Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: /N0LWFCrgho0Sl9bjk8RiH/KLtKBrIJVZ0KqaUhGGrE=
Subject key identifier: E5:05:89:B8:81:76:6D:ED:FB:08:32:06:35:D1:33:ED:9D:F2:34:E2
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 019A4F625B6760DF8D6AFE39CBBDC7C31CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 15:00:37 +0000
Manifest this update: Tue 04 Nov 2025 15:00:37 +0000
Manifest next update: Wed 05 Nov 2025 15:00:37 +0000
Files and hashes: 1: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: RC7nU2hg9j3mj4ihWnLjYaaWahMv1FyxP8D5NKKVLzE=)
2: FR3a7fbq59iIo0zAlvy5kzi1iZU.roa (hash: Z35c/JbC3hZCBf85VdNEpndC+c0TUxZMQxPjJSIsAQ0=)
3: suPxSfpNrh7z5_Ta2x6TjwnQ2sY.roa (hash: jrCuL3fpLVTl6VSsAmka/tgQrfuz/laa7SHWrZ9+ExE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:5b:67:60:df:8d:6a:fe:39:cb:bd:c7:c3:1c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Nov 4 15:00:37 2025 GMT
Not After : Nov 5 15:00:37 2025 GMT
Subject: CN=e50589b881766dedfb08320635d133ed9df234e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:9c:29:d1:96:fd:fe:aa:ba:38:25:16:51:
32:ca:c2:b9:6a:4c:a0:db:ef:b2:9e:9e:0b:7e:08:
f0:21:99:5b:34:7f:65:d3:1d:68:b7:52:1d:3d:76:
00:3a:7f:f1:9f:2f:f7:dc:48:da:7e:51:76:75:27:
62:b1:bf:c8:20:91:f3:53:60:80:59:bd:e2:a7:77:
b7:12:4a:9b:9b:cb:b7:25:5c:7c:08:77:af:7f:9c:
fe:83:ed:56:1f:7c:a6:1a:fa:4b:de:c9:ec:3e:aa:
c0:c3:b5:15:af:5f:24:f6:24:db:c5:cc:90:48:9f:
f0:12:26:13:50:06:d2:6f:9d:94:77:d8:85:ea:b1:
dc:62:86:36:ed:f0:91:9f:62:47:54:b0:a1:f4:a7:
93:46:52:84:cb:d2:c2:d7:85:9e:0d:5b:bc:fb:98:
8e:6a:7f:58:27:8d:a1:ee:89:09:b4:43:39:de:19:
00:c7:77:d4:c3:11:d2:62:3a:09:94:72:85:9c:67:
f7:4b:b5:99:b3:a1:7b:74:cd:d6:65:33:ed:3d:61:
af:d9:9d:d7:cf:b9:42:e6:62:69:b5:b9:9c:0d:fd:
80:7c:4d:39:95:44:09:de:80:c2:a2:26:42:7b:c5:
2a:40:e3:14:27:6d:e3:3a:dd:e3:2d:80:a7:4e:25:
f7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:05:89:B8:81:76:6D:ED:FB:08:32:06:35:D1:33:ED:9D:F2:34:E2
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:fa:09:99:fc:ae:a8:5f:7f:14:9e:ca:0f:6f:97:76:41:dd:
24:a0:87:04:b6:61:21:82:ec:a2:74:48:2c:c9:e0:09:ea:f5:
a7:13:c6:23:c9:cf:2a:3d:ac:ad:65:2d:bd:2a:23:d2:4b:26:
35:94:c5:23:63:a5:b7:9f:e0:e3:04:e5:71:f8:44:04:75:42:
90:b7:e1:0e:62:af:2a:ca:50:e8:b7:93:08:51:f2:cf:6d:2f:
6c:a8:b7:86:21:4a:dd:00:fd:08:17:d8:72:c1:65:a3:fe:36:
60:9d:5d:65:9d:7d:ca:b9:b4:22:c0:a0:e1:0a:02:46:34:5f:
bd:09:ed:7e:e6:23:33:f4:51:3f:7d:40:0b:46:9c:29:ba:e9:
44:18:c9:5b:65:77:38:5c:7f:31:41:26:57:73:2f:0c:39:2e:
ec:a0:8c:61:c6:3f:80:72:97:26:66:ab:53:1d:32:67:b4:6f:
c9:5b:f4:df:ad:b4:2e:31:d9:dc:a2:0c:e7:f0:9e:15:dd:d5:
64:34:c2:d9:ad:cf:69:d1:6d:74:69:98:48:02:be:a9:9a:06:
27:72:48:41:45:54:b5:f6:41:e4:ca:b6:e3:79:f8:fc:6b:dc:
ad:58:b2:0d:d2:8b:5e:ed:79:c9:49:05:58:de:2c:f6:e2:7e:
82:52:ae:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYltnYN+Nav45y73HwxzMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1M2FkOWI0MzJiYjgzZDE0MWM0ODBkZWU3OGJjMzVmZjQ3
Y2I3MmMwHhcNMjUxMTA0MTUwMDM3WhcNMjUxMTA1MTUwMDM3WjAzMTEwLwYDVQQD
EyhlNTA1ODliODgxNzY2ZGVkZmIwODMyMDYzNWQxMzNlZDlkZjIzNGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse+cKdGW/f6qujglFlEyysK5akyg
2++ynp4LfgjwIZlbNH9l0x1ot1IdPXYAOn/xny/33EjaflF2dSdisb/IIJHzU2CA
Wb3ip3e3Ekqbm8u3JVx8CHevf5z+g+1WH3ymGvpL3snsPqrAw7UVr18k9iTbxcyQ
SJ/wEiYTUAbSb52Ud9iF6rHcYoY27fCRn2JHVLCh9KeTRlKEy9LC14WeDVu8+5iO
an9YJ42h7okJtEM53hkAx3fUwxHSYjoJlHKFnGf3S7WZs6F7dM3WZTPtPWGv2Z3X
z7lC5mJptbmcDf2AfE05lUQJ3oDCoiZCe8UqQOMUJ23jOt3jLYCnTiX32QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUFibiBdm3t+wgyBjXRM+2d8jTiMB8GA1UdIwQY
MBaAFOU62bQyu4PRQcSA3ueLw1/0fLcsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUt
MDliYjUyODc1MzFiLzEvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUtMDliYjUyODc1MzFi
LzEvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPPoJmfyu
qF9/FJ7KD2+XdkHdJKCHBLZhIYLsonRILMngCer1pxPGI8nPKj2srWUtvSoj0ksm
NZTFI2Olt5/g4wTlcfhEBHVCkLfhDmKvKspQ6LeTCFHyz20vbKi3hiFK3QD9CBfY
csFlo/42YJ1dZZ19yrm0IsCg4QoCRjRfvQntfuYjM/RRP31AC0acKbrpRBjJW2V3
OFx/MUEmV3MvDDku7KCMYcY/gHKXJmarUx0yZ7RvyVv03620LjHZ3KIM5/CeFd3V
ZDTC2a3PadFtdGmYSAK+qZoGJ3JIQUVUtfZB5Mq243n4/GvcrViyDdKLXu15yUkF
WN4s9uJ+glKulQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:27 2025 by rpki-client