Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier: NMJKBOP1JAH8sp9Vs1LuFg9TZrBtBnyvsfMIBO7wqo4=
Subject key identifier: 9D:FC:16:61:55:1C:12:EC:E8:70:9D:A1:A1:31:FC:03:72:E4:3B:6C
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial: 019A73DD18D4E12EB285E42D99301FDE85B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 17:01:00 +0000
Manifest this update: Tue 11 Nov 2025 17:01:00 +0000
Manifest next update: Wed 12 Nov 2025 17:01:00 +0000
Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: ugYjiTQJjptTh4LOQLEQfHDM1407Ddu4EfvF9Ym3W9E=)
2: QdF1_Zq92wXCrTWLXFHsTX1fLOE.roa (hash: 3ntgOindNlTLmT1RU6YRq18wFcBPHz2TO/Rc5iQY6kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:dd:18:d4:e1:2e:b2:85:e4:2d:99:30:1f:de:85:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Validity
Not Before: Nov 11 17:01:00 2025 GMT
Not After : Nov 12 17:01:00 2025 GMT
Subject: CN=9dfc1661551c12ece8709da1a131fc0372e43b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:81:d4:54:d7:af:98:26:0d:ed:88:47:a1:
d5:1e:b8:9c:a6:fc:e5:2c:b0:67:2c:d9:47:bd:45:
00:8b:21:6c:86:82:03:b3:67:25:f7:a2:6f:25:32:
01:fc:90:0e:f6:0c:b2:8e:72:92:a6:4e:7c:41:cf:
4b:3c:3e:2c:8f:4f:8e:9f:ec:13:d5:0e:67:1b:0e:
83:3c:e4:c0:0f:bf:f2:13:e6:89:45:f3:b1:5e:f6:
3f:f3:be:ae:92:cf:8d:3a:61:d7:c6:66:8b:dd:67:
eb:22:31:ec:92:e7:a2:de:d9:9e:b2:8f:3b:65:fd:
47:4e:3d:fd:ef:4f:6e:24:cc:52:d7:15:a2:89:d4:
20:32:48:86:f3:ac:d3:76:3c:83:db:20:fd:b9:70:
5a:0b:1e:9c:fe:fd:3c:04:89:64:6e:50:ed:21:43:
fa:62:82:40:06:2e:e6:2c:31:bc:55:9a:d9:60:7b:
3a:c7:a2:97:4c:44:bf:f1:5c:4b:c1:59:9a:db:e9:
32:ce:eb:49:ed:44:60:ef:08:32:3b:14:46:72:eb:
8c:59:d7:30:9f:59:e2:e5:12:47:34:78:20:41:d9:
f1:27:99:f0:74:9d:b6:48:3a:bc:cd:6a:d2:ee:25:
82:de:df:75:28:07:66:8d:a1:15:e7:58:41:08:14:
b2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FC:16:61:55:1C:12:EC:E8:70:9D:A1:A1:31:FC:03:72:E4:3B:6C
X509v3 Authority Key Identifier:
keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6c:56:77:68:3a:b4:74:b3:61:9e:4a:e1:46:2a:2d:72:74:
35:ed:11:7a:d5:6a:90:cc:d0:74:6a:6e:8d:11:5e:3a:85:2e:
39:49:af:0a:e5:2c:36:d5:23:e7:e5:40:66:d6:be:b8:d6:ec:
e7:42:dd:5e:52:b1:22:e1:ef:2a:eb:bf:0c:f5:f4:06:53:15:
55:d0:0a:ed:34:4e:9c:a2:7c:68:e6:18:6d:94:6d:2a:75:cc:
58:7c:a4:16:0b:2c:93:f2:0e:cf:73:f8:dc:87:1a:82:26:3e:
c5:88:ff:79:11:3c:06:3a:8c:76:70:e1:e3:8b:46:11:b5:7d:
7f:28:a9:d0:a1:64:5c:71:18:8b:34:63:25:ee:23:bd:eb:51:
a2:01:d9:0b:02:e9:d8:d4:a7:76:21:dc:88:c7:28:d4:f1:23:
2e:7a:d8:ef:da:6f:ea:9a:04:53:b9:8c:76:84:0d:63:5e:6d:
cb:a1:cd:35:25:14:81:11:3a:0b:3c:4f:b4:c4:f1:66:45:1c:
f7:3b:07:f1:d6:7d:96:4a:75:da:44:dd:f7:6b:54:fc:cd:12:
ac:26:c7:63:e9:1e:52:14:e9:4d:35:2e:1a:ad:e3:10:01:bc:
bd:95:ee:45:e5:74:20:99:ae:33:3a:31:2b:44:5e:0e:b0:1d:
71:cf:8b:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpz3RjU4S6yheQtmTAf3oW1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2OTVjZmIzNmZlNWExZjM4NGNjNzc4YWUyOTlhY2FiODFj
MjdiZmEwHhcNMjUxMTExMTcwMTAwWhcNMjUxMTEyMTcwMTAwWjAzMTEwLwYDVQQD
Eyg5ZGZjMTY2MTU1MWMxMmVjZTg3MDlkYTFhMTMxZmMwMzcyZTQzYjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSOB1FTXr5gmDe2IR6HVHricpvzl
LLBnLNlHvUUAiyFshoIDs2cl96JvJTIB/JAO9gyyjnKSpk58Qc9LPD4sj0+On+wT
1Q5nGw6DPOTAD7/yE+aJRfOxXvY/876uks+NOmHXxmaL3WfrIjHskuei3tmeso87
Zf1HTj39709uJMxS1xWiidQgMkiG86zTdjyD2yD9uXBaCx6c/v08BIlkblDtIUP6
YoJABi7mLDG8VZrZYHs6x6KXTES/8VxLwVma2+kyzutJ7URg7wgyOxRGcuuMWdcw
n1ni5RJHNHggQdnxJ5nwdJ22SDq8zWrS7iWC3t91KAdmjaEV51hBCBSydQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ38FmFVHBLs6HCdoaEx/ANy5DtsMB8GA1UdIwQY
MBaAFOaVz7Nv5aHzhMx3iuKZrKuBwnv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80OGE4YmEtZGM2MS00MmJkLTk0M2Et
YzMxZmE3MWUyNjM1LzEvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi80OGE4YmEtZGM2MS00MmJkLTk0M2EtYzMxZmE3MWUyNjM1
LzEvNXBYUHMyX2xvZk9FekhlSzRwbXNxNEhDZV9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWxWd2g6
tHSzYZ5K4UYqLXJ0Ne0RetVqkMzQdGpujRFeOoUuOUmvCuUsNtUj5+VAZta+uNbs
50LdXlKxIuHvKuu/DPX0BlMVVdAK7TROnKJ8aOYYbZRtKnXMWHykFgssk/IOz3P4
3IcagiY+xYj/eRE8BjqMdnDh44tGEbV9fyip0KFkXHEYizRjJe4jvetRogHZCwLp
2NSndiHciMco1PEjLnrY79pv6poEU7mMdoQNY15ty6HNNSUUgRE6CzxPtMTxZkUc
9zsH8dZ9lkp12kTd92tU/M0SrCbHY+keUhTpTTUuGq3jEAG8vZXuReV0IJmuMzox
K0ReDrAdcc+Lcg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:41:04 2025 by rpki-client