Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
File: 5tF7E2U_8ePngi6x5eChf01PeIE.mft (raw, json)
Hash identifier: sqd4ynIJbbYzFtWDI577LwA2B2UlZJ5ZtfIyjVhxjz4=
Subject key identifier: C4:E1:60:EF:7F:39:B5:6B:D7:1B:94:FE:B7:45:56:A9:08:E2:C7:5B
Authority key identifier: E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
Certificate issuer: /CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Certificate serial: 019A70A5396157D0ADA9F58FD5DB578D999E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
Manifest number: 0D34
Signing time: Tue 11 Nov 2025 02:01:07 +0000
Manifest this update: Tue 11 Nov 2025 02:01:07 +0000
Manifest next update: Wed 12 Nov 2025 02:01:07 +0000
Files and hashes: 1: 5tF7E2U_8ePngi6x5eChf01PeIE.crl (hash: 1HZUCBurhh6zP9+/u6/PhUDQiewKo5r3fuEgxJRaxf8=)
2: MwlTna0ke4fMkgBxDifihFV6g70.roa (hash: UKWdlo0uXeQ4k7xeAT+wCpraLRrIa922Ee9c18u5sVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:39:61:57:d0:ad:a9:f5:8f:d5:db:57:8d:99:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Validity
Not Before: Nov 11 02:01:07 2025 GMT
Not After : Nov 12 02:01:07 2025 GMT
Subject: CN=c4e160ef7f39b56bd71b94feb74556a908e2c75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:63:7b:28:af:55:d1:92:fb:94:73:f8:c8:
62:a8:a0:bb:c2:b7:88:a0:de:82:f6:0e:28:52:15:
a0:a3:9f:4b:f7:a3:23:2d:b8:93:25:27:1a:f9:ad:
81:dd:f7:93:4d:06:de:c7:37:0e:32:40:08:e4:62:
72:e2:dc:8d:28:06:82:f0:f0:6a:4c:a9:c5:77:94:
a7:af:dc:78:15:15:bc:69:a4:ad:4b:a5:38:ee:4d:
03:59:6e:85:02:30:a8:54:8d:4f:98:e3:d7:e2:96:
1e:fa:3a:2a:92:15:07:8a:14:47:27:76:3a:18:99:
a8:59:2c:2d:7f:0d:d9:9f:96:81:6c:d2:b9:f0:a6:
a1:90:55:5b:75:b4:45:f4:fe:b2:da:ec:6d:30:93:
ad:6d:d7:05:9b:2f:da:62:6d:6a:75:61:b6:44:20:
fd:29:02:aa:3c:92:59:a9:f7:22:f3:b6:8b:7f:8a:
c5:1d:ee:79:ea:3f:07:d7:02:ad:f0:6a:51:03:e5:
0b:74:d9:5d:db:47:f0:57:5a:ba:75:75:ca:37:9d:
69:44:40:df:49:6a:e9:06:76:b5:3d:02:38:ec:ac:
dd:a4:15:83:ca:3d:15:c7:b5:8e:a5:ca:31:ff:61:
b9:5f:84:7c:ea:d8:d5:7b:76:8d:ae:94:40:a1:85:
9a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E1:60:EF:7F:39:B5:6B:D7:1B:94:FE:B7:45:56:A9:08:E2:C7:5B
X509v3 Authority Key Identifier:
keyid:E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0d:08:6b:87:a1:4d:d2:f3:77:ba:2f:d9:70:b5:61:22:94:
4c:81:3a:fc:1d:f1:ab:30:65:d7:6b:ed:37:a4:f6:f0:f4:dd:
