Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
File: 5JlaSpG8KcjX7RBKA4QBmk_lng4.mft (raw, json)
Hash identifier: lEAee5rOIx1M1+BSvvxeZE6dbjyxDCTto5NxjvKbrYk=
Subject key identifier: E9:9B:E3:E7:F8:2A:50:D4:80:3D:A6:84:8D:19:ED:86:93:73:A1:9E
Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
Certificate issuer: /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Certificate serial: 019A50E3676CC81A9D3BA20BB0B6DC2E1B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
Manifest number: 0A55
Signing time: Tue 04 Nov 2025 22:01:11 +0000
Manifest this update: Tue 04 Nov 2025 22:01:11 +0000
Manifest next update: Wed 05 Nov 2025 22:01:11 +0000
Files and hashes: 1: 5JlaSpG8KcjX7RBKA4QBmk_lng4.crl (hash: ut1F5roHDvMQQ6LUW+vCRoNVdtBj87vH7b6I6N0qA4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:67:6c:c8:1a:9d:3b:a2:0b:b0:b6:dc:2e:1b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Validity
Not Before: Nov 4 22:01:11 2025 GMT
Not After : Nov 5 22:01:11 2025 GMT
Subject: CN=e99be3e7f82a50d4803da6848d19ed869373a19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b9:e8:e7:1d:c5:e7:cb:02:52:e7:04:af:69:
c6:91:fd:b7:75:c6:b7:69:69:67:9d:45:dc:ee:ae:
f7:8d:07:ff:a2:ef:26:cd:9c:16:bc:34:e6:6b:2d:
09:ec:cb:98:1e:98:17:3d:7a:36:f1:05:18:be:06:
88:74:42:e9:4c:0c:e8:be:ec:67:55:5b:95:3d:6e:
f0:4f:f6:e9:92:e3:ff:7c:ce:48:69:ba:96:0d:1e:
ea:6b:c5:3b:7e:3e:c3:80:fb:f6:56:29:9c:1e:67:
b0:aa:7f:50:f2:6c:a5:22:84:5c:a3:21:12:b9:0d:
a0:ba:dc:ad:66:14:8e:de:fc:af:40:42:74:b6:9d:
1e:0d:a5:c2:00:da:10:27:3f:19:33:5c:c3:57:98:
af:c4:b7:b5:cf:c2:dc:a2:87:45:d1:92:b7:4c:cf:
5c:ae:26:8d:f4:a7:04:3a:0c:2e:cb:20:f3:c0:ab:
48:95:ba:f6:c2:1c:9b:ec:4d:23:b9:42:79:5c:b0:
b5:d7:be:76:09:cd:5b:4c:89:a4:e8:18:7b:f9:a3:
e0:60:f6:32:1a:a9:4e:24:64:9b:76:87:ab:f8:d8:
98:13:fc:70:69:0d:4b:f8:c8:b7:22:8f:61:88:86:
51:b3:1c:67:c7:24:9a:45:79:a0:0c:19:1d:1f:30:
7d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9B:E3:E7:F8:2A:50:D4:80:3D:A6:84:8D:19:ED:86:93:73:A1:9E
X509v3 Authority Key Identifier:
keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:e2:01:f2:5d:05:02:a3:60:fa:fa:d5:77:77:5e:0e:83:0d:
99:23:a7:f0:d2:eb:47:28:12:1f:07:01:4e:26:da:7b:97:a6:
cc:73:bb:3d:38:ca:e8:80:cb:2d:62:a5:57:2b:f3:69:a4:03:
30:69:07:00:96:c7:6d:eb:5d:ef:24:16:77:35:65:d7:e3:c1:
e6:29:b9:49:e0:9c:90:e1:64:60:bc:1b:79:4f:e1:fb:3c:c4:
0e:03:3b:95:9c:fa:d8:af:f0:76:73:6f:84:04:e5:7b:40:b6:
65:18:95:b2:4b:6e:82:9a:5a:0b:c0:5c:4d:37:c2:74:2d:2a:
8a:f6:f4:b3:51:42:01:63:2e:e4:53:47:e7:67:28:22:6e:a3:
ca:82:1d:b5:ca:8e:59:8c:f3:29:bf:20:5b:08:d5:63:19:ab:
6f:3d:28:0c:af:b1:d1:39:f4:76:21:a6:3b:04:3d:8d:d9:84:
12:c8:73:d0:8b:30:d0:fe:a7:96:8a:e0:c7:ce:20:51:28:26:
bd:48:c1:63:59:39:0a:6e:20:ab:89:a3:f6:2b:23:a6:6b:8f:
be:d8:3e:00:9c:cf:99:7d:d7:3b:fb:87:44:b6:14:92:98:a1:
bd:7c:26:e2:87:9c:96:47:be:c9:55:75:17:4b:2f:45:11:bd:
59:0a:bd:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ42dsyBqdO6ILsLbcLhtaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OTk1YTRhOTFiYzI5YzhkN2VkMTA0YTAzODQwMTlhNGZl
NTllMGUwHhcNMjUxMTA0MjIwMTExWhcNMjUxMTA1MjIwMTExWjAzMTEwLwYDVQQD
EyhlOTliZTNlN2Y4MmE1MGQ0ODAzZGE2ODQ4ZDE5ZWQ4NjkzNzNhMTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7no5x3F58sCUucEr2nGkf23dca3
aWlnnUXc7q73jQf/ou8mzZwWvDTmay0J7MuYHpgXPXo28QUYvgaIdELpTAzovuxn
VVuVPW7wT/bpkuP/fM5IabqWDR7qa8U7fj7DgPv2VimcHmewqn9Q8mylIoRcoyES
uQ2gutytZhSO3vyvQEJ0tp0eDaXCANoQJz8ZM1zDV5ivxLe1z8LcoodF0ZK3TM9c
riaN9KcEOgwuyyDzwKtIlbr2whyb7E0juUJ5XLC11752Cc1bTImk6Bh7+aPgYPYy
GqlOJGSbdoer+NiYE/xwaQ1L+Mi3Io9hiIZRsxxnxySaRXmgDBkdHzB9HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmb4+f4KlDUgD2mhI0Z7YaTc6GeMB8GA1UdIwQY
MBaAFOSZWkqRvCnI1+0QSgOEAZpP5Z4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUpsYVNwRzhLY2pYN1JCS0E0UUJta19sbmc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9kZWY5YzctZjNlNS00MmY3LThkZWYt
OWRmNGJiMThmYjA2LzEvNUpsYVNwRzhLY2pYN1JCS0E0UUJta19sbmc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9kZWY5YzctZjNlNS00MmY3LThkZWYtOWRmNGJiMThmYjA2
LzEvNUpsYVNwRzhLY2pYN1JCS0E0UUJta19sbmc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAweIB8l0F
AqNg+vrVd3deDoMNmSOn8NLrRygSHwcBTibae5emzHO7PTjK6IDLLWKlVyvzaaQD
MGkHAJbHbetd7yQWdzVl1+PB5im5SeCckOFkYLwbeU/h+zzEDgM7lZz62K/wdnNv
hATle0C2ZRiVsktugppaC8BcTTfCdC0qivb0s1FCAWMu5FNH52coIm6jyoIdtcqO
WYzzKb8gWwjVYxmrbz0oDK+x0Tn0diGmOwQ9jdmEEshz0Isw0P6nlorgx84gUSgm
vUjBY1k5Cm4gq4mj9isjpmuPvtg+AJzPmX3XO/uHRLYUkpihvXwm4oeclke+yVV1
F0svRRG9WQq99w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:20 2025 by rpki-client