Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
File: 5_4i9VHpWw8VAzxQNVLkm8phfGo.mft (raw, json)
Hash identifier: 5BB2YWgV9MVDMJtR4YF6CFYwMnmWzYjkxVC151iQrJw=
Subject key identifier: F3:92:6D:FF:50:CF:28:1F:25:7D:29:4F:51:15:E9:C0:2A:C7:10:B4
Authority key identifier: E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
Certificate issuer: /CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Certificate serial: 019A5307F459D55D103F43F1571ECB4A9824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
Manifest number: 0378
Signing time: Wed 05 Nov 2025 08:00:21 +0000
Manifest this update: Wed 05 Nov 2025 08:00:21 +0000
Manifest next update: Thu 06 Nov 2025 08:00:21 +0000
Files and hashes: 1: 5_4i9VHpWw8VAzxQNVLkm8phfGo.crl (hash: 8BgFwofOmuTPwVRN78ztFEqDf8ArSyGWl1b2H50Ux6Q=)
2: THghgq3_4L1NVnK6KOFYexQq5SI.roa (hash: /zrwFkLWh9pajQgZXuExr20G8aRLgJD9APPdVLa4mp8=)
3: teYc1cFeqUuzMd-dJeyJRJ9jp-k.roa (hash: SD6wWRBAQPvJFZ63a4Ws+sFA/hBOJ/3xD8PJ20JClwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:f4:59:d5:5d:10:3f:43:f1:57:1e:cb:4a:98:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fe22f551e95b0f15033c503552e49bca617c6a
Validity
Not Before: Nov 5 08:00:21 2025 GMT
Not After : Nov 6 08:00:21 2025 GMT
Subject: CN=f3926dff50cf281f257d294f5115e9c02ac710b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9c:02:c7:68:03:aa:01:b0:79:a8:e9:b2:c4:
9f:f4:f2:3b:52:12:0e:86:1f:d4:02:74:75:be:fa:
f5:54:fa:d9:0f:74:95:60:00:b6:65:3c:30:69:e1:
ec:ff:54:66:72:f1:77:cc:6b:3c:85:e3:56:fb:48:
2a:0b:a2:a7:5a:b9:a2:47:ec:74:ba:2b:d7:c7:51:
b7:4d:eb:da:cb:c1:53:07:a9:22:00:97:6e:23:86:
22:24:b6:bf:89:6c:47:94:d1:9b:a9:82:b8:db:2a:
15:e7:85:0d:4c:52:51:8c:aa:2f:ad:20:c0:26:61:
7d:51:a3:8f:7d:67:3c:d8:a4:db:27:c7:43:d2:9f:
05:04:90:59:2a:4f:bb:23:c6:db:6c:1f:61:31:27:
2b:bb:77:e3:96:0a:19:ac:03:8e:1c:37:a3:42:7b:
5d:d7:5c:cf:05:91:f8:04:93:1f:50:1b:3e:4b:75:
c9:68:9d:6c:d3:62:84:f0:5e:db:6f:8a:65:6a:c7:
8c:49:86:91:0e:fd:d4:f9:63:91:e4:ba:ad:81:4a:
94:fa:ed:89:a6:d9:b5:62:f5:d0:24:c8:31:ad:f3:
57:55:e0:fa:b6:5d:76:16:5e:68:56:50:e5:03:2b:
ba:38:6a:74:6f:ce:a9:bd:73:39:36:c9:04:2c:1c:
99:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:92:6D:FF:50:CF:28:1F:25:7D:29:4F:51:15:E9:C0:2A:C7:10:B4
X509v3 Authority Key Identifier:
