Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
File: 5H48mpUfGxWBE6t8PfGd_DNtnu8.mft (raw, json)
Hash identifier: H5Li6B7udzZcpVDHiPCq2VP2gH4wm2AyB+aGVFACmJo=
Subject key identifier: 0C:39:4A:C7:3C:0F:A5:1F:2F:7E:DF:75:BC:78:C4:ED:C2:8A:F8:A3
Authority key identifier: E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF
Certificate issuer: /CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef
Certificate serial: 019A7225C7028F153A2038F16FA5E669E121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
Manifest number: 021E
Signing time: Tue 11 Nov 2025 09:01:09 +0000
Manifest this update: Tue 11 Nov 2025 09:01:09 +0000
Manifest next update: Wed 12 Nov 2025 09:01:09 +0000
Files and hashes: 1: 5H48mpUfGxWBE6t8PfGd_DNtnu8.crl (hash: ykiYTFl6jHQxZekjz2jd29upE6G4ndCVMm/kPdGcUf8=)
2: Q9CRQZy3s0gtS_tA2FymWdsC4t4.roa (hash: 9hBwRUtzjTqHG1Gie71trio1LQkRxaOtaflWu8/l7K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c7:02:8f:15:3a:20:38:f1:6f:a5:e6:69:e1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef
Validity
Not Before: Nov 11 09:01:09 2025 GMT
Not After : Nov 12 09:01:09 2025 GMT
Subject: CN=0c394ac73c0fa51f2f7edf75bc78c4edc28af8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:01:a9:5c:ae:60:bf:26:3f:0e:07:33:b9:
46:78:d9:2e:c4:4e:62:fe:2e:89:b6:33:ad:47:39:
28:69:04:a0:0f:1a:d4:e2:58:f8:91:54:98:f4:de:
2d:27:cb:01:2e:00:a6:61:99:68:28:b5:2c:d2:22:
e4:e4:9e:e1:83:dd:d4:1d:2a:a1:24:5e:fe:28:36:
77:28:d1:d8:9e:8f:9c:81:02:d2:42:7d:ca:f1:73:
e4:a5:de:06:46:5b:6a:bb:e7:5a:1a:88:7c:f2:65:
1f:e5:62:21:74:57:d0:f9:fe:60:89:d5:1c:d4:08:
87:a9:58:b3:2d:bb:db:5f:11:e3:01:ef:6f:91:3e:
db:88:e1:c0:6a:cb:2f:af:c4:b5:06:0c:8f:62:c3:
f7:c1:32:6b:05:5e:b2:16:92:e9:ff:68:0b:d1:26:
28:fd:d3:c7:39:ee:0c:8c:22:d2:eb:62:45:98:af:
0a:4e:12:17:4c:cc:41:ef:5d:c9:21:61:de:ec:45:
1a:bf:18:77:94:53:0e:50:b6:25:69:44:15:88:a0:
9c:3a:df:55:f7:2f:c4:0e:d6:81:e9:17:ef:0c:ab:
fc:31:58:e1:b2:ee:5e:be:6d:ec:49:ff:14:d6:4b:
33:f2:41:de:e9:f9:a2:24:4b:ac:22:e0:fa:55:af:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:39:4A:C7:3C:0F:A5:1F:2F:7E:DF:75:BC:78:C4:ED:C2:8A:F8:A3
X509v3 Authority Key Identifier:
keyid:E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:85:91:e6:fd:f8:50:3c:e5:ad:6a:b7:36:ba:81:9f:fc:63:
ec:44:f3:91:63:c3:e7:6c:6e:87:6a:19:9e:ba:fb:71:72:70:
