Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
File: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json)
Hash identifier: vsnKDxam6z0eOdWkYC8ypWg8GNEwA5WyGRAAeHy9Owc=
Subject key identifier: 5C:6D:DA:32:8C:38:6D:99:88:8F:05:F3:2C:2E:83:67:1A:A6:15:C8
Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Certificate serial: 019A4FD0231081292FE1FDA2FFD4450D7FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 17:00:31 +0000
Manifest this update: Tue 04 Nov 2025 17:00:31 +0000
Manifest next update: Wed 05 Nov 2025 17:00:31 +0000
Files and hashes: 1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: iZo4TIOJWhL3gDOfgLZL0bdFhwy1XqN5LCUYfaWcams=)
2: fTo1f8ubRBwfU0xVoHHtzOApYuU.roa (hash: 6qDVE6eG6EbcIMXQ5M9bjDvf2Vx2WIt3k9ZSfVGTUr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:23:10:81:29:2f:e1:fd:a2:ff:d4:45:0d:7f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Validity
Not Before: Nov 4 17:00:31 2025 GMT
Not After : Nov 5 17:00:31 2025 GMT
Subject: CN=5c6dda328c386d99888f05f32c2e83671aa615c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:5b:3a:7d:4c:b3:b8:b5:27:85:b3:68:80:
41:f3:e1:dd:f9:ad:52:d9:16:db:00:c0:8e:4e:bb:
ae:3b:0f:43:ec:58:b3:4d:1d:b6:76:55:73:42:dd:
8c:86:b3:cd:e1:1b:9e:6a:74:ff:e3:41:9c:2d:ad:
45:3a:64:a9:bc:bc:87:75:f7:38:1d:1b:35:01:68:
73:7c:30:ea:9a:e3:56:31:ef:73:7a:63:1a:46:46:
c4:20:38:45:2b:bc:ea:23:4c:b2:a5:69:ba:dd:1d:
bc:a2:9a:f6:bb:4f:06:0c:76:be:e6:a8:08:30:f5:
e4:14:14:a1:ef:74:d5:84:78:5e:13:db:55:1e:e3:
a6:78:89:b9:67:b6:a4:b8:fc:21:20:7f:fe:06:ee:
1c:a3:6c:32:e8:78:c5:bf:a0:69:7b:c3:85:96:61:
dd:90:e0:ac:c2:b5:a9:cf:c0:ab:25:3c:92:74:e9:
e6:99:0a:54:06:85:8e:8b:0f:64:55:71:70:24:a4:
50:15:bb:0e:52:80:84:16:4f:d4:23:bd:98:a4:f6:
63:65:96:70:21:38:67:f4:68:64:38:e4:9a:6a:66:
d9:c7:b5:a8:a4:e2:a3:f9:1e:35:a0:fc:52:67:ec:
a5:33:bb:7e:08:9d:7c:f6:d0:4a:80:d6:1f:36:34:
dd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6D:DA:32:8C:38:6D:99:88:8F:05:F3:2C:2E:83:67:1A:A6:15:C8
X509v3 Authority Key Identifier:
keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b0:13:a9:f5:d9:f5:ea:08:55:0f:03:ce:80:51:60:99:41:
8f:0e:3e:60:8d:51:a8:2f:b5:4a:40:57:ac:79:1c:69:15:d7:
d1:bc:e5:19:d3:74:1c:60:23:3e:e5:da:d8:5d:32:fe:d5:85:
da:ab:47:41:40:e2:97:b8:ae:74:59:82:06:b2:6d:b0:33:49:
6d:0b:dd:37:5b:7b:d4:b2:ee:e3:b1:c8:1b:b3:b1:30:87:d7:
ef:05:7b:65:93:dc:31:e1:d9:24:54:b1:2d:22:e2:ba:f4:e4:
2e:8a:03:8f:58:bf:d4:1e:f9:02:19:4c:ba:45:ac:f9:5f:db:
37:13:83:41:f5:90:2b:95:aa:ed:26:5c:c7:23:2c:1b:1e:a2:
2c:10:19:67:c1:44:c9:56:d6:cb:20:7b:74:79:16:5d:83:53:
0f:64:cb:3c:80:28:e7:3d:d9:4e:7e:ff:28:c2:8b:c6:28:80:
d7:55:b0:b5:1b:47:92:73:5b:b9:b5:0f:08:3b:dc:30:4a:71:
0d:d1:9c:ec:c0:91:bd:93:d0:ad:c8:a9:3e:32:e1:e6:3c:d4:
1b:9d:63:f4:29:e8:80:e6:f9:45:6e:f1:2d:5f:69:3a:9a:87:
83:30:73:6f:a3:cd:d8:7b:74:fa:e2:b1:09:16:4f:78:83:53:
e9:24:54:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0CMQgSkv4f2i/9RFDX/6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YmE5MWQ2MjY1MDRjY2JjNjRkODk3NDBiNjNjYjJlYjQy
MzRmNzAwHhcNMjUxMTA0MTcwMDMxWhcNMjUxMTA1MTcwMDMxWjAzMTEwLwYDVQQD
Eyg1YzZkZGEzMjhjMzg2ZDk5ODg4ZjA1ZjMyYzJlODM2NzFhYTYxNWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F1bOn1Ms7i1J4WzaIBB8+Hd+a1S
2RbbAMCOTruuOw9D7FizTR22dlVzQt2MhrPN4RueanT/40GcLa1FOmSpvLyHdfc4
HRs1AWhzfDDqmuNWMe9zemMaRkbEIDhFK7zqI0yypWm63R28opr2u08GDHa+5qgI
MPXkFBSh73TVhHheE9tVHuOmeIm5Z7akuPwhIH/+Bu4co2wy6HjFv6Bpe8OFlmHd
kOCswrWpz8CrJTySdOnmmQpUBoWOiw9kVXFwJKRQFbsOUoCEFk/UI72YpPZjZZZw
IThn9GhkOOSaambZx7WopOKj+R41oPxSZ+ylM7t+CJ189tBKgNYfNjTdWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxt2jKMOG2ZiI8F8ywug2caphXIMB8GA1UdIwQY
MBaAFOS6kdYmUEzLxk2JdAtjyy60I09wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84ODdlOTQtZWI5Ny00MTA5LTlkYTgt
Y2JmMThkMmQ2NmMzLzEvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy84ODdlOTQtZWI5Ny00MTA5LTlkYTgtY2JmMThkMmQ2NmMz
LzEvNUxxUjFpWlFUTXZHVFlsMEMyUExMclFqVDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrATqfXZ
9eoIVQ8DzoBRYJlBjw4+YI1RqC+1SkBXrHkcaRXX0bzlGdN0HGAjPuXa2F0y/tWF
2qtHQUDil7iudFmCBrJtsDNJbQvdN1t71LLu47HIG7OxMIfX7wV7ZZPcMeHZJFSx
LSLiuvTkLooDj1i/1B75AhlMukWs+V/bNxODQfWQK5Wq7SZcxyMsGx6iLBAZZ8FE
yVbWyyB7dHkWXYNTD2TLPIAo5z3ZTn7/KMKLxiiA11WwtRtHknNbubUPCDvcMEpx
DdGc7MCRvZPQrcipPjLh5jzUG51j9CnogOb5RW7xLV9pOpqHgzBzb6PN2Ht0+uKx
CRZPeINT6SRU7w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:41:51 2025 by rpki-client