Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: 1l4GfFz7u3v08lB0ZlH/3SnZ8RI0jR6qqak0hfsyjqU=
Subject key identifier: 26:E1:E6:07:3B:86:F6:E5:56:D3:AD:A9:60:0B:D5:E0:25:1D:D9:98
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 019A1B3DB2A3098EC8DCFF2D9219244725CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 12:00:19 +0000
Manifest this update: Sat 25 Oct 2025 12:00:19 +0000
Manifest next update: Sun 26 Oct 2025 12:00:19 +0000
Files and hashes: 1: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: DAhEbm6gk2u6Z+0EnAotPKgWTLnIt92vcigFBL1arGE=)
2: FR3a7fbq59iIo0zAlvy5kzi1iZU.roa (hash: Z35c/JbC3hZCBf85VdNEpndC+c0TUxZMQxPjJSIsAQ0=)
3: suPxSfpNrh7z5_Ta2x6TjwnQ2sY.roa (hash: jrCuL3fpLVTl6VSsAmka/tgQrfuz/laa7SHWrZ9+ExE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:3d:b2:a3:09:8e:c8:dc:ff:2d:92:19:24:47:25:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Oct 25 12:00:19 2025 GMT
Not After : Oct 26 12:00:19 2025 GMT
Subject: CN=26e1e6073b86f6e556d3ada9600bd5e0251dd998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1e:37:ad:7c:94:5b:2a:0d:73:b8:dd:de:0e:
7d:34:cc:9b:bf:fb:c0:bd:bd:b9:a0:40:11:44:c0:
a0:4f:fe:75:1c:fb:ac:6c:48:d7:2d:fc:7d:ed:fa:
1f:be:f8:0f:57:8b:da:be:28:cc:b6:fa:29:89:ae:
49:60:42:2c:eb:d8:f5:51:43:47:e5:99:c2:22:e3:
d1:2d:46:0c:4c:55:87:00:54:3d:29:4b:c0:e7:da:
03:ea:99:ca:7f:42:80:5c:d3:f6:1e:b1:c0:c9:af:
ec:30:eb:05:78:f0:e6:1a:0d:57:f8:87:10:1c:ee:
36:14:5d:a8:bd:98:d1:8d:8a:df:62:ad:ea:22:fc:
34:b0:4e:cf:1c:5a:3d:0d:53:68:33:cb:3a:a1:6b:
fe:d3:99:60:94:cc:9c:86:b4:27:54:e6:21:9a:d5:
a5:c8:a9:9f:d0:63:8a:ef:ad:3b:2a:6e:61:63:ef:
66:b7:0e:11:ef:44:0d:58:92:46:45:63:09:9c:a3:
0e:3e:63:ea:89:5e:6a:78:cd:b0:77:b7:68:75:ac:
74:4b:b2:cd:b3:df:29:e5:05:90:2b:49:43:1b:f6:
4b:ef:15:d2:ad:f5:93:6e:46:5d:55:5d:21:75:66:
87:be:ab:d7:4b:45:e0:de:be:7d:de:9d:73:c8:e7:
18:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E1:E6:07:3B:86:F6:E5:56:D3:AD:A9:60:0B:D5:E0:25:1D:D9:98
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:60:11:48:5b:e3:0e:cb:50:6f:25:c3:db:ac:d6:4e:8a:1f:
e2:06:74:ba:e6:64:03:48:c5:ac:81:21:0a:34:11:a1:8b:3a:
a2:7f:b4:71:80:d2:da:79:42:8f:c1:a7:c7:59:dc:42:68:2a:
2d:0c:4a:e7:b7:18:8f:4b:fa:e7:80:92:36:12:b9:fc:d1:ca:
ef:d3:1d:00:b1:44:0f:88:ee:c5:e3:f9:6c:f7:4e:95:f1:0d:
2b:7e:7a:ac:8a:28:b5:69:f7:a8:7a:68:9a:7c:b3:3e:44:58:
10:46:bd:ba:b6:79:30:c6:85:90:e9:c3:e6:10:db:09:61:33:
16:16:f1:ce:8e:54:a8:ec:13:d6:27:f4:d2:1c:22:c0:e7:e1:
52:dc:49:38:a5:1e:9a:96:b7:54:df:32:00:2b:a6:56:9c:2a:
52:84:7d:71:6a:ae:24:ac:bc:9c:68:de:5e:53:08:53:1b:09:
3e:2f:13:77:b7:b2:de:ae:1c:d0:66:e8:54:03:76:ef:86:53:
37:d1:af:6e:4b:34:04:a2:2f:0b:aa:f8:97:79:fe:d0:6e:73:
1a:32:a5:bb:21:ca:a0:d5:62:cf:ad:b0:c4:e0:29:cd:0b:eb:
12:2f:fe:77:5e:5a:90:4b:a0:42:03:84:e4:8f:96:1f:60:1c:
28:9b:73:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZobPbKjCY7I3P8tkhkkRyXLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1M2FkOWI0MzJiYjgzZDE0MWM0ODBkZWU3OGJjMzVmZjQ3
Y2I3MmMwHhcNMjUxMDI1MTIwMDE5WhcNMjUxMDI2MTIwMDE5WjAzMTEwLwYDVQQD
EygyNmUxZTYwNzNiODZmNmU1NTZkM2FkYTk2MDBiZDVlMDI1MWRkOTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B43rXyUWyoNc7jd3g59NMybv/vA
vb25oEARRMCgT/51HPusbEjXLfx97fofvvgPV4vavijMtvopia5JYEIs69j1UUNH
5ZnCIuPRLUYMTFWHAFQ9KUvA59oD6pnKf0KAXNP2HrHAya/sMOsFePDmGg1X+IcQ
HO42FF2ovZjRjYrfYq3qIvw0sE7PHFo9DVNoM8s6oWv+05lglMychrQnVOYhmtWl
yKmf0GOK7607Km5hY+9mtw4R70QNWJJGRWMJnKMOPmPqiV5qeM2wd7dodax0S7LN
s98p5QWQK0lDG/ZL7xXSrfWTbkZdVV0hdWaHvqvXS0Xg3r593p1zyOcYZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbh5gc7hvblVtOtqWAL1eAlHdmYMB8GA1UdIwQY
MBaAFOU62bQyu4PRQcSA3ueLw1/0fLcsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUt
MDliYjUyODc1MzFiLzEvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUtMDliYjUyODc1MzFi
LzEvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImARSFvj
DstQbyXD26zWToof4gZ0uuZkA0jFrIEhCjQRoYs6on+0cYDS2nlCj8Gnx1ncQmgq
LQxK57cYj0v654CSNhK5/NHK79MdALFED4juxeP5bPdOlfENK356rIootWn3qHpo
mnyzPkRYEEa9urZ5MMaFkOnD5hDbCWEzFhbxzo5UqOwT1if00hwiwOfhUtxJOKUe
mpa3VN8yACumVpwqUoR9cWquJKy8nGjeXlMIUxsJPi8Td7ey3q4c0GboVAN274ZT
N9Gvbks0BKIvC6r4l3n+0G5zGjKluyHKoNViz62wxOApzQvrEi/+d15akEugQgOE
5I+WH2AcKJtzRw==
-----END CERTIFICATE-----
Generated at Sat Oct 25 13:41:41 2025 by rpki-client