Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
File: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft (raw, json)
Hash identifier: RjZKOwke0NPVJAWmpvlZHgExcECpM8E0ofbzmgDNfac=
Subject key identifier: 6B:CB:B7:A1:DA:A5:95:23:23:CE:82:7A:24:51:8B:58:1D:07:19:38
Authority key identifier: E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61
Certificate issuer: /CN=e43957deba816c9600ce0a4d07fca7d306efee61
Certificate serial: 019A71136D728C613AACD103C13844BB11F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
Manifest number: 01D4
Signing time: Tue 11 Nov 2025 04:01:29 +0000
Manifest this update: Tue 11 Nov 2025 04:01:29 +0000
Manifest next update: Wed 12 Nov 2025 04:01:29 +0000
Files and hashes: 1: 5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl (hash: dQlh9jRg8+m2hJjg+YnMBgc03HxLGcRCf+JHbtAOoF0=)
2: NM7UvKaTOGBhqz3Waw4Aop_d3I8.roa (hash: CuECrw6IivHOvgLxpf0LZMc5frIWOtpPKmC4FcLgXSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:6d:72:8c:61:3a:ac:d1:03:c1:38:44:bb:11:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43957deba816c9600ce0a4d07fca7d306efee61
Validity
Not Before: Nov 11 04:01:29 2025 GMT
Not After : Nov 12 04:01:29 2025 GMT
Subject: CN=6bcbb7a1daa5952323ce827a24518b581d071938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:2e:c8:a6:3f:43:fc:26:20:34:b0:60:9e:
62:e3:13:68:6e:a4:dd:03:94:09:0f:7d:b7:e3:e3:
7e:3a:01:b1:be:5e:0e:4a:9d:3f:dd:aa:7f:e1:73:
f6:6b:20:48:ad:65:63:ee:56:0e:27:56:1c:24:f5:
79:20:09:75:be:60:4c:14:a5:04:96:b2:69:96:80:
23:9d:0c:d4:bd:fc:14:42:1f:89:7e:a9:20:be:09:
97:ce:e7:92:2c:e1:dc:23:f3:98:4d:34:00:29:1d:
fc:66:5c:20:56:4e:c3:f1:ab:e6:c1:53:29:5a:7c:
59:93:ae:d2:95:ab:00:cf:86:c0:fb:cd:cb:4d:e9:
71:88:0a:c6:8c:ed:aa:c5:20:52:07:c4:14:ec:93:
3a:ec:16:da:a7:c0:ad:b2:e6:11:fd:23:1c:d5:52:
80:18:6e:9c:38:8c:db:e3:b3:ed:0f:88:b9:33:67:
b4:f7:02:7a:9c:25:62:e9:26:26:38:25:c7:1e:50:
55:47:36:60:ad:9e:4f:a5:d8:3c:1a:59:5e:5f:ef:
d9:e8:85:57:55:4b:85:be:3a:69:9f:ed:93:31:fd:
81:88:9a:23:89:08:c9:e0:e9:f8:7a:8f:58:a9:8f:
96:91:21:06:6c:46:84:d5:1d:a6:92:70:be:e5:bd:
42:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CB:B7:A1:DA:A5:95:23:23:CE:82:7A:24:51:8B:58:1D:07:19:38
X509v3 Authority Key Identifier:
keyid:E4:39:57:DE:BA:81:6C:96:00:CE:0A:4D:07:FC:A7:D3:06:EF:EE:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DlX3rqBbJYAzgpNB_yn0wbv7mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8a024-6c06-4f98-a834-e63362098c70/1/5DlX3rqBbJYAzgpNB_yn0wbv7mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f6:cb:4b:9f:ff:c4:2d:f9:62:31:2c:31:a6:50:3e:9f:ea:
