Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
File: 5_JhNIMO4g3CKYbcinNm0JcrKTA.mft (raw, json)
Hash identifier: S/W5ds4uCX0WfZxsX0QTXoCGrPIgTgkWlrxxjhXz4zI=
Subject key identifier: 1D:3A:05:67:EE:53:36:80:98:CE:AD:C2:18:51:CC:F9:D5:A7:D5:EA
Authority key identifier: E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30
Certificate issuer: /CN=e7f26134830ee20dc22986dc8a7366d0972b2930
Certificate serial: 019A27E6B6DE0C743A123022A43F30F1BE15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
Manifest number: 0A2B
Signing time: Mon 27 Oct 2025 23:00:22 +0000
Manifest this update: Mon 27 Oct 2025 23:00:22 +0000
Manifest next update: Tue 28 Oct 2025 23:00:22 +0000
Files and hashes: 1: 5_JhNIMO4g3CKYbcinNm0JcrKTA.crl (hash: NqiYELthhVGSWByHfWXFA8cRLvleB7/rRboiG6XKtpM=)
2: BATki590UiqZDbP_z7AwLiqKNlQ.roa (hash: lLBGgs0m/c36BeWtUsvXAnd6y79SE8z2K+GJhbENw4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:e6:b6:de:0c:74:3a:12:30:22:a4:3f:30:f1:be:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f26134830ee20dc22986dc8a7366d0972b2930
Validity
Not Before: Oct 27 23:00:22 2025 GMT
Not After : Oct 28 23:00:22 2025 GMT
Subject: CN=1d3a0567ee53368098ceadc21851ccf9d5a7d5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:45:72:24:b0:fb:9f:28:af:44:56:d9:10:
5b:f7:84:44:7b:e1:c6:85:ef:f8:c3:06:e6:6c:0d:
75:1f:ba:71:6e:09:2c:04:62:a2:8b:47:20:ba:8c:
af:66:c6:cc:bc:66:cd:03:e8:e0:a4:4b:5d:83:47:
a0:72:da:81:98:34:b2:4f:71:e4:9f:6c:f9:9a:f3:
ae:67:00:8e:2a:da:61:2a:5a:29:1f:58:4e:2b:b8:
1f:75:8f:2d:26:b0:3c:f6:c2:ce:af:8c:1e:fb:59:
e6:b5:aa:72:61:6f:51:57:66:4c:3d:0a:9c:1c:80:
b2:62:14:28:5d:66:12:70:bc:29:a8:0f:a4:4b:78:
9b:e5:db:ed:03:92:ef:ba:63:f1:7d:1d:36:0d:28:
49:03:de:99:e2:95:28:df:07:d5:c3:e7:07:bd:f9:
ae:c6:ea:11:8d:81:18:bc:57:b0:b3:4f:e4:d4:9c:
ca:ca:9a:69:f3:8d:15:87:2d:80:69:e9:07:0f:f1:
9b:1c:8b:a2:a4:14:58:96:0c:0f:c2:8a:a6:34:ac:
e6:75:57:26:51:e9:01:81:22:aa:09:e6:a5:db:9a:
78:ae:33:b7:5a:9a:85:d0:82:3c:e5:91:94:cb:3e:
74:84:90:11:fe:e4:7c:92:3f:40:b5:a0:88:9a:58:
e5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3A:05:67:EE:53:36:80:98:CE:AD:C2:18:51:CC:F9:D5:A7:D5:EA
X509v3 Authority Key Identifier:
keyid:E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:50:d8:4f:6f:b8:d5:33:db:6b:9e:7e:7f:15:17:e7:4d:e6:
b6:a3:f0:93:86:a9:55:d6:7c:75:e2:6f:a3:a2:6b:96:b1:ac:
