Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
File: 5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft (raw, json)
Hash identifier: UoUAbq7xU0xNO7HxCk6KQ9mbLNe9uMvCKXzaI+ZyGxQ=
Subject key identifier: D0:1E:0E:56:D0:60:B9:50:9C:FB:8A:36:F0:A5:DA:A6:17:F3:1B:FD
Authority key identifier: E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
Certificate issuer: /CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Certificate serial: 019A4DAAFFC1FA1DC7341F5A983BB52FEEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 07:00:43 +0000
Manifest this update: Tue 04 Nov 2025 07:00:43 +0000
Manifest next update: Wed 05 Nov 2025 07:00:43 +0000
Files and hashes: 1: 5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl (hash: hDfrpkxDEQW3dFctB8yZd8nWbI8flGZtRbjdzwx3DZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:ff:c1:fa:1d:c7:34:1f:5a:98:3b:b5:2f:ee:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Validity
Not Before: Nov 4 07:00:43 2025 GMT
Not After : Nov 5 07:00:43 2025 GMT
Subject: CN=d01e0e56d060b9509cfb8a36f0a5daa617f31bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:4b:f0:5c:00:7e:67:7d:d3:85:32:17:81:
9d:3b:59:a6:40:03:04:51:53:65:c3:fc:47:a5:61:
47:e7:2c:ef:78:f4:91:e0:27:7a:8e:8b:24:15:3a:
b9:c7:89:de:b4:44:06:05:ab:2e:0f:55:10:22:c4:
c7:83:74:ae:e6:c0:ab:01:73:85:9a:3c:70:c7:98:
53:f0:75:20:33:0c:b0:48:7e:06:1f:33:4d:fe:8c:
81:73:42:67:6c:d2:22:7e:26:71:48:64:d9:50:f8:
f7:fb:51:a4:7e:b9:ab:1d:d2:7c:1f:0e:27:db:96:
09:0e:af:64:c5:d2:7f:dc:cd:e0:b8:cb:be:8e:f9:
3b:4f:42:1e:19:28:09:91:df:40:90:57:73:a5:e0:
5e:85:a6:1e:4c:2a:ec:70:6e:93:ef:2a:69:92:40:
ef:46:a5:6a:38:85:b0:e9:f1:ea:96:8a:b9:4c:ba:
e1:8e:79:53:15:c6:fd:58:6a:a5:b0:33:45:d3:5f:
ee:e7:25:22:60:47:e7:97:a2:03:d3:3e:10:4f:b5:
55:01:b5:d3:66:bf:51:76:09:a5:28:01:fb:79:42:
5f:5b:5f:4f:0b:8a:b1:d4:a5:6d:2a:f4:47:b7:0c:
5e:0e:c6:79:45:11:fe:01:21:dd:f0:48:8f:de:be:
6c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1E:0E:56:D0:60:B9:50:9C:FB:8A:36:F0:A5:DA:A6:17:F3:1B:FD
X509v3 Authority Key Identifier:
keyid:E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d8:d0:14:cf:0f:ee:25:ea:43:d9:8c:3c:fb:7e:38:09:31:
ae:5c:fa:3e:f3:19:a1:39:2a:e0:be:7b:36:4a:4c:6e:dd:79:
a4:d7:a9:85:0e:5f:20:d5:a8:74:30:1a:94:fc:f6:65:2c:f9:
a2:a2:77:f6:a7:f1:39:ea:74:2b:d0:40:b3:0c:de:e9:80:46:
0d:e3:67:3f:39:84:ad:e5:ea:60:14:5b:20:23:5b:ae:e4:e5:
33:55:14:3a:a5:de:60:33:5c:6f:ad:d6:4b:ad:00:b8:be:51:
f6:6d:86:9b:ff:40:1b:f0:4c:58:b3:a3:06:47:56:f5:6e:8a:
b9:33:b3:b7:99:81:87:e9:a0:ce:8f:ba:3d:ca:66:d8:5d:5e:
45:24:eb:e7:ad:e4:a7:8f:13:a8:36:24:88:e4:cf:18:ba:f6:
ea:9c:77:ba:ca:20:50:d6:7e:54:f0:26:fa:8d:73:fd:4e:c6:
b0:11:4d:33:c1:7a:42:63:e0:ef:87:70:e0:3f:69:18:7e:0a:
c6:76:f5:db:95:6f:74:3a:2e:d2:d2:0e:d3:63:37:e2:4b:38:
d2:30:f3:b6:fc:f0:cf:98:41:c3:09:4a:fa:a8:7f:b4:1f:c0:
af:44:6f:d0:57:8b:f1:9f:0f:a8:a7:2d:88:19:e3:c0:e1:49:
a5:46:48:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqv/B+h3HNB9amDu1L+7mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MzNiMmVhYjdlMjM0Njg3YmU5N2Y4YzM1ZDZlNmNjM2Uy
ZGZjYmEwHhcNMjUxMTA0MDcwMDQzWhcNMjUxMTA1MDcwMDQzWjAzMTEwLwYDVQQD
EyhkMDFlMGU1NmQwNjBiOTUwOWNmYjhhMzZmMGE1ZGFhNjE3ZjMxYmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOhL8FwAfmd904UyF4GdO1mmQAME
UVNlw/xHpWFH5yzvePSR4Cd6joskFTq5x4netEQGBasuD1UQIsTHg3Su5sCrAXOF
mjxwx5hT8HUgMwywSH4GHzNN/oyBc0JnbNIifiZxSGTZUPj3+1GkfrmrHdJ8Hw4n
25YJDq9kxdJ/3M3guMu+jvk7T0IeGSgJkd9AkFdzpeBehaYeTCrscG6T7yppkkDv
RqVqOIWw6fHqloq5TLrhjnlTFcb9WGqlsDNF01/u5yUiYEfnl6ID0z4QT7VVAbXT
Zr9RdgmlKAH7eUJfW19PC4qx1KVtKvRHtwxeDsZ5RRH+ASHd8EiP3r5sAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAeDlbQYLlQnPuKNvCl2qYX8xv9MB8GA1UdIwQY
MBaAFOczsuq34jRoe+l/jDXW5sw+Lfy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpPeTZyZmlOR2g3NlgtTU5kYm16RDR0X0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85MzYwZjUtMWRlYi00YjQzLWEzMmYt
YWM0NGJjNTY5YTc4LzEvNXpPeTZyZmlOR2g3NlgtTU5kYm16RDR0X0xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85MzYwZjUtMWRlYi00YjQzLWEzMmYtYWM0NGJjNTY5YTc4
LzEvNXpPeTZyZmlOR2g3NlgtTU5kYm16RDR0X0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9jQFM8P
7iXqQ9mMPPt+OAkxrlz6PvMZoTkq4L57NkpMbt15pNephQ5fINWodDAalPz2ZSz5
oqJ39qfxOep0K9BAswze6YBGDeNnPzmEreXqYBRbICNbruTlM1UUOqXeYDNcb63W
S60AuL5R9m2Gm/9AG/BMWLOjBkdW9W6KuTOzt5mBh+mgzo+6Pcpm2F1eRSTr563k
p48TqDYkiOTPGLr26px3usogUNZ+VPAm+o1z/U7GsBFNM8F6QmPg74dw4D9pGH4K
xnb125VvdDou0tIO02M34ks40jDztvzwz5hBwwlK+qh/tB/Ar0Rv0FeL8Z8PqKct
iBnjwOFJpUZInQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:22 2025 by rpki-client