a1:9c:c1:f7:06:73:c2:38:b6:8f:d1:f8:79:c8:d5:b8:34:5e:
4c:f4:d7:4f:0a:45:9f:f1:56:bf:97:aa:26:81:3e:14:ee:71:
a7:dc:8a:6d:13:9e:71:b4:ba:79:7c:0f:ec:fe:27:08:03:a7:
66:ba:f9:ee:c9:9e:26:01:0c:9a:f9:fc:f5:d8:42:81:42:26:
45:1d:06:d4:bd:5a:0e:c6:27:d6:4c:53:f6:e8:07:b8:6f:e1:
f4:d7:79:4f:4b:b8:8b:47:c6:28:17:16:10:e8:f2:21:c6:90:
ae:98:3b:95:0c:c5:9d:bb:fd:f4:09:7e:2f:59:31:e2:14:2d:
f4:1f:db:7e:d5:54:2a:30:24:97:9a:4b:9d:99:0c:1e:63:bf:
d0:d1:78:7a:e0:62:39:b1:d1:92:ba:c9:d6:34:b7:f0:3e:fa:
b3:f9:b8:0c:1f:d6:ef:50:ad:6b:50:5b:12:f5:53:4b:92:3b:
15:07:45:e8:24:cc:5c:7a:c6:30:bc:2d:9e:87:8e:25:81:bf:
ca:e1:1f:3c:df:66:ae:92:77:0b:f8:c3:91:cf:c6:0d:a5:42:
f5:6f:26:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJccCjxU6IDjxb6XmaeEhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0N2UzYzlhOTUxZjFiMTU4MTEzYWI3YzNkZjE5ZGZjMzM2
ZDllZWYwHhcNMjUxMTExMDkwMTA5WhcNMjUxMTEyMDkwMTA5WjAzMTEwLwYDVQQD
EygwYzM5NGFjNzNjMGZhNTFmMmY3ZWRmNzViYzc4YzRlZGMyOGFmOGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gwBqVyuYL8mPw4HM7lGeNkuxE5i
/i6JtjOtRzkoaQSgDxrU4lj4kVSY9N4tJ8sBLgCmYZloKLUs0iLk5J7hg93UHSqh
JF7+KDZ3KNHYno+cgQLSQn3K8XPkpd4GRltqu+daGoh88mUf5WIhdFfQ+f5gidUc
1AiHqVizLbvbXxHjAe9vkT7biOHAassvr8S1BgyPYsP3wTJrBV6yFpLp/2gL0SYo
/dPHOe4MjCLS62JFmK8KThIXTMxB713JIWHe7EUavxh3lFMOULYlaUQViKCcOt9V
9y/EDtaB6RfvDKv8MVjhsu5evm3sSf8U1ksz8kHe6fmiJEusIuD6Va9W4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAw5Ssc8D6UfL37fdbx4xO3CivijMB8GA1UdIwQY
MBaAFOR+PJqVHxsVgROrfD3xnfwzbZ7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUg0OG1wVWZHeFdCRTZ0OFBmR2RfRE50bnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MGFlZDEtNmY3NC00M2E5LTk3NmYt
N2VkNWUzMWFlNDRmLzEvNUg0OG1wVWZHeFdCRTZ0OFBmR2RfRE50bnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82MGFlZDEtNmY3NC00M2E5LTk3NmYtN2VkNWUzMWFlNDRm
LzEvNUg0OG1wVWZHeFdCRTZ0OFBmR2RfRE50bnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4WR5v34
UDzlrWq3NrqBn/xj7ETzkWPD52xuh2oZnrr7cXJwoZzB9wZzwji2j9H4ecjVuDRe
TPTXTwpFn/FWv5eqJoE+FO5xp9yKbROecbS6eXwP7P4nCAOnZrr57smeJgEMmvn8
9dhCgUImRR0G1L1aDsYn1kxT9ugHuG/h9Nd5T0u4i0fGKBcWEOjyIcaQrpg7lQzF
nbv99Al+L1kx4hQt9B/bftVUKjAkl5pLnZkMHmO/0NF4euBiObHRkrrJ1jS38D76
s/m4DB/W71Cta1BbEvVTS5I7FQdF6CTMXHrGMLwtnoeOJYG/yuEfPN9mrpJ3C/jD
kc/GDaVC9W8mGw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:26 2025 by rpki-client