Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
File: 5GZIM5avs3fl43nRYVveD9TZ7Uc.mft (raw, json)
Hash identifier: uEOMhrTYbcAVqsCx4ye2+W0bfC6JxSb7Nw6di0CtDeg=
Subject key identifier: AC:30:F1:A0:99:3A:12:4B:A6:74:61:C7:E7:B1:1A:5F:B8:B9:35:63
Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
Certificate issuer: /CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Certificate serial: 019A722665067882C028EF59E35177E2AE1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
Manifest number: 0E16
Signing time: Tue 11 Nov 2025 09:01:49 +0000
Manifest this update: Tue 11 Nov 2025 09:01:49 +0000
Manifest next update: Wed 12 Nov 2025 09:01:49 +0000
Files and hashes: 1: 5GZIM5avs3fl43nRYVveD9TZ7Uc.crl (hash: 241rIl/9j5gbMpDYLGSHN8ImG/7zaRRoSaZmkcPkwlo=)
2: Btqt9dHmfyCgZm5YxFkx4BjR-Dc.roa (hash: O8dRjpLSf+cl4rOTaaTPD9tud0oWl3levwWO3JGp7jw=)
3: TLd_ZXXp2Q2UgInwhLKUEKhwDUc.roa (hash: IaRGq7PGoes/uNGrRRu/Qh4aGHDMpqDn5kGzUSwYnj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:65:06:78:82:c0:28:ef:59:e3:51:77:e2:ae:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Validity
Not Before: Nov 11 09:01:49 2025 GMT
Not After : Nov 12 09:01:49 2025 GMT
Subject: CN=ac30f1a0993a124ba67461c7e7b11a5fb8b93563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:ac:91:ea:44:94:7c:4a:c1:4a:e4:4d:c7:
a6:7b:b9:9f:80:3a:e4:e5:2d:b0:b1:7f:6a:74:d1:
1e:91:cd:95:a5:28:e4:76:dc:ea:7a:b7:c0:c0:56:
69:d7:bf:98:09:60:5e:b3:98:b3:dd:15:b3:d7:1a:
18:2b:35:f5:61:7d:e3:30:e9:71:8a:91:4e:d7:ff:
c5:9c:b9:ae:cc:bd:fc:9a:e5:2a:c2:5b:19:ba:73:
23:ac:62:a8:97:b1:32:8a:cd:94:d0:f8:c5:f6:1e:
dc:54:0a:25:f4:e2:23:d3:69:84:d0:a5:85:90:d4:
db:b2:21:50:97:b6:61:ff:0f:93:40:5f:3c:e3:c3:
0c:7c:42:16:ea:72:d5:15:aa:f5:80:b4:6b:3a:90:
bc:02:e6:7a:03:73:c8:ea:fb:f0:e3:3d:43:75:e2:
4c:0e:80:58:64:ae:0a:cd:6a:3c:c0:ef:1a:f3:f1:
2b:58:c5:77:86:f5:d5:d2:fa:9c:3d:8b:3e:60:0c:
5c:74:30:86:9a:24:65:56:df:ef:db:ff:b8:90:bc:
d7:3b:77:96:fc:5f:43:0e:69:ae:cf:7f:78:5f:33:
0a:df:7c:3f:44:57:09:ff:16:12:7e:18:5d:77:19:
ea:5f:2a:cd:d4:31:43:23:39:41:1d:54:b3:39:cc:
0f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:30:F1:A0:99:3A:12:4B:A6:74:61:C7:E7:B1:1A:5F:B8:B9:35:63
X509v3 Authority Key Identifier:
keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a9:20:e5:cc:21:09:86:d8:34:48:f5:31:a9:a8:af:40:6c:
7d:b2:0b:62:97:cc:da:75:f8:bb:91:c7:79:6d:aa:a7:6f:8e:
