Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier: wFbQ0fV4Z8U3N0vhNFEBXhGJD4hSpGWsHhNZ6ikYM1M=
Subject key identifier: 27:81:B7:F1:95:DC:50:9C:BC:97:33:95:5F:69:46:28:8D:01:1A:79
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 019A54BF3AF26886123E120F605B6B0259F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 16:00:09 +0000
Manifest this update: Wed 05 Nov 2025 16:00:09 +0000
Manifest next update: Thu 06 Nov 2025 16:00:09 +0000
Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: WuLOjtey5n2MwPDaVE9tgXdFN3d8LV0uH79AmquvkEA=)
2: O7xkMgYDWmT39_oyZPNETli4dGo.roa (hash: BJVxC4UljGsK/BbuRqwBk8+Scbbux5UgI7xaPeJbQCA=)
3: mTHF4xRS849mOw36faqzyw4dbV0.roa (hash: wG6gmT9BywW9Amqbl4suJT23ZQUJGIpmhCizynoZqms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:3a:f2:68:86:12:3e:12:0f:60:5b:6b:02:59:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: Nov 5 16:00:09 2025 GMT
Not After : Nov 6 16:00:09 2025 GMT
Subject: CN=2781b7f195dc509cbc9733955f6946288d011a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:16:08:35:44:ce:87:61:9e:f9:80:73:7f:38:
55:58:ee:9f:7c:d7:8b:43:fa:e4:e3:d9:20:21:9c:
ad:39:50:b3:ce:5f:b2:0a:25:b3:4e:18:16:3f:38:
a5:e2:5b:ca:1c:09:d8:e5:18:cb:cb:35:be:8e:88:
b0:11:74:54:a2:28:fe:6a:22:59:74:2a:22:40:94:
f9:f0:9f:fd:81:a1:cb:7a:fb:19:95:3f:9b:b4:2c:
4c:c7:ba:31:e8:bb:db:2a:21:d1:eb:61:3d:04:14:
f3:2a:d0:de:78:1a:fd:c6:8f:f4:13:46:d6:f2:79:
42:ad:f7:02:54:3b:e0:c8:1d:62:4d:f3:76:64:9a:
5f:ca:95:fe:27:d4:80:b3:58:18:f1:08:ae:50:7d:
fa:d9:9d:ea:cc:8e:0b:6e:fa:e8:f6:12:01:37:fd:
f8:cd:3a:e1:a6:bf:98:34:88:b7:d1:09:7b:46:47:
37:e7:7a:47:5f:02:41:cf:5f:de:cf:23:87:2d:8d:
a4:47:83:28:58:ba:85:0d:93:23:de:7f:4c:df:95:
2d:90:37:8b:6a:f4:6b:cc:b7:90:0a:e9:6d:e3:aa:
40:41:64:8b:79:9f:05:e1:ba:b8:59:5a:f9:29:b8:
44:22:3c:99:6a:2f:1d:2e:51:2e:46:78:05:80:5d:
09:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:81:B7:F1:95:DC:50:9C:BC:97:33:95:5F:69:46:28:8D:01:1A:79
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:dc:1c:8b:aa:8e:02:c4:61:06:b3:89:35:5f:c1:78:a2:35:
c5:43:41:64:73:fb:6e:83:3e:4f:72:3b:96:71:59:7c:92:9d:
0e:99:de:da:e9:5f:78:be:1c:85:7e:cc:84:c8:7f:69:da:94:
7f:3f:68:58:f2:da:4c:d2:ce:f7:b3:fc:6b:bb:d3:c2:3a:26:
a7:9f:ae:10:b3:f2:7d:d4:f8:be:21:84:f6:db:82:ad:0d:ef:
44:34:3a:a1:47:70:9c:d1:f6:f0:53:ff:58:0e:47:67:20:8d:
ac:fa:5d:a3:ff:9a:ef:da:73:c9:83:09:78:ea:c8:bb:44:7c:
a9:1f:4d:51:cd:96:e6:ac:9a:f9:a5:36:f5:5c:80:da:94:ed:
5c:34:65:95:4f:d5:4d:6a:51:73:db:56:9d:ec:0d:7c:a4:22:
3a:46:19:0a:bd:3c:a9:3c:94:3e:5a:bc:07:9a:8a:0f:49:ce:
9f:83:9c:05:53:87:e8:69:b9:96:bb:ad:11:13:68:ad:c4:22:
b8:b6:19:be:a1:92:07:41:2b:9b:19:00:dc:16:8d:d7:ee:94:
34:18:ef:5d:b4:c2:0e:9c:72:a3:0f:ee:2f:17:df:67:a5:11:
29:cf:98:3a:c0:9c:93:69:c6:0a:7a:86:29:e1:18:93:b1:aa:
e2:7b:26:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUvzryaIYSPhIPYFtrAln4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZmUwMmYyYWE3NmM0MDJiN2Q3NmExMTRkYzc3MzVkNWY5
MzViODgwHhcNMjUxMTA1MTYwMDA5WhcNMjUxMTA2MTYwMDA5WjAzMTEwLwYDVQQD
EygyNzgxYjdmMTk1ZGM1MDljYmM5NzMzOTU1ZjY5NDYyODhkMDExYTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hYINUTOh2Ge+YBzfzhVWO6ffNeL
Q/rk49kgIZytOVCzzl+yCiWzThgWPzil4lvKHAnY5RjLyzW+joiwEXRUoij+aiJZ
dCoiQJT58J/9gaHLevsZlT+btCxMx7ox6LvbKiHR62E9BBTzKtDeeBr9xo/0E0bW
8nlCrfcCVDvgyB1iTfN2ZJpfypX+J9SAs1gY8QiuUH362Z3qzI4Lbvro9hIBN/34
zTrhpr+YNIi30Ql7Rkc353pHXwJBz1/ezyOHLY2kR4MoWLqFDZMj3n9M35UtkDeL
avRrzLeQCult46pAQWSLeZ8F4bq4WVr5KbhEIjyZai8dLlEuRngFgF0JoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeBt/GV3FCcvJczlV9pRiiNARp5MB8GA1UdIwQY
MBaAFOX+AvKqdsQCt9dqEU3Hc11fk1uIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgt
ZmM2MGZiMTI1NTczLzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgtZmM2MGZiMTI1NTcz
LzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs9wci6qO
AsRhBrOJNV/BeKI1xUNBZHP7boM+T3I7lnFZfJKdDpne2ulfeL4chX7MhMh/adqU
fz9oWPLaTNLO97P8a7vTwjomp5+uELPyfdT4viGE9tuCrQ3vRDQ6oUdwnNH28FP/
WA5HZyCNrPpdo/+a79pzyYMJeOrIu0R8qR9NUc2W5qya+aU29VyA2pTtXDRllU/V
TWpRc9tWnewNfKQiOkYZCr08qTyUPlq8B5qKD0nOn4OcBVOH6Gm5lrutERNorcQi
uLYZvqGSB0ErmxkA3BaN1+6UNBjvXbTCDpxyow/uLxffZ6URKc+YOsCck2nGCnqG
KeEYk7Gq4nsmpw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:46:51 2025 by rpki-client