39:c3:05:2f:0e:2c:d8:d9:08:6a:89:83:f5:01:a0:e5:a0:39:
13:86:5c:21:f4:51:ee:1e:ba:de:79:f7:e7:b4:6a:b0:0c:50:
3d:38:d6:95:b0:a5:b7:9f:dc:2c:ab:04:c0:2b:5a:85:a6:51:
f2:4d:94:ee:7a:20:b0:a5:59:74:00:31:8c:c9:a2:8d:bf:db:
fd:5f:49:84:b9:73:fd:78:b9:a2:c0:a9:ec:4c:56:31:70:31:
80:3e:96:4c:8f:04:7c:e5:7f:d0:06:a3:4d:4c:06:f5:30:d6:
1d:23:13:5b:bf:89:7b:7c:b6:bd:2e:54:ec:7d:9d:88:62:8b:
83:79:c8:b9:f3:22:62:d7:57:3b:ba:b8:7d:e9:f8:9e:b3:8e:
e9:b4:21:8a:ae:96:8c:8f:a8:3b:47:87:a0:ed:ac:a5:9b:33:
7e:f7:ff:ec:f3:1c:34:92:61:52:81:ff:8c:aa:7b:03:d1:2a:
9f:a3:ac:1e:b0:e7:a8:48:3d:5d:65:9c:49:74:0b:55:b4:e5:
39:4a:b4:71:02:50:47:52:3d:89:e7:e4:45:90:dd:e2:ea:e4:
7b:46:69:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZon5rbeDHQ6EjAipD8w8b4VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZjI2MTM0ODMwZWUyMGRjMjI5ODZkYzhhNzM2NmQwOTcy
YjI5MzAwHhcNMjUxMDI3MjMwMDIyWhcNMjUxMDI4MjMwMDIyWjAzMTEwLwYDVQQD
EygxZDNhMDU2N2VlNTMzNjgwOThjZWFkYzIxODUxY2NmOWQ1YTdkNWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoJFciSw+58or0RW2RBb94REe+HG
he/4wwbmbA11H7pxbgksBGKii0cguoyvZsbMvGbNA+jgpEtdg0egctqBmDSyT3Hk
n2z5mvOuZwCOKtphKlopH1hOK7gfdY8tJrA89sLOr4we+1nmtapyYW9RV2ZMPQqc
HICyYhQoXWYScLwpqA+kS3ib5dvtA5LvumPxfR02DShJA96Z4pUo3wfVw+cHvfmu
xuoRjYEYvFews0/k1JzKyppp840Vhy2AaekHD/GbHIuipBRYlgwPwoqmNKzmdVcm
UekBgSKqCeal25p4rjO3WpqF0II85ZGUyz50hJAR/uR8kj9AtaCImljl8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB06BWfuUzaAmM6twhhRzPnVp9XqMB8GA1UdIwQY
MBaAFOfyYTSDDuINwimG3IpzZtCXKykwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV9KaE5JTU80ZzNDS1liY2luTm0wSmNyS1RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9mZTZiYWMtMTBiMy00MjU2LTg0YjAt
YTc2MjkyZTIwNDU4LzEvNV9KaE5JTU80ZzNDS1liY2luTm0wSmNyS1RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9mZTZiYWMtMTBiMy00MjU2LTg0YjAtYTc2MjkyZTIwNDU4
LzEvNV9KaE5JTU80ZzNDS1liY2luTm0wSmNyS1RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAklDYT2+4
1TPba55+fxUX503mtqPwk4apVdZ8deJvo6JrlrGsOcMFLw4s2NkIaomD9QGg5aA5
E4ZcIfRR7h663nn357RqsAxQPTjWlbClt5/cLKsEwCtahaZR8k2U7nogsKVZdAAx
jMmijb/b/V9JhLlz/Xi5osCp7ExWMXAxgD6WTI8EfOV/0AajTUwG9TDWHSMTW7+J
e3y2vS5U7H2diGKLg3nIufMiYtdXO7q4fen4nrOO6bQhiq6WjI+oO0eHoO2spZsz
fvf/7PMcNJJhUoH/jKp7A9Eqn6OsHrDnqEg9XWWcSXQLVbTlOUq0cQJQR1I9iefk
RZDd4urke0Zp/w==
-----END CERTIFICATE-----
Generated at Tue Oct 28 08:08:09 2025 by rpki-client