Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
File: b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft (raw, json)
Hash identifier: J5TXazU6pdsUrxdUJrsu4aRYm3tn/z0BTTgPM5aACmw=
Subject key identifier: FB:0A:3F:F0:C1:28:5E:7B:F1:1B:2E:7D:68:7D:E3:83:EE:71:37:06
Authority key identifier: 6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
Certificate issuer: /CN=6f930698733bad33c081719c7b68bd19723a5a77
Certificate serial: 019A4FD0855F19130B4B04A2FD2342B63D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
Manifest number: 09F0
Signing time: Tue 04 Nov 2025 17:00:56 +0000
Manifest this update: Tue 04 Nov 2025 17:00:56 +0000
Manifest next update: Wed 05 Nov 2025 17:00:56 +0000
Files and hashes: 1: b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl (hash: iBwteS+ZwXjVLOtZPRDO4A8f02+7XjYflUEiCri+Q4g=)
2: eC2MphkCG1tQ_l_Eef-rvB7MGJg.roa (hash: oipT2bxgVMIIjaLCh5p0XGkacdhDbfRQ9fsmYqX5jVM=)
3: qgdTTthzOjRLa7QV75nMnKkp5w4.roa (hash: F0+rz8Lam1NmL6Yk8x5fjqey+/+WuThLB5gD8xHNDd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:85:5f:19:13:0b:4b:04:a2:fd:23:42:b6:3d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f930698733bad33c081719c7b68bd19723a5a77
Validity
Not Before: Nov 4 17:00:56 2025 GMT
Not After : Nov 5 17:00:56 2025 GMT
Subject: CN=fb0a3ff0c1285e7bf11b2e7d687de383ee713706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:66:40:47:c9:23:14:3b:42:46:25:6c:94:
bc:0d:fc:a4:df:ea:e3:78:24:69:cd:6f:16:17:86:
b8:e0:7b:7b:76:ed:70:5b:3d:27:36:8e:72:97:05:
f0:32:76:fb:7a:c5:5c:19:34:b8:e7:be:fe:f8:7f:
47:d6:34:b4:c2:71:f4:e1:bc:c6:1c:02:b8:d9:80:
43:e4:82:df:11:17:2d:22:6c:19:c8:eb:f2:1b:ff:
b3:46:16:6a:66:ac:9d:be:39:c3:2e:ba:78:04:50:
00:39:6d:4c:1e:05:fe:ee:72:cc:86:1f:54:9c:8c:
d4:cc:01:49:cf:3f:fd:01:2c:38:26:55:ff:93:7e:
e7:7e:69:f0:91:65:e3:00:f9:61:2f:f1:7c:e2:e6:
06:67:11:c9:ea:ad:8b:3d:61:18:f0:79:82:b5:53:
56:9e:53:7b:ba:31:45:84:08:c9:ec:d1:d2:cf:62:
f3:cc:67:fb:64:98:f5:56:f1:a2:2e:48:3e:8f:e1:
bd:4e:cb:82:10:aa:82:88:de:ce:34:8a:6e:87:5d:
5d:65:89:c1:a2:04:25:aa:89:93:12:3d:50:9f:7e:
2b:d5:22:97:d5:1b:ee:a3:56:3b:b3:00:a6:af:93:
e5:ae:b7:26:1f:52:f6:6f:ba:4f:eb:7f:1e:0f:e0:
92:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0A:3F:F0:C1:28:5E:7B:F1:1B:2E:7D:68:7D:E3:83:EE:71:37:06
X509v3 Authority Key Identifier:
