Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
File: _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json)
Hash identifier: cpKtKr1Mf0vmMCkGK7Cv7rOiVp2kfLNqcEf1JzXGd6c=
Subject key identifier: 68:B9:25:9E:5B:42:92:BC:AC:1F:F5:9B:11:B1:BA:02:0A:0A:92:F3
Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
Certificate issuer: /CN=feae54afce51545479c0da03f201a74e29927d78
Certificate serial: 019A2553F77B9CEB6F87EA3C220796188FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
Manifest number: 0726
Signing time: Mon 27 Oct 2025 11:00:51 +0000
Manifest this update: Mon 27 Oct 2025 11:00:51 +0000
Manifest next update: Tue 28 Oct 2025 11:00:51 +0000
Files and hashes: 1: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: Z0WYhqEjNL+0aR687AqtPmL0p2mOQpzSXJap4lvmzv8=)
2: lZoUgcddrDnXe4fT6Iyd3y19EFw.roa (hash: XV7kQikecJKDAAiTDNdfiups4qb65I8y80bxuDG+ZNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:f7:7b:9c:eb:6f:87:ea:3c:22:07:96:18:8f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feae54afce51545479c0da03f201a74e29927d78
Validity
Not Before: Oct 27 11:00:51 2025 GMT
Not After : Oct 28 11:00:51 2025 GMT
Subject: CN=68b9259e5b4292bcac1ff59b11b1ba020a0a92f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:87:93:c2:b7:ae:f8:f2:7a:34:9e:25:82:
38:b9:79:95:6c:9b:98:53:4a:19:07:14:d8:78:60:
5f:f9:8e:41:6a:8e:2c:8e:41:8a:94:f5:40:15:ea:
c4:7a:18:86:65:dc:3a:eb:d1:47:ad:e3:73:70:b2:
3e:a8:21:e2:98:ed:59:08:49:22:90:c1:31:95:36:
99:f2:2d:90:eb:93:07:e6:1f:11:13:f7:e6:e2:df:
14:bc:af:18:e0:23:44:5a:d3:22:62:81:e4:09:58:
c1:5d:73:9b:b4:67:89:f5:23:0d:15:3f:f9:22:d6:
de:d7:fe:3a:30:19:70:67:6d:b0:12:88:69:b6:c0:
d3:7f:29:03:89:0c:6c:83:58:fa:18:cb:48:7e:10:
db:59:c2:8e:35:66:20:79:2e:01:03:ec:ff:f8:92:
c1:1b:8e:53:ac:d4:d0:b3:28:d5:6a:96:95:05:fa:
dd:70:a6:3b:c4:03:e0:2d:a7:6b:36:eb:a5:87:a4:
49:79:9f:85:c3:9a:bd:a8:84:65:43:7b:14:3f:49:
a4:fa:0b:ef:44:e9:ed:89:73:bc:ff:a0:00:f1:7f:
e0:8f:ae:c1:ad:37:8e:f6:c4:af:07:05:38:dd:e9:
95:a2:cc:e4:c8:7e:16:23:e2:54:96:aa:66:65:b9:
9d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B9:25:9E:5B:42:92:BC:AC:1F:F5:9B:11:B1:BA:02:0A:0A:92:F3
X509v3 Authority Key Identifier:
keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b8:05:05:f3:6d:1b:fd:7e:2d:1f:6b:6a:3d:d5:97:bf:be:
28:7a:ff:e7:99:05:be:83:9b:24:f4:7f:5b:4d:1e:2e:3e:30:
