Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
File: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft (raw, json)
Hash identifier: cSD8nFnT/n5j4/WsK9UrFQJfTctbQcm9zdTy1a07Y8U=
Subject key identifier: 23:04:00:9E:D8:0B:DF:03:63:9B:50:32:03:10:B9:AB:D9:5B:3C:00
Authority key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
Certificate issuer: /CN=fb959fb90a158f17de5d8296df954482a8d6211c
Certificate serial: 019A4EF501A96BA629B30963904671015EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
Manifest number: 0566
Signing time: Tue 04 Nov 2025 13:01:10 +0000
Manifest this update: Tue 04 Nov 2025 13:01:10 +0000
Manifest next update: Wed 05 Nov 2025 13:01:10 +0000
Files and hashes: 1: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl (hash: hXX7qYfxgSpeHgaLp3nsPEV6VdkxlmVYjtIsP1DIAVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:01:a9:6b:a6:29:b3:09:63:90:46:71:01:5e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb959fb90a158f17de5d8296df954482a8d6211c
Validity
Not Before: Nov 4 13:01:10 2025 GMT
Not After : Nov 5 13:01:10 2025 GMT
Subject: CN=2304009ed80bdf03639b50320310b9abd95b3c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b7:9f:39:22:f3:f3:c4:0f:64:7e:dd:ad:e6:
97:11:42:60:e3:fe:82:87:4f:2f:79:91:2e:93:94:
07:cc:dc:bf:aa:6b:1c:f3:78:73:60:ee:ff:e7:8b:
45:35:21:fe:53:c0:d4:60:13:7e:03:95:28:2a:eb:
a5:51:de:b2:5b:01:67:ce:d7:c7:f6:f1:e5:9f:be:
fd:6d:4b:77:fb:77:42:ea:94:21:3f:eb:fc:c9:c2:
46:b7:c6:8f:3f:8c:0f:f8:94:af:22:31:7c:46:0d:
cb:38:e5:b9:4f:08:76:93:f2:52:a7:ad:7e:1e:e6:
0b:83:16:ba:8e:52:ec:0f:ef:44:50:f6:96:a5:3c:
c1:5b:56:88:9c:86:cf:23:33:71:76:69:80:e7:2e:
57:e3:94:d8:a4:bd:bf:12:e6:de:8b:ed:26:65:21:
3a:90:74:15:57:aa:dd:c3:c6:25:c0:b9:7b:b3:e4:
cc:32:57:90:fa:cc:02:2d:40:31:6a:8c:a3:cc:3e:
4d:f4:8a:b1:cf:63:b3:9e:6a:e1:72:f1:bd:94:18:
00:34:61:7b:0f:19:cd:dc:9a:47:7d:a5:75:24:de:
40:9d:e5:9c:02:52:d9:dd:f7:e2:41:ad:c1:c2:64:
f5:64:a8:97:30:7d:07:ec:9f:b5:8e:fb:9d:8f:10:
8b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:04:00:9E:D8:0B:DF:03:63:9B:50:32:03:10:B9:AB:D9:5B:3C:00
X509v3 Authority Key Identifier:
keyid:FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b7:89:4d:30:9f:5d:43:6c:92:f4:20:2f:63:1f:56:a9:61:
af:cd:c4:75:b8:f5:1d:52:f5:eb:20:2b:a8:4f:99:a3:dd:ea:
60:e9:11:b6:ca:4f:8a:8d:c1:56:e4:2c:e7:c5:59:89:2e:49:
d2:5d:b8:bc:3d:1d:13:69:df:72:d1:33:18:4a:90:16:ca:73:
5b:b9:bb:ad:38:22:92:eb:39:10:f5:da:c4:f6:25:d2:d4:08:
40:30:e4:42:1f:d9:9f:6c:96:17:0d:d2:d4:87:6e:be:d8:f2:
a3:7b:9f:2d:b6:f7:82:59:f2:91:94:61:e5:11:ec:3e:fe:d6:
6c:7e:01:10:a4:07:4a:ae:aa:14:76:c8:9a:10:12:2f:9c:9b:
92:a1:91:86:aa:fc:3e:0f:a9:0f:e3:4b:8c:ae:bd:a6:cc:1f:
7b:07:11:ed:6c:d4:92:72:b4:5e:d0:5c:fc:ac:f2:7b:e5:d9:
2f:7c:57:9b:8d:04:26:55:01:4d:77:83:c3:26:80:73:e8:12:
41:dd:07:29:b9:b2:2c:8a:ee:9b:e9:db:ef:7f:a2:45:d1:30:
2d:47:b0:c1:f9:ef:8b:8a:be:01:0d:30:0b:75:d9:2d:a0:e6:
b8:ac:8a:8b:77:c2:cd:e0:a5:f9:1a:e3:9b:af:1a:3d:63:b0:
7a:81:32:f1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpO9QGpa6YpswljkEZxAV7CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOTU5ZmI5MGExNThmMTdkZTVkODI5NmRmOTU0NDgyYThk
NjIxMWMwHhcNMjUxMTA0MTMwMTEwWhcNMjUxMTA1MTMwMTEwWjAzMTEwLwYDVQQD
EygyMzA0MDA5ZWQ4MGJkZjAzNjM5YjUwMzIwMzEwYjlhYmQ5NWIzYzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbefOSLz88QPZH7dreaXEUJg4/6C
h08veZEuk5QHzNy/qmsc83hzYO7/54tFNSH+U8DUYBN+A5UoKuulUd6yWwFnztfH
9vHln779bUt3+3dC6pQhP+v8ycJGt8aPP4wP+JSvIjF8Rg3LOOW5Twh2k/JSp61+
HuYLgxa6jlLsD+9EUPaWpTzBW1aInIbPIzNxdmmA5y5X45TYpL2/Eubei+0mZSE6
kHQVV6rdw8YlwLl7s+TMMleQ+swCLUAxaoyjzD5N9Iqxz2OznmrhcvG9lBgANGF7
DxnN3JpHfaV1JN5AneWcAlLZ3ffiQa3BwmT1ZKiXMH0H7J+1jvudjxCLGwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCMEAJ7YC98DY5tQMgMQuavZWzwAMB8GA1UdIwQY
MBaAFPuVn7kKFY8X3l2Clt+VRIKo1iEcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01V2Z1UW9WanhmZVhZS1czNVZFZ3FqV0lSdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvZTMzNmFmLTQ1OTEtNGQzNS05NTM2
LTVhYmY5YTA0MjkzZS8xLzEtNVdmdVFvVmp4ZmVYWUtXMzVWRWdxaldJUncubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA5L2UzMzZhZi00NTkxLTRkMzUtOTUzNi01YWJmOWEwNDI5
M2UvMS8xLTVXZnVRb1ZqeGZlWFlLVzM1VkVncWpXSVJ3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7eJ
TTCfXUNskvQgL2MfVqlhr83Edbj1HVL16yArqE+Zo93qYOkRtspPio3BVuQs58VZ
iS5J0l24vD0dE2nfctEzGEqQFspzW7m7rTgikus5EPXaxPYl0tQIQDDkQh/Zn2yW
Fw3S1Iduvtjyo3ufLbb3glnykZRh5RHsPv7WbH4BEKQHSq6qFHbImhASL5ybkqGR
hqr8Pg+pD+NLjK69pswfewcR7WzUknK0XtBc/Kzye+XZL3xXm40EJlUBTXeDwyaA
c+gSQd0HKbmyLIrum+nb73+iRdEwLUewwfnvi4q+AQ0wC3XZLaDmuKyKi3fCzeCl
+Rrjm68aPWOweoEy8Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:51 2025 by rpki-client