Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
File: C5NMNrdzAIhlucn7D9SGaTlaxzA.mft (raw, json)
Hash identifier: RGqMA5/ql10QS4k7aCoXC81fONOwXq770N+lXK3ldlI=
Subject key identifier: 54:D9:42:0F:F3:B3:D9:C6:AB:D5:98:31:DC:7B:D7:D7:06:EC:C3:F3
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial: 019A4EBD3DBEF651139E904C48526042757C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 12:00:15 +0000
Manifest this update: Tue 04 Nov 2025 12:00:15 +0000
Manifest next update: Wed 05 Nov 2025 12:00:15 +0000
Files and hashes: 1: C5NMNrdzAIhlucn7D9SGaTlaxzA.crl (hash: +rKBznl/ieWEcbTDHomELP9XIU/n/FUYQRhRCgmjxDU=)
2: Gx6kPcyxpQCfjzDOqvTPIqfhzSo.roa (hash: cyozRe1tjffBQUtfs/kFeEbNNq7a/YhvaL4ybQ6y3bs=)
3: KDMQDMSKvzkVFCIuQ1vi5IKxFqc.roa (hash: W1z4PN9ehAB8VlW2fAtV3SogXVKZbFhw7EL82DUKuEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:3d:be:f6:51:13:9e:90:4c:48:52:60:42:75:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Validity
Not Before: Nov 4 12:00:15 2025 GMT
Not After : Nov 5 12:00:15 2025 GMT
Subject: CN=54d9420ff3b3d9c6abd59831dc7bd7d706ecc3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:2f:19:37:4d:16:8f:66:cf:7b:42:32:39:
0d:58:7c:8f:9e:4d:7f:4a:0e:c1:09:43:13:5a:72:
9a:30:3f:3b:b3:2e:2e:63:7e:79:6d:7f:97:55:54:
f1:e3:40:63:c2:58:a1:0b:15:aa:85:db:88:88:0c:
4b:08:2d:5a:fc:c6:32:2e:c2:0b:7f:95:77:c3:0f:
ec:1b:4b:a5:d3:52:6e:9d:45:5d:1b:a1:49:63:9b:
50:c6:7c:6e:cf:7f:4b:c8:1f:3a:1f:14:53:e7:7d:
0b:2b:f4:e6:a4:9c:49:f2:33:8d:37:fb:e9:f1:e7:
82:5e:74:3a:ae:5d:a8:0f:09:69:f1:34:bb:c2:10:
c8:49:88:23:d3:22:35:c2:10:ee:0c:8c:99:2f:af:
8c:19:f9:8d:a4:95:45:bc:3a:b1:97:e4:d5:1a:77:
0a:e2:b2:7d:31:bd:33:1b:fa:5b:e2:7d:6d:e9:a8:
30:8e:69:df:cd:f8:04:07:93:e3:57:e7:a4:61:ca:
10:a5:7f:80:7c:b3:48:53:76:66:8d:0f:90:d9:16:
93:8e:62:b6:85:b8:f0:ed:2e:60:95:f9:b7:89:25:
27:36:1a:3c:ee:68:8b:72:a2:7f:1e:f1:f2:07:63:
1f:80:9e:9f:63:02:6a:55:11:c0:fe:83:3a:35:05:
1d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D9:42:0F:F3:B3:D9:C6:AB:D5:98:31:DC:7B:D7:D7:06:EC:C3:F3
X509v3 Authority Key Identifier:
keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:30:8a:45:25:6d:3c:b9:8e:76:64:bb:99:19:95:7f:2c:bd:
00:c1:cb:39:98:65:62:3c:a9:d7:1f:32:1a:e5:1b:0e:75:be:
