Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
File: 5D8j1ok3SUKI38x6Dv4f50ogNuE.mft (raw, json)
Hash identifier: YApuSnHCaxSFedLyoXncuIyOQvlgkiTAEbDPyMcrmPY=
Subject key identifier: 59:6F:17:A3:59:10:40:28:7D:77:F3:92:0C:7B:EF:04:5B:18:A5:6D
Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
Certificate issuer: /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Certificate serial: 019A4E86496A4E2DE6C325920BB284136A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 11:00:14 +0000
Manifest this update: Tue 04 Nov 2025 11:00:14 +0000
Manifest next update: Wed 05 Nov 2025 11:00:14 +0000
Files and hashes: 1: 1-rRkYRd227_5bnec3bYwnL5SxpY.roa (hash: R+OpLqItt4unWxgfStcunzTz6dBOZ563zxthlacRJZ4=)
2: 5D8j1ok3SUKI38x6Dv4f50ogNuE.crl (hash: B7mDf0aKN3cX8aFtXb+qW01BN0S9drCbVx4H6LC359c=)
3: 7QAi3hol-4GpeEk0vacoCeiMLE8.roa (hash: 41WAyyFZEfqE7fT5J+jGu94yYNN3Qp+eHjuNlnSVUDI=)
4: N8lbW7Yoyaq7hT551OkHLLE0p-8.roa (hash: PaYSmfBdwZ0Nhmv4gZsttQQCgk3Gm/XsPJfIIlvLQgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:49:6a:4e:2d:e6:c3:25:92:0b:b2:84:13:6a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Validity
Not Before: Nov 4 11:00:14 2025 GMT
Not After : Nov 5 11:00:14 2025 GMT
Subject: CN=596f17a3591040287d77f3920c7bef045b18a56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:c6:3f:bd:b1:de:d8:61:a8:77:fb:5c:d9:
09:78:28:92:89:4e:65:b2:01:57:4e:5a:07:14:bb:
33:ae:0a:48:a5:af:76:69:a6:2a:f1:2b:a6:27:13:
e4:49:83:7e:b7:00:87:cb:f0:91:f2:71:ee:4b:bf:
f3:4c:94:eb:1c:3f:55:8f:40:de:66:3a:12:44:09:
2f:34:96:40:51:1d:ac:55:08:78:0e:be:8d:37:8e:
13:74:f6:2c:e3:e1:29:1e:6e:b4:29:5b:d6:64:10:
6f:3d:d4:87:d0:96:c3:11:93:7e:15:4d:55:93:5b:
bb:9a:59:a9:21:68:4c:bc:47:5c:ab:cb:21:0a:3f:
ad:cf:a2:c3:12:88:c8:ca:74:ed:e4:06:7c:e4:ff:
09:ae:9f:2c:85:86:2a:14:99:84:b2:c2:f5:6d:03:
be:89:35:33:a4:82:f6:6f:a3:d1:c3:a6:28:d7:fa:
f1:58:ea:56:e4:cc:16:a9:1d:92:2c:44:3f:14:ad:
f2:11:1c:58:b6:5a:38:6b:5f:89:b2:9e:3a:01:fd:
2b:9e:f9:0d:72:5f:51:93:f9:8e:9b:7a:77:09:b6:
2f:ee:a2:39:7c:1d:0e:ac:75:d0:5e:3d:2e:da:65:
28:43:22:19:03:cf:8d:e9:a8:e9:c6:75:2c:ec:cf:
6b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6F:17:A3:59:10:40:28:7D:77:F3:92:0C:7B:EF:04:5B:18:A5:6D
X509v3 Authority Key Identifier:
keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:86:24:dc:3e:5a:6e:34:c6:30:37:88:42:c1:d3:6f:b9:52:
