Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
File: C5DjdpRNMClN6kHyH7fx4co2ipM.mft (raw, json)
Hash identifier: t+teqbwtrIFAX0SUmizxZWEl7aVLwjfg/CzW0jXdOwg=
Subject key identifier: 7E:42:19:F0:C3:F1:EB:B0:31:CD:2C:61:C8:CE:E5:E7:AA:93:94:82
Authority key identifier: 0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
Certificate issuer: /CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Certificate serial: 019A522CB97AB35E4A77759636AEA921183E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
Manifest number: 0189
Signing time: Wed 05 Nov 2025 04:00:53 +0000
Manifest this update: Wed 05 Nov 2025 04:00:53 +0000
Manifest next update: Thu 06 Nov 2025 04:00:53 +0000
Files and hashes: 1: C5DjdpRNMClN6kHyH7fx4co2ipM.crl (hash: lWalfHJawtlO/0yQE7QJZUoq3GEPMbo2MRIEhPVbLJI=)
2: acXUcm42IS4pl31BFqGLL598V-g.roa (hash: tv2sOndhlPwn5kgKUF5qX+dekYD4mLLwcOPc7PK40dI=)
3: n3osC5rKdM6iHPZx6MqCr3JTQWc.roa (hash: suRQqEpXKgoazuJMwgkEGufz4KYSCm9sjlRmUwQJnrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:b9:7a:b3:5e:4a:77:75:96:36:ae:a9:21:18:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Validity
Not Before: Nov 5 04:00:53 2025 GMT
Not After : Nov 6 04:00:53 2025 GMT
Subject: CN=7e4219f0c3f1ebb031cd2c61c8cee5e7aa939482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:48:ed:3e:45:ae:07:09:ff:73:dd:8a:12:
9b:b1:3d:62:0a:63:d1:ab:85:c2:17:f1:59:6c:3a:
99:3c:22:04:50:6f:5f:4d:b1:b5:59:a2:d0:71:b8:
62:a0:f2:2b:21:fc:e7:d6:c2:c5:60:6a:2c:af:06:
3c:5d:37:d9:5c:55:81:8f:c3:2b:32:58:30:cb:7d:
70:fe:8a:fc:b6:06:b5:0d:2c:9a:14:97:65:72:c3:
81:90:65:52:1b:2e:4a:17:17:ca:c4:ea:4c:00:db:
9a:b5:92:4b:89:7d:ea:7f:d2:91:7b:fd:c5:84:73:
fc:a3:6d:7a:7d:ea:f2:ba:ab:33:fb:41:81:0e:d8:
71:69:a0:4b:ee:ef:0d:8d:c4:1c:e6:32:5f:06:87:
3c:16:38:5f:12:a4:24:03:62:56:88:a0:87:52:93:
81:fb:89:23:1b:8f:e3:38:2b:42:32:5e:ce:b9:f5:
b0:aa:c3:12:3a:ad:60:16:23:fb:da:08:81:5c:0e:
87:22:32:05:57:46:ec:71:18:de:fc:c5:27:c6:09:
54:0d:68:be:2d:ad:c6:6e:3f:54:4f:4b:67:e6:80:
cb:cf:b3:0b:6c:6c:fc:57:ce:64:38:00:50:37:70:
c2:86:8b:6f:5b:8e:e7:fc:e1:d4:e4:3d:e2:18:da:
36:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:42:19:F0:C3:F1:EB:B0:31:CD:2C:61:C8:CE:E5:E7:AA:93:94:82
X509v3 Authority Key Identifier:
keyid:0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9e:91:a1:26:2e:44:75:0a:29:08:57:25:bf:32:34:34:c6:
2a:ed:7e:27:16:13:bf:4f:6e:78:84:40:67:9e:f0:fa:62:7e:
ee:da:a3:7d:78:0e:99:b7:5d:99:06:9b:f8:26:82:d5:2e:0e:
ab:e8:e7:9d:4d:a1:80:cb:f4:d0:ec:d3:fb:34:da:cc:23:cd:
13:d7:9f:c3:6d:ac:dc:d0:25:66:3d:d8:01:6d:68:d3:bf:06:
8d:e9:07:7c:54:1b:d9:07:f7:59:1f:fa:76:0a:c4:bc:54:18:
7d:8e:db:b5:3f:ea:87:57:ce:da:2e:f3:e4:63:dc:0c:1e:b3:
dd:c5:5f:b2:c4:4f:a4:2c:b0:c9:c8:10:d6:a0:a8:fd:b5:01:
d7:ea:03:dc:06:ce:84:2b:51:a1:bd:6f:09:8d:7a:df:cc:74:
f8:6e:8f:f7:4f:7e:d4:ec:50:56:15:79:16:48:c2:99:d3:21:
55:3b:77:63:74:0c:d7:d8:9a:2f:3c:21:09:72:4b:e5:93:94:
56:e3:74:b4:1e:5b:1b:9e:08:73:ce:74:1f:52:f9:16:67:f2:
49:5c:18:49:9a:2d:9b:4f:11:c9:e2:a3:25:9b:be:8f:d4:84:
3f:f7:94:f9:f0:48:bc:6d:89:45:d9:a9:4b:8d:a6:16:8f:23:
f7:4a:38:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLLl6s15Kd3WWNq6pIRg+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOTBlMzc2OTQ0ZDMwMjk0ZGVhNDFmMjFmYjdmMWUxY2Ez
NjhhOTMwHhcNMjUxMTA1MDQwMDUzWhcNMjUxMTA2MDQwMDUzWjAzMTEwLwYDVQQD
Eyg3ZTQyMTlmMGMzZjFlYmIwMzFjZDJjNjFjOGNlZTVlN2FhOTM5NDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/pI7T5FrgcJ/3PdihKbsT1iCmPR
q4XCF/FZbDqZPCIEUG9fTbG1WaLQcbhioPIrIfzn1sLFYGosrwY8XTfZXFWBj8Mr
Mlgwy31w/or8tga1DSyaFJdlcsOBkGVSGy5KFxfKxOpMANuatZJLiX3qf9KRe/3F
hHP8o216feryuqsz+0GBDthxaaBL7u8NjcQc5jJfBoc8FjhfEqQkA2JWiKCHUpOB
+4kjG4/jOCtCMl7OufWwqsMSOq1gFiP72giBXA6HIjIFV0bscRje/MUnxglUDWi+
La3Gbj9UT0tn5oDLz7MLbGz8V85kOABQN3DChotvW47n/OHU5D3iGNo2LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5CGfDD8euwMc0sYcjO5eeqk5SCMB8GA1UdIwQY
MBaAFAuQ43aUTTApTepB8h+38eHKNoqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzVEamRwUk5NQ2xONmtIeUg3Zng0Y28yaXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84MjBlNzItNTcwNi00NjIwLWE5OTAt
MjBhMzIxOGI5OGNkLzEvQzVEamRwUk5NQ2xONmtIeUg3Zng0Y28yaXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84MjBlNzItNTcwNi00NjIwLWE5OTAtMjBhMzIxOGI5OGNk
LzEvQzVEamRwUk5NQ2xONmtIeUg3Zng0Y28yaXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZ6RoSYu
RHUKKQhXJb8yNDTGKu1+JxYTv09ueIRAZ57w+mJ+7tqjfXgOmbddmQab+CaC1S4O
q+jnnU2hgMv00OzT+zTazCPNE9efw22s3NAlZj3YAW1o078GjekHfFQb2Qf3WR/6
dgrEvFQYfY7btT/qh1fO2i7z5GPcDB6z3cVfssRPpCywycgQ1qCo/bUB1+oD3AbO
hCtRob1vCY1638x0+G6P909+1OxQVhV5FkjCmdMhVTt3Y3QM19iaLzwhCXJL5ZOU
VuN0tB5bG54Ic850H1L5FmfySVwYSZotm08RyeKjJZu+j9SEP/eU+fBIvG2JRdmp
S42mFo8j90o4GA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:52:24 2025 by rpki-client