6:1f:ad:4f:f8:48:e1:be:f2:5a:
a7:a3:35:e4:b0:47:a5:e3:3d:6a:fe:47:eb:3c:a4:22:c5:1d:
dd:83:72:c7:e7:c7:84:de:95:a0:3c:94:3d:d3:b5:74:29:b5:
6f:d2:74:9c:70:7a:5e:3f:1e:70:ff:d5:7f:4b:1a:dd:1f:04:
de:63:fc:e4:08:aa:f6:de:59:7d:df:67:cc:77:b4:f1:70:76:
60:9d:4b:92:f5:67:cd:c2:30:f1:2a:76:1d:80:19:99:4f:b3:
ef:17:d9:b8:b1:56:dd:54:14:d1:c6:f7:31:2a:a6:f6:e8:6c:
91:62:58:ce:0c:36:6e:e0:af:f9:57:37:e8:11:09:2c:fe:79:
8c:17:3a:50:48:94:d1:29:3e:75:ee:49:7a:cf:24:85:8b:0e:
53:d9:c4:02:ef:af:3c:9a:38:f7:3f:a1:ec:42:bb:89:a2:20:
4f:19:f2:bf:f9:da:12:bc:2f:41:b3:46:53:a1:d8:dd:a8:c2:
d5:95:2f:ae:09:24:82:0e:82:f2:11:b3:69:af:cd:5e:3d:f6:
98:da:28:5d:f8:84:6c:de:1b:46:d0:be:5f:0f:d1:4f:6d:93:
90:61:fe:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt62bYwXGLQQs6+FP9uh6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMGU0OTBlMTBlYTM3YmQ4MzQ5NjI4NjMzYjU4ODU2NjFl
NjdhMDIwHhcNMjUxMTExMDcwMDU0WhcNMjUxMTEyMDcwMDU0WjAzMTEwLwYDVQQD
Eyg1ZGRmNGMwZDg1OGM3Nzk5ZjNmNzkwNmVmOTgzZmI4NGE5OTBiMTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZABjfE+45d+MkDHO6mUpuU5o63h
WVArBSBwQ28BG8CND3ursf0l0KNL62hejx65V6cTNA6OGm+sUSq6Iaom084dBm9p
RudAdOsonXYLVaZ0CmIvTUVZN70ji7/Puk7mN/Nh6Xpa7P5r2L/oDHfG3eeU+I+t
Y6uCvRSgt1JgsmUCMq4xFVZrbCTUu7IVgsGhmc0v6vIuxPdc+GmgeJ0FUCqUeOxq
oOZ7eCFb+T30E0R2OhA6kXxOyabRzVqlzoDuqiS6VIvo/K/Wx2KtJPb7PilNmaji
2PmXgz6EPQZi9MYJwrJXMGIbCz/8ffRps1YxJQii8njKUsNLpuckXVDzdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3fTA2FjHeZ8/eQbvmD+4SpkLEKMB8GA1UdIwQY
MBaAFHAOSQ4Q6je9g0lihjO1iFZh5noCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0E1SkRoRHFONzJEU1dLR003V0lWbUhtZWdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hODBiNmQtY2NiNy00NGMyLWI0M2Yt
ZWE2YjBiZTVjYWVlLzEvY0E1SkRoRHFONzJEU1dLR003V0lWbUhtZWdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9hODBiNmQtY2NiNy00NGMyLWI0M2YtZWE2YjBiZTVjYWVl
LzEvY0E1SkRoRHFONzJEU1dLR003V0lWbUhtZWdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6d7vo2n
3KF0h/92zOEzBCklDbGqUp7tUF/mH61P+EjhvvJap6M15LBHpeM9av5H6zykIsUd
3YNyx+fHhN6VoDyUPdO1dCm1b9J0nHB6Xj8ecP/Vf0sa3R8E3mP85Aiq9t5Zfd9n
zHe08XB2YJ1LkvVnzcIw8Sp2HYAZmU+z7xfZuLFW3VQU0cb3MSqm9uhskWJYzgw2
buCv+Vc36BEJLP55jBc6UEiU0Sk+de5Jes8khYsOU9nEAu+vPJo49z+h7EK7iaIg
Txnyv/naErwvQbNGU6HY3ajC1ZUvrgkkgg6C8hGzaa/NXj32mNooXfiEbN4bRtC+
Xw/RT22TkGH++w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:45 2025 by rpki-client