10:80:c1:ea:5f:a8:23:53:b7:ee:cb:65:b6:42:5e:76:fd:3b:
b8:9a:3a:b4:f5:18:ec:f2:6a:bc:54:99:09:10:c7:34:ad:66:
8e:64:53:36:cd:ba:57:d2:8b:83:f0:0d:c8:fc:b3:84:31:6e:
c8:e2:49:0d:5d:89:fc:20:4d:54:51:a0:cb:42:67:49:21:31:
05:12:80:8d:bb:54:40:81:f3:75:95:ad:71:da:5f:e5:6c:4c:
6a:fc:c1:89:36:40:b0:dd:ae:f3:46:2c:2b:87:2b:64:ce:f8:
12:f8:64:38:d5:a3:3a:9c:8e:e2:6c:23:b8:d7:7f:16:7b:86:
11:9a:b8:ca:a4:51:76:32:7d:16:d0:8e:c0:6f:85:3c:1c:bb:
06:07:d0:83:0a:48:4f:e3:41:00:fd:63:ce:2b:c8:cf:88:4b:
20:6a:00:c3:42:e1:8c:4e:32:d9:ae:b2:6f:1a:6a:8f:d1:19:
80:ca:16:c1:4c:03:c3:b0:d9:bb:80:33:3f:cb:90:1a:ac:98:
e6:6f:dc:ba:a7:ca:7e:20:3e:a3:00:65:eb:1c:17:f5:c8:e7:
21:3a:51:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJmUGeILAKO9Z41F34q4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NjY0ODMzOTZhZmIzNzdlNWUzNzlkMTYxNWJkZTBmZDRk
OWVkNDcwHhcNMjUxMTExMDkwMTQ5WhcNMjUxMTEyMDkwMTQ5WjAzMTEwLwYDVQQD
EyhhYzMwZjFhMDk5M2ExMjRiYTY3NDYxYzdlN2IxMWE1ZmI4YjkzNTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw6skepElHxKwUrkTceme7mfgDrk
5S2wsX9qdNEekc2VpSjkdtzqerfAwFZp17+YCWBes5iz3RWz1xoYKzX1YX3jMOlx
ipFO1//FnLmuzL38muUqwlsZunMjrGKol7Eyis2U0PjF9h7cVAol9OIj02mE0KWF
kNTbsiFQl7Zh/w+TQF8848MMfEIW6nLVFar1gLRrOpC8AuZ6A3PI6vvw4z1DdeJM
DoBYZK4KzWo8wO8a8/ErWMV3hvXV0vqcPYs+YAxcdDCGmiRlVt/v2/+4kLzXO3eW
/F9DDmmuz394XzMK33w/RFcJ/xYSfhhddxnqXyrN1DFDIzlBHVSzOcwPowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKww8aCZOhJLpnRhx+exGl+4uTVjMB8GA1UdIwQY
MBaAFORmSDOWr7N35eN50WFb3g/U2e1HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUdaSU01YXZzM2ZsNDNuUllWdmVEOVRaN1VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xOGI1YmItOGU0MS00ZTg4LWJkYmUt
MzQxYzYzNjE0MjgwLzEvNUdaSU01YXZzM2ZsNDNuUllWdmVEOVRaN1VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8xOGI1YmItOGU0MS00ZTg4LWJkYmUtMzQxYzYzNjE0Mjgw
LzEvNUdaSU01YXZzM2ZsNDNuUllWdmVEOVRaN1VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKkg5cwh
CYbYNEj1Mamor0BsfbILYpfM2nX4u5HHeW2qp2+OEIDB6l+oI1O37stltkJedv07
uJo6tPUY7PJqvFSZCRDHNK1mjmRTNs26V9KLg/ANyPyzhDFuyOJJDV2J/CBNVFGg
y0JnSSExBRKAjbtUQIHzdZWtcdpf5WxMavzBiTZAsN2u80YsK4crZM74EvhkONWj
OpyO4mwjuNd/FnuGEZq4yqRRdjJ9FtCOwG+FPBy7BgfQgwpIT+NBAP1jzivIz4hL
IGoAw0LhjE4y2a6ybxpqj9EZgMoWwUwDw7DZu4AzP8uQGqyY5m/cuqfKfiA+owBl
6xwX9cjnITpRtg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:48:41 2025 by rpki-client