Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
File: p5TNL5F05CFpMaEF2yYayqOTinw.mft (raw, json)
Hash identifier: b+9MruJWQQJIX5vvbqsjgO4ByAiXeC0OjiSvumYs3Aw=
Subject key identifier: 5D:46:DC:ED:3A:60:89:AC:90:8F:75:4F:58:A7:31:D9:0A:6F:89:6E
Authority key identifier: A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
Certificate issuer: /CN=a794cd2f9174e4216931a105db261acaa3938a7c
Certificate serial: 019A729405581C314A9CCBAC2B91A9B0E6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
Manifest number: 1439
Signing time: Tue 11 Nov 2025 11:01:34 +0000
Manifest this update: Tue 11 Nov 2025 11:01:34 +0000
Manifest next update: Wed 12 Nov 2025 11:01:34 +0000
Files and hashes: 1: LIOiMNle0vsipx0T1V6aKGTU24U.roa (hash: 1KJvdL1wmyRojBeJyRsEQwf+KBGdNnm/q4xYqP+PnmE=)
2: p5TNL5F05CFpMaEF2yYayqOTinw.crl (hash: xSsLLUKFAWhGKbj+AD+BMHkunWyUodQu+H1qZDqOo0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:05:58:1c:31:4a:9c:cb:ac:2b:91:a9:b0:e6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a794cd2f9174e4216931a105db261acaa3938a7c
Validity
Not Before: Nov 11 11:01:34 2025 GMT
Not After : Nov 12 11:01:34 2025 GMT
Subject: CN=5d46dced3a6089ac908f754f58a731d90a6f896e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:6a:a8:04:54:e0:82:65:e4:11:e0:03:bb:
ad:54:b5:bb:f5:96:d0:e2:3a:ff:16:28:2f:b8:27:
40:f1:e9:f0:1f:03:b8:44:64:95:07:92:c4:08:94:
ea:be:37:5d:85:f7:6f:09:d7:9c:5d:8a:8f:43:d4:
6f:c8:11:4c:a7:df:ca:be:ca:c4:eb:79:c1:49:14:
e6:d6:dd:b6:2d:98:b7:72:26:d3:e6:5c:6b:94:c2:
1f:3f:20:09:f2:ba:2c:74:9b:02:cb:a6:a8:08:fe:
bc:17:af:80:77:61:c8:bd:ae:91:8b:79:db:e5:59:
ec:9f:1e:47:16:55:1f:94:17:93:e2:52:bd:91:b1:
71:7a:74:83:f9:02:52:ba:b0:53:46:4c:db:78:ba:
45:50:6d:9b:aa:59:d9:e5:39:c7:fb:d2:e8:d3:26:
4e:be:f3:d3:72:ee:48:05:df:3c:a4:f3:42:c7:23:
78:73:6d:e3:d2:2f:a5:1e:e4:4a:60:87:c6:d3:f5:
fd:6f:90:5d:0f:4d:b9:25:1c:d9:bc:e7:69:1e:91:
85:cb:84:e3:49:7e:c5:b7:a6:7b:fc:d5:74:de:1b:
d4:1b:e6:db:89:dc:f3:57:28:1e:79:89:73:a3:ea:
33:be:16:65:da:fb:70:6d:18:cc:91:74:8d:56:5d:
1a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:46:DC:ED:3A:60:89:AC:90:8F:75:4F:58:A7:31:D9:0A:6F:89:6E
X509v3 Authority Key Identifier:
keyid:A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:83:92:b6:c1:c1:4d:30:3e:91:5d:65:8d:3c:27:ea:0f:69:
66:53:15:d3:27:16:0e:c0:2c:cc:19:2a:93:03:ee:77:53:c3:
