Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
File: L5INmRKzpyi5SBgYjvPj5X-NP5w.mft (raw, json)
Hash identifier: dMPEm1hNP2nCPacOntRq2RPjuuT4SDGTwxtLddfXH/o=
Subject key identifier: B1:79:D3:33:E4:CC:10:0C:7B:A4:4D:71:CB:67:94:3B:F7:FB:0E:B4
Authority key identifier: 2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
Certificate issuer: /CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Certificate serial: 019A4FD075FB6CAF5589273DB9892956EFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
Manifest number: 1449
Signing time: Tue 04 Nov 2025 17:00:52 +0000
Manifest this update: Tue 04 Nov 2025 17:00:52 +0000
Manifest next update: Wed 05 Nov 2025 17:00:52 +0000
Files and hashes: 1: L5INmRKzpyi5SBgYjvPj5X-NP5w.crl (hash: Klqn9wlEQ1gdCFkrDROvUTzlP/SwMIYbABAXe6Qqonw=)
2: UHmcnjZPkdlcmPvf9kU9gEvRzu8.roa (hash: o/ZBiu0sM0QxdL8NohBvSpb6XFjAawutUac+NbV8PeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:75:fb:6c:af:55:89:27:3d:b9:89:29:56:ef:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Validity
Not Before: Nov 4 17:00:52 2025 GMT
Not After : Nov 5 17:00:52 2025 GMT
Subject: CN=b179d333e4cc100c7ba44d71cb67943bf7fb0eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0e:03:1c:ec:24:bd:ad:9b:4c:5d:ca:2e:45:
23:4e:b7:de:9f:95:07:0d:9a:16:a2:4e:1d:c6:15:
5c:90:83:a8:f8:f1:5c:82:33:f8:d8:84:5b:4f:b8:
fe:a7:07:4d:1c:a7:d2:b0:75:f6:db:6b:05:f1:61:
b4:71:07:3b:be:09:76:7e:f3:34:38:ae:63:35:8f:
85:49:c5:10:60:2f:51:6b:f6:d6:b7:43:2e:e9:64:
d1:ed:54:94:10:15:57:64:4f:01:51:fd:2b:d6:10:
04:e1:6a:fe:5b:9e:06:e1:6d:cd:51:9e:f6:2b:5f:
de:71:45:67:ac:b2:de:b6:81:75:dc:bf:b6:a8:09:
06:50:7a:96:be:95:f0:4b:1f:e5:9a:42:79:d1:b9:
74:89:57:42:21:16:7b:09:91:f8:b5:81:e0:5e:01:
f3:2a:8d:fd:92:cc:ff:89:e1:93:38:ba:67:e7:53:
a8:ec:18:59:d8:c4:ac:6d:c0:e4:f3:0d:04:ae:5f:
95:ec:0f:3b:30:b4:45:ea:43:59:cb:5d:0c:d7:14:
40:a6:aa:2d:4d:9b:ff:00:c3:20:e3:37:c4:fb:e0:
4d:30:79:a2:41:32:35:f3:26:4f:f2:04:0d:e4:a6:
0c:20:a8:ee:61:3e:67:29:ce:1a:b4:51:56:5e:c5:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:79:D3:33:E4:CC:10:0C:7B:A4:4D:71:CB:67:94:3B:F7:FB:0E:B4
X509v3 Authority Key Identifier:
keyid:2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6a:8d:58:3d:de:0c:74:2b:11:ba:f1:53:34:c2:84:12:4a:
76:13:03:6c:14:4f:34:bf:2b:4d:97:d9:80:a1:21:bb:9e:f7:
