Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
File: 5LTFOvZfC4OWuVtNB9TsTnvid-U.mft (raw, json)
Hash identifier: B1/Ix/gmAnlKRASZefUpaVfebfzgIrlTlLQR/njXInU=
Subject key identifier: 1C:32:62:B1:AF:A8:9F:48:72:57:E5:97:D3:E6:9A:51:01:8F:B6:48
Authority key identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
Certificate issuer: /CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Certificate serial: 019A4EF5A7B536D13A5B0AE0A44B59884523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:53 +0000
Manifest this update: Tue 04 Nov 2025 13:01:53 +0000
Manifest next update: Wed 05 Nov 2025 13:01:53 +0000
Files and hashes: 1: 5LTFOvZfC4OWuVtNB9TsTnvid-U.crl (hash: A1i8M/UDm6FbbwvymV0oRkMOknzGplp/jU3znzID55w=)
2: HPP-Y8CcP39de0XZZOWjFIJ96v4.roa (hash: wqE/NVLKIIjuJJuVTQbIHrmfJEIIZJeODzcidgoveO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a7:b5:36:d1:3a:5b:0a:e0:a4:4b:59:88:45:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Validity
Not Before: Nov 4 13:01:53 2025 GMT
Not After : Nov 5 13:01:53 2025 GMT
Subject: CN=1c3262b1afa89f487257e597d3e69a51018fb648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:33:10:0c:eb:1d:0a:4a:aa:e5:c8:73:bb:
df:46:ae:5b:1f:41:cd:42:17:f3:aa:f5:10:93:e1:
6d:72:f3:95:88:ec:33:ee:31:72:5c:cf:07:f2:ee:
e2:43:f7:43:27:66:4c:d4:d6:c6:69:e3:f6:22:2a:
1d:75:d4:1d:d4:7f:9f:28:5d:1d:80:b9:94:21:bb:
7a:65:83:3c:f5:6f:52:0a:48:9d:ba:e7:7f:81:b5:
87:56:5d:d5:d3:90:38:82:28:da:7d:48:5d:53:b9:
96:f6:43:d5:65:17:c6:00:65:c0:d5:52:2c:dc:f8:
91:5f:7c:ce:7b:40:42:3a:e3:cf:d2:ba:e6:6b:8d:
f2:7e:4b:9a:bb:2c:e8:96:90:d1:27:f2:12:03:e6:
06:88:be:5c:ab:14:cf:2f:bc:cd:34:b1:67:9f:42:
58:ed:52:e8:29:c9:a7:9c:fa:87:09:b2:86:39:88:
9c:0d:4f:04:db:f7:08:97:1f:ab:d8:e3:78:5a:19:
cf:ed:36:62:0d:29:02:32:e7:b2:e5:24:bf:48:16:
ff:aa:92:db:d7:25:71:79:58:0e:bc:16:47:67:9f:
1f:b3:c9:93:a3:6f:14:a9:61:ef:ea:53:da:57:ec:
25:c4:dd:38:10:e6:86:f3:4f:3c:08:9c:f1:37:b7:
a1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:32:62:B1:AF:A8:9F:48:72:57:E5:97:D3:E6:9A:51:01:8F:B6:48
X509v3 Authority Key Identifier:
keyid:E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:dc:8a:7d:8a:c7:98:26:d2:28:4d:59:21:57:9d:55:52:43:
39:de:c5:86:04:fd:53:73:48:7d:99:91:26:c6:0b:ac:04:3e:
ec:2f:9e:55:3c:cc:a1:22:ca:41:9d:20:4a:b1:52:b7:93:91:
09:1e:da:da:bd:f7:f5:c6:29:8c:b3:d3:86:fc:e8:1f:74:18:
d3:7b:1b:51:c5:be:2f:f4:15:6d:92:63:5f:18:f4:1b:48:29:
87:33:98:41:d1:e5:1d:a1:7e:12:0a:32:bb:6f:a8:50:b5:6c:
df:ed:ab:af:64:3f:60:16:14:c9:a4:dc:85:18:dc:92:43:85:
4a:7b:9b:97:ae:5c:dd:43:bb:c5:6d:31:c3:22:7d:a6:8f:10:
d1:f7:93:be:c5:b0:ef:d3:9a:39:f4:16:94:cc:f1:6c:33:a9:
7b:65:f3:e6:d5:a2:25:5c:ab:c8:ee:b7:52:e6:69:84:de:f4:
8f:b3:92:38:80:6c:36:d4:58:fb:e9:41:02:ee:bb:da:66:a2:
45:78:04:12:96:ae:5c:a3:7b:9a:a3:fb:7a:98:99:56:c5:3f:
30:c5:4d:0d:32:62:9b:cc:d7:8a:5f:9d:7d:49:dd:32:1d:f1:
b3:37:68:02:6c:e3:57:12:12:8a:04:14:ec:74:c8:b1:43:29:
df:13:be:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9ae1NtE6WwrgpEtZiEUjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YjRjNTNhZjY1ZjBiODM5NmI5NWI0ZDA3ZDRlYzRlN2Jl
Mjc3ZTUwHhcNMjUxMTA0MTMwMTUzWhcNMjUxMTA1MTMwMTUzWjAzMTEwLwYDVQQD
EygxYzMyNjJiMWFmYTg5ZjQ4NzI1N2U1OTdkM2U2OWE1MTAxOGZiNjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ0zEAzrHQpKquXIc7vfRq5bH0HN
QhfzqvUQk+FtcvOViOwz7jFyXM8H8u7iQ/dDJ2ZM1NbGaeP2IiodddQd1H+fKF0d
gLmUIbt6ZYM89W9SCkiduud/gbWHVl3V05A4gijafUhdU7mW9kPVZRfGAGXA1VIs
3PiRX3zOe0BCOuPP0rrma43yfkuauyzolpDRJ/ISA+YGiL5cqxTPL7zNNLFnn0JY
7VLoKcmnnPqHCbKGOYicDU8E2/cIlx+r2ON4WhnP7TZiDSkCMuey5SS/SBb/qpLb
1yVxeVgOvBZHZ58fs8mTo28UqWHv6lPaV+wlxN04EOaG8088CJzxN7ehYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwyYrGvqJ9Iclfll9PmmlEBj7ZIMB8GA1UdIwQY
MBaAFOS0xTr2XwuDlrlbTQfU7E574nflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80NmFhYmYtZGFkMC00ZDc2LWE1YjUt
ODhkYjAxMjVhNmI4LzEvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi80NmFhYmYtZGFkMC00ZDc2LWE1YjUtODhkYjAxMjVhNmI4
LzEvNUxURk92WmZDNE9XdVZ0TkI5VHNUbnZpZC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9yKfYrH
mCbSKE1ZIVedVVJDOd7FhgT9U3NIfZmRJsYLrAQ+7C+eVTzMoSLKQZ0gSrFSt5OR
CR7a2r339cYpjLPThvzoH3QY03sbUcW+L/QVbZJjXxj0G0gphzOYQdHlHaF+Egoy
u2+oULVs3+2rr2Q/YBYUyaTchRjckkOFSnubl65c3UO7xW0xwyJ9po8Q0feTvsWw
79OaOfQWlMzxbDOpe2Xz5tWiJVyryO63UuZphN70j7OSOIBsNtRY++lBAu672mai
RXgEEpauXKN7mqP7epiZVsU/MMVNDTJim8zXil+dfUndMh3xszdoAmzjVxISigQU
7HTIsUMp3xO+Ww==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:42 2025 by rpki-client