Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
File: 5PFY7_xrOIKiWQweaQasoQjhjsI.mft (raw, json)
Hash identifier: tJUoJ25YqA2oPOUxZhoyj82Iovv4ttDs/zdDfwVjjXA=
Subject key identifier: 57:3F:A4:26:FC:2B:8D:DA:3F:1E:CF:A0:3C:35:C4:39:35:48:03:B7
Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
Certificate issuer: /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Certificate serial: 019A4DE1D3699A68C21ACF4B9AE9EA7CF6A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
Manifest number: 0D13
Signing time: Tue 04 Nov 2025 08:00:36 +0000
Manifest this update: Tue 04 Nov 2025 08:00:36 +0000
Manifest next update: Wed 05 Nov 2025 08:00:36 +0000
Files and hashes: 1: 5JIFCgXWGmsw1HA5JtADF-b1eJ4.roa (hash: kqtxwSPKoLsi1ph5t4VnO3iKewevISmebmIE1RpFWLg=)
2: 5PFY7_xrOIKiWQweaQasoQjhjsI.crl (hash: bDl9AFOLH037ocQZgisMjCPt6haDGunC5poiSKykcME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d3:69:9a:68:c2:1a:cf:4b:9a:e9:ea:7c:f6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Validity
Not Before: Nov 4 08:00:36 2025 GMT
Not After : Nov 5 08:00:36 2025 GMT
Subject: CN=573fa426fc2b8dda3f1ecfa03c35c439354803b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ff:3e:4a:1a:ca:07:f4:02:b8:73:43:c4:05:
dc:15:97:1f:98:f6:30:2f:d0:7e:9f:52:ea:f0:3d:
a0:2a:87:11:09:d9:fd:c6:6b:7d:5d:7d:d5:94:ae:
ca:e7:1c:76:11:fd:3b:ef:c4:2c:33:75:ad:92:ec:
ce:97:bc:05:5d:6a:a4:a7:e3:d1:03:ff:55:5d:b1:
23:50:43:47:b9:44:4d:8a:21:39:e2:6d:24:f6:53:
28:6a:a5:17:dc:09:83:6f:d8:33:9e:e9:d2:b3:5b:
a2:b9:a7:a0:8a:5a:85:0d:54:34:14:dc:23:b2:36:
4e:af:d5:5d:24:ff:a8:c2:1e:ed:ea:8a:8a:b1:d7:
a9:06:ec:36:67:73:5c:9d:71:7c:7f:80:f8:d9:20:
d1:5e:28:ad:8f:3c:10:41:16:56:16:b9:f4:8c:ee:
2c:af:5f:db:b8:cc:a0:43:54:64:c6:cc:2a:24:c1:
c3:86:aa:fc:6b:c7:02:90:3b:4c:90:ec:ac:29:79:
7e:59:d5:3d:08:1e:34:db:33:51:6a:24:84:18:b2:
29:0f:35:9c:d3:7c:0c:12:fc:63:54:81:a6:b2:b4:
24:b3:87:4b:26:71:fb:07:03:0f:72:1c:1b:7d:01:
62:c6:e6:1a:9a:13:e8:d5:61:2d:76:17:05:a4:f3:
4f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3F:A4:26:FC:2B:8D:DA:3F:1E:CF:A0:3C:35:C4:39:35:48:03:B7
X509v3 Authority Key Identifier:
keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2c:27:9f:f9:29:0e:15:8f:dc:aa:eb:15:36:4b:e6:31:4f:
74:80:e5:2e:85:5b:78:a3:45:3b:ee:f5:b1:e1:dd:f7:b2:05:
6e:a6:d6:be:7f:58:b6:b9:67:93:07:a4:70:d6:07:ce:ef:c0:
cc:81:15:a1:13:d6:a3:c1:ab:f9:7a:4d:00:2d:ee:1d:56:0a:
76:b6:b0:4a:36:99:5a:d6:bb:bd:bb:89:9e:03:1b:b3:c6:14:
45:7b:4a:3a:b9:b6:a4:ee:e8:a4:4a:11:60:9a:4a:1f:7d:f5:
11:ba:35:9f:13:1d:07:df:63:7e:c1:b0:27:97:75:49:21:be:
d5:b2:78:f3:af:7b:d5:f7:ae:78:04:e7:84:0d:be:af:4d:65:
60:d6:9c:d7:08:4c:82:8d:29:f0:92:9c:79:c4:d3:90:b5:86:
d6:f6:27:29:9b:d9:c7:35:d2:4b:4b:f8:c6:cc:c8:00:61:4c:
ca:76:c3:09:ec:02:a6:6b:b5:78:8f:6c:e2:6c:da:cb:1e:eb:
70:0f:f6:6e:5a:3d:33:18:69:f2:ee:13:a2:6a:86:b3:ee:d7:
e6:84:da:5b:9f:9b:4f:9e:cb:8a:a4:de:1a:9a:b2:f0:39:19:
5f:ea:14:c2:2f:3e:e5:f4:09:3e:ed:2b:2d:30:7a:24:64:ad:
23:ea:5a:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4dNpmmjCGs9LmunqfPaiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZjE1OGVmZmM2YjM4ODJhMjU5MGMxZTY5MDZhY2ExMDhl
MThlYzIwHhcNMjUxMTA0MDgwMDM2WhcNMjUxMTA1MDgwMDM2WjAzMTEwLwYDVQQD
Eyg1NzNmYTQyNmZjMmI4ZGRhM2YxZWNmYTAzYzM1YzQzOTM1NDgwM2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/8+ShrKB/QCuHNDxAXcFZcfmPYw
L9B+n1Lq8D2gKocRCdn9xmt9XX3VlK7K5xx2Ef0778QsM3WtkuzOl7wFXWqkp+PR
A/9VXbEjUENHuURNiiE54m0k9lMoaqUX3AmDb9gznunSs1uiuaegilqFDVQ0FNwj
sjZOr9VdJP+owh7t6oqKsdepBuw2Z3NcnXF8f4D42SDRXiitjzwQQRZWFrn0jO4s
r1/buMygQ1RkxswqJMHDhqr8a8cCkDtMkOysKXl+WdU9CB402zNRaiSEGLIpDzWc
03wMEvxjVIGmsrQks4dLJnH7BwMPchwbfQFixuYamhPo1WEtdhcFpPNPBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFc/pCb8K43aPx7PoDw1xDk1SAO3MB8GA1UdIwQY
MBaAFOTxWO/8aziColkMHmkGrKEI4Y7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84M2MwMGUtZjQxNC00ODlkLTk0NzAt
YzY5MzI0OTY1MWQ1LzEvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi84M2MwMGUtZjQxNC00ODlkLTk0NzAtYzY5MzI0OTY1MWQ1
LzEvNVBGWTdfeHJPSUtpV1F3ZWFRYXNvUWpoanNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjiwnn/kp
DhWP3KrrFTZL5jFPdIDlLoVbeKNFO+71seHd97IFbqbWvn9YtrlnkwekcNYHzu/A
zIEVoRPWo8Gr+XpNAC3uHVYKdrawSjaZWta7vbuJngMbs8YURXtKOrm2pO7opEoR
YJpKH331Ebo1nxMdB99jfsGwJ5d1SSG+1bJ486971feueATnhA2+r01lYNac1whM
go0p8JKcecTTkLWG1vYnKZvZxzXSS0v4xszIAGFMynbDCewCpmu1eI9s4mzayx7r
cA/2blo9Mxhp8u4TomqGs+7X5oTaW5+bT57LiqTeGpqy8DkZX+oUwi8+5fQJPu0r
LTB6JGStI+pakQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:00 2025 by rpki-client