Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
File: 5Neqo9JcL5677HTIMMwM3pMYyPg.mft (raw, json)
Hash identifier: yue3pk9madmNPKR2OhE+teS99fa7z2aiAgnn/lCkz/A=
Subject key identifier: 52:21:36:2F:AE:6B:DC:2C:71:C2:C3:B3:D9:9C:3E:24:B6:55:32:E1
Authority key identifier: E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
Certificate issuer: /CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Certificate serial: 019A4E18D720C18CD180EB697C2F74A99D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
Manifest number: 063A
Signing time: Tue 04 Nov 2025 09:00:41 +0000
Manifest this update: Tue 04 Nov 2025 09:00:41 +0000
Manifest next update: Wed 05 Nov 2025 09:00:41 +0000
Files and hashes: 1: 5Neqo9JcL5677HTIMMwM3pMYyPg.crl (hash: vClgkxs+NlPb7ad+rIDP6zTlPmuFM0qmJ+xgjtKD/bs=)
2: XdhbDlsmi-wLrPkew-d4TMCD4uQ.roa (hash: GZ7CAjXYNkyYQQ/5CpNjIQ4FPx45ItKMUE3PHSgxPGM=)
3: wSUmQHvgicp0DUrp54U8e4B9bSs.roa (hash: 6yxPMXDSw6KRHugvWVrYp4LQxI6BlFDftXD+dNw90ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d7:20:c1:8c:d1:80:eb:69:7c:2f:74:a9:9d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Validity
Not Before: Nov 4 09:00:41 2025 GMT
Not After : Nov 5 09:00:41 2025 GMT
Subject: CN=5221362fae6bdc2c71c2c3b3d99c3e24b65532e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6f:c7:0d:2c:cb:36:de:f9:b0:1a:09:2b:3f:
3d:5e:41:72:c9:de:cf:ed:cc:e3:85:1d:1b:8f:27:
b5:74:5f:ca:65:0e:33:b6:3f:ce:93:a7:ae:5a:da:
7c:66:fb:5a:66:62:db:27:34:1b:b0:b0:1d:f1:b9:
02:1a:73:da:8d:c8:fa:58:91:5c:1a:b6:a0:b7:71:
28:16:9d:2d:ca:df:e6:92:be:6f:92:84:9b:fb:e8:
53:b3:42:d8:bf:68:e4:cd:01:8c:78:81:b8:10:bb:
fb:dd:a2:20:23:9a:b0:38:52:5d:ca:6b:b8:91:d8:
34:1d:ea:79:49:1a:ef:cc:be:2c:af:df:28:11:ed:
a1:2c:06:a5:7c:c2:5e:7e:38:f7:f9:d0:ae:69:59:
1b:53:a2:6f:9c:79:d0:28:2b:50:bc:0e:11:20:70:
00:69:dc:a2:1e:4e:b2:9b:7e:54:9d:0b:96:03:03:
4b:05:4d:01:fa:18:49:19:c1:ef:97:12:58:73:5b:
61:f8:e2:5f:19:85:42:31:e4:1d:fc:16:5c:aa:cb:
fe:d7:46:8c:7d:01:a8:96:05:10:72:9c:e4:9a:ee:
fe:d9:57:c0:47:9f:45:a3:75:83:20:84:50:5c:4e:
24:7f:ab:98:0a:55:10:29:1e:d3:07:ad:73:0b:2b:
d8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:21:36:2F:AE:6B:DC:2C:71:C2:C3:B3:D9:9C:3E:24:B6:55:32:E1
X509v3 Authority Key Identifier:
keyid:E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4f:bd:b8:f5:92:ac:08:07:8a:53:fa:08:d7:62:1e:1d:2a:
