Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier: S/FX9YmsdX/8bEwO58DT6fqySbUCOiPvTQqU+wG8BiA=
Subject key identifier: 48:BC:CF:8D:20:32:95:4D:B5:61:E0:C7:01:F0:F6:49:36:80:23:6D
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 019A4F629A8F14F8E5250B150E6B770330B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number: 0844
Signing time: Tue 04 Nov 2025 15:00:53 +0000
Manifest this update: Tue 04 Nov 2025 15:00:53 +0000
Manifest next update: Wed 05 Nov 2025 15:00:53 +0000
Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: QWnKWgub1WIuJQwwwQ440RbkOv3b1HmFiR7bW6qWaRI=)
2: KFEMCZhH126h5EdMOEzOYR3jl7A.roa (hash: i0lu4HO1DlJaiLzdVoxYyKbrNJlxsepiYz5nfS8kc00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:9a:8f:14:f8:e5:25:0b:15:0e:6b:77:03:30:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: Nov 4 15:00:53 2025 GMT
Not After : Nov 5 15:00:53 2025 GMT
Subject: CN=48bccf8d2032954db561e0c701f0f6493680236d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8b:9e:b5:be:7a:7a:38:94:4d:20:39:2d:15:
8b:77:c7:6e:af:b1:f4:67:b9:48:b6:05:84:bb:1e:
fc:db:f1:25:2c:07:4b:b2:c6:96:bb:ee:55:54:0f:
1a:87:c0:84:79:e8:9e:a2:5c:ed:31:b0:cb:c1:be:
18:e7:a6:e4:df:70:23:62:a5:6d:93:82:3e:c8:42:
c5:9a:5d:d8:17:d5:2b:45:6d:35:a3:4b:96:d7:a6:
e1:de:f8:c3:50:e9:61:4f:40:49:be:b3:ef:54:76:
d6:c8:89:95:93:cb:6e:3e:a8:db:d2:67:c5:fb:88:
5e:7f:6c:11:7c:2d:12:15:f4:f1:af:8f:c9:da:f1:
5a:88:d0:f3:ea:b0:60:3f:4d:da:08:7c:de:54:50:
3f:3c:63:58:44:eb:e4:6e:f3:90:92:88:89:de:76:
45:a4:cf:cc:22:d5:43:f6:13:70:10:12:96:40:ef:
38:fb:cb:d6:9f:45:0c:b6:29:88:d3:1b:67:50:0c:
8c:97:bd:a5:4e:c5:d0:a9:3b:dc:74:f7:24:3f:d8:
61:96:b7:56:d9:9c:c0:88:01:70:72:81:f9:15:30:
37:7c:4d:8f:69:17:2b:f7:1e:80:8c:06:58:fd:90:
e3:e8:33:99:41:a1:ab:ef:f5:6f:b2:0b:56:14:7e:
9f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BC:CF:8D:20:32:95:4D:B5:61:E0:C7:01:F0:F6:49:36:80:23:6D
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ff:b2:53:cb:0b:53:fd:5e:d3:71:71:da:cd:67:30:57:dc:
58:6b:db:5a:5c:2e:a5:96:aa:e9:d7:60:4e:64:95:7f:ca:bc:
be:ee:80:b3:02:37:ff:28:51:34:71:b6:0d:d9:3d:2c:cd:82:
d4:83:e8:aa:40:d4:cb:e5:08:d7:96:13:84:5e:ef:5e:f0:78:
34:e4:f7:df:00:58:bb:61:7c:75:64:71:57:d3:d7:21:3b:ec:
b4:98:8a:1f:4b:7d:dd:28:51:be:24:91:3a:59:81:bd:5b:5f:
86:c4:8c:87:c8:5b:4c:67:b0:c5:8a:7e:a3:2f:41:84:6d:37:
7b:be:69:5e:ad:a6:a9:3a:b8:77:55:83:9f:bd:35:16:9e:41:
05:c8:20:02:29:92:6f:9e:2b:66:d4:7c:dd:e3:d2:c2:0b:e1:
d8:d3:1b:0d:ba:5a:5c:dc:74:f6:5a:38:cb:2a:d0:91:75:b6:
a3:64:0b:51:be:c6:20:4e:0a:a9:8b:43:03:38:91:23:36:23:
61:21:a5:64:94:06:03:a3:13:4c:f7:19:12:5c:e9:62:f9:92:
69:95:38:e1:26:68:fc:5d:c6:d1:b7:a0:00:11:34:0d:1c:53:
4b:18:8c:6f:13:a0:a3:dd:dd:fc:53:0a:21:09:4b:98:89:be:
77:ed:5b:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYpqPFPjlJQsVDmt3AzC1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MzAwNzYxNGY2NzcwMGIyY2E3NmQ2MGI0OTQyYjdhOGU0
YjVjZTQwHhcNMjUxMTA0MTUwMDUzWhcNMjUxMTA1MTUwMDUzWjAzMTEwLwYDVQQD
Eyg0OGJjY2Y4ZDIwMzI5NTRkYjU2MWUwYzcwMWYwZjY0OTM2ODAyMzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhouetb56ejiUTSA5LRWLd8dur7H0
Z7lItgWEux782/ElLAdLssaWu+5VVA8ah8CEeeieolztMbDLwb4Y56bk33AjYqVt
k4I+yELFml3YF9UrRW01o0uW16bh3vjDUOlhT0BJvrPvVHbWyImVk8tuPqjb0mfF
+4hef2wRfC0SFfTxr4/J2vFaiNDz6rBgP03aCHzeVFA/PGNYROvkbvOQkoiJ3nZF
pM/MItVD9hNwEBKWQO84+8vWn0UMtimI0xtnUAyMl72lTsXQqTvcdPckP9hhlrdW
2ZzAiAFwcoH5FTA3fE2PaRcr9x6AjAZY/ZDj6DOZQaGr7/VvsgtWFH6fxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEi8z40gMpVNtWHgxwHw9kk2gCNtMB8GA1UdIwQY
MBaAFOYwB2FPZ3ALLKdtYLSUK3qOS1zkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wNDIzZGItZjIzMy00OTIyLTgwMjQt
YjIxMTEwZDhmZmExLzEvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wNDIzZGItZjIzMy00OTIyLTgwMjQtYjIxMTEwZDhmZmEx
LzEvNWpBSFlVOW5jQXNzcDIxZ3RKUXJlbzVMWE9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/+yU8sL
U/1e03Fx2s1nMFfcWGvbWlwupZaq6ddgTmSVf8q8vu6AswI3/yhRNHG2Ddk9LM2C
1IPoqkDUy+UI15YThF7vXvB4NOT33wBYu2F8dWRxV9PXITvstJiKH0t93ShRviSR
OlmBvVtfhsSMh8hbTGewxYp+oy9BhG03e75pXq2mqTq4d1WDn701Fp5BBcggAimS
b54rZtR83ePSwgvh2NMbDbpaXNx09lo4yyrQkXW2o2QLUb7GIE4KqYtDAziRIzYj
YSGlZJQGA6MTTPcZElzpYvmSaZU44SZo/F3G0begABE0DRxTSxiMbxOgo93d/FMK
IQlLmIm+d+1brg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:26 2025 by rpki-client