64:8e:9d:f3:67:47:e3:58:e8:9a:2b:c9:82:0c:2a:0f:a3:3b:
f3:fc:84:ee:67:51:51:82:93:bb:da:82:4c:c8:e5:d0:a3:9a:
51:cf:a1:2b:88:15:83:41:8a:cf:1c:db:4e:24:86:ac:d7:ab:
4d:b6:4c:2e:24:5e:58:ec:ba:35:96:18:53:e8:88:95:c6:3e:
66:02:0e:d6:01:65:7b:1f:bd:79:38:8c:77:b2:0f:b3:c6:53:
04:8f:68:94:3d:ea:2f:7d:72:97:cc:55:3b:4c:b4:a2:7f:8e:
ea:8a:92:f6:65:4d:63:27:cc:d8:fa:c3:e5:b4:91:92:50:43:
10:5d:9b:a3:c6:57:79:bd:78:a3:e2:fe:78:fa:5a:c8:55:68:
d3:d6:f3:53:28:d6:31:26:d6:19:a8:8d:a2:3c:35:c9:ad:6d:
b3:e8:9d:8f:8c:c3:af:a2:34:ef:44:be:fc:66:90:2d:09:b5:
92:7f:d4:d7:d4:1d:e6:26:b4:1a:38:42:37:e6:3f:e9:fb:e7:
e5:e0:f6:e0:9f:ee:62:b4:0d:9e:b6:ca:40:dd:25:c7:f7:c5:
18:04:7b:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOvT2+9lETnpBMSFJgQnV8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOTM0YzM2Yjc3MzAwODg2NWI5YzlmYjBmZDQ4NjY5Mzk1
YWM3MzAwHhcNMjUxMTA0MTIwMDE1WhcNMjUxMTA1MTIwMDE1WjAzMTEwLwYDVQQD
Eyg1NGQ5NDIwZmYzYjNkOWM2YWJkNTk4MzFkYzdiZDdkNzA2ZWNjM2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuEvGTdNFo9mz3tCMjkNWHyPnk1/
Sg7BCUMTWnKaMD87sy4uY355bX+XVVTx40BjwlihCxWqhduIiAxLCC1a/MYyLsIL
f5V3ww/sG0ul01JunUVdG6FJY5tQxnxuz39LyB86HxRT530LK/TmpJxJ8jONN/vp
8eeCXnQ6rl2oDwlp8TS7whDISYgj0yI1whDuDIyZL6+MGfmNpJVFvDqxl+TVGncK
4rJ9Mb0zG/pb4n1t6agwjmnfzfgEB5PjV+ekYcoQpX+AfLNIU3ZmjQ+Q2RaTjmK2
hbjw7S5glfm3iSUnNho87miLcqJ/HvHyB2MfgJ6fYwJqVRHA/oM6NQUdgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTZQg/zs9nGq9WYMdx719cG7MPzMB8GA1UdIwQY
MBaAFAuTTDa3cwCIZbnJ+w/Uhmk5WscwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kZWNiN2QtMDM4OC00ZTNjLThkYjQt
YTMwMmY1MWQzODJjLzEvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9kZWNiN2QtMDM4OC00ZTNjLThkYjQtYTMwMmY1MWQzODJj
LzEvQzVOTU5yZHpBSWhsdWNuN0Q5U0dhVGxheHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojCKRSVt
PLmOdmS7mRmVfyy9AMHLOZhlYjyp1x8yGuUbDnW+ZI6d82dH41jomivJggwqD6M7
8/yE7mdRUYKTu9qCTMjl0KOaUc+hK4gVg0GKzxzbTiSGrNerTbZMLiReWOy6NZYY
U+iIlcY+ZgIO1gFlex+9eTiMd7IPs8ZTBI9olD3qL31yl8xVO0y0on+O6oqS9mVN
YyfM2PrD5bSRklBDEF2bo8ZXeb14o+L+ePpayFVo09bzUyjWMSbWGaiNojw1ya1t
s+idj4zDr6I070S+/GaQLQm1kn/U19Qd5ia0GjhCN+Y/6fvn5eD24J/uYrQNnrbK
QN0lx/fFGAR7sA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:07 2025 by rpki-client