Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
File: 5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft (raw, json)
Hash identifier: Ee2x0+Odd0BdqY7naqPSgNu8sU3TWMxJYdu7leHixjI=
Subject key identifier: 2F:87:F7:6E:78:34:04:CD:6F:15:ED:C3:91:12:9A:94:5C:74:73:7F
Authority key identifier: E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94
Certificate issuer: /CN=e6157528a9cce92518f36bf0a81b7901a650ae94
Certificate serial: 019A725C458E30E6CC750E2B8658688FE9A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
Manifest number: 16AE
Signing time: Tue 11 Nov 2025 10:00:40 +0000
Manifest this update: Tue 11 Nov 2025 10:00:40 +0000
Manifest next update: Wed 12 Nov 2025 10:00:40 +0000
Files and hashes: 1: 5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl (hash: 6T7WeIVMqvXNQX3yKCt7bNTI+/3wFXwolVSGHlY8r4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:45:8e:30:e6:cc:75:0e:2b:86:58:68:8f:e9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6157528a9cce92518f36bf0a81b7901a650ae94
Validity
Not Before: Nov 11 10:00:40 2025 GMT
Not After : Nov 12 10:00:40 2025 GMT
Subject: CN=2f87f76e783404cd6f15edc391129a945c74737f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:68:f7:0a:98:bd:e9:8a:ff:8f:d3:14:ca:
b4:fc:6a:e1:41:83:6c:bb:36:fa:08:70:3a:a0:14:
10:c6:25:f4:2e:08:3c:97:9c:ff:e6:68:d6:3d:46:
67:41:33:bb:13:d6:bd:d7:15:b8:c3:7e:87:e8:c2:
25:c3:7e:ec:f1:cf:1b:a8:ac:a9:62:ae:cb:c5:e5:
f3:1a:af:ef:ad:21:4f:1f:bd:6f:27:49:9b:8b:1a:
a6:a7:d5:79:1a:ea:98:6c:6a:5b:f4:ad:82:4a:f0:
eb:72:92:06:b7:9c:8e:f5:2c:76:dd:ae:08:90:68:
e5:f0:31:90:2b:1a:d4:0c:bd:4b:8c:28:53:a3:77:
6c:27:27:70:cc:8c:74:f0:e5:d7:fa:a5:5d:48:3e:
7b:a8:fe:df:79:81:47:59:1b:80:b9:dd:b4:cc:b8:
3c:0d:bc:89:3f:04:9f:d5:ef:cb:37:d0:f7:44:d6:
62:e6:03:ec:fd:7d:fe:c2:c3:ec:0b:bf:e7:20:fe:
e5:24:b3:cd:47:74:ef:5d:b5:68:df:f9:96:3e:5c:
24:ea:64:60:4a:76:58:f1:93:dc:a3:29:91:2b:1d:
33:6c:7a:66:f6:41:df:d3:83:36:30:a7:e3:52:16:
9d:bf:58:f6:8c:fc:27:f5:8b:dd:83:d4:64:67:6e:
93:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:87:F7:6E:78:34:04:CD:6F:15:ED:C3:91:12:9A:94:5C:74:73:7F
X509v3 Authority Key Identifier:
keyid:E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:10:4c:32:b6:b7:cd:e6:a8:4d:ba:b6:8b:da:89:8d:3e:bf:
fe:79:82:7c:f2:61:98:5a:30:40:5e:72:87:7f:f5:e3:2d:15:
98:68:f9:8d:bd:17:0d:62:0b:47:af:f2:15:d5:97:ce:49:7f:
c6:21:ce:79:9a:f4:93:23:2e:93:f4:a9:a6:a1:ce:52:3c:64:
9b:68:6e:c2:3d:00:f9:4e:1d:f7:c3:d0:79:8b:86:40:d2:10:
93:27:c2:8d:ab:a2:34:b6:5b:0b:97:33:07:c4:d1:1a:1e:42:
ca:ed:9e:3d:e2:d9:42:d7:1d:4a:d7:5b:fd:55:94:85:e1:9f:
e5:11:34:74:8f:6f:60:8a:17:bf:f9:7b:d4:90:e2:19:59:21:
b7:93:a5:a6:f9:dd:69:a5:12:ac:41:5e:9b:7e:45:87:5b:84:
33:6f:47:1e:71:c8:79:86:9d:82:f6:cb:a3:fd:c2:55:46:23:
d8:e1:5f:79:93:d4:d7:d6:3a:4f:c6:d5:06:ef:e2:e6:22:22:
ba:59:b2:9a:9a:fa:40:10:cc:13:54:eb:1b:24:4a:1b:5b:33:
2c:05:4b:d3:59:e6:23:6c:68:f6:41:82:00:ed:aa:1f:e9:19:
55:5c:84:ed:31:8f:6c:36:51:45:d2:ff:48:2e:62:38:8c:07:
dd:8c:7c:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXEWOMObMdQ4rhlhoj+mkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MTU3NTI4YTljY2U5MjUxOGYzNmJmMGE4MWI3OTAxYTY1
MGFlOTQwHhcNMjUxMTExMTAwMDQwWhcNMjUxMTEyMTAwMDQwWjAzMTEwLwYDVQQD
EygyZjg3Zjc2ZTc4MzQwNGNkNmYxNWVkYzM5MTEyOWE5NDVjNzQ3MzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0Vo9wqYvemK/4/TFMq0/GrhQYNs
uzb6CHA6oBQQxiX0Lgg8l5z/5mjWPUZnQTO7E9a91xW4w36H6MIlw37s8c8bqKyp
Yq7LxeXzGq/vrSFPH71vJ0mbixqmp9V5GuqYbGpb9K2CSvDrcpIGt5yO9Sx23a4I
kGjl8DGQKxrUDL1LjChTo3dsJydwzIx08OXX+qVdSD57qP7feYFHWRuAud20zLg8
DbyJPwSf1e/LN9D3RNZi5gPs/X3+wsPsC7/nIP7lJLPNR3TvXbVo3/mWPlwk6mRg
SnZY8ZPcoymRKx0zbHpm9kHf04M2MKfjUhadv1j2jPwn9Yvdg9RkZ26T7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+H9254NATNbxXtw5ESmpRcdHN/MB8GA1UdIwQY
MBaAFOYVdSipzOklGPNr8KgbeQGmUK6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWhWMUtLbk02U1VZODJ2d3FCdDVBYVpRcnBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lYjg0ODQtODkzZi00MDBkLTkwODEt
N2QxYjJkOWEyNDA1LzEvNWhWMUtLbk02U1VZODJ2d3FCdDVBYVpRcnBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lYjg0ODQtODkzZi00MDBkLTkwODEtN2QxYjJkOWEyNDA1
LzEvNWhWMUtLbk02U1VZODJ2d3FCdDVBYVpRcnBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxBMMra3
zeaoTbq2i9qJjT6//nmCfPJhmFowQF5yh3/14y0VmGj5jb0XDWILR6/yFdWXzkl/
xiHOeZr0kyMuk/SppqHOUjxkm2huwj0A+U4d98PQeYuGQNIQkyfCjauiNLZbC5cz
B8TRGh5Cyu2ePeLZQtcdStdb/VWUheGf5RE0dI9vYIoXv/l71JDiGVkht5Olpvnd
aaUSrEFem35Fh1uEM29HHnHIeYadgvbLo/3CVUYj2OFfeZPU19Y6T8bVBu/i5iIi
ulmympr6QBDME1TrGyRKG1szLAVL01nmI2xo9kGCAO2qH+kZVVyE7TGPbDZRRdL/
SC5iOIwH3Yx8PA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:36 2025 by rpki-client