Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
File: J5YqM_0jSHgawSOhJyKghu6Pun0.mft (raw, json)
Hash identifier: 7uya2eG1AE00sJAtNO2xjfIiFDklrFgld9qdQN0l7LQ=
Subject key identifier: 46:D4:4F:99:BB:4F:59:BD:D8:EE:37:C7:69:0E:59:58:49:B1:94:C5
Authority key identifier: 27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D
Certificate issuer: /CN=27962a33fd2348781ac123a12722a086ee8fba7d
Certificate serial: 019A4FD04933BFF108053E664DC8CF5C53A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 17:00:41 +0000
Manifest this update: Tue 04 Nov 2025 17:00:41 +0000
Manifest next update: Wed 05 Nov 2025 17:00:41 +0000
Files and hashes: 1: J5YqM_0jSHgawSOhJyKghu6Pun0.crl (hash: hEvLXJU2OIvDCQt5esk29A/g+/aMbXenDAb/fVwyM4c=)
2: hTYp4tVFk2Iv0MXe_TkiKDxhHf0.roa (hash: 6GO6BRanOpSP6VfdzTHxANKln0jgA0SAFTnzf0Z3Hfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:49:33:bf:f1:08:05:3e:66:4d:c8:cf:5c:53:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27962a33fd2348781ac123a12722a086ee8fba7d
Validity
Not Before: Nov 4 17:00:41 2025 GMT
Not After : Nov 5 17:00:41 2025 GMT
Subject: CN=46d44f99bb4f59bdd8ee37c7690e595849b194c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:a4:e5:60:a7:88:c7:a8:2c:36:2b:83:b3:
e3:65:88:89:0c:bf:f7:98:90:17:31:c6:67:c1:b4:
d1:e5:35:f6:19:1b:58:e9:ea:6e:d1:14:15:bd:9e:
87:2d:62:10:01:ef:55:07:18:28:26:a2:29:87:bb:
97:13:4c:ef:c3:fb:de:10:f2:ef:06:cd:a3:14:6f:
cf:3e:a3:94:4e:59:b2:87:e5:7f:c1:c4:d9:75:34:
a8:81:f7:30:62:39:d2:d5:33:fc:c1:82:49:b7:8d:
09:45:b3:c4:3e:c3:b3:10:11:19:aa:7a:fc:af:84:
53:9e:2c:21:c5:60:3e:21:20:23:cf:65:22:5f:c7:
65:aa:f9:65:94:b4:3b:80:f1:b0:a2:ba:e4:93:07:
b4:f0:0e:5f:0a:79:ef:19:e0:38:96:d4:82:72:e2:
fb:44:17:14:5f:3b:a5:09:fd:db:4f:c5:d7:09:78:
77:bc:a6:2a:37:b3:e6:e4:91:88:7d:f9:40:1c:16:
18:85:c2:73:75:e5:e6:28:0d:50:99:99:9f:74:95:
02:cb:0e:fc:35:d9:4b:c8:e6:04:6c:89:12:75:fc:
c3:86:ca:19:43:1c:5a:13:e2:06:ad:c0:b0:25:ac:
0d:c7:f1:e3:e4:2f:52:5c:68:a4:34:2a:dd:45:6f:
78:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D4:4F:99:BB:4F:59:BD:D8:EE:37:C7:69:0E:59:58:49:B1:94:C5
X509v3 Authority Key Identifier:
keyid:27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fb:ae:b2:eb:e9:d6:55:34:32:25:61:fc:8e:c1:07:d6:d5:
ee:53:3d:61:d5:37:b9:b8:5a:49:bc:c8:2b:0b:ce:66:8b:0a:
99:4e:e1:1e:44:d3:8a:41:83:e5:96:e8:76:8a:28:08:2d:f0:
c3:ab:48:19:f6:18:82:e9:2c:6b:63:59:56:3f:da:f3:88:c8:
62:1d:03:f4:a1:db:6e:07:03:dd:30:98:ae:e3:6a:ef:40:31:
76:1e:38:57:a9:a0:e8:f2:d4:01:3f:d9:31:e9:75:9b:81:c9:
cd:da:7d:51:16:0c:98:30:0b:fb:40:f5:8b:21:47:70:90:e9:
8c:ef:9e:c1:3d:e8:8a:7f:0d:03:31:50:6f:76:0a:54:68:9f:
f6:cd:99:5a:30:fd:99:95:fb:60:ac:e1:02:da:e8:c1:8b:95:
b1:4d:dd:91:07:a0:c3:b6:b4:ff:b1:56:a4:d2:bf:39:b4:08:
a5:2d:b1:11:a4:2f:44:99:b5:cf:32:84:06:18:5f:0c:66:d4:
8f:1d:7e:a6:b9:af:65:c5:de:9b:ab:52:9f:ca:98:61:35:9a:
07:b9:35:4a:69:49:2f:e1:42:ca:82:f0:54:7a:ea:ce:5c:76:
6c:b1:63:1d:ac:1e:8b:c0:59:24:45:c1:bd:c7:be:a2:ae:84:
2f:87:81:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0Ekzv/EIBT5mTcjPXFOgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OTYyYTMzZmQyMzQ4NzgxYWMxMjNhMTI3MjJhMDg2ZWU4
ZmJhN2QwHhcNMjUxMTA0MTcwMDQxWhcNMjUxMTA1MTcwMDQxWjAzMTEwLwYDVQQD
Eyg0NmQ0NGY5OWJiNGY1OWJkZDhlZTM3Yzc2OTBlNTk1ODQ5YjE5NGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoGk5WCniMeoLDYrg7PjZYiJDL/3
mJAXMcZnwbTR5TX2GRtY6epu0RQVvZ6HLWIQAe9VBxgoJqIph7uXE0zvw/veEPLv
Bs2jFG/PPqOUTlmyh+V/wcTZdTSogfcwYjnS1TP8wYJJt40JRbPEPsOzEBEZqnr8
r4RTniwhxWA+ISAjz2UiX8dlqvlllLQ7gPGworrkkwe08A5fCnnvGeA4ltSCcuL7
RBcUXzulCf3bT8XXCXh3vKYqN7Pm5JGIfflAHBYYhcJzdeXmKA1QmZmfdJUCyw78
NdlLyOYEbIkSdfzDhsoZQxxaE+IGrcCwJawNx/Hj5C9SXGikNCrdRW94JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbUT5m7T1m92O43x2kOWVhJsZTFMB8GA1UdIwQY
MBaAFCeWKjP9I0h4GsEjoScioIbuj7p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjVZcU1fMGpTSGdhd1NPaEp5S2dodTZQdW4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xMTQ1ZDItYjFiZC00YTU3LWE0NGQt
YmI2YmZmZTY2ZmYzLzEvSjVZcU1fMGpTSGdhd1NPaEp5S2dodTZQdW4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8xMTQ1ZDItYjFiZC00YTU3LWE0NGQtYmI2YmZmZTY2ZmYz
LzEvSjVZcU1fMGpTSGdhd1NPaEp5S2dodTZQdW4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvuusuvp
1lU0MiVh/I7BB9bV7lM9YdU3ubhaSbzIKwvOZosKmU7hHkTTikGD5ZbodoooCC3w
w6tIGfYYguksa2NZVj/a84jIYh0D9KHbbgcD3TCYruNq70Axdh44V6mg6PLUAT/Z
Mel1m4HJzdp9URYMmDAL+0D1iyFHcJDpjO+ewT3oin8NAzFQb3YKVGif9s2ZWjD9
mZX7YKzhAtrowYuVsU3dkQegw7a0/7FWpNK/ObQIpS2xEaQvRJm1zzKEBhhfDGbU
jx1+prmvZcXem6tSn8qYYTWaB7k1SmlJL+FCyoLwVHrqzlx2bLFjHawei8BZJEXB
vce+oq6EL4eB8A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:41:19 2025 by rpki-client