08:2c:e5:18:66:55:76:36:17:a6:0c:42:2c:03:ef:26:b6:93:
19:d3:df:f0:c0:fd:03:82:69:40:5b:b4:d3:17:fe:7a:c2:5a:
aa:f7:11:55:c8:25:3e:03:66:47:e9:74:a3:63:34:02:49:01:
c1:e7:3d:ec:80:27:32:9e:04:1f:2a:56:4a:96:6b:76:b6:71:
3a:6a:f3:0a:2b:4a:8e:86:b3:47:11:11:84:3c:1d:3c:d1:87:
82:81:00:eb:c7:f4:cf:58:98:60:5c:f1:d1:8c:91:f0:88:b4:
33:0f:0f:35:66:d7:d1:c2:03:bd:21:74:06:54:6b:90:17:32:
98:8a:42:05:18:ec:81:c0:9f:78:77:2c:a8:2b:33:13:7d:26:
86:98:ab:ab:a4:06:69:1b:9b:e3:cd:2f:c3:b3:54:20:3b:ee:
d9:1a:49:54:83:7e:dd:6a:0c:c8:e3:02:32:67:b1:0c:2b:c9:
c0:0a:21:23:e9:91:b1:b7:51:8e:ee:01:52:fc:ab:0e:3c:5a:
d2:96:7d:84:72:7a:f4:72:c5:1b:64:2e:37:c3:1d:4e:87:e6:
86:dc:b4:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0HX7bK9ViSc9uYkpVu/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTIwZDk5MTJiM2E3MjhiOTQ4MTgxODhlZjNlM2U1N2Y4
ZDNmOWMwHhcNMjUxMTA0MTcwMDUyWhcNMjUxMTA1MTcwMDUyWjAzMTEwLwYDVQQD
EyhiMTc5ZDMzM2U0Y2MxMDBjN2JhNDRkNzFjYjY3OTQzYmY3ZmIwZWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ4DHOwkva2bTF3KLkUjTrfen5UH
DZoWok4dxhVckIOo+PFcgjP42IRbT7j+pwdNHKfSsHX222sF8WG0cQc7vgl2fvM0
OK5jNY+FScUQYC9Ra/bWt0Mu6WTR7VSUEBVXZE8BUf0r1hAE4Wr+W54G4W3NUZ72
K1/ecUVnrLLetoF13L+2qAkGUHqWvpXwSx/lmkJ50bl0iVdCIRZ7CZH4tYHgXgHz
Ko39ksz/ieGTOLpn51Oo7BhZ2MSsbcDk8w0Erl+V7A87MLRF6kNZy10M1xRApqot
TZv/AMMg4zfE++BNMHmiQTI18yZP8gQN5KYMIKjuYT5nKc4atFFWXsWirwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLF50zPkzBAMe6RNcctnlDv3+w60MB8GA1UdIwQY
MBaAFC+SDZkSs6couUgYGI7z4+V/jT+cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVJTm1SS3pweWk1U0JnWWp2UGo1WC1OUDV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82MjY1MjUtNmFjNC00YWQzLWI4ZDIt
OWMzMDAwMjQ1Njc2LzEvTDVJTm1SS3pweWk1U0JnWWp2UGo1WC1OUDV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi82MjY1MjUtNmFjNC00YWQzLWI4ZDItOWMzMDAwMjQ1Njc2
LzEvTDVJTm1SS3pweWk1U0JnWWp2UGo1WC1OUDV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2qNWD3e
DHQrEbrxUzTChBJKdhMDbBRPNL8rTZfZgKEhu573CCzlGGZVdjYXpgxCLAPvJraT
GdPf8MD9A4JpQFu00xf+esJaqvcRVcglPgNmR+l0o2M0AkkBwec97IAnMp4EHypW
SpZrdrZxOmrzCitKjoazRxERhDwdPNGHgoEA68f0z1iYYFzx0YyR8Ii0Mw8PNWbX
0cIDvSF0BlRrkBcymIpCBRjsgcCfeHcsqCszE30mhpirq6QGaRub480vw7NUIDvu
2RpJVIN+3WoMyOMCMmexDCvJwAohI+mRsbdRju4BUvyrDjxa0pZ9hHJ69HLFG2Qu
N8MdTofmhty0Sw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:28 2025 by rpki-client