keyid:6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:db:89:bd:c4:e7:b3:9f:a0:03:38:8c:a1:ed:71:af:df:71:
e5:b3:b3:38:5d:b1:4f:58:f9:fe:1d:34:8a:d4:89:aa:73:46:
e3:b9:36:d8:0d:8a:71:cf:82:e3:a3:87:b0:f6:db:27:ec:97:
b9:68:d6:03:83:82:97:e3:25:62:75:21:39:6c:43:2d:9e:37:
5e:5d:1e:02:fa:68:44:b7:13:82:82:27:13:c4:53:9f:50:36:
06:54:df:08:df:2e:8a:a6:2d:29:89:97:7b:65:f6:36:14:b4:
8c:f1:6c:31:7b:a8:1c:09:c5:b2:c1:27:4f:d7:08:65:3f:32:
9e:ba:88:84:67:b3:bf:8e:ea:ee:24:f9:02:ae:a3:5e:f6:38:
a6:64:ea:ef:c6:a8:b3:d7:76:27:1a:1a:3a:dd:1b:a4:b4:3e:
cf:da:22:14:9a:ec:61:de:fb:21:1f:bf:79:5c:3e:99:fd:3b:
52:d7:3a:ac:33:a6:d7:ca:d4:82:e0:dd:c7:98:e8:26:61:27:
77:45:ea:36:30:31:92:be:77:92:f0:24:c4:f1:50:cd:0a:bd:
0f:41:a7:19:f0:fc:f9:b8:27:b0:71:36:d9:3f:6e:37:e8:12:
23:52:98:22:8a:a6:6b:29:a6:29:0b:aa:ed:97:72:ea:43:2e:
11:c0:80:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0IVfGRMLSwSi/SNCtj06MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOTMwNjk4NzMzYmFkMzNjMDgxNzE5YzdiNjhiZDE5NzIz
YTVhNzcwHhcNMjUxMTA0MTcwMDU2WhcNMjUxMTA1MTcwMDU2WjAzMTEwLwYDVQQD
EyhmYjBhM2ZmMGMxMjg1ZTdiZjExYjJlN2Q2ODdkZTM4M2VlNzEzNzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms1mQEfJIxQ7QkYlbJS8Dfyk3+rj
eCRpzW8WF4a44Ht7du1wWz0nNo5ylwXwMnb7esVcGTS4577++H9H1jS0wnH04bzG
HAK42YBD5ILfERctImwZyOvyG/+zRhZqZqydvjnDLrp4BFAAOW1MHgX+7nLMhh9U
nIzUzAFJzz/9ASw4JlX/k37nfmnwkWXjAPlhL/F84uYGZxHJ6q2LPWEY8HmCtVNW
nlN7ujFFhAjJ7NHSz2LzzGf7ZJj1VvGiLkg+j+G9TsuCEKqCiN7ONIpuh11dZYnB
ogQlqomTEj1Qn34r1SKX1Rvuo1Y7swCmr5PlrrcmH1L2b7pP638eD+CSPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsKP/DBKF578RsufWh944PucTcGMB8GA1UdIwQY
MBaAFG+TBphzO60zwIFxnHtovRlyOlp3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS81ZTYxZjctODM2My00YWNjLWI4YTQt
ZmUxMDNmZDM4NTdjLzEvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS81ZTYxZjctODM2My00YWNjLWI4YTQtZmUxMDNmZDM4NTdj
LzEvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItuJvcTn
s5+gAziMoe1xr99x5bOzOF2xT1j5/h00itSJqnNG47k22A2Kcc+C46OHsPbbJ+yX
uWjWA4OCl+MlYnUhOWxDLZ43Xl0eAvpoRLcTgoInE8RTn1A2BlTfCN8uiqYtKYmX
e2X2NhS0jPFsMXuoHAnFssEnT9cIZT8ynrqIhGezv47q7iT5Aq6jXvY4pmTq78ao
s9d2JxoaOt0bpLQ+z9oiFJrsYd77IR+/eVw+mf07Utc6rDOm18rUguDdx5joJmEn
d0XqNjAxkr53kvAkxPFQzQq9D0GnGfD8+bgnsHE22T9uN+gSI1KYIoqmaymmKQuq
7Zdy6kMuEcCACw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:57:46 2025 by rpki-client