Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
File: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft (raw, json)
Hash identifier: ApIes1RDTjNymtl6z5dtUij47RgP4KVvOIJeHQ+9pEA=
Subject key identifier: 2F:5F:D7:68:B6:01:5B:97:62:EE:FD:41:CC:CE:48:E7:BB:26:6C:D6
Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
Certificate issuer: /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Certificate serial: 019A2A79A162BA246E704D295E49B4037910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 11:00:05 +0000
Manifest this update: Tue 28 Oct 2025 11:00:05 +0000
Manifest next update: Wed 29 Oct 2025 11:00:05 +0000
Files and hashes: 1: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl (hash: 3aJEqsvWJg4SwKL965Dh/aKsOn6uMgzM5vjeMwGNyL8=)
2: TmGH7yXkMz-v6gHvCr9qE37nKcA.roa (hash: n1u54C/BtvIrlKmaScJ2jkmbHT4HONn1UuTucKaDW6g=)
3: k7UwqFFBmprxDA56kDwgmZFvA3g.roa (hash: oLwFA32V9FgAocZGOyNmCc1klUCv8GcjZUVDNdla0Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:79:a1:62:ba:24:6e:70:4d:29:5e:49:b4:03:79:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Validity
Not Before: Oct 28 11:00:05 2025 GMT
Not After : Oct 29 11:00:05 2025 GMT
Subject: CN=2f5fd768b6015b9762eefd41ccce48e7bb266cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:48:32:a5:e3:67:30:d3:c8:94:ac:6c:76:
bf:ce:c6:c9:56:6f:dd:b0:b6:83:bd:cd:21:e1:5c:
48:fa:48:49:ca:92:8f:04:79:fb:56:21:dc:4b:77:
a9:5d:76:80:44:48:46:22:89:a0:2d:66:19:02:f8:
a0:a2:02:12:bf:a1:2c:54:99:76:e2:44:46:2f:50:
a1:71:ed:8f:1e:7f:de:8f:68:7b:73:77:ab:ce:3a:
9a:98:2f:4d:d7:85:4c:64:2e:45:7f:7b:8c:77:46:
82:e3:71:75:e4:f8:07:c7:48:59:fa:b5:98:af:58:
e7:e5:49:8f:fb:1f:e3:60:27:d8:21:de:08:4a:7d:
5c:14:56:d4:7b:61:3e:96:9d:1a:34:3d:95:92:87:
fe:ca:2f:f8:31:8f:87:88:bf:fb:4d:01:58:11:62:
9c:f1:ad:54:6a:17:e6:05:51:cc:ea:8a:2a:d3:46:
fe:a8:33:40:1c:af:ce:a0:37:60:20:02:ca:92:f1:
07:a2:72:a1:a5:94:8f:c7:d1:18:26:89:21:b6:d3:
8a:23:49:40:2f:47:7e:0e:28:e7:b6:3b:16:8c:c3:
17:bc:f3:a9:a1:12:e4:5d:2e:7a:dd:d2:e5:fe:d6:
1f:ca:26:6b:dc:2b:5a:4a:44:c8:9b:71:e3:51:f3:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5F:D7:68:B6:01:5B:97:62:EE:FD:41:CC:CE:48:E7:BB:26:6C:D6
X509v3 Authority Key Identifier:
keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:5d:87:c2:89:2d:37:70:55:a1:64:74:4a:6f:9f:63:0e:be:
64:ad:42:61:09:b2:0b:d8:43:a3:c9:91:23:bc:cc:9f:2d:d9:
ed:94:c9:07:00:aa:4f:c2:09:42:71:87:bf:c5:c1:d8:85:7a:
fa:7e:75:64:03:49:c7:73:b3:89:26:d8:d5:c5:4d:b5:f1:22:
33:f9:6e:52:c1:6b:bd:c5:f8:ba:d0:84:c8:7b:ad:1d:9e:16:
ec:64:49:d0:ab:23:45:92:b2:13:11:04:14:5e:8f:66:0e:89:
54:eb:75:d3:95:02:d7:5b:92:07:93:83:af:06:33:0e:fa:c6:
04:ed:1e:62:f0:85:09:02:18:2b:af:35:26:d0:bf:7d:c8:d6:
6e:49:b5:63:fb:b3:67:ff:ba:cd:88:4c:6c:d0:65:61:5a:fe:
6c:62:17:8e:de:3a:63:4e:ed:b4:ca:0b:6d:53:d4:c4:66:b3:
a2:dd:a5:cc:3a:d4:de:95:ea:94:0d:82:22:e1:b7:d3:77:ba:
5e:db:da:57:82:c5:67:b8:7d:3b:f1:1f:29:10:fe:45:d8:b1:
68:c9:e9:7b:17:b6:fb:a7:eb:d0:4b:55:ce:8f:ca:f3:97:74:
f0:8e:61:42:73:42:42:82:6e:c5:4e:f5:ab:00:8d:16:a5:24:
23:c3:31:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqeaFiuiRucE0pXkm0A3kQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NWIxYTRmMTk0MmU0YjFkODk0Y2JjOGNmMDkwNzNkMDI4
OTAxNzAwHhcNMjUxMDI4MTEwMDA1WhcNMjUxMDI5MTEwMDA1WjAzMTEwLwYDVQQD
EygyZjVmZDc2OGI2MDE1Yjk3NjJlZWZkNDFjY2NlNDhlN2JiMjY2Y2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNJIMqXjZzDTyJSsbHa/zsbJVm/d
sLaDvc0h4VxI+khJypKPBHn7ViHcS3epXXaAREhGIomgLWYZAvigogISv6EsVJl2
4kRGL1Chce2PHn/ej2h7c3erzjqamC9N14VMZC5Ff3uMd0aC43F15PgHx0hZ+rWY
r1jn5UmP+x/jYCfYId4ISn1cFFbUe2E+lp0aND2Vkof+yi/4MY+HiL/7TQFYEWKc
8a1UahfmBVHM6ooq00b+qDNAHK/OoDdgIALKkvEHonKhpZSPx9EYJokhttOKI0lA
L0d+DijntjsWjMMXvPOpoRLkXS563dLl/tYfyiZr3CtaSkTIm3HjUfM8MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9f12i2AVuXYu79QczOSOe7JmzWMB8GA1UdIwQY
MBaAFOVbGk8ZQuSx2JTLyM8JBz0CiQFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVZzYVR4bEM1TEhZbE12SXp3a0hQUUtKQVhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jNjZhMWYtNzcwNy00ZjhkLWEyNzQt
NGRmNjVhYmE2YTYyLzEvNVZzYVR4bEM1TEhZbE12SXp3a0hQUUtKQVhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9jNjZhMWYtNzcwNy00ZjhkLWEyNzQtNGRmNjVhYmE2YTYy
LzEvNVZzYVR4bEM1TEhZbE12SXp3a0hQUUtKQVhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsl2Hwokt
N3BVoWR0Sm+fYw6+ZK1CYQmyC9hDo8mRI7zMny3Z7ZTJBwCqT8IJQnGHv8XB2IV6
+n51ZANJx3OziSbY1cVNtfEiM/luUsFrvcX4utCEyHutHZ4W7GRJ0KsjRZKyExEE
FF6PZg6JVOt105UC11uSB5ODrwYzDvrGBO0eYvCFCQIYK681JtC/fcjWbkm1Y/uz
Z/+6zYhMbNBlYVr+bGIXjt46Y07ttMoLbVPUxGazot2lzDrU3pXqlA2CIuG303e6
XtvaV4LFZ7h9O/EfKRD+RdixaMnpexe2+6fr0EtVzo/K85d08I5hQnNCQoJuxU71
qwCNFqUkI8Mxqw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 13:39:58 2025 by rpki-client