fe:c9:2a:32:f3:95:9a:88:a3:bb:77:c3:ff:e7:b3:2e:69:1b:
2c:67:de:d8:46:ef:5c:40:c9:b4:80:7e:34:7a:2c:de:cf:8b:
e7:0d:97:e5:b3:0b:8f:1b:84:bd:35:5c:7e:c6:e4:ea:ca:09:
24:a0:77:54:65:1c:c8:27:b7:e1:52:b1:81:66:4e:ee:d2:2b:
5d:6f:23:0f:29:cd:93:80:85:2b:9e:b2:02:47:5a:ed:48:7b:
f0:f7:6a:da:8b:84:6b:a7:8a:d6:8e:a8:50:10:4f:bb:76:e9:
4a:ed:c5:36:35:5a:0c:2a:08:89:d9:c6:d4:ad:ba:1f:a9:0e:
ed:1c:de:a1:51:69:0c:b7:a1:93:de:97:ca:9c:9e:be:17:47:
2a:ce:0f:db:68:60:5f:b4:7d:5b:36:25:fd:a1:b7:fa:bd:5e:
6a:0d:fa:91:76:7c:5b:36:5b:20:ea:f9:0f:04:6e:29:62:0f:
f7:e6:3b:e8:f2:bd:f6:23:21:bb:19:7f:56:61:01:59:4b:68:
ad:77:2f:c1:88:3d:f5:49:f1:00:30:50:ae:4c:3c:de:47:f5:
ad:7e:3f:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpylAVYHDFKnMusK5GpsObiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OTRjZDJmOTE3NGU0MjE2OTMxYTEwNWRiMjYxYWNhYTM5
MzhhN2MwHhcNMjUxMTExMTEwMTM0WhcNMjUxMTEyMTEwMTM0WjAzMTEwLwYDVQQD
Eyg1ZDQ2ZGNlZDNhNjA4OWFjOTA4Zjc1NGY1OGE3MzFkOTBhNmY4OTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz9qqARU4IJl5BHgA7utVLW79ZbQ
4jr/FigvuCdA8enwHwO4RGSVB5LECJTqvjddhfdvCdecXYqPQ9RvyBFMp9/KvsrE
63nBSRTm1t22LZi3cibT5lxrlMIfPyAJ8rosdJsCy6aoCP68F6+Ad2HIva6Ri3nb
5Vnsnx5HFlUflBeT4lK9kbFxenSD+QJSurBTRkzbeLpFUG2bqlnZ5TnH+9Lo0yZO
vvPTcu5IBd88pPNCxyN4c23j0i+lHuRKYIfG0/X9b5BdD025JRzZvOdpHpGFy4Tj
SX7Ft6Z7/NV03hvUG+bbidzzVygeeYlzo+ozvhZl2vtwbRjMkXSNVl0aUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1G3O06YImskI91T1inMdkKb4luMB8GA1UdIwQY
MBaAFKeUzS+RdOQhaTGhBdsmGsqjk4p8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDVUTkw1RjA1Q0ZwTWFFRjJ5WWF5cU9UaW53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kYmQxMjctNGIxMi00ZjE4LThkZGUt
YTM1ODVhMDVlYTJiLzEvcDVUTkw1RjA1Q0ZwTWFFRjJ5WWF5cU9UaW53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kYmQxMjctNGIxMi00ZjE4LThkZGUtYTM1ODVhMDVlYTJi
LzEvcDVUTkw1RjA1Q0ZwTWFFRjJ5WWF5cU9UaW53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYOStsHB
TTA+kV1ljTwn6g9pZlMV0ycWDsAszBkqkwPud1PD/skqMvOVmoiju3fD/+ezLmkb
LGfe2EbvXEDJtIB+NHos3s+L5w2X5bMLjxuEvTVcfsbk6soJJKB3VGUcyCe34VKx
gWZO7tIrXW8jDynNk4CFK56yAkda7Uh78Pdq2ouEa6eK1o6oUBBPu3bpSu3FNjVa
DCoIidnG1K26H6kO7RzeoVFpDLehk96XypyevhdHKs4P22hgX7R9WzYl/aG3+r1e
ag36kXZ8WzZbIOr5DwRuKWIP9+Y76PK99iMhuxl/VmEBWUtorXcvwYg99UnxADBQ
rkw83kf1rX4/OQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:51:35 2025 by rpki-client