bb:e0:64:c9:20:9f:5c:49:7d:49:38:d7:c5:e6:e5:c0:55:90:
52:5e:ad:ac:6e:88:29:cb:51:ff:90:80:65:91:5b:cf:95:9e:
9a:07:bc:06:a7:ae:69:2c:3f:41:2b:95:26:dc:cb:ff:e3:78:
2f:62:5d:d8:2f:fe:95:2f:30:a8:96:5a:09:27:b1:88:61:07:
14:ad:0f:86:32:e9:8c:b4:88:b8:1f:f5:b7:73:c2:7b:39:15:
37:07:5f:39:a1:87:5f:7d:15:35:fc:4a:24:82:0a:a0:2d:ae:
40:e6:b6:79:ca:48:d3:7f:25:b9:2a:1b:ed:16:52:4b:cd:56:
c2:15:3f:88:7e:24:fd:11:00:0a:19:55:a1:31:23:a3:b4:e6:
a6:2f:7a:fb:4a:84:aa:0c:6e:a8:94:af:79:04:1f:9e:38:c7:
57:24:f6:d6:ce:43:7c:2e:9c:5c:97:e8:1f:e7:53:19:72:7c:
04:dd:3c:b2:b9:e3:a9:73:6b:9a:26:21:cc:c9:64:07:6e:94:
f4:b6:bd:41:63:4b:d5:20:8d:5c:83:25:f3:27:e6:28:85:2f:
00:d9:39:b5:be:84:33:e7:aa:61:51:94:17:14:24:ca:9a:94:
2f:a5:53:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGNcgwYzRgOtpfC90qZ1rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZDdhYWEzZDI1YzJmOWViYmVjNzRjODMwY2MwY2RlOTMx
OGM4ZjgwHhcNMjUxMTA0MDkwMDQxWhcNMjUxMTA1MDkwMDQxWjAzMTEwLwYDVQQD
Eyg1MjIxMzYyZmFlNmJkYzJjNzFjMmMzYjNkOTljM2UyNGI2NTUzMmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW/HDSzLNt75sBoJKz89XkFyyd7P
7czjhR0bjye1dF/KZQ4ztj/Ok6euWtp8ZvtaZmLbJzQbsLAd8bkCGnPajcj6WJFc
Gragt3EoFp0tyt/mkr5vkoSb++hTs0LYv2jkzQGMeIG4ELv73aIgI5qwOFJdymu4
kdg0Hep5SRrvzL4sr98oEe2hLAalfMJefjj3+dCuaVkbU6JvnHnQKCtQvA4RIHAA
adyiHk6ym35UnQuWAwNLBU0B+hhJGcHvlxJYc1th+OJfGYVCMeQd/BZcqsv+10aM
fQGolgUQcpzkmu7+2VfAR59Fo3WDIIRQXE4kf6uYClUQKR7TB61zCyvY9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIhNi+ua9wsccLDs9mcPiS2VTLhMB8GA1UdIwQY
MBaAFOTXqqPSXC+eu+x0yDDMDN6TGMj4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5lcW85SmNMNTY3N0hUSU1Nd00zcE1ZeVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84YjQxNDctZTZlMC00ZDgwLWE5M2Yt
ZWY2M2I4MTZkZDM1LzEvNU5lcW85SmNMNTY3N0hUSU1Nd00zcE1ZeVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84YjQxNDctZTZlMC00ZDgwLWE5M2YtZWY2M2I4MTZkZDM1
LzEvNU5lcW85SmNMNTY3N0hUSU1Nd00zcE1ZeVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADE+9uPWS
rAgHilP6CNdiHh0qu+BkySCfXEl9STjXxeblwFWQUl6trG6IKctR/5CAZZFbz5We
mge8BqeuaSw/QSuVJtzL/+N4L2Jd2C/+lS8wqJZaCSexiGEHFK0PhjLpjLSIuB/1
t3PCezkVNwdfOaGHX30VNfxKJIIKoC2uQOa2ecpI038luSob7RZSS81WwhU/iH4k
/REAChlVoTEjo7Tmpi96+0qEqgxuqJSveQQfnjjHVyT21s5DfC6cXJfoH+dTGXJ8
BN08srnjqXNrmiYhzMlkB26U9La9QWNL1SCNXIMl8yfmKIUvANk5tb6EM+eqYVGU
FxQkypqUL6VThA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:49 2025 by rpki-client