Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
File: _q5Ur85RVFR5wNoD8gGnTimSfXg.mft (raw, json)
Hash identifier: 2YO9RhQRrTX8WMY+icoFYbv0cTAajygJLdCPip1RmQ8=
Subject key identifier: 33:14:1C:3B:89:E9:2D:14:EB:3D:9E:12:CC:A3:18:32:5E:B8:0F:E4
Authority key identifier: FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
Certificate issuer: /CN=feae54afce51545479c0da03f201a74e29927d78
Certificate serial: 019A4DE1AB7699F4B58104A14B09701D52E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
Manifest number: 073B
Signing time: Tue 04 Nov 2025 08:00:26 +0000
Manifest this update: Tue 04 Nov 2025 08:00:26 +0000
Manifest next update: Wed 05 Nov 2025 08:00:26 +0000
Files and hashes: 1: _q5Ur85RVFR5wNoD8gGnTimSfXg.crl (hash: MUZ8IUAkRZl9MgrsZH4jTIRya92YZWo5zrqo/nudmo8=)
2: lZoUgcddrDnXe4fT6Iyd3y19EFw.roa (hash: XV7kQikecJKDAAiTDNdfiups4qb65I8y80bxuDG+ZNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ab:76:99:f4:b5:81:04:a1:4b:09:70:1d:52:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feae54afce51545479c0da03f201a74e29927d78
Validity
Not Before: Nov 4 08:00:26 2025 GMT
Not After : Nov 5 08:00:26 2025 GMT
Subject: CN=33141c3b89e92d14eb3d9e12cca318325eb80fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:77:d7:99:dd:cd:cc:9c:5d:e3:25:33:a4:
0a:2f:51:ea:8d:e5:6b:75:1e:d6:12:7c:bd:6d:9c:
ef:a0:11:aa:f6:4d:e2:20:d6:52:3b:e6:67:84:7a:
2a:f0:7f:14:13:a3:c1:62:9a:f0:17:85:34:cb:c5:
03:b4:63:e4:df:d3:ef:73:04:9a:e1:15:97:d5:9e:
f9:19:8a:4c:f6:19:47:9f:99:e1:24:a0:ac:3a:9b:
61:91:c6:08:b0:e3:6f:99:37:1a:b4:f1:29:6e:cb:
c4:c7:6f:bb:03:47:04:b8:41:7d:14:4d:31:04:cc:
c9:ac:16:48:07:6e:2c:50:2f:ee:f9:6f:2c:dd:ab:
f5:df:97:59:a3:e0:78:af:f0:d4:39:cd:0b:d2:c9:
a1:20:09:b8:e4:b2:b8:f8:40:3b:ee:39:c2:dd:f7:
35:49:14:2a:03:3a:c3:58:5d:82:dc:c3:5c:1f:a8:
63:3e:06:48:8c:d8:62:6d:5b:2b:9d:16:c2:6e:3e:
bd:9b:05:83:af:40:ab:4b:15:a8:23:1f:92:bf:ce:
e8:ce:3d:0b:a6:44:65:df:88:b9:7e:8f:45:71:98:
df:56:dd:71:7a:1a:d3:58:fb:bf:54:26:6c:8c:b5:
fe:56:c5:67:8b:7e:51:24:4b:cb:62:7e:fe:3b:e0:
48:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:14:1C:3B:89:E9:2D:14:EB:3D:9E:12:CC:A3:18:32:5E:B8:0F:E4
X509v3 Authority Key Identifier:
keyid:FE:AE:54:AF:CE:51:54:54:79:C0:DA:03:F2:01:A7:4E:29:92:7D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q5Ur85RVFR5wNoD8gGnTimSfXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4f0269-9818-4123-bcbf-7a652303a28a/1/_q5Ur85RVFR5wNoD8gGnTimSfXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:37:36:cf:7e:26:1a:c4:ca:14:12:53:cd:10:8c:db:b3:03:
a6:4d:e7:bc:ae:41:13:23:96:e4:88:73:52:2a:19:19:80:f2:
f0:ac:aa:02:b2:45:04:80:ec:43:74:d0:a2:e1:91:88:04:77:
0e:06:f1:fd:c3:3d:1e:36:e3:6a:cb:be:e8:82:d0:88:32:62:
10:0b:33:e2:b3:a8:f1:ab:8d:6c:9f:b6:d5:09:47:b9:f5:0b:
6e:30:d3:80:4c:38:a9:4d:21:8a:fd:e5:78:98:de:23:ec:9c:
5c:b9:00:7f:ad:6c:34:49:21:d7:7f:9c:e5:0e:56:24:c8:ea:
f9:b2:e2:f5:41:d4:2f:3b:d4:8b:ae:3b:e2:60:bc:d2:0b:eb:
34:16:3c:ff:03:d1:ee:17:53:87:88:79:0d:fa:98:64:f2:df:
42:e6:53:da:e9:59:64:5f:4d:73:74:92:f6:e8:03:8b:29:67:
7e:fc:9d:f4:d4:42:74:52:2d:9d:1a:1b:50:fb:5c:00:d9:92:
a5:2d:9d:00:97:37:14:a9:ff:96:ee:7e:71:d2:42:48:cc:bf:
f6:cd:00:76:e5:77:3b:f9:ee:9a:b3:31:f1:04:17:84:21:0a:
f1:a8:e8:66:a4:e8:a5:d9:4a:b2:a3:45:6d:fc:f8:f1:d2:db:
7f:b0:32:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4at2mfS1gQShSwlwHVLlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYWU1NGFmY2U1MTU0NTQ3OWMwZGEwM2YyMDFhNzRlMjk5
MjdkNzgwHhcNMjUxMTA0MDgwMDI2WhcNMjUxMTA1MDgwMDI2WjAzMTEwLwYDVQQD
EygzMzE0MWMzYjg5ZTkyZDE0ZWIzZDllMTJjY2EzMTgzMjVlYjgwZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJx315ndzcycXeMlM6QKL1HqjeVr
dR7WEny9bZzvoBGq9k3iINZSO+ZnhHoq8H8UE6PBYprwF4U0y8UDtGPk39PvcwSa
4RWX1Z75GYpM9hlHn5nhJKCsOpthkcYIsONvmTcatPEpbsvEx2+7A0cEuEF9FE0x
BMzJrBZIB24sUC/u+W8s3av135dZo+B4r/DUOc0L0smhIAm45LK4+EA77jnC3fc1
SRQqAzrDWF2C3MNcH6hjPgZIjNhibVsrnRbCbj69mwWDr0CrSxWoIx+Sv87ozj0L
pkRl34i5fo9FcZjfVt1xehrTWPu/VCZsjLX+VsVni35RJEvLYn7+O+BIFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMUHDuJ6S0U6z2eEsyjGDJeuA/kMB8GA1UdIwQY
MBaAFP6uVK/OUVRUecDaA/IBp04pkn14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3E1VXI4NVJWRlI1d05vRDhnR25UaW1TZlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80ZjAyNjktOTgxOC00MTIzLWJjYmYt
N2E2NTIzMDNhMjhhLzEvX3E1VXI4NVJWRlI1d05vRDhnR25UaW1TZlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80ZjAyNjktOTgxOC00MTIzLWJjYmYtN2E2NTIzMDNhMjhh
LzEvX3E1VXI4NVJWRlI1d05vRDhnR25UaW1TZlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezc2z34m
GsTKFBJTzRCM27MDpk3nvK5BEyOW5IhzUioZGYDy8KyqArJFBIDsQ3TQouGRiAR3
Dgbx/cM9Hjbjasu+6ILQiDJiEAsz4rOo8auNbJ+21QlHufULbjDTgEw4qU0hiv3l
eJjeI+ycXLkAf61sNEkh13+c5Q5WJMjq+bLi9UHULzvUi6474mC80gvrNBY8/wPR
7hdTh4h5DfqYZPLfQuZT2ulZZF9Nc3SS9ugDiylnfvyd9NRCdFItnRobUPtcANmS
pS2dAJc3FKn/lu5+cdJCSMy/9s0AduV3O/numrMx8QQXhCEK8ajoZqTopdlKsqNF
bfz48dLbf7AyuA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:16 2025 by rpki-client