Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
File: 5KnudPLZhMiKs7ma5x0LfHuvgVA.mft (raw, json)
Hash identifier: 4jRwwuguSWqKlGnS7bq/jKofj1qMHOq5DQxGdDmF7gU=
Subject key identifier: F8:50:58:00:CF:A8:CB:6C:88:62:EE:15:02:A8:DC:49:45:55:E7:17
Authority key identifier: E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
Certificate issuer: /CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Certificate serial: 019A71B7A5C1ECBD03741C16E5135E3C8C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:00:52 +0000
Manifest this update: Tue 11 Nov 2025 07:00:52 +0000
Manifest next update: Wed 12 Nov 2025 07:00:52 +0000
Files and hashes: 1: 1kmQygnKJuFomMWscO7_tmV5MPY.roa (hash: 1R7F/hqJ/U8XRXU5qTBNp/iBMwQ2HNOAJ68qC4TlDwI=)
2: 5KnudPLZhMiKs7ma5x0LfHuvgVA.crl (hash: JW4gcgMAkFmtGcwanya4FdZgM0meuTLpuU3agz9HF8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a5:c1:ec:bd:03:74:1c:16:e5:13:5e:3c:8c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Validity
Not Before: Nov 11 07:00:52 2025 GMT
Not After : Nov 12 07:00:52 2025 GMT
Subject: CN=f8505800cfa8cb6c8862ee1502a8dc494555e717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:8e:78:d9:7f:5e:62:d0:29:60:12:16:fc:
97:90:ef:96:71:92:09:be:72:2b:fa:7a:f0:e5:df:
97:a3:21:a8:18:ea:6e:98:06:1d:a4:84:71:a7:64:
aa:48:2f:91:94:68:00:f1:50:00:56:55:02:67:5a:
71:78:8b:e9:34:13:b9:14:5f:a4:0c:13:14:72:ee:
4c:47:f1:e2:69:cf:40:41:15:ef:c5:27:cf:d4:2c:
60:8a:18:56:06:26:d3:97:5c:bf:44:49:ac:24:5d:
72:e5:15:a6:be:c1:c3:e9:31:53:1a:c8:73:fa:81:
03:06:2c:c5:38:99:1e:a4:1c:cd:18:a3:b5:61:7d:
5a:60:79:eb:49:f4:c4:f4:89:78:5f:aa:b7:58:82:
05:07:49:64:8a:f2:83:36:b8:d9:20:5c:85:6a:42:
3f:4e:90:71:2b:94:ed:d4:3e:ef:69:6c:95:66:55:
29:26:bc:2c:fc:34:97:36:c2:34:f2:dc:b8:5a:56:
4a:8a:b6:58:6c:70:0a:a3:a1:ab:0a:19:80:ad:a1:
db:52:01:60:98:94:93:60:de:30:e3:70:d9:c3:c6:
66:4e:a1:4d:54:b7:b9:c6:fc:fd:17:d3:c1:44:4f:
59:f0:84:65:7b:38:4b:6a:6b:c8:3e:21:76:41:2d:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:50:58:00:CF:A8:CB:6C:88:62:EE:15:02:A8:DC:49:45:55:E7:17
X509v3 Authority Key Identifier:
keyid:E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:39:a3:0f:e8:1c:72:7f:bd:10:7f:cb:10:91:da:c2:6f:74:
61:40:bb:b7:ac:77:8c:0a:2e:7b:6d:22:11:76:04:ff:e3:55:
fd:04:5c:58:e9:14:fc:93:f9:12:ac:e1:94:b3:60:42:10:f7:
c5:e6:90:e0:de:82:a8:ea:1f:5b:29:31:16:cf:7b:f9:78:05:
fe:9c:d9:e8:0e:e7:87:14:fc:65:59:fc:81:75:03:a3:ac:47:
c2:fa:76:23:26:1a:d6:ae:b8:bf:16:10:6d:2c:b6:f4:1e:04:
da:c9:e1:f4:76:82:b6:69:de:a4:7c:66:19:08:a8:11:fb:d8:
9b:83:bb:15:37:18:a1:af:b8:20:a0:88:c9:5b:b8:35:5a:f2:
a9:d3:92:5f:c8:07:fc:85:90:5f:15:78:ef:33:cd:20:c1:de:
b7:27:56:46:c1:13:0a:60:a7:26:f3:3a:38:04:e4:e5:53:27:
74:c3:90:52:d7:40:e8:5c:1e:b9:1b:10:c1:a4:0e:50:34:e7:
b3:ab:90:36:b4:29:c9:26:77:7f:90:39:1c:9a:41:60:f8:ee:
2e:0d:6e:be:bb:eb:00:e0:1b:c1:24:70:02:d2:de:f6:33:ce:
0b:37:85:98:ec:c2:cd:6c:3d:be:4b:f7:87:6a:65:79:75:68:
14:20:48:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt6XB7L0DdBwW5RNePIxlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTllZTc0ZjJkOTg0Yzg4YWIzYjk5YWU3MWQwYjdjN2Jh
ZjgxNTAwHhcNMjUxMTExMDcwMDUyWhcNMjUxMTEyMDcwMDUyWjAzMTEwLwYDVQQD
EyhmODUwNTgwMGNmYThjYjZjODg2MmVlMTUwMmE4ZGM0OTQ1NTVlNzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSiOeNl/XmLQKWASFvyXkO+WcZIJ
vnIr+nrw5d+XoyGoGOpumAYdpIRxp2SqSC+RlGgA8VAAVlUCZ1pxeIvpNBO5FF+k
DBMUcu5MR/Hiac9AQRXvxSfP1CxgihhWBibTl1y/REmsJF1y5RWmvsHD6TFTGshz
+oEDBizFOJkepBzNGKO1YX1aYHnrSfTE9Il4X6q3WIIFB0lkivKDNrjZIFyFakI/
TpBxK5Tt1D7vaWyVZlUpJrws/DSXNsI08ty4WlZKirZYbHAKo6GrChmAraHbUgFg
mJSTYN4w43DZw8ZmTqFNVLe5xvz9F9PBRE9Z8IRlezhLamvIPiF2QS1dBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhQWADPqMtsiGLuFQKo3ElFVecXMB8GA1UdIwQY
MBaAFOSp7nTy2YTIirO5mucdC3x7r4FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtudWRQTFpoTWlLczdtYTV4MExmSHV2Z1ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lYWRjOTUtZGFhZi00Nzc2LTliZTgt
ZDJjMGJlNDQ4NTYxLzEvNUtudWRQTFpoTWlLczdtYTV4MExmSHV2Z1ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9lYWRjOTUtZGFhZi00Nzc2LTliZTgtZDJjMGJlNDQ4NTYx
LzEvNUtudWRQTFpoTWlLczdtYTV4MExmSHV2Z1ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqjmjD+gc
cn+9EH/LEJHawm90YUC7t6x3jAoue20iEXYE/+NV/QRcWOkU/JP5EqzhlLNgQhD3
xeaQ4N6CqOofWykxFs97+XgF/pzZ6A7nhxT8ZVn8gXUDo6xHwvp2IyYa1q64vxYQ
bSy29B4E2snh9HaCtmnepHxmGQioEfvYm4O7FTcYoa+4IKCIyVu4NVryqdOSX8gH
/IWQXxV47zPNIMHetydWRsETCmCnJvM6OATk5VMndMOQUtdA6FweuRsQwaQOUDTn
s6uQNrQpySZ3f5A5HJpBYPjuLg1uvrvrAOAbwSRwAtLe9jPOCzeFmOzCzWw9vkv3
h2pleXVoFCBILw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:06 2025 by rpki-client