67:ca:55:be:c9:4d:f9:cf:af:1b:42:c5:be:36:5e:9d:dd:3f:
c0:6e:32:f1:76:36:fc:b2:8a:59:60:0f:2b:97:4f:80:00:22:
d2:d7:16:80:f2:ae:68:09:fd:f9:f6:ab:3c:c4:02:e7:32:ad:
74:73:2f:b2:7c:3d:d1:f8:61:31:b3:27:bd:dc:a5:a3:93:c7:
e2:fc:ba:1d:54:94:d8:7b:9e:68:29:74:af:7d:40:80:ed:4c:
cc:8d:b4:7c:85:f4:49:87:fa:74:58:35:da:4a:8f:6d:99:72:
16:fc:43:fe:66:2b:b2:7a:be:c9:25:c8:50:e3:63:d4:2d:f6:
91:3b:4a:26:11:b2:f7:14:24:ab:db:09:a5:c5:af:29:90:80:
ae:96:1e:04:ed:9e:60:3d:60:d7:7a:d1:f3:44:32:f1:ee:37:
dd:98:ca:bb:a5:3c:e1:56:8d:3d:b3:dc:ad:43:f9:4e:0b:45:
2e:d2:04:8d:7a:95:43:a7:c0:20:d6:d6:53:ba:e8:91:c9:a6:
c7:7a:24:6d:4b:9f:b9:55:f7:fe:a8:f2:b9:fd:29:65:cf:1d:
2e:b9:cd:47:ec:5a:ed:18:ee:45:cf:c9:81:c8:bc:cd:11:a6:
60:51:db:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhklqTi3mwyWSC7KEE2qVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2YyM2Q2ODkzNzQ5NDI4OGRmY2M3YTBlZmUxZmU3NGEy
MDM2ZTEwHhcNMjUxMTA0MTEwMDE0WhcNMjUxMTA1MTEwMDE0WjAzMTEwLwYDVQQD
Eyg1OTZmMTdhMzU5MTA0MDI4N2Q3N2YzOTIwYzdiZWYwNDViMThhNTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryDGP72x3thhqHf7XNkJeCiSiU5l
sgFXTloHFLszrgpIpa92aaYq8SumJxPkSYN+twCHy/CR8nHuS7/zTJTrHD9Vj0De
ZjoSRAkvNJZAUR2sVQh4Dr6NN44TdPYs4+EpHm60KVvWZBBvPdSH0JbDEZN+FU1V
k1u7mlmpIWhMvEdcq8shCj+tz6LDEojIynTt5AZ85P8Jrp8shYYqFJmEssL1bQO+
iTUzpIL2b6PRw6Yo1/rxWOpW5MwWqR2SLEQ/FK3yERxYtlo4a1+Jsp46Af0rnvkN
cl9Rk/mOm3p3CbYv7qI5fB0OrHXQXj0u2mUoQyIZA8+N6ajpxnUs7M9rlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlvF6NZEEAofXfzkgx77wRbGKVtMB8GA1UdIwQY
MBaAFOQ/I9aJN0lCiN/Meg7+H+dKIDbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hYjVmZGMtOWQ2Yi00Njc1LTlhMTMt
OWQxODVmNzM4MjExLzEvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hYjVmZGMtOWQ2Yi00Njc1LTlhMTMtOWQxODVmNzM4MjEx
LzEvNUQ4ajFvazNTVUtJMzh4NkR2NGY1MG9nTnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4Yk3D5a
bjTGMDeIQsHTb7lSZ8pVvslN+c+vG0LFvjZend0/wG4y8XY2/LKKWWAPK5dPgAAi
0tcWgPKuaAn9+farPMQC5zKtdHMvsnw90fhhMbMnvdylo5PH4vy6HVSU2HueaCl0
r31AgO1MzI20fIX0SYf6dFg12kqPbZlyFvxD/mYrsnq+ySXIUONj1C32kTtKJhGy
9xQkq9sJpcWvKZCArpYeBO2eYD1g13rR80Qy8e433ZjKu6U84VaNPbPcrUP5TgtF
LtIEjXqVQ6fAINbWU7rokcmmx3okbUufuVX3/qjyuf0pZc8dLrnNR+xa7RjuRc/J
gci8zRGmYFHbMQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:30 2025 by rpki-client