Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
File: 5sLg0_3CFaOJxwQ8paGga-LFWO8.mft (raw, json)
Hash identifier: p0aNpCLU6VAKHQ6RsXGrlMFUdxqEpFBa6JZubUm2ym4=
Subject key identifier: 61:74:CF:03:6A:53:42:89:AE:94:8D:89:F9:5E:F2:DD:51:56:67:2A
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial: 019A4EBD5BCE79D22484189919A406E6A607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
Manifest number: 09BF
Signing time: Tue 04 Nov 2025 12:00:23 +0000
Manifest this update: Tue 04 Nov 2025 12:00:23 +0000
Manifest next update: Wed 05 Nov 2025 12:00:23 +0000
Files and hashes: 1: 4KWiQtmJjDlF2DYDhF9dVQgC3rY.roa (hash: p/nyQGd2f2o2HLS8jm422WXygPmGuwDXd7wjQqTbcdY=)
2: 5sLg0_3CFaOJxwQ8paGga-LFWO8.crl (hash: 9KwBU6zVrC7G3h6Pam9O6lB5eTujtzqPd7B29qQ5WNk=)
3: BQSs352-EOwWdJt5W4JX2r66118.roa (hash: SQJWh7RfqqUI9aMjD6YSzrE33eXIstI44fKb5g3qqDI=)
4: UyklqcY4QQ3ESWmiy5lj4wfy-lE.roa (hash: gDteXJLELGLpEyJXH+6t7iRhrt3b5/Agnwke1FnjUuY=)
5: mx4mEjcUAqOj7-yzqqHmPAfoCTw.roa (hash: TADBUKVvbfWL8WOCN7ye3V2kF6YpMBXr/Ao/gRMpF0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:5b:ce:79:d2:24:84:18:99:19:a4:06:e6:a6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Validity
Not Before: Nov 4 12:00:23 2025 GMT
Not After : Nov 5 12:00:23 2025 GMT
Subject: CN=6174cf036a534289ae948d89f95ef2dd5156672a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:90:f9:0e:0e:11:c4:26:d1:70:e8:5f:18:
89:f5:30:a8:ad:95:dd:a7:9b:b1:66:15:e2:5a:8a:
47:d1:d0:22:91:de:9c:0d:9e:16:db:27:82:12:82:
1f:08:fc:84:65:eb:e0:f7:f3:ee:4c:10:ee:4c:b8:
25:c2:ac:84:bd:b0:bf:ee:19:3d:99:42:f0:87:3e:
e3:ea:7d:54:58:51:2f:07:33:48:06:dd:5c:36:ed:
65:7d:18:d2:36:c3:84:35:82:7d:f4:ab:24:f6:0a:
45:f9:ff:09:56:15:ab:15:17:78:6b:74:45:7d:35:
b6:11:e8:b5:c9:58:22:a7:f4:1e:a1:cd:75:de:07:
fb:5b:25:85:ab:a2:60:d8:26:27:a6:60:a1:c5:86:
b2:74:88:8c:3a:85:df:74:ed:b9:79:6e:33:96:51:
23:b3:e2:d1:28:38:d4:ac:51:75:db:4b:f0:ba:45:
3c:93:da:bb:b9:00:01:8a:fd:f4:11:da:20:fd:8e:
62:68:1b:57:69:69:cb:56:6a:af:05:05:16:90:8c:
ea:e2:f0:c6:e3:ea:9e:fe:84:fc:bc:5f:6c:9a:42:
ba:9a:68:a5:86:e5:87:35:df:15:f2:3a:e8:ab:fd:
c4:05:c9:d7:a3:f1:fb:69:2b:db:49:ba:ab:b4:a6:
94:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:74:CF:03:6A:53:42:89:AE:94:8D:89:F9:5E:F2:DD:51:56:67:2A
X509v3 Authority Key Identifier:
keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:30:d6:74:75:d8:ad:6d:01:f7:2c:f6:4a:ff:d0:31:e4:4b:
38:a3:a0:97:6b:d6:1c:7a:62:47:f4:7d:09:c0:72:60:59:4d:
25:ea:a4:cd:37:e0:19:ba:5e:dc:9c:d7:b2:c5:28:03:f6:9d:
34:74:1a:5f:bd:eb:e6:ec:6c:3b:06:d3:42:4e:4a:d0:be:84:
95:49:36:37:5c:69:55:3c:6e:98:52:42:14:7d:28:6d:e5:97:
41:6e:4e:0d:46:9c:00:de:1c:14:05:1c:e5:e3:42:f7:6c:95:
3c:4f:c3:19:62:a8:ae:fd:9e:89:ff:75:5f:26:49:14:38:7c:
58:b2:e0:4b:87:c0:d1:56:cf:7e:b3:52:4b:05:09:0a:c9:1e:
b5:23:4b:41:de:e5:2b:ee:f3:0d:4c:92:01:b8:37:51:62:25:
67:90:65:9a:bd:cd:45:94:32:ae:0c:0e:b6:68:d2:a7:a9:a8:
cd:48:4b:16:2b:8a:e0:5d:bb:e5:9c:be:b5:b7:5d:c4:bf:49:
3b:ae:87:7c:f6:7d:f7:7c:f1:3c:61:e9:ef:9d:65:14:87:75:
24:cc:cd:de:44:43:88:91:29:12:46:ca:54:6a:10:a4:7d:e0:
3a:88:d3:9c:b8:1c:60:f0:6f:39:0b:f5:89:63:4b:bc:94:f3:
7e:11:49:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOvVvOedIkhBiZGaQG5qYHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YzJlMGQzZmRjMjE1YTM4OWM3MDQzY2E1YTFhMDZiZTJj
NTU4ZWYwHhcNMjUxMTA0MTIwMDIzWhcNMjUxMTA1MTIwMDIzWjAzMTEwLwYDVQQD
Eyg2MTc0Y2YwMzZhNTM0Mjg5YWU5NDhkODlmOTVlZjJkZDUxNTY2NzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUyQ+Q4OEcQm0XDoXxiJ9TCorZXd
p5uxZhXiWopH0dAikd6cDZ4W2yeCEoIfCPyEZevg9/PuTBDuTLglwqyEvbC/7hk9
mULwhz7j6n1UWFEvBzNIBt1cNu1lfRjSNsOENYJ99Ksk9gpF+f8JVhWrFRd4a3RF
fTW2Eei1yVgip/Qeoc113gf7WyWFq6Jg2CYnpmChxYaydIiMOoXfdO25eW4zllEj
s+LRKDjUrFF120vwukU8k9q7uQABiv30Edog/Y5iaBtXaWnLVmqvBQUWkIzq4vDG
4+qe/oT8vF9smkK6mmilhuWHNd8V8jroq/3EBcnXo/H7aSvbSbqrtKaU7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGF0zwNqU0KJrpSNifle8t1RVmcqMB8GA1UdIwQY
MBaAFObC4NP9whWjiccEPKWhoGvixVjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQt
ZjNlMDUyYmFiMTQ0LzEvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQtZjNlMDUyYmFiMTQ0
LzEvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjDWdHXY
rW0B9yz2Sv/QMeRLOKOgl2vWHHpiR/R9CcByYFlNJeqkzTfgGbpe3JzXssUoA/ad
NHQaX73r5uxsOwbTQk5K0L6ElUk2N1xpVTxumFJCFH0obeWXQW5ODUacAN4cFAUc
5eNC92yVPE/DGWKorv2eif91XyZJFDh8WLLgS4fA0VbPfrNSSwUJCsketSNLQd7l
K+7zDUySAbg3UWIlZ5Blmr3NRZQyrgwOtmjSp6mozUhLFiuK4F275Zy+tbddxL9J
O66HfPZ993zxPGHp751lFId1JMzN3kRDiJEpEkbKVGoQpH3gOojTnLgcYPBvOQv1
iWNLvJTzfhFJSA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:12:04 2025 by rpki-client