Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
File: 5QwixmuF-smN6D12HvQkNDerA5M.mft (raw, json)
Hash identifier: kgiTwA3U57JHCoa9DzBkFH7bzsszKSJlp4sTjOS99Ww=
Subject key identifier: 2A:E3:8E:45:DF:61:1C:B1:6F:27:99:EC:18:1E:04:0C:E1:AB:C2:0B
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Certificate issuer: /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial: 019A2B1F1AF2B7FFB181BF427512C3353E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
Manifest number: 1397
Signing time: Tue 28 Oct 2025 14:00:50 +0000
Manifest this update: Tue 28 Oct 2025 14:00:50 +0000
Manifest next update: Wed 29 Oct 2025 14:00:50 +0000
Files and hashes: 1: 5QwixmuF-smN6D12HvQkNDerA5M.crl (hash: zHemFMQgfJfgI2MDEBbgy+m5iGRrOSy8mKLjqPYQJFY=)
2: 5vvZLFuVzrlfVEjgWVSSvDzWzYc.roa (hash: d36pZwdlPn9b+lfJWHYLiYs9ysvYmjF2/rOLd55l7Go=)
3: f1b7by6SkYswASAnSv-cgB5XP2Y.roa (hash: x+DctqLC1gEcaYW0QmBitaKdQAwlen0XRAIQGmNrAQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1f:1a:f2:b7:ff:b1:81:bf:42:75:12:c3:35:3e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
Validity
Not Before: Oct 28 14:00:50 2025 GMT
Not After : Oct 29 14:00:50 2025 GMT
Subject: CN=2ae38e45df611cb16f2799ec181e040ce1abc20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:4c:a4:79:d3:ba:97:0b:94:96:f6:41:a3:
93:98:4f:a2:9e:32:6b:bb:fe:21:9b:7e:f3:8d:1c:
94:a3:16:d6:d7:e9:de:9b:b1:1f:b8:d7:6e:d7:0a:
71:75:31:7a:92:c2:db:a9:2b:1c:2c:3f:e4:cc:db:
4c:35:fa:be:0e:ac:96:c8:ca:b4:63:98:6a:b8:06:
67:fb:5e:a4:a5:79:c5:52:cb:bd:98:e8:4c:00:3a:
45:8c:92:ab:54:12:95:bd:f0:06:db:70:60:10:9c:
3c:85:91:3a:66:66:60:12:7a:52:47:1d:74:ee:f4:
1e:ea:0a:6e:3e:3b:7b:ed:ba:82:5b:92:a6:2e:50:
a5:27:b5:cb:f2:92:4b:5f:9d:2b:44:b1:e0:87:f9:
73:6c:72:f7:c8:12:df:cb:dc:ae:f6:6a:d5:25:06:
21:49:63:32:f4:00:bc:6f:c7:0b:a8:32:5c:36:19:
1e:15:b5:38:96:e1:b5:fe:27:08:a3:9b:11:04:7e:
ba:73:3d:54:b9:e5:d4:82:42:cd:7f:82:15:96:c0:
5c:84:22:e1:ee:3c:d0:0e:08:b2:b8:24:e2:43:61:
5b:2a:49:d8:42:6e:81:3b:ef:b8:e3:b3:2a:5e:79:
ec:63:58:32:af:ec:26:88:a4:d8:76:ec:d0:b0:59:
ed:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E3:8E:45:DF:61:1C:B1:6F:27:99:EC:18:1E:04:0C:E1:AB:C2:0B
X509v3 Authority Key Identifier:
keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:dc:de:e1:86:11:a6:88:3f:40:e7:2d:ad:8e:c4:41:a4:2e:
de:7f:92:b7:ac:eb:c6:aa:ad:ee:8b:78:ba:ee:a0:40:76:62:
