Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
File: rl81puj7U5sZVMtDps516X-q4XU.mft (raw, json)
Hash identifier: lXpr4Shfk/07vqm0CBZG5GnHW/mOGs520tWRCjwyTqQ=
Subject key identifier: 5F:D4:02:59:39:67:AD:9D:3A:C6:DB:91:44:26:81:EE:3A:6D:BC:F1
Authority key identifier: AE:5F:35:A6:E8:FB:53:9B:19:54:CB:43:A6:CE:75:E9:7F:AA:E1:75
Certificate issuer: /CN=ae5f35a6e8fb539b1954cb43a6ce75e97faae175
Certificate serial: 019A4EF5C01949222B09D96DC5256D76E83F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
Manifest number: 0B04
Signing time: Tue 04 Nov 2025 13:01:59 +0000
Manifest this update: Tue 04 Nov 2025 13:01:59 +0000
Manifest next update: Wed 05 Nov 2025 13:01:59 +0000
Files and hashes: 1: rl81puj7U5sZVMtDps516X-q4XU.crl (hash: ZWBad6fDpI2Rho2JfyyLUbqZHGIH+yjpdXSD2TEC7A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c0:19:49:22:2b:09:d9:6d:c5:25:6d:76:e8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae5f35a6e8fb539b1954cb43a6ce75e97faae175
Validity
Not Before: Nov 4 13:01:59 2025 GMT
Not After : Nov 5 13:01:59 2025 GMT
Subject: CN=5fd402593967ad9d3ac6db91442681ee3a6dbcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b5:aa:83:67:22:2a:99:e0:c2:07:56:06:96:
e3:fd:68:e6:0a:63:26:ec:a5:45:85:10:c9:58:6f:
94:2c:a0:e7:4e:09:51:4a:ba:10:ea:56:42:8a:ab:
e7:34:48:b6:e9:93:f0:9f:58:26:7b:4c:6f:ee:27:
4b:cb:0b:25:72:cf:bb:21:60:45:e8:87:8e:45:65:
c7:6b:94:10:f7:db:39:c5:3d:ec:91:d5:4c:15:a5:
41:7d:a8:c8:42:04:27:82:a4:56:f0:98:46:e4:95:
07:ac:9b:19:21:9b:34:ca:e6:74:03:6a:ac:25:9d:
21:c1:12:f5:3b:75:b7:46:d5:0b:4d:40:5c:6c:14:
ed:4b:75:2c:ac:6c:af:e1:33:c0:61:b3:1d:d3:1e:
66:0c:23:d0:d2:83:79:94:8f:12:de:b2:22:c3:f3:
5d:77:cb:47:f4:61:ff:a5:a0:57:ba:23:fd:ab:bd:
45:4c:1c:35:e8:81:da:52:b9:fa:b1:3f:f5:de:ab:
92:d7:20:2a:a4:38:33:c7:32:d9:35:e1:1c:0e:ee:
f9:f6:f8:3b:b8:59:2f:06:03:98:44:ae:77:52:f9:
ba:28:c4:67:33:58:fa:be:04:ac:be:64:a6:70:f7:
c2:cc:76:72:66:11:95:3d:02:8b:6e:ba:4f:19:6a:
7f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D4:02:59:39:67:AD:9D:3A:C6:DB:91:44:26:81:EE:3A:6D:BC:F1
X509v3 Authority Key Identifier:
keyid:AE:5F:35:A6:E8:FB:53:9B:19:54:CB:43:A6:CE:75:E9:7F:AA:E1:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ee:f5:2a:e8:37:fc:93:30:b8:df:0c:ee:e0:8c:de:81:b3:
b6:ba:ce:c4:5c:97:6a:4d:32:eb:a8:6f:1e:c4:b7:ae:fc:58:
