Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
File: 5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json)
Hash identifier: hRTb8jnRJksIChU2bPrSqCI9bOl81HopIn5kmTMKQa8=
Subject key identifier: E5:4F:99:46:38:C7:2F:55:83:B0:97:3A:97:3C:CD:4D:13:C0:04:4C
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial: 019A725CD7F2793439C30D00BB48E933289F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
Manifest number: 1305
Signing time: Tue 11 Nov 2025 10:01:18 +0000
Manifest this update: Tue 11 Nov 2025 10:01:18 +0000
Manifest next update: Wed 12 Nov 2025 10:01:18 +0000
Files and hashes: 1: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: ZjvD6lXHa6j/DJtPMt5nzSJI7zXFdfbRwbY9VipnwNE=)
2: Hhlf2TMcsBbO8FDcjvrbEjaLNJk.roa (hash: ZLATPH9bmMVI2zAzUVqtDm2hTynFHZLFVRo0ph7khAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d7:f2:79:34:39:c3:0d:00:bb:48:e9:33:28:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Validity
Not Before: Nov 11 10:01:18 2025 GMT
Not After : Nov 12 10:01:18 2025 GMT
Subject: CN=e54f994638c72f5583b0973a973ccd4d13c0044c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:48:5a:8a:c6:27:e2:17:ab:22:19:fa:2f:
a5:a2:dc:31:26:cd:af:84:be:4e:48:ad:a3:58:78:
9d:38:78:08:32:d5:4c:c6:2c:bc:13:79:b6:60:f9:
65:47:a0:a0:bc:40:84:f5:62:b4:7a:50:e9:f7:09:
e1:bb:f9:0f:8d:3f:a5:2e:22:7a:3e:0b:1b:9f:eb:
6c:87:14:cc:07:e9:1e:89:1f:e2:82:13:43:89:cc:
67:ef:88:e0:11:76:dd:dd:3c:9a:71:92:7b:e5:2f:
62:b7:d6:24:9c:03:3b:a9:22:68:79:7f:f5:5f:16:
f8:c1:33:a7:e8:ed:fd:0f:f8:32:5c:03:35:fe:4c:
3d:d2:9c:70:8d:f2:f8:84:f2:49:9e:37:43:18:a6:
bf:04:a7:f6:9c:d3:09:90:59:56:75:24:4f:38:99:
50:6e:dd:68:a7:e8:fa:e4:8e:c8:46:d5:71:ba:14:
7e:48:9c:ec:f6:54:76:96:ec:b9:77:e3:09:ce:21:
85:7d:e9:22:69:aa:c9:de:76:35:49:78:e4:1d:3a:
9b:6c:21:bc:47:98:fe:9f:e6:ad:94:24:42:7b:2f:
b3:50:78:1f:28:b5:45:46:1f:9d:9a:e8:9e:ca:9c:
c1:b2:bc:15:7d:ef:46:5c:5f:27:25:96:22:8b:55:
ed:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4F:99:46:38:C7:2F:55:83:B0:97:3A:97:3C:CD:4D:13:C0:04:4C
X509v3 Authority Key Identifier:
keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ab:8f:ae:cc:cd:66:86:5f:66:b4:2d:e6:2d:97:46:e4:5b:
6b:e8:01:e1:94:ca:93:d3:16:72:af:2e:2f:90:3e:7e:08:5d:
94:42:e0:64:ca:eb:70:c9:b6:86:e7:4d:4a:f9:3b:6f:0b:dc:
13:c5:ee:45:f8:71:64:f0:86:1d:9e:66:da:39:25:8a:3a:73:
c3:94:63:cd:01:a1:cb:b0:74:4a:5c:bf:68:9c:b3:f6:e3:45:
53:c7:3c:05:33:40:fa:4d:42:ba:a6:ae:5e:9b:31:2d:b0:cb:
47:d8:0b:90:33:1a:80:7d:6c:8c:7d:a5:1e:b4:f6:c4:55:53:
cf:d9:2b:76:b3:a1:63:51:ba:c6:31:2d:95:89:40:b5:af:e1:
e5:4b:df:9e:56:48:c3:4c:67:1e:1b:9e:4e:9a:8f:29:4c:20:
c9:a1:80:05:12:87:f0:e5:1e:36:8a:73:a5:8d:8b:0f:da:17:
2c:e2:f7:78:d9:d7:bb:56:d1:24:58:51:6c:17:14:4a:25:a4:
81:9c:dc:90:54:8c:1c:06:93:43:bc:b2:f1:8a:f8:35:da:60:
0d:ea:cc:a7:ec:54:e2:c2:f9:19:c0:a5:09:b0:25:26:54:4c:
67:21:31:6d:20:b6:2e:68:1b:35:71:7b:75:8f:0f:13:37:09:
64:3a:9e:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXNfyeTQ5ww0Au0jpMyifMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZGIwMzAxZmUyNDYxYzZkZTNmNzE4ZDg0N2NiNWRjN2Mw
MGIyZDIwHhcNMjUxMTExMTAwMTE4WhcNMjUxMTEyMTAwMTE4WjAzMTEwLwYDVQQD
EyhlNTRmOTk0NjM4YzcyZjU1ODNiMDk3M2E5NzNjY2Q0ZDEzYzAwNDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5hIWorGJ+IXqyIZ+i+lotwxJs2v
hL5OSK2jWHidOHgIMtVMxiy8E3m2YPllR6CgvECE9WK0elDp9wnhu/kPjT+lLiJ6
Pgsbn+tshxTMB+keiR/ighNDicxn74jgEXbd3TyacZJ75S9it9YknAM7qSJoeX/1
Xxb4wTOn6O39D/gyXAM1/kw90pxwjfL4hPJJnjdDGKa/BKf2nNMJkFlWdSRPOJlQ
bt1op+j65I7IRtVxuhR+SJzs9lR2luy5d+MJziGFfekiaarJ3nY1SXjkHTqbbCG8
R5j+n+atlCRCey+zUHgfKLVFRh+dmuieypzBsrwVfe9GXF8nJZYii1XtvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVPmUY4xy9Vg7CXOpc8zU0TwARMMB8GA1UdIwQY
MBaAFOTbAwH+JGHG3j9xjYR8tdx8ALLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82ZTY0MDUtZGJlNy00MmIyLTg4N2Mt
ZmZkZWJlYzhmNTA1LzEvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC82ZTY0MDUtZGJlNy00MmIyLTg4N2MtZmZkZWJlYzhmNTA1
LzEvNU5zREFmNGtZY2JlUDNHTmhIeTEzSHdBc3RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQquPrszN
ZoZfZrQt5i2XRuRba+gB4ZTKk9MWcq8uL5A+fghdlELgZMrrcMm2hudNSvk7bwvc
E8XuRfhxZPCGHZ5m2jklijpzw5RjzQGhy7B0Sly/aJyz9uNFU8c8BTNA+k1Cuqau
XpsxLbDLR9gLkDMagH1sjH2lHrT2xFVTz9krdrOhY1G6xjEtlYlAta/h5UvfnlZI
w0xnHhueTpqPKUwgyaGABRKH8OUeNopzpY2LD9oXLOL3eNnXu1bRJFhRbBcUSiWk
gZzckFSMHAaTQ7yy8Yr4NdpgDerMp+xU4sL5GcClCbAlJlRMZyExbSC2LmgbNXF7
dY8PEzcJZDqeLw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:40 2025 by rpki-client