0b:40:a4:d7:d5:da:91:de:43:e5:ef:7c:24:e0:46:02:d9:cb:
33:3b:5d:3f:81:51:95:5e:12:43:ed:0c:ef:71:89:36:0f:e7:
e1:f9:06:d1:63:23:fe:e9:1f:09:ad:b9:f0:94:14:fe:55:56:
3f:11:65:1b:cf:bd:dc:b2:e3:31:36:64:ba:bd:72:52:16:bb:
d0:65:87:e3:0f:0c:61:d2:82:35:22:a4:1e:4c:c0:84:c5:b8:
e2:58:02:19:7d:bd:8a:ad:cf:81:bd:2d:2f:f9:2a:db:b3:ba:
03:b9:49:e7:a9:e9:fa:47:c0:77:85:cb:48:70:82:44:a3:cc:
2b:c2:f5:91:28:a6:68:ae:c0:41:3f:6a:67:11:19:d2:fb:7c:
49:8b:da:ce:16:d9:74:8b:a3:fa:15:66:f2:4a:2d:31:ea:4c:
25:b8:dc:26:6f:62:ae:81:a1:cd:2b:55:d1:a4:a2:95:d2:1d:
d0:95:4b:8c:e2:80:d2:f4:7f:c2:69:b6:39:1e:de:3d:ce:f3:
b1:af:47:2d:e2:6c:b0:36:a0:65:9c:f4:ad:80:27:e9:79:ad:
54:b9:6a:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZorHxryt/+xgb9CdRLDNT6GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MGMyMmM2NmI4NWZhYzk4ZGU4M2Q3NjFlZjQyNDM0Mzdh
YjAzOTMwHhcNMjUxMDI4MTQwMDUwWhcNMjUxMDI5MTQwMDUwWjAzMTEwLwYDVQQD
EygyYWUzOGU0NWRmNjExY2IxNmYyNzk5ZWMxODFlMDQwY2UxYWJjMjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1BMpHnTupcLlJb2QaOTmE+injJr
u/4hm37zjRyUoxbW1+nem7EfuNdu1wpxdTF6ksLbqSscLD/kzNtMNfq+DqyWyMq0
Y5hquAZn+16kpXnFUsu9mOhMADpFjJKrVBKVvfAG23BgEJw8hZE6ZmZgEnpSRx10
7vQe6gpuPjt77bqCW5KmLlClJ7XL8pJLX50rRLHgh/lzbHL3yBLfy9yu9mrVJQYh
SWMy9AC8b8cLqDJcNhkeFbU4luG1/icIo5sRBH66cz1UueXUgkLNf4IVlsBchCLh
7jzQDgiyuCTiQ2FbKknYQm6BO++447MqXnnsY1gyr+wmiKTYduzQsFntVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrjjkXfYRyxbyeZ7BgeBAzhq8ILMB8GA1UdIwQY
MBaAFOUMIsZrhfrJjeg9dh70JDQ3qwOTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVF3aXhtdUYtc21ONkQxMkh2UWtORGVyQTVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yYjdmZTktMmE4Ny00YzU3LWIxMDgt
OTIxNDI3ODEwOGE4LzEvNVF3aXhtdUYtc21ONkQxMkh2UWtORGVyQTVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8yYjdmZTktMmE4Ny00YzU3LWIxMDgtOTIxNDI3ODEwOGE4
LzEvNVF3aXhtdUYtc21ONkQxMkh2UWtORGVyQTVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9ze4YYR
pog/QOctrY7EQaQu3n+St6zrxqqt7ot4uu6gQHZiC0Ck19Xakd5D5e98JOBGAtnL
MztdP4FRlV4SQ+0M73GJNg/n4fkG0WMj/ukfCa258JQU/lVWPxFlG8+93LLjMTZk
ur1yUha70GWH4w8MYdKCNSKkHkzAhMW44lgCGX29iq3Pgb0tL/kq27O6A7lJ56np
+kfAd4XLSHCCRKPMK8L1kSimaK7AQT9qZxEZ0vt8SYvazhbZdIuj+hVm8kotMepM
JbjcJm9iroGhzStV0aSildId0JVLjOKA0vR/wmm2OR7ePc7zsa9HLeJssDagZZz0
rYAn6XmtVLlqDw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 22:13:44 2025 by rpki-client