83:35:de:7a:bc:21:eb:41:5f:75:8e:b6:26:1b:42:cb:a4:78:
b0:5c:ec:13:37:8f:4c:f8:96:60:1b:02:73:6e:f4:7a:ac:9d:
69:8c:01:6d:8e:aa:df:77:d6:7b:f3:57:a4:b6:60:bc:a0:b4:
39:48:c6:08:e1:63:d5:7b:04:d1:b0:7a:ea:b7:51:9d:a0:29:
e4:77:d3:15:35:8c:2b:66:2d:bf:8c:b6:d0:f1:22:71:9f:42:
7f:3f:d5:fe:c0:ca:5a:39:71:b8:d3:1f:57:4f:26:c2:d3:e5:
df:f1:56:92:af:69:7d:03:46:12:94:90:b8:d9:7f:7a:9e:f9:
2c:81:88:1b:a8:4e:fd:60:31:a8:73:61:c9:be:b3:5e:8f:4a:
90:3b:ed:b6:17:63:95:bc:f5:70:f0:86:59:dc:54:d1:47:c7:
b7:b0:da:b5:4d:ff:e4:83:87:07:6e:2c:8a:39:b8:dc:eb:74:
55:3f:19:9d:44:23:1f:dc:88:40:b1:ad:25:3d:dc:24:62:a2:
e7:0e:2e:4e:d2:f7:e7:b2:71:f7:fe:80:c4:cb:cf:46:ca:ac:
9a:a9:8c:bf:ae:01:d2:98:74:29:98:b2:51:f2:9b:2c:93:fc:
2a:bb:f9:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE21yjGE6rNEDwThEuxHzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0Mzk1N2RlYmE4MTZjOTYwMGNlMGE0ZDA3ZmNhN2QzMDZl
ZmVlNjEwHhcNMjUxMTExMDQwMTI5WhcNMjUxMTEyMDQwMTI5WjAzMTEwLwYDVQQD
Eyg2YmNiYjdhMWRhYTU5NTIzMjNjZTgyN2EyNDUxOGI1ODFkMDcxOTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5guyKY/Q/wmIDSwYJ5i4xNobqTd
A5QJD3234+N+OgGxvl4OSp0/3ap/4XP2ayBIrWVj7lYOJ1YcJPV5IAl1vmBMFKUE
lrJploAjnQzUvfwUQh+JfqkgvgmXzueSLOHcI/OYTTQAKR38ZlwgVk7D8avmwVMp
WnxZk67SlasAz4bA+83LTelxiArGjO2qxSBSB8QU7JM67Bbap8CtsuYR/SMc1VKA
GG6cOIzb47PtD4i5M2e09wJ6nCVi6SYmOCXHHlBVRzZgrZ5Ppdg8GlleX+/Z6IVX
VUuFvjppn+2TMf2BiJojiQjJ4On4eo9YqY+WkSEGbEaE1R2mknC+5b1ChQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvLt6HapZUjI86CeiRRi1gdBxk4MB8GA1UdIwQY
MBaAFOQ5V966gWyWAM4KTQf8p9MG7+5hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNURsWDNycUJiSllBemdwTkJfeW4wd2J2N21FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kOGEwMjQtNmMwNi00Zjk4LWE4MzQt
ZTYzMzYyMDk4YzcwLzEvNURsWDNycUJiSllBemdwTkJfeW4wd2J2N21FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9kOGEwMjQtNmMwNi00Zjk4LWE4MzQtZTYzMzYyMDk4Yzcw
LzEvNURsWDNycUJiSllBemdwTkJfeW4wd2J2N21FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtvbLS5//
xC35YjEsMaZQPp/qgzXeerwh60FfdY62JhtCy6R4sFzsEzePTPiWYBsCc270eqyd
aYwBbY6q33fWe/NXpLZgvKC0OUjGCOFj1XsE0bB66rdRnaAp5HfTFTWMK2Ytv4y2
0PEicZ9Cfz/V/sDKWjlxuNMfV08mwtPl3/FWkq9pfQNGEpSQuNl/ep75LIGIG6hO
/WAxqHNhyb6zXo9KkDvtthdjlbz1cPCGWdxU0UfHt7DatU3/5IOHB24sijm43Ot0
VT8ZnUQjH9yIQLGtJT3cJGKi5w4uTtL357Jx9/6AxMvPRsqsmqmMv64B0ph0KZiy
UfKbLJP8Krv5lg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:29 2025 by rpki-client