Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
File: 5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft (raw, json)
Hash identifier: qB0/piLRnfjX/95aghoo0QSl5zkm8w35ys8Rm3lUDT0=
Subject key identifier: B8:0B:06:23:5D:B6:2E:FC:FB:26:9F:CE:AD:52:CB:22:DE:36:2E:30
Authority key identifier: E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4
Certificate issuer: /CN=e4d608e0f7a1086c8451de5d637847b52217abb4
Certificate serial: 019A4E18B3FB5322BEB4B7B1FA8F8F6A76B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
Manifest number: 05BF
Signing time: Tue 04 Nov 2025 09:00:33 +0000
Manifest this update: Tue 04 Nov 2025 09:00:33 +0000
Manifest next update: Wed 05 Nov 2025 09:00:33 +0000
Files and hashes: 1: 5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl (hash: xYGzIB60vgpJHb2J9c07cMnL82ujGYlwMH0dxkv96z0=)
2: GG3QiT3L8y2-6K509vuWf-CfKL0.roa (hash: 0l/LpwFeQpYG65cH+t5aLrBuln2/gPSbbnRKosRRf2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b3:fb:53:22:be:b4:b7:b1:fa:8f:8f:6a:76:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d608e0f7a1086c8451de5d637847b52217abb4
Validity
Not Before: Nov 4 09:00:33 2025 GMT
Not After : Nov 5 09:00:33 2025 GMT
Subject: CN=b80b06235db62efcfb269fcead52cb22de362e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5b:31:43:c5:99:69:65:24:b7:5b:64:05:f7:
e0:55:77:59:4c:ae:c1:3d:55:f0:7b:16:5d:a3:e3:
0c:0e:f2:0b:26:5e:9b:d4:20:ef:35:9d:02:f3:c7:
26:15:68:41:ce:2a:aa:26:16:d7:83:fa:17:88:11:
a1:62:b1:da:17:5e:9a:14:5f:f3:12:be:35:43:fc:
cb:af:c9:b1:39:8e:c3:89:37:5a:68:e2:74:f7:50:
e9:29:f5:ca:fc:92:b0:0c:51:bd:91:a0:f9:f5:60:
c4:b5:3a:f2:11:80:e8:4d:eb:76:29:72:60:cd:bc:
56:86:e6:58:f9:ad:e2:79:b6:53:c4:f7:4a:29:48:
f4:e5:21:50:62:30:ef:3d:20:ed:24:56:39:82:68:
a0:03:c0:39:24:32:8d:20:d1:d5:36:84:6b:7d:ef:
03:2f:ed:3f:71:bf:84:5f:8a:e0:a7:86:14:7e:68:
87:8a:b4:02:f8:18:3c:68:09:07:0e:69:68:54:88:
bd:ed:37:90:c8:42:4a:b2:00:8b:53:7b:6a:53:52:
3e:76:db:a7:01:45:06:1f:53:c5:0c:b4:a6:d8:47:
ee:06:d5:af:86:ea:fb:a7:da:b6:ed:09:9e:38:68:
c3:e6:5e:f9:9c:c1:31:c9:00:1c:e6:cd:46:58:c0:
99:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0B:06:23:5D:B6:2E:FC:FB:26:9F:CE:AD:52:CB:22:DE:36:2E:30
X509v3 Authority Key Identifier:
keyid:E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ae:57:c0:83:ad:a2:85:82:83:f8:d0:5b:b7:0e:bb:50:5e:
15:67:85:aa:60:e0:93:d2:3b:79:de:fd:89:32:1d:2e:bc:1b:
cb:41:c5:27:9a:42:67:d3:21:f4:e4:e5:14:c4:c4:70:a0:65:
88:1e:3b:45:64:3d:87:fb:63:1b:b3:72:8a:22:e3:fb:53:14:
67:aa:d1:af:e1:59:a8:f2:52:ce:ef:4f:70:9f:9d:86:41:26:
77:59:14:63:68:e5:30:b1:32:eb:94:24:79:34:70:9a:a6:ee:
22:95:15:0a:14:eb:dd:ec:2d:d5:12:da:7b:f7:73:eb:57:c0:
c5:38:c3:4a:fd:27:2c:c1:5b:d2:ee:eb:4a:e4:40:e4:7f:67:
70:9d:f2:24:15:b3:50:90:6c:a8:e4:88:47:ee:f7:ba:7f:23:
23:cf:eb:78:3d:e1:9e:4f:52:0a:0a:8d:46:ca:84:cc:f5:60:
cb:3d:5c:33:7c:96:be:4a:0a:58:ae:d9:73:0e:14:69:9d:09:
bd:8a:8d:0b:be:5b:af:97:3c:ab:9e:b2:7b:3c:ac:4a:d6:34:
a2:ea:35:84:2e:22:11:2f:ed:09:ab:32:77:a9:82:5e:79:b1:
6e:e5:df:02:80:8b:36:01:37:56:e3:e9:0a:c8:71:1b:21:72:
b9:d0:af:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGLP7UyK+tLex+o+Pana1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZDYwOGUwZjdhMTA4NmM4NDUxZGU1ZDYzNzg0N2I1MjIx
N2FiYjQwHhcNMjUxMTA0MDkwMDMzWhcNMjUxMTA1MDkwMDMzWjAzMTEwLwYDVQQD
EyhiODBiMDYyMzVkYjYyZWZjZmIyNjlmY2VhZDUyY2IyMmRlMzYyZTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FsxQ8