Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
File: 5wn3YuCC6tPW1-TK4p77tNEvV14.mft (raw, json)
Hash identifier: 3zkLn4G3vA+oDjmx5M56AOVVenBuVB/HERaH3NR8//g=
Subject key identifier: 31:94:A4:17:0F:02:0F:9A:99:80:3B:C4:B5:F1:63:EF:9C:64:83:FB
Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
Certificate issuer: /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Certificate serial: 019A5119A55AB8A33E1D6B01CAD5CF6082D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
Manifest number: 0D65
Signing time: Tue 04 Nov 2025 23:00:26 +0000
Manifest this update: Tue 04 Nov 2025 23:00:26 +0000
Manifest next update: Wed 05 Nov 2025 23:00:26 +0000
Files and hashes: 1: 0I90jYLDsjsh8A1WdLN05NbEjj4.roa (hash: Kf+mfo5G5myFzzGKcZGygmTNr3GGZjTxsLuEcsJyKBc=)
2: 5wn3YuCC6tPW1-TK4p77tNEvV14.crl (hash: w+FwZY5LnMsWFsds/BCo9NQXyZgHywcBoJSbTEPe3QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:a5:5a:b8:a3:3e:1d:6b:01:ca:d5:cf:60:82:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Validity
Not Before: Nov 4 23:00:26 2025 GMT
Not After : Nov 5 23:00:26 2025 GMT
Subject: CN=3194a4170f020f9a99803bc4b5f163ef9c6483fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:18:5c:9c:54:4c:cf:6d:70:57:0d:d5:12:f4:
03:a7:0f:cd:cb:25:ba:86:0a:06:c9:5f:68:39:7d:
a8:df:80:9f:2a:37:4e:92:20:e2:91:1f:be:8b:29:
31:ed:43:a7:72:8e:a2:75:c9:48:98:af:fd:f4:00:
9f:b2:ab:df:96:24:15:0d:f5:39:d4:a9:b7:88:62:
42:22:6a:54:03:d4:7d:36:c3:23:fa:ea:22:ff:85:
7e:04:72:77:b0:ab:5d:d4:15:8a:5f:9f:c9:cb:3b:
d2:3d:76:ed:d2:43:4a:1c:19:a2:ec:92:27:49:71:
27:24:a9:97:c4:9b:79:ee:76:bb:c3:67:09:49:e0:
a5:71:63:f0:10:a6:92:8c:06:7f:77:a2:ce:97:54:
b7:19:f8:0d:28:07:4e:56:17:55:ac:49:1a:d5:c9:
8c:b1:cf:f6:f7:24:dd:20:d9:51:b1:40:5b:7a:b0:
41:b6:8b:9e:19:5b:7c:85:d4:4d:5d:40:17:98:da:
9b:54:6e:5b:90:6a:0f:50:ad:16:c5:9e:63:ec:a3:
75:86:3e:b7:ea:f2:3e:19:aa:9a:19:4a:2d:d2:65:
20:7d:d8:53:5b:90:75:8c:78:ad:c1:21:79:7a:73:
6b:72:3e:b6:87:af:be:0e:fc:1e:01:e8:bf:ed:89:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:94:A4:17:0F:02:0F:9A:99:80:3B:C4:B5:F1:63:EF:9C:64:83:FB
X509v3 Authority Key Identifier:
keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a6:ab:48:63:02:c3:cf:b6:e7:9e:dc:13:10:2a:cd:a9:a5:
38:cc:fe:71:45:00:67:65:cb:5b:0c:41:31:8e:ad:8c:bd:a9:
7a:c6:87:4a:a1:c9:d9:cc:01:85:bb:30:ef:20:ba:a9:d2:61:
8f:92:0b:9b:10:39:77:19:22:c7:a8:c8:14:28:1b:09:db:cd:
74:e3:06:aa:87:fb:43:4a:ca:f0:8b:11:b2:fd:1a:cd:59:0c:
a9:38:8e:42:cf:fd:76:b8:07:b4:ae:bb:ca:21:e6:01:0b:ef:
f7:44:e9:18:bb:ae:91:28:1a:88:02:f5:cf:06:df:13:8b:85:
38:48:d8:e5:4e:32:a0:de:5c:3e:69:d2:e1:05:29:db:a9:9d:
e2:ee:8e:1a:4d:a7:21:0c:ca:93:12:28:4c:09:b5:dd:f0:50:
67:f0:b2:9c:45:7f:00:e8:db:02:75:2f:a7:76:f7:ea:f1:4a:
e1:45:73:c4:d3:d2:68:08:e2:7e:f1:66:59:3e:a0:fc:8e:27:
e2:19:71:e4:24:89:37:51:29:f6:31:ac:5e:bc:60:58:4c:fd:
d4:a0:ab:c3:16:c9:b8:8e:2b:7a:4f:75:c9:1c:a4:21:1a:6d:
e8:9a:d9:03:09:fc:5a:2d:6d:d6:5d:9f:cf:5f:98:93:f2:84:
b1:bf:2b:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGaVauKM+HWsBytXPYILQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MDlmNzYyZTA4MmVhZDNkNmQ3ZTRjYWUyOWVmYmI0ZDEy
ZjU3NWUwHhcNMjUxMTA0MjMwMDI2WhcNMjUxMTA1MjMwMDI2WjAzMTEwLwYDVQQD
EygzMTk0YTQxNzBmMDIwZjlhOTk4MDNiYzRiNWYxNjNlZjljNjQ4M2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRhcnFRMz21wVw3VEvQDpw/NyyW6
hgoGyV9oOX2o34CfKjdOkiDikR++iykx7UOnco6idclImK/99ACfsqvfliQVDfU5
1Km3iGJCImpUA9R9NsMj+uoi/4V+BHJ3sKtd1BWKX5/JyzvSPXbt0kNKHBmi7JIn
SXEnJKmXxJt57na7w2cJSeClcWPwEKaSjAZ/d6LOl1S3GfgNKAdOVhdVrEka1cmM
sc/29yTdINlRsUBberBBtoueGVt8hdRNXUAXmNqbVG5bkGoPUK0WxZ5j7KN1hj63
6vI+GaqaGUot0mUgfdhTW5B1jHitwSF5enNrcj62h6++DvweAei/7YlOpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGUpBcPAg+amYA7xLXxY++cZIP7MB8GA1UdIwQY
MBaAFOcJ92LggurT1tfkyuKe+7TRL1deMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjIt
YWU0ZmE3ZjE3ZjljLzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjItYWU0ZmE3ZjE3Zjlj
LzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6arSGMC
w8+2557cExAqzamlOMz+cUUAZ2XLWwxBMY6tjL2pesaHSqHJ2cwBhbsw7yC6qdJh
j5ILmxA5dxkix6jIFCgbCdvNdOMGqof7Q0rK8IsRsv0azVkMqTiOQs/9drgHtK67
yiHmAQvv90TpGLuukSgaiAL1zwbfE4uFOEjY5U4yoN5cPmnS4QUp26md4u6OGk2n
IQzKkxIoTAm13fBQZ/CynEV/AOjbAnUvp3b36vFK4UVzxNPSaAjifvFmWT6g/I4n
4hlx5CSJN1Ep9jGsXrxgWEz91KCrwxbJuI4rek91yRykIRpt6JrZAwn8Wi1t1l2f
z1+Yk/KEsb8r8Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:07:17 2025 by rpki-client