Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier: 9uOgaYIv3bAQlnZF/wv4MpuFRO/sbciF1/GmQHKSeJc=
Subject key identifier: BF:54:80:A4:53:35:09:2F:FF:F6:CE:2D:0E:9B:17:C8:4C:99:9B:AE
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial: 019A52639F4E4B7B902C95CE0F7FBB2E2456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number: 0857
Signing time: Wed 05 Nov 2025 05:00:51 +0000
Manifest this update: Wed 05 Nov 2025 05:00:51 +0000
Manifest next update: Thu 06 Nov 2025 05:00:51 +0000
Files and hashes: 1: 5OdHvHOcZkrao-9cj9p2twVtXj0.roa (hash: XE/cbPsbZGNTjgltCjh6PwbFsSQa/FeH5vMG4ogZQBU=)
2: BxevXOZBdFUOOljteOuO-Rxt-CY.roa (hash: 3iKh9PQRS6dYBM+vLpV5Vh4W7QUExMRDQ5j2EO0fnVo=)
3: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: VLXfhZQGZVKDxMaHUrlSiL4exhELEbThYoOHRAu7DVM=)
4: dxDHiWZSI0UaIHekmjGJ3sxW6wY.roa (hash: miwDVBoTIblNIC6j43ewfXiSRHSZo0go2veqU8bISQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:9f:4e:4b:7b:90:2c:95:ce:0f:7f:bb:2e:24:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Validity
Not Before: Nov 5 05:00:51 2025 GMT
Not After : Nov 6 05:00:51 2025 GMT
Subject: CN=bf5480a45335092ffff6ce2d0e9b17c84c999bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:e7:84:bc:e4:3f:48:eb:1f:39:32:17:61:
b5:6b:80:22:59:f6:7f:79:0d:82:1d:7d:7e:34:82:
b6:2d:ec:3e:09:49:f8:43:d2:2c:c6:2c:7d:f0:48:
b4:aa:00:e7:1d:a9:0b:42:b2:59:9b:06:33:76:1a:
0d:1c:af:49:f0:e4:5c:96:39:7a:4d:5f:ca:89:f2:
31:1c:d3:4c:cc:3c:58:95:b7:08:6b:33:e6:fc:a0:
38:26:2e:eb:33:59:6d:31:a2:3a:e7:81:52:97:fb:
b1:b6:79:14:98:06:de:07:62:28:b2:cd:50:d8:27:
b4:cb:92:a2:3e:4b:f7:da:f0:c1:a8:f0:55:56:a4:
da:12:94:0c:4b:32:9b:58:0d:84:21:95:36:d3:2a:
69:bb:0f:f3:e4:08:90:cc:d4:60:39:8a:be:4e:2a:
1f:89:e4:13:0a:25:6e:a1:3b:64:23:65:7f:45:66:
b7:23:1e:1d:1d:75:3e:e6:be:23:1e:6c:ef:ce:6c:
95:39:fb:1d:a6:93:9c:02:d1:22:23:93:42:9f:49:
1f:80:64:c5:72:c6:6f:63:10:7e:1f:05:52:de:1d:
97:98:75:bd:d2:53:70:b9:97:47:60:8c:5d:94:81:
9e:53:ce:05:64:0d:d1:ca:cc:a9:d9:4d:d2:93:6c:
14:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:54:80:A4:53:35:09:2F:FF:F6:CE:2D:0E:9B:17:C8:4C:99:9B:AE
X509v3 Authority Key Identifier:
keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9a:45:a8:1d:da:b3:2c:ef:1c:83:40:01:9a:a0:08:ed:4b:
