Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
File: 5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft (raw, json)
Hash identifier: d7SEl+Ub3m2gHPT1xFWzgrVTYR0pLwPlhtm+eIAUsYw=
Subject key identifier: 8E:48:0D:53:D0:BD:43:ED:8F:05:36:CF:93:5B:4E:0F:0C:AB:D6:71
Authority key identifier: E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
Certificate issuer: /CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Certificate serial: 019A73383C28A1D10A1141232A3CA6782D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
Manifest number: 1203
Signing time: Tue 11 Nov 2025 14:00:56 +0000
Manifest this update: Tue 11 Nov 2025 14:00:56 +0000
Manifest next update: Wed 12 Nov 2025 14:00:56 +0000
Files and hashes: 1: 5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl (hash: Km6hvovwfBA6nqDpxo9+dhbyN0w8cxO920wNzSCU7Z4=)
2: WFOxXq8-woghob55sftxvTt6FdI.roa (hash: hwAy54H63vrYPhBgVny9CWYFBq69ABYXgCXp7pxF/eQ=)
3: nMthV73xKQot_nDw1BjaSeVp1wM.roa (hash: TYeby9qItlQuzOaWwKV9Jy5leKuAxnH4NPibMj98Eco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:3c:28:a1:d1:0a:11:41:23:2a:3c:a6:78:2d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Validity
Not Before: Nov 11 14:00:56 2025 GMT
Not After : Nov 12 14:00:56 2025 GMT
Subject: CN=8e480d53d0bd43ed8f0536cf935b4e0f0cabd671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:34:5a:b9:a4:3f:0d:a5:05:14:77:f3:4d:
04:42:4c:26:0e:e2:39:3f:b0:f7:d2:cf:6d:ed:72:
8c:80:cb:7b:08:02:9d:a7:0a:8a:99:27:f8:5d:c1:
24:bd:f5:27:b9:b1:73:39:db:f6:fb:cc:20:0f:91:
98:a9:c6:b2:59:f5:50:1f:37:54:83:40:67:98:4c:
70:dc:99:74:95:4e:cd:9e:f8:67:a4:71:a5:4f:da:
1b:81:2f:d6:41:37:f5:5c:ac:d1:5a:ee:b0:c3:6d:
55:26:46:b9:19:82:1a:ce:ce:51:a1:55:41:ae:0b:
fe:2b:cc:17:63:bd:5d:1a:0a:6a:8a:01:43:27:21:
49:6b:bd:70:ba:05:2b:e1:58:bd:80:b4:32:03:08:
73:1c:97:e9:21:96:f3:c4:12:c5:32:c2:54:8a:e8:
81:ad:6e:68:e2:3e:bf:0f:4e:0e:3a:58:cc:56:b9:
64:5e:5a:df:7a:82:f1:64:4f:b9:fb:43:c3:70:98:
16:41:91:02:f5:90:bd:33:8c:4d:d1:ad:00:89:5a:
75:28:3a:bf:d2:bc:b8:10:89:d5:ad:43:db:c3:90:
01:d6:94:7d:e6:4b:ee:71:39:cc:ce:98:77:b3:46:
b1:94:b5:89:eb:1d:4e:27:ed:c7:96:4c:9b:94:bd:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:48:0D:53:D0:BD:43:ED:8F:05:36:CF:93:5B:4E:0F:0C:AB:D6:71
X509v3 Authority Key Identifier:
keyid:E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:81:6c:1e:b7:3b:bb:09:8f:92:68:6c:90:92:cf:71:d6:4d:
72:5c:c3:73:70:b7:42:ac:02:6f:ff:b1:e9:c6:bb:a3:68:dd:
37:bb:78:bb:28:05:c1:61:0b:a9:c0:24:42:34:fd:e6:4a:61:
98:e8:dd:98:a1:a1:30:7f:4a:d7:b7:0d:06:24:a0:cf:57:70:
71:0a:da:41:0d:9c:b3:b4:bf:30:5c:e6:2a:bc:95:dd:f0:6a:
11:40:f6:5f:2f:e6:57:ee:8c:16:46:25:1d:6b:65:a6:6e:a6:
5b:49:9b:c1:8e:14:48:ba:fa:ba:2e:df:37:44:50:88:11:0d:
43:6e:2b:da:e3:98:b3:ed:7a:16:2c:6b:fd:95:c3:67:7a:e3:
db:c6:01:82:27:18:7f:ef:3f:6c:59:3f:86:f2:eb:2a:48:6f:
aa:b2:7a:4e:03:d8:45:64:ef:87:09:01:ac:0d:12:ae:6d:f0:
46:0e:3c:24:b0:60:75:70:2e:05:69:ad:c4:cc:56:ca:4b:8f:
a0:05:e9:39:b6:3e:13:81:b2:c6:de:8e:75:af:f7:5a:95:5c:
17:86:7f:3c:40:74:aa:ac:72:a6:34:bf:4a:a0:fa:16:40:64:
db:23:95:3f:98:0a:4c:13:27:3f:ce:ee:b9:e6:f9:a0:76:95:
9a:40:40:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzODwoodEKEUEjKjymeC1xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OTg0ZjhmMzZlYmY5ZjhmNTRjMTIxNzRmNDYzNjY0ZDdi
MjNhZWUwHhcNMjUxMTExMTQwMDU2WhcNMjUxMTEyMTQwMDU2WjAzMTEwLwYDVQQD
Eyg4ZTQ4MGQ1M2QwYmQ0M2VkOGYwNTM2Y2Y5MzViNGUwZjBjYWJkNjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXk0WrmkPw2lBRR3800EQkwmDuI5
P7D30s9t7XKMgMt7CAKdpwqKmSf4XcEkvfUnubFzOdv2+8wgD5GYqcayWfVQHzdU
g0BnmExw3Jl0lU7NnvhnpHGlT9obgS/WQTf1XKzRWu6ww21VJka5GYIazs5RoVVB
rgv+K8wXY71dGgpqigFDJyFJa71wugUr4Vi9gLQyAwhzHJfpIZbzxBLFMsJUiuiB
rW5o4j6/D04OOljMVrlkXlrfeoLxZE+5+0PDcJgWQZEC9ZC9M4xN0a0AiVp1KDq/
0ry4EInVrUPbw5AB1pR95kvucTnMzph3s0axlLWJ6x1OJ+3HlkyblL0iewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5IDVPQvUPtjwU2z5NbTg8Mq9ZxMB8GA1UdIwQY
MBaAFOSYT4826/n49UwSF09GNmTXsjruMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUpoUGp6YnItZmoxVEJJWFQwWTJaTmV5T3U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81N2Q5MDgtMjA3ZC00OTdjLWFiMTgt
ZGU3YmUxZTVjNzc2LzEvNUpoUGp6YnItZmoxVEJJWFQwWTJaTmV5T3U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81N2Q5MDgtMjA3ZC00OTdjLWFiMTgtZGU3YmUxZTVjNzc2
LzEvNUpoUGp6YnItZmoxVEJJWFQwWTJaTmV5T3U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIFsHrc7
uwmPkmhskJLPcdZNclzDc3C3QqwCb/+x6ca7o2jdN7t4uygFwWELqcAkQjT95kph
mOjdmKGhMH9K17cNBiSgz1dwcQraQQ2cs7S/MFzmKryV3fBqEUD2Xy/mV+6MFkYl
HWtlpm6mW0mbwY4USLr6ui7fN0RQiBENQ24r2uOYs+16Fixr/ZXDZ3rj28YBgicY
f+8/bFk/hvLrKkhvqrJ6TgPYRWTvhwkBrA0Srm3wRg48JLBgdXAuBWmtxMxWykuP
oAXpObY+E4Gyxt6Oda/3WpVcF4Z/PEB0qqxypjS/SqD6FkBk2yOVP5gKTBMnP87u
ueb5oHaVmkBA9g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:25:05 2025 by rpki-client