Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File: 5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier: JxqzWviIo7o55iiAr+K5paawMWSEyhBA/oEpac+jIjs=
Subject key identifier: 42:FE:7E:B1:26:B2:23:D1:C7:FF:E2:DB:FB:D2:7A:DB:06:86:BC:8C
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 019A4D7381EF77973C6199DB0BF010A5C1E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number: 0D99
Signing time: Tue 04 Nov 2025 06:00:06 +0000
Manifest this update: Tue 04 Nov 2025 06:00:06 +0000
Manifest next update: Wed 05 Nov 2025 06:00:06 +0000
Files and hashes: 1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: XszTYQX9kyuR4mPZdJNQ3x/VTP30A9R2Tw4Zdwq3y2g=)
2: PPydfwM1qrJ_5LEP2Lu7pEc74lg.roa (hash: pMnth1QdrHrp1n0i0bRqhdBwVaon4su5sBWJ9WYdSts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:81:ef:77:97:3c:61:99:db:0b:f0:10:a5:c1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Nov 4 06:00:06 2025 GMT
Not After : Nov 5 06:00:06 2025 GMT
Subject: CN=42fe7eb126b223d1c7ffe2dbfbd27adb0686bc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f1:52:2a:87:83:f5:2c:7c:e3:95:fc:df:05:
e1:cc:44:bf:7b:69:f9:5f:13:69:ba:8b:0d:79:ac:
71:ac:30:ef:5b:7e:be:4b:00:38:cd:d3:b9:40:2c:
ce:69:96:fa:b1:57:dd:55:c0:eb:c6:ee:48:68:e8:
7c:03:15:f1:ab:e7:c1:40:26:f0:35:e0:6e:6d:c6:
7c:52:dd:9d:39:d0:18:ed:7e:ad:ef:fe:71:80:07:
78:19:71:62:0e:d7:86:47:c5:ea:b0:b5:2d:b1:43:
c1:2f:30:83:3c:35:9b:67:68:f4:af:d7:1c:7d:9d:
ae:8e:d0:d6:35:49:ba:8e:bc:b3:fc:9e:32:90:55:
48:a3:93:93:2a:24:3f:b9:fd:17:ed:1c:ec:f9:ac:
22:7a:7d:88:67:d6:de:23:59:fb:52:4a:7e:b4:c8:
a2:e7:7b:5a:2a:de:9f:e3:72:f7:c8:0e:11:a9:03:
e5:ed:3a:19:70:ac:04:ca:f9:a7:95:38:83:87:ee:
9d:d1:68:2f:82:38:52:b2:5e:18:0d:2e:7d:60:7a:
0a:24:c2:ad:cd:36:5b:fc:08:62:47:b7:c0:ba:74:
5e:3e:13:57:c2:eb:a3:85:0e:ee:0b:74:b1:c7:76:
d8:86:89:73:4b:ff:9d:68:42:a5:b1:34:0e:88:8f:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FE:7E:B1:26:B2:23:D1:C7:FF:E2:DB:FB:D2:7A:DB:06:86:BC:8C
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:36:82:c0:9d:67:6d:67:af:21:da:9d:ff:03:00:21:55:1a:
5e:79:49:c1:7d:50:c8:05:fb:0e:46:31:bb:db:fe:5b:57:d4:
af:6f:9e:08:c5:4c:5c:06:ce:c9:b6:d0:7d:7a:b6:4d:db:86:
09:9c:ab:85:33:67:d6:19:ea:fb:2c:6e:8d:16:ea:7d:35:3b:
d9:10:9b:57:07:84:18:a2:4c:58:f3:8e:37:47:c4:54:dc:d2:
d0:51:b0:49:f2:20:fb:49:a6:5a:39:e8:09:ee:20:c5:85:84:
6a:0f:db:78:88:6b:d0:18:59:a3:db:e1:8d:af:a9:70:63:bd:
d8:6d:cb:4f:f0:10:44:9c:69:fe:85:93:bd:9f:4b:1d:f4:bc:
9d:88:cc:50:42:f0:d0:d8:c7:55:dc:38:d3:26:f9:d3:21:da:
cf:0d:67:98:52:64:56:b8:b2:45:ef:51:c5:4b:43:ab:3b:7c:
27:db:ce:9e:14:57:de:ae:4e:2b:11:a2:76:cf:c7:70:27:c4:
94:1f:e6:f3:1d:46:e8:13:c4:46:7b:3b:5a:53:5e:c8:ba:02:
c7:1e:a0:7a:40:79:5f:a3:d0:59:c3:67:d1:06:12:b9:fb:3a:
aa:f4:70:bf:b2:17:32:71:51:83:b0:60:e0:75:5f:c6:31:dc:
3f:66:22:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc4Hvd5c8YZnbC/AQpcHmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NTAyMjAwYTZlNjNmNzYzOTdhZGI5NGRmZDgzNGMxMTY4
MDliOWYwHhcNMjUxMTA0MDYwMDA2WhcNMjUxMTA1MDYwMDA2WjAzMTEwLwYDVQQD
Eyg0MmZlN2ViMTI2YjIyM2QxYzdmZmUyZGJmYmQyN2FkYjA2ODZiYzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PFSKoeD9Sx845X83wXhzES/e2n5
XxNpuosNeaxxrDDvW36+SwA4zdO5QCzOaZb6sVfdVcDrxu5IaOh8AxXxq+fBQCbw
NeBubcZ8Ut2dOdAY7X6t7/5xgAd4GXFiDteGR8XqsLUtsUPBLzCDPDWbZ2j0r9cc
fZ2ujtDWNUm6jryz/J4ykFVIo5OTKiQ/uf0X7Rzs+awien2IZ9beI1n7Ukp+tMii
53taKt6f43L3yA4RqQPl7ToZcKwEyvmnlTiDh+6d0WgvgjhSsl4YDS59YHoKJMKt
zTZb/AhiR7fAunRePhNXwuujhQ7uC3Sxx3bYholzS/+daEKlsTQOiI/FPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEL+frEmsiPRx//i2/vSetsGhryMMB8GA1UdIwQY
MBaAFOZQIgCm5j92OXrblN/YNMEWgJufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWxBaUFLYm1QM1k1ZXR1VTM5ZzB3UmFBbTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy85ZmY2MDItYjBiZC00YzNmLWFmOTQt
MmZjMzRhZDlkZDQ3LzEvNWxBaUFLYm1QM1k1ZXR1VTM5ZzB3UmFBbTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy85ZmY2MDItYjBiZC00YzNmLWFmOTQtMmZjMzRhZDlkZDQ3
LzEvNWxBaUFLYm1QM1k1ZXR1VTM5ZzB3UmFBbTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDaCwJ1n
bWevIdqd/wMAIVUaXnlJwX1QyAX7DkYxu9v+W1fUr2+eCMVMXAbOybbQfXq2TduG
CZyrhTNn1hnq+yxujRbqfTU72RCbVweEGKJMWPOON0fEVNzS0FGwSfIg+0mmWjno
Ce4gxYWEag/beIhr0BhZo9vhja+pcGO92G3LT/AQRJxp/oWTvZ9LHfS8nYjMUELw
0NjHVdw40yb50yHazw1nmFJkVriyRe9RxUtDqzt8J9vOnhRX3q5OKxGids/HcCfE
lB/m8x1G6BPERns7WlNeyLoCxx6gekB5X6PQWcNn0QYSufs6qvRwv7IXMnFRg7Bg
4HVfxjHcP2YiNg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:21 2025 by rpki-client