79:61:90:0a:5d:65:a1:fa:1e:c3:f7:a2:46:2e:b1:0a:c3:ab:
d0:f1:7c:26:85:63:b6:21:f8:a2:dd:4b:c6:74:ec:5d:ce:4c:
b3:48:dc:b5:3c:5a:18:6d:ff:80:55:02:f8:ef:4a:2d:78:40:
4d:60:3f:e6:d3:58:a0:f1:e6:a9:95:43:60:4a:26:c5:24:dc:
14:7e:fe:14:70:1c:0c:30:16:0e:af:5c:12:e9:fb:b4:68:44:
27:f7:dc:a6:f4:02:d3:6b:df:69:81:ed:ed:a4:15:85:e0:96:
4c:ac:a4:4f:98:83:88:5c:e1:35:80:c2:b8:27:6d:91:0e:36:
90:0b:cf:f6:ac:71:90:44:58:79:72:77:26:5b:6d:c8:1a:75:
d1:8b:19:de:f3:1e:46:f1:a6:af:3c:0f:a3:5f:06:93:c5:70:
47:60:69:23:0a:21:25:99:4f:84:38:37:e4:f4:55:af:fe:ae:
e5:f4:f6:53:ab:3e:e5:49:1a:b1:1e:01:ad:f8:d6:57:92:71:
0b:43:27:9f:e0:34:ed:eb:22:71:8d:66:13:09:d8:5e:df:3b:
24:d8:00:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolU/d7nOtvh+o8IgeWGI/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYWU1NGFmY2U1MTU0NTQ3OWMwZGEwM2YyMDFhNzRlMjk5
MjdkNzgwHhcNMjUxMDI3MTEwMDUxWhcNMjUxMDI4MTEwMDUxWjAzMTEwLwYDVQQD
Eyg2OGI5MjU5ZTViNDI5MmJjYWMxZmY1OWIxMWIxYmEwMjBhMGE5MmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC6Hk8K3rvjyejSeJYI4uXmVbJuY
U0oZBxTYeGBf+Y5Bao4sjkGKlPVAFerEehiGZdw669FHreNzcLI+qCHimO1ZCEki
kMExlTaZ8i2Q65MH5h8RE/fm4t8UvK8Y4CNEWtMiYoHkCVjBXXObtGeJ9SMNFT/5
Itbe1/46MBlwZ22wEohptsDTfykDiQxsg1j6GMtIfhDbWcKONWYgeS4BA+z/+JLB
G45TrNTQsyjVapaVBfrdcKY7xAPgLadrNuulh6RJeZ+Fw5q9qIRlQ3sUP0mk+gvv
ROntiXO8/6AA8X/gj67BrTeO9sSvBwU43emVoszkyH4WI+JUlqpmZbmdZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGi5JZ5bQpK8rB/1mxGxugIKCpLzMB8GA1UdIwQY
MBaAFP6uVK/OUVRUecDaA/IBp04pkn14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3E1VXI4NVJWRlI1d05vRDhnR25UaW1TZlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80ZjAyNjktOTgxOC00MTIzLWJjYmYt
N2E2NTIzMDNhMjhhLzEvX3E1VXI4NVJWRlI1d05vRDhnR25UaW1TZlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80ZjAyNjktOTgxOC00MTIzLWJjYmYtN2E2NTIzMDNhMjhh
LzEvX3E1VXI4NVJWRlI1d05vRDhnR25UaW1TZlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLgFBfNt
G/1+LR9raj3Vl7++KHr/55kFvoObJPR/W00eLj4weWGQCl1lofoew/eiRi6xCsOr
0PF8JoVjtiH4ot1LxnTsXc5Ms0jctTxaGG3/gFUC+O9KLXhATWA/5tNYoPHmqZVD
YEomxSTcFH7+FHAcDDAWDq9cEun7tGhEJ/fcpvQC02vfaYHt7aQVheCWTKykT5iD
iFzhNYDCuCdtkQ42kAvP9qxxkERYeXJ3JlttyBp10YsZ3vMeRvGmrzwPo18Gk8Vw
R2BpIwohJZlPhDg35PRVr/6u5fT2U6s+5UkasR4BrfjWV5JxC0Mnn+A07esicY1m
EwnYXt87JNgAwA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 17:13:00 2025 by rpki-client