9e:4c:e3:fd:a1:87:5c:94:d7:1a:2d:c3:fa:75:5d:87:73:2f:
af:1d:62:00:fd:ff:3e:d4:88:ee:ff:a4:b1:3b:60:00:3f:ad:
8b:c8:23:ee:0a:91:b0:72:d0:a2:20:a4:ee:0d:56:32:49:56:
5d:9a:e0:1f:7e:5f:49:9a:4d:f2:7e:be:61:6d:b3:26:c6:6a:
b7:99:a9:3e:49:e3:98:dd:c1:ec:e4:f2:31:e6:7b:fd:b0:79:
9c:a7:63:5d:14:49:58:82:2d:39:f0:12:31:83:bf:c5:61:a6:
09:4b:cf:62:23:15:78:3e:7f:7d:e5:d0:04:53:ac:22:74:9a:
56:5b:10:e2:c5:ef:17:d7:1a:8a:c3:64:3f:ef:80:2a:07:ee:
8c:88:66:48:5a:19:a2:2f:ca:f7:ac:90:bc:a4:2d:d7:17:7e:
92:aa:92:29:2f:02:55:d1:08:9c:69:21:f8:21:79:80:b2:cd:
f7:66:a4:73:55:86:ec:2c:87:2b:0d:20:24:70:bb:c3:5d:d8:
a1:c2:f3:55:06:2f:5e:e4:21:59:87:d2:6a:41:eb:9d:69:83:
ff:99:76:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpTlhV9CtqfWP1dtXjZmeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZDE3YjEzNjUzZmYxZTNlNzgyMmViMWU1ZTBhMTdmNGQ0
Zjc4ODEwHhcNMjUxMTExMDIwMTA3WhcNMjUxMTEyMDIwMTA3WjAzMTEwLwYDVQQD
EyhjNGUxNjBlZjdmMzliNTZiZDcxYjk0ZmViNzQ1NTZhOTA4ZTJjNzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwNjeyivVdGS+5Rz+MhiqKC7wreI
oN6C9g4oUhWgo59L96MjLbiTJSca+a2B3feTTQbexzcOMkAI5GJy4tyNKAaC8PBq
TKnFd5Snr9x4FRW8aaStS6U47k0DWW6FAjCoVI1PmOPX4pYe+joqkhUHihRHJ3Y6
GJmoWSwtfw3Zn5aBbNK58KahkFVbdbRF9P6y2uxtMJOtbdcFmy/aYm1qdWG2RCD9
KQKqPJJZqfci87aLf4rFHe556j8H1wKt8GpRA+ULdNld20fwV1q6dXXKN51pREDf
SWrpBna1PQI47KzdpBWDyj0Vx7WOpcox/2G5X4R86tjVe3aNrpRAoYWavwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMThYO9/ObVr1xuU/rdFVqkI4sdbMB8GA1UdIwQY
MBaAFObRexNlP/Hj54IuseXgoX9NT3iBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXRGN0UyVV84ZVBuZ2k2eDVlQ2hmMDFQZUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ODRlM2UtN2I1My00NzVjLTg2MWYt
NmFjZDU4MWQ0YjBmLzEvNXRGN0UyVV84ZVBuZ2k2eDVlQ2hmMDFQZUlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ODRlM2UtN2I1My00NzVjLTg2MWYtNmFjZDU4MWQ0YjBm
LzEvNXRGN0UyVV84ZVBuZ2k2eDVlQ2hmMDFQZUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkg0Ia4eh
TdLzd7ov2XC1YSKUTIE6/B3xqzBl12vtN6T28PTdnkzj/aGHXJTXGi3D+nVdh3Mv
rx1iAP3/PtSI7v+ksTtgAD+ti8gj7gqRsHLQoiCk7g1WMklWXZrgH35fSZpN8n6+
YW2zJsZqt5mpPknjmN3B7OTyMeZ7/bB5nKdjXRRJWIItOfASMYO/xWGmCUvPYiMV
eD5/feXQBFOsInSaVlsQ4sXvF9caisNkP++AKgfujIhmSFoZoi/K96yQvKQt1xd+
kqqSKS8CVdEInGkh+CF5gLLN92akc1WG7CyHKw0gJHC7w13YocLzVQYvXuQhWYfS
akHrnWmD/5l2QQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:51 2025 by rpki-client