03:9a:ab:10:be:4a:d4:93:e9:59:42:46:42:11:70:06:a1:fc:
59:c4:8c:61:a4:fa:8e:33:82:e7:a4:c4:f8:53:36:00:f8:2c:
7b:99:ef:69:95:15:a2:8e:b2:a6:9d:57:fc:71:c8:f8:3b:7b:
9b:d2:7e:9c:c5:d3:f0:e3:1b:2b:af:bf:97:d3:a4:5c:17:6a:
eb:cf:d4:7d:3f:c9:90:58:b9:ae:08:5a:a3:8f:6d:c0:60:ec:
1d:70:b0:6b:56:f4:f7:3e:63:8e:86:55:3f:b9:e8:8b:06:8d:
45:3b:58:18:54:7c:c0:3f:6d:89:ec:1e:63:cb:1a:6a:bf:04:
30:97:e9:fd:14:8f:46:97:51:e2:cd:44:7b:f5:07:79:10:8e:
40:5b:36:56:0d:6b:ac:5c:d5:70:e4:92:c9:d9:3b:f5:66:e5:
d2:20:3c:10:00:89:f3:dc:84:44:00:9c:85:f9:92:dc:ce:c5:
94:c5:55:d9:ae:e1:e1:73:4f:e7:f0:ed:8b:29:bf:34:37:81:
23:9d:4b:4f:28:37:00:0b:41:3b:b0:8b:8f:f3:88:8e:39:e5:
74:09:4c:32:8b:03:1a:aa:09:b6:a7:77:a8:16:03:fc:ac:34:
2e:a8:c0:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSY59OS3uQLJXOD3+7LiRWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZWU3ZWUwZjc1YjcxNjRhYzc1OTYxOTdjN2YxMjFkNmZj
YTE1NzYwHhcNMjUxMTA1MDUwMDUxWhcNMjUxMTA2MDUwMDUxWjAzMTEwLwYDVQQD
EyhiZjU0ODBhNDUzMzUwOTJmZmZmNmNlMmQwZTliMTdjODRjOTk5YmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwPnhLzkP0jrHzkyF2G1a4AiWfZ/
eQ2CHX1+NIK2Lew+CUn4Q9Isxix98Ei0qgDnHakLQrJZmwYzdhoNHK9J8ORcljl6
TV/KifIxHNNMzDxYlbcIazPm/KA4Ji7rM1ltMaI654FSl/uxtnkUmAbeB2Ioss1Q
2Ce0y5KiPkv32vDBqPBVVqTaEpQMSzKbWA2EIZU20yppuw/z5AiQzNRgOYq+Tiof
ieQTCiVuoTtkI2V/RWa3Ix4dHXU+5r4jHmzvzmyVOfsdppOcAtEiI5NCn0kfgGTF
csZvYxB+HwVS3h2XmHW90lNwuZdHYIxdlIGeU84FZA3Rysyp2U3Sk2wUcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9UgKRTNQkv//bOLQ6bF8hMmZuuMB8GA1UdIwQY
MBaAFAnufuD3W3FkrHWWGXx/Eh1vyhV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kYmU1MGEtMmNhMS00MzYyLWI1ZTct
NjY4M2M4ZmM5ZTViLzEvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9kYmU1MGEtMmNhMS00MzYyLWI1ZTctNjY4M2M4ZmM5ZTVi
LzEvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZpFqB3a
syzvHINAAZqgCO1LA5qrEL5K1JPpWUJGQhFwBqH8WcSMYaT6jjOC56TE+FM2APgs
e5nvaZUVoo6ypp1X/HHI+Dt7m9J+nMXT8OMbK6+/l9OkXBdq68/UfT/JkFi5rgha
o49twGDsHXCwa1b09z5jjoZVP7noiwaNRTtYGFR8wD9tieweY8saar8EMJfp/RSP
RpdR4s1Ee/UHeRCOQFs2Vg1rrFzVcOSSydk79Wbl0iA8EACJ89yERACchfmS3M7F
lMVV2a7h4XNP5/Dtiym/NDeBI51LTyg3AAtBO7CLj/OIjjnldAlMMosDGqoJtqd3
qBYD/Kw0LqjASA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:06:57 2025 by rpki-client