Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
File: 05L4_Jhunx0-S_BfypZZoIgdcAM.mft (raw, json)
Hash identifier: aAgKhtao8qdcqFuhsPZc3SjOnBGv71Q1yixIDNuYy/k=
Subject key identifier: 92:5C:1C:53:E9:34:A6:2F:2F:7E:D3:6A:59:88:17:A4:A8:72:D8:A0
Authority key identifier: D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03
Certificate issuer: /CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
Certificate serial: 019A722656F0A93ADE7E3358ED967E20E155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:46 +0000
Manifest this update: Tue 11 Nov 2025 09:01:46 +0000
Manifest next update: Wed 12 Nov 2025 09:01:46 +0000
Files and hashes: 1: 05L4_Jhunx0-S_BfypZZoIgdcAM.crl (hash: 41gPvPkrCJLLRzpnxk8TbnpwrLYompJDJac9vuZMFkw=)
2: ERfV3_AHrLYigXx8U5FimrME4a4.roa (hash: kvXysfA19vdf9ZpdNwdZyFu3Veq/rlxvog9k5IItPng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:56:f0:a9:3a:de:7e:33:58:ed:96:7e:20:e1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
Validity
Not Before: Nov 11 09:01:46 2025 GMT
Not After : Nov 12 09:01:46 2025 GMT
Subject: CN=925c1c53e934a62f2f7ed36a598817a4a872d8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a0:bf:3c:8c:2e:c8:a3:5b:d3:f8:05:b1:ba:
da:b5:d6:b8:bc:85:8b:9c:87:4f:ba:30:88:ce:50:
84:b5:0e:80:be:1d:a1:09:81:fc:fb:15:ca:ab:39:
2e:79:34:6e:28:e3:5b:65:05:2e:bf:a6:85:65:e1:
0d:db:cb:0a:2a:4f:2b:4a:40:81:18:d4:01:c3:99:
47:60:7d:87:1c:c3:1a:c7:c0:85:b8:ca:e0:e1:a2:
43:26:b3:67:ea:c8:37:be:bd:15:e4:be:58:6c:54:
df:eb:3c:43:77:b6:1d:79:d6:78:48:20:c2:12:82:
b9:20:be:16:d7:02:bb:ae:8b:80:3f:ba:a1:fd:8f:
63:8c:d6:6e:92:a1:5e:90:68:f6:79:46:ba:a2:d1:
2f:11:0a:27:94:bf:ad:54:db:fa:08:a3:fe:2b:a1:
97:0a:1e:4c:60:ff:e9:83:fe:79:bc:3a:7b:71:b9:
ff:1a:bb:73:14:5d:58:b7:0f:fd:c1:39:9b:dc:fd:
50:28:58:42:ab:2b:55:dd:14:e1:f0:06:55:52:23:
03:84:ff:9c:9e:0d:d3:2f:76:2b:9a:ee:6b:09:43:
86:e7:3f:6d:2b:d1:a7:ce:98:92:fc:13:65:88:21:
e9:87:1b:72:31:6c:25:74:94:d8:8f:90:67:07:08:
6a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5C:1C:53:E9:34:A6:2F:2F:7E:D3:6A:59:88:17:A4:A8:72:D8:A0
X509v3 Authority Key Identifier:
keyid:D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7b:ac:92:78:ea:50:17:8a:f6:3c:92:9c:9d:1c:5f:b0:3b:
04:ed:b6:20:75:27:51:43:e2:e4:9c:92:00:e3:62:48:68:fc:
44:d1:8b:ed:6d:19:71:a6:0c:57:fe:24:7d:19:f7:97:84:af:
60:5d:a9:59:f5:3d:f7:b6:d7:ae:df:53:6c:ce:76:de:08:40:
8e:a5:be:8e:6c:5f:eb:03:7f:6f:6b:7d:5a:da:37:ee:d8:ac:
c6:c4:12:ed:8c:08:ce:30:16:91:b8:23:91:16:64:3d:63:d4:
11:ec:54:9d:2f:8e:5a:ad:c1:5c:4d:d9:3e:d3:76:e5:a8:df:
7c:d4:51:09:90:15:e5:a4:60:b4:dd:40:b4:0b:53:92:c4:38:
9a:fb:0f:ec:ab:2e:ce:ba:a9:23:05:ad:fd:55:cb:4c:10:6d:
f8:e1:ba:40:76:e0:58:31:54:66:ef:03:4f:a0:74:92:a9:fd:
2d:c4:37:d8:b7:f9:16:b8:b4:c5:62:9c:ed:99:75:f0:cc:4a:
28:b8:ed:f8:b4:dd:68:f7:68:69:ec:c6:d1:8b:5b:be:b0:45:
37:bd:d9:de:c7:d7:7c:28:20:0b:d1:0d:00:6e:90:0a:14:72:
6f:b9:1c:6f:a6:e7:1f:da:bb:4e:10:97:50:48:7b:5a:40:2b:
6e:4b:ab:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJlbwqTrefjNY7ZZ+IOFVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzOTJmOGZjOTg2ZTlmMWQzZTRiZjA1ZmNhOTY1OWEwODgx
ZDcwMDMwHhcNMjUxMTExMDkwMTQ2WhcNMjUxMTEyMDkwMTQ2WjAzMTEwLwYDVQQD
Eyg5MjVjMWM1M2U5MzRhNjJmMmY3ZWQzNmE1OTg4MTdhNGE4NzJkOGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6C/PIwuyKNb0/gFsbratda4vIWL
nIdPujCIzlCEtQ6Avh2hCYH8+xXKqzkueTRuKONbZQUuv6aFZeEN28sKKk8rSkCB
GNQBw5lHYH2HHMMax8CFuMrg4aJDJrNn6sg3vr0V5L5YbFTf6zxDd7YdedZ4SCDC
EoK5IL4W1wK7rouAP7qh/Y9jjNZukqFekGj2eUa6otEvEQonlL+tVNv6CKP+K6GX
Ch5MYP/pg/55vDp7cbn/GrtzFF1Ytw/9wTmb3P1QKFhCqytV3RTh8AZVUiMDhP+c
ng3TL3Yrmu5rCUOG5z9tK9GnzpiS/BNliCHphxtyMWwldJTYj5BnBwhq0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJcHFPpNKYvL37TalmIF6SoctigMB8GA1UdIwQY
MBaAFNOS+PyYbp8dPkvwX8qWWaCIHXADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDVMNF9KaHVueDAtU19CZnlwWlpvSWdkY0FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8yZDBiNDctZjAyNi00Zjk4LTlmZTkt
MWJiNzE2NDI3Y2E5LzEvMDVMNF9KaHVueDAtU19CZnlwWlpvSWdkY0FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8yZDBiNDctZjAyNi00Zjk4LTlmZTktMWJiNzE2NDI3Y2E5
LzEvMDVMNF9KaHVueDAtU19CZnlwWlpvSWdkY0FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3usknjq
UBeK9jySnJ0cX7A7BO22IHUnUUPi5JySAONiSGj8RNGL7W0ZcaYMV/4kfRn3l4Sv
YF2pWfU997bXrt9TbM523ghAjqW+jmxf6wN/b2t9Wto37tisxsQS7YwIzjAWkbgj
kRZkPWPUEexUnS+OWq3BXE3ZPtN25ajffNRRCZAV5aRgtN1AtAtTksQ4mvsP7Ksu
zrqpIwWt/VXLTBBt+OG6QHbgWDFUZu8DT6B0kqn9LcQ32Lf5Fri0xWKc7Zl18MxK
KLjt+LTdaPdoaezG0YtbvrBFN73Z3sfXfCggC9ENAG6QChRyb7kcb6bnH9q7ThCX
UEh7WkArbkurTA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:26 2025 by rpki-client