a0:c1:73:61:60:f6:f5:51:65:7c:17:0a:25:0e:5d:b6:ae:6c:
d0:b7:59:44:8a:3b:a1:8d:56:94:1a:ec:7e:9f:07:49:56:aa:
fa:4e:15:9e:82:2a:72:8c:e6:ba:bd:ba:1a:27:d6:e0:17:17:
04:7a:dd:12:1f:3a:83:85:34:44:72:7f:0a:6c:2a:81:77:24:
21:5b:ec:fd:a6:f4:00:02:a0:2d:5a:2e:99:9d:09:be:26:56:
b6:ca:b2:d8:7b:45:d1:f5:0b:e8:d7:6f:15:d8:a9:c5:84:14:
6a:c7:54:82:49:37:53:97:c7:a0:4a:cc:21:7d:a0:4c:4a:7d:
5b:bf:97:25:ea:8e:2f:4e:a4:95:e3:0e:c4:2c:04:22:ea:a6:
35:e5:3c:9e:fe:30:88:af:1a:f8:84:ee:33:0e:0e:87:98:09:
15:eb:bb:92:23:2d:20:6f:f4:ee:66:d4:87:68:c2:c1:5e:15:
10:23:8c:c7:62:a8:d8:e7:82:c2:ef:a0:3c:84:9c:57:08:9e:
24:25:53:fe:11:23:09:95:7b:31:e8:53:b0:7f:e5:d5:a3:18:
f8:61:4c:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9cAZSSIrCdltxSVtdug/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNWYzNWE2ZThmYjUzOWIxOTU0Y2I0M2E2Y2U3NWU5N2Zh
YWUxNzUwHhcNMjUxMTA0MTMwMTU5WhcNMjUxMTA1MTMwMTU5WjAzMTEwLwYDVQQD
Eyg1ZmQ0MDI1OTM5NjdhZDlkM2FjNmRiOTE0NDI2ODFlZTNhNmRiY2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7Wqg2ciKpngwgdWBpbj/WjmCmMm
7KVFhRDJWG+ULKDnTglRSroQ6lZCiqvnNEi26ZPwn1gme0xv7idLywslcs+7IWBF
6IeORWXHa5QQ99s5xT3skdVMFaVBfajIQgQngqRW8JhG5JUHrJsZIZs0yuZ0A2qs
JZ0hwRL1O3W3RtULTUBcbBTtS3UsrGyv4TPAYbMd0x5mDCPQ0oN5lI8S3rIiw/Nd
d8tH9GH/paBXuiP9q71FTBw16IHaUrn6sT/13quS1yAqpDgzxzLZNeEcDu759vg7
uFkvBgOYRK53Uvm6KMRnM1j6vgSsvmSmcPfCzHZyZhGVPQKLbrpPGWp/dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/UAlk5Z62dOsbbkUQmge46bbzxMB8GA1UdIwQY
MBaAFK5fNabo+1ObGVTLQ6bOdel/quF1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmw4MXB1ajdVNXNaVk10RHBzNTE2WC1xNFhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9mZWI3ZTAtMmI3ZS00MjZjLWIwMzct
MjA5MWNjYThiYzQ4LzEvcmw4MXB1ajdVNXNaVk10RHBzNTE2WC1xNFhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9mZWI3ZTAtMmI3ZS00MjZjLWIwMzctMjA5MWNjYThiYzQ4
LzEvcmw4MXB1ajdVNXNaVk10RHBzNTE2WC1xNFhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtu71Kug3
/JMwuN8M7uCM3oGztrrOxFyXak0y66hvHsS3rvxYoMFzYWD29VFlfBcKJQ5dtq5s
0LdZRIo7oY1WlBrsfp8HSVaq+k4VnoIqcozmur26GifW4BcXBHrdEh86g4U0RHJ/
CmwqgXckIVvs/ab0AAKgLVoumZ0JviZWtsqy2HtF0fUL6NdvFdipxYQUasdUgkk3
U5fHoErMIX2gTEp9W7+XJeqOL06kleMOxCwEIuqmNeU8nv4wiK8a+ITuMw4Oh5gJ
Feu7kiMtIG/07mbUh2jCwV4VECOMx2Ko2OeCwu+gPIScVwieJCVT/hEjCZV7MehT
sH/l1aMY+GFM4Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:21 2025 by rpki-client