Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
File: 5saSR1gKSIv0YbhL97iyrBN01cU.mft (raw, json)
Hash identifier: qCNec6661n0wpm9+J3mTt4NqGf5UwyeJc2qRyqr2X9k=
Subject key identifier: BD:0E:C0:75:96:FE:D1:78:F9:7E:22:9B:EE:8C:12:9F:0D:A3:72:9A
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial: 019A4DE1DCA2E211A01CA1F9640B90A955E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:38 +0000
Manifest this update: Tue 04 Nov 2025 08:00:38 +0000
Manifest next update: Wed 05 Nov 2025 08:00:38 +0000
Files and hashes: 1: 5saSR1gKSIv0YbhL97iyrBN01cU.crl (hash: VMTX57Zhz+hEVjm6foIZVbadoQ5HC6g3QpqVWdaYiuE=)
2: l7WjKJBoi3ZOMaBwpHnPjLLele8.roa (hash: VuHVVXaHP8BDF2HI+1C+9vRLPuu0QKmIZQUwhxNEcWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:dc:a2:e2:11:a0:1c:a1:f9:64:0b:90:a9:55:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Validity
Not Before: Nov 4 08:00:38 2025 GMT
Not After : Nov 5 08:00:38 2025 GMT
Subject: CN=bd0ec07596fed178f97e229bee8c129f0da3729a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:d4:e0:25:36:49:2b:0e:9d:77:c3:01:58:
b1:24:30:9f:2f:5d:3e:ad:52:19:74:03:f2:74:18:
cf:ae:23:b2:a4:4f:5c:7d:6a:66:5d:9c:eb:5d:8c:
5d:76:8d:31:26:66:24:b9:20:99:60:5f:da:c4:32:
d5:2f:12:ff:70:64:29:b0:1a:80:27:00:bb:04:51:
f0:f9:ff:2f:e0:ee:49:0c:8a:eb:a5:e8:ac:67:8b:
3b:cc:2c:d9:70:36:39:af:8e:43:1e:1c:c0:f2:f6:
73:7e:9b:89:bd:ea:dc:43:51:f0:b8:ad:bc:19:dd:
06:4d:26:e7:b5:37:85:a1:62:98:20:7a:00:c0:fc:
8c:ec:da:8a:32:a8:8a:70:c7:f4:f0:69:12:77:5e:
cd:8f:a6:2b:dd:07:55:48:cf:6e:be:2e:8a:20:6d:
fc:29:e2:c5:9a:0a:0e:ab:ff:c6:44:fe:90:27:83:
99:c7:72:d4:3a:2e:ab:f6:c0:64:e0:42:e6:06:fa:
9a:8c:99:48:68:71:7e:07:43:d2:3b:86:e6:47:d8:
69:11:e6:43:ee:c2:3c:74:32:18:66:8e:38:eb:a0:
0c:94:ec:5b:22:78:25:99:38:35:a5:8c:db:6c:dc:
bd:db:64:a1:46:e9:d6:23:30:3c:ed:67:4a:e3:69:
42:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0E:C0:75:96:FE:D1:78:F9:7E:22:9B:EE:8C:12:9F:0D:A3:72:9A
X509v3 Authority Key Identifier:
keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:62:83:94:89:a0:7c:84:b9:66:67:e8:57:c6:5e:39:c3:ad:
82:66:2e:30:61:28:d7:d2:d3:0a:89:29:c8:dd:d5:53:60:d9:
b2:81:48:df:22:27:4a:a6:41:b4:9c:0f:e5:66:3a:b0:d4:24:
11:e0:53:ba:0d:89:d4:a5:68:9a:b9:cf:a2:35:fd:a6:aa:e2:
d4:83:07:0a:21:e7:84:81:87:e9:d8:72:db:8c:2b:2e:f2:d0:
6d:27:13:d1:6c:88:e7:28:8a:89:1f:69:78:e6:6f:8d:62:06:
09:90:4f:6a:7a:69:00:79:22:86:72:0b:40:ff:f2:c4:19:2a:
9e:a2:31:4e:be:28:99:59:cc:2d:3c:e6:b1:01:7a:6c:a8:d1:
d9:c1:ea:05:30:9f:0d:11:7a:af:4e:86:1c:68:8c:2b:e7:c3:
9e:25:aa:11:5d:36:da:f2:9d:c3:89:52:b6:ad:f8:31:59:64:
99:14:cf:55:6f:b6:5c:9a:b0:08:94:e6:14:d2:9f:48:bc:e1:
8e:af:87:79:f7:73:a7:ce:b2:62:14:1f:92:49:44:99:33:2c:
12:dd:51:d4:68:c1:0c:05:f8:f7:44:4d:d5:52:c9:a6:07:4c:
29:cb:4e:8c:fc:57:3e:8a:aa:80:c5:4c:9a:5a:5f:d5:98:0b:
42:6f:30:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4dyi4hGgHKH5ZAuQqVXmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YzY5MjQ3NTgwYTQ4OGJmNDYxYjg0YmY3YjhiMmFjMTM3
NGQ1YzUwHhcNMjUxMTA0MDgwMDM4WhcNMjUxMTA1MDgwMDM4WjAzMTEwLwYDVQQD
EyhiZDBlYzA3NTk2ZmVkMTc4Zjk3ZTIyOWJlZThjMTI5ZjBkYTM3MjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkPU4CU2SSsOnXfDAVixJDCfL10+
rVIZdAPydBjPriOypE9cfWpmXZzrXYxddo0xJmYkuSCZYF/axDLVLxL/cGQpsBqA
JwC7BFHw+f8v4O5JDIrrpeisZ4s7zCzZcDY5r45DHhzA8vZzfpuJvercQ1HwuK28
Gd0GTSbntTeFoWKYIHoAwPyM7NqKMqiKcMf08GkSd17Nj6Yr3QdVSM9uvi6KIG38
KeLFmgoOq//GRP6QJ4OZx3LUOi6r9sBk4ELmBvqajJlIaHF+B0PSO4bmR9hpEeZD
7sI8dDIYZo4466AMlOxbInglmTg1pYzbbNy922ShRunWIzA87WdK42lCCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0OwHWW/tF4+X4im+6MEp8No3KaMB8GA1UdIwQY
MBaAFObGkkdYCkiL9GG4S/e4sqwTdNXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zM2JhNmMtYmVmYi00ZGViLTg5OTgt
NTI3YTlhNGVlNjI0LzEvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zM2JhNmMtYmVmYi00ZGViLTg5OTgtNTI3YTlhNGVlNjI0
LzEvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGKDlImg
fIS5ZmfoV8ZeOcOtgmYuMGEo19LTCokpyN3VU2DZsoFI3yInSqZBtJwP5WY6sNQk
EeBTug2J1KVomrnPojX9pqri1IMHCiHnhIGH6dhy24wrLvLQbScT0WyI5yiKiR9p
eOZvjWIGCZBPanppAHkihnILQP/yxBkqnqIxTr4omVnMLTzmsQF6bKjR2cHqBTCf
DRF6r06GHGiMK+fDniWqEV022vKdw4lStq34MVlkmRTPVW+2XJqwCJTmFNKfSLzh
jq+Hefdzp86yYhQfkklEmTMsEt1R1GjBDAX490RN1VLJpgdMKctOjPxXPoqqgMVM
mlpf1ZgLQm8wZw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:38 2025 by rpki-client