keyid:E7:FE:22:F5:51:E9:5B:0F:15:03:3C:50:35:52:E4:9B:CA:61:7C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_4i9VHpWw8VAzxQNVLkm8phfGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d612e3-94eb-4866-b43c-e40b301401a9/1/5_4i9VHpWw8VAzxQNVLkm8phfGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:9a:35:b6:8a:f1:84:93:2a:0a:37:ab:2d:6b:95:4e:b7:e2:
c4:a0:12:17:f6:d1:e4:d6:cf:85:61:41:db:7f:d4:cc:ab:36:
0d:dc:f9:93:6c:09:32:af:80:c9:8e:b1:2a:3c:ba:c2:bc:d4:
13:42:9b:f9:6c:7c:f2:34:ea:55:a4:85:29:01:e5:99:fb:f4:
f7:d1:26:5b:e3:00:dd:93:4e:50:3c:c8:86:d9:a7:fc:61:db:
15:1b:f4:9d:17:56:58:7a:74:2a:f2:4e:c7:16:32:bb:45:32:
b1:13:f7:92:16:0c:65:70:6a:ef:eb:84:92:f5:a2:a9:8f:d9:
95:db:30:fb:0b:d1:29:4a:9c:bd:0e:18:69:ce:fb:1d:7f:41:
56:65:d9:9b:56:de:f0:53:cb:d9:81:4a:b9:8b:b8:7e:d8:53:
8f:59:48:65:aa:30:52:c2:f6:44:5c:aa:d5:d8:75:d0:30:35:
c0:c5:63:9c:d1:80:5c:3a:6c:8c:3d:55:c2:2e:cb:a8:93:bc:
28:b1:08:7b:46:0f:8e:18:75:9c:6a:58:5f:e2:a4:c6:09:f8:
23:e7:f2:96:e0:19:95:86:be:3e:49:a8:fd:7a:7b:5a:03:94:
11:47:c7:18:79:2a:69:ac:f7:66:5b:b2:63:a4:33:c9:3c:c1:
64:83:cf:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTB/RZ1V0QP0PxVx7LSpgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmUyMmY1NTFlOTViMGYxNTAzM2M1MDM1NTJlNDliY2E2
MTdjNmEwHhcNMjUxMTA1MDgwMDIxWhcNMjUxMTA2MDgwMDIxWjAzMTEwLwYDVQQD
EyhmMzkyNmRmZjUwY2YyODFmMjU3ZDI5NGY1MTE1ZTljMDJhYzcxMGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJwCx2gDqgGweajpssSf9PI7UhIO
hh/UAnR1vvr1VPrZD3SVYAC2ZTwwaeHs/1RmcvF3zGs8heNW+0gqC6KnWrmiR+x0
uivXx1G3Tevay8FTB6kiAJduI4YiJLa/iWxHlNGbqYK42yoV54UNTFJRjKovrSDA
JmF9UaOPfWc82KTbJ8dD0p8FBJBZKk+7I8bbbB9hMScru3fjlgoZrAOOHDejQntd
11zPBZH4BJMfUBs+S3XJaJ1s02KE8F7bb4plaseMSYaRDv3U+WOR5LqtgUqU+u2J
ptm1YvXQJMgxrfNXVeD6tl12Fl5oVlDlAyu6OGp0b86pvXM5NskELByZ+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOSbf9QzygfJX0pT1EV6cAqxxC0MB8GA1UdIwQY
MBaAFOf+IvVR6VsPFQM8UDVS5JvKYXxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kNjEyZTMtOTRlYi00ODY2LWI0M2Mt
ZTQwYjMwMTQwMWE5LzEvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9kNjEyZTMtOTRlYi00ODY2LWI0M2MtZTQwYjMwMTQwMWE5
LzEvNV80aTlWSHBXdzhWQXp4UU5WTGttOHBoZkdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAupo1torx
hJMqCjerLWuVTrfixKASF/bR5NbPhWFB23/UzKs2Ddz5k2wJMq+AyY6xKjy6wrzU
E0Kb+Wx88jTqVaSFKQHlmfv099EmW+MA3ZNOUDzIhtmn/GHbFRv0nRdWWHp0KvJO
xxYyu0UysRP3khYMZXBq7+uEkvWiqY/Zldsw+wvRKUqcvQ4Yac77HX9BVmXZm1be
8FPL2YFKuYu4fthTj1lIZaowUsL2RFyq1dh10DA1wMVjnNGAXDpsjD1Vwi7LqJO8
KLEIe0YPjhh1nGpYX+Kkxgn4I+fyluAZlYa+Pkmo/Xp7WgOUEUfHGHkqaaz3Zluy
Y6QzyTzBZIPPEQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:55:40 2025 by rpki-client