Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
File: 5NozpY-0djTWFOwJpomN4PWABv4.mft (raw, json)
Hash identifier: SIfgryn/zjo5FdH4/AWYOppUUQaMPA4GMxyozhiiZTA=
Subject key identifier: 64:89:4F:D8:3C:2D:93:60:AD:F3:21:C0:ED:EC:9E:37:71:1C:57:9D
Authority key identifier: E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE
Certificate issuer: /CN=e4da33a58fb47634d614ec09a6898de0f58006fe
Certificate serial: 019A4FD06E981EA022DE195BEE3ED0055811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
Manifest number: 0DE4
Signing time: Tue 04 Nov 2025 17:00:51 +0000
Manifest this update: Tue 04 Nov 2025 17:00:51 +0000
Manifest next update: Wed 05 Nov 2025 17:00:51 +0000
Files and hashes: 1: 5NozpY-0djTWFOwJpomN4PWABv4.crl (hash: g2cGUwQHtsxIkUHRGrbDmw2O62bG/nvgnzUOW0rLrPY=)
2: q_FuKEatt0zR6PfM8hStM_OAEUA.roa (hash: 2y3NDWHhYWGNF2joY5nRoFi6Rxr80fn/VSsCMypexYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:6e:98:1e:a0:22:de:19:5b:ee:3e:d0:05:58:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4da33a58fb47634d614ec09a6898de0f58006fe
Validity
Not Before: Nov 4 17:00:51 2025 GMT
Not After : Nov 5 17:00:51 2025 GMT
Subject: CN=64894fd83c2d9360adf321c0edec9e37711c579d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ef:fc:cb:ee:57:5b:14:f4:03:48:43:4d:7c:
13:4b:00:2e:97:8e:f3:87:94:31:02:af:41:ee:77:
d7:2a:f0:35:ae:7d:fd:bf:7a:a5:fa:02:0b:c0:9b:
7a:68:6b:77:31:3c:4d:ce:cd:60:de:9a:dc:63:42:
a2:52:ff:cd:25:01:77:12:07:1b:14:e4:63:c7:72:
c7:df:b4:06:ea:80:04:b6:19:45:d8:e4:e1:7d:6c:
46:1d:e4:25:89:b5:42:a5:5d:b3:08:ee:34:58:eb:
91:59:49:7c:29:e2:ea:b8:bf:0f:77:e9:6e:ed:20:
b9:41:53:b4:a9:bc:ab:17:94:3d:d6:10:2e:19:b9:
89:6f:07:9c:0e:a8:11:1f:a5:9b:c8:ba:90:03:b8:
5d:46:ff:d0:56:97:33:7b:3b:84:ec:b8:d6:f4:e4:
e7:a9:0a:c8:0e:03:80:7c:73:bb:31:3e:86:46:17:
e1:45:ad:aa:68:8e:02:38:4f:40:5f:0d:d5:aa:3f:
76:4b:ed:1e:bd:81:83:f3:38:ea:ed:c2:46:0e:b6:
19:c9:ab:d8:97:fd:c8:bd:4d:61:7a:cc:1a:df:c6:
7f:28:47:55:ef:ac:72:2d:91:0a:a7:b1:37:e3:00:
6f:bd:f3:b8:11:32:8d:45:f6:c7:92:ce:aa:5f:68:
33:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:89:4F:D8:3C:2D:93:60:AD:F3:21:C0:ED:EC:9E:37:71:1C:57:9D
X509v3 Authority Key Identifier:
keyid:E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f4:99:75:cf:7c:7f:56:fa:04:5e:2e:80:81:1b:e6:07:db:
a6:15:c2:4c:a5:5c:0a:19:ce:3f:51:a6:56:df:3e:8a:65:8f:
0c:2a:48:ea:09:bb:1d:55:29:2f:e5:4a:ae:64:99:45:41:59:
65:ff:0e:72:be:24:c8:86:37:e1:f6:e6:69:b9:b4:ff:f6:a5:
b1:5e:9c:bb:92:4f:fd:34:91:17:63:04:91:72:c9:10:d2:e2:
ab:95:1f:19:6a:4c:ba:11:78:94:87:e4:bf:e6:d8:51:9c:73:
70:1f:12:2d:22:49:38:13:02:d6:a0:1e:d0:d6:2c:d1:65:1f:
ad:9b:39:99:84:ef:05:8c:8c:96:77:78:78:05:22:9b:91:93:
92:6e:60:f2:e2:04:a3:36:c8:ee:53:a7:e6:7a:8a:35:31:ae:
2e:1f:76:11:db:db:02:ea:51:5a:b8:12:b8:72:63:32:e1:e4:
d5:fd:28:f7:aa:e9:89:fc:50:13:11:b2:d8:c0:5e:2c:c1:f3:
22:22:48:81:6b:1a:70:5c:41:76:04:11:05:cf:a0:f2:a3:17:
c4:b1:49:72:68:86:bf:27:52:76:b5:ee:ef:72:07:ea:b0:88:
71:e5:b4:73:b4:13:2b:e7:61:9d:fe:bc:d6:c4:a9:dd:ca:38:
70:c4:e1:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0G6YHqAi3hlb7j7QBVgRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZGEzM2E1OGZiNDc2MzRkNjE0ZWMwOWE2ODk4ZGUwZjU4
MDA2ZmUwHhcNMjUxMTA0MTcwMDUxWhcNMjUxMTA1MTcwMDUxWjAzMTEwLwYDVQQD
Eyg2NDg5NGZkODNjMmQ5MzYwYWRmMzIxYzBlZGVjOWUzNzcxMWM1NzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe/8y+5XWxT0A0hDTXwTSwAul47z
h5QxAq9B7nfXKvA1rn39v3ql+gILwJt6aGt3MTxNzs1g3prcY0KiUv/NJQF3Egcb
FORjx3LH37QG6oAEthlF2OThfWxGHeQlibVCpV2zCO40WOuRWUl8KeLquL8Pd+lu
7SC5QVO0qbyrF5Q91hAuGbmJbwecDqgRH6WbyLqQA7hdRv/QVpczezuE7LjW9OTn
qQrIDgOAfHO7MT6GRhfhRa2qaI4COE9AXw3Vqj92S+0evYGD8zjq7cJGDrYZyavY
l/3IvU1heswa38Z/KEdV76xyLZEKp7E34wBvvfO4ETKNRfbHks6qX2gzTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSJT9g8LZNgrfMhwO3snjdxHFedMB8GA1UdIwQY
MBaAFOTaM6WPtHY01hTsCaaJjeD1gAb+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5venBZLTBkalRXRk93SnBvbU40UFdBQnY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8yZDBjYTItOGMzZS00ZjhjLTkwNmMt
NmNlNjAyMjZhOWU4LzEvNU5venBZLTBkalRXRk93SnBvbU40UFdBQnY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8yZDBjYTItOGMzZS00ZjhjLTkwNmMtNmNlNjAyMjZhOWU4
LzEvNU5venBZLTBkalRXRk93SnBvbU40UFdBQnY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfSZdc98
f1b6BF4ugIEb5gfbphXCTKVcChnOP1GmVt8+imWPDCpI6gm7HVUpL+VKrmSZRUFZ
Zf8Ocr4kyIY34fbmabm0//alsV6cu5JP/TSRF2MEkXLJENLiq5UfGWpMuhF4lIfk
v+bYUZxzcB8SLSJJOBMC1qAe0NYs0WUfrZs5mYTvBYyMlnd4eAUim5GTkm5g8uIE
ozbI7lOn5nqKNTGuLh92EdvbAupRWrgSuHJjMuHk1f0o96rpifxQExGy2MBeLMHz
IiJIgWsacFxBdgQRBc+g8qMXxLFJcmiGvydSdrXu73IH6rCIceW0c7QTK+dhnf68
1sSp3co4cMTh4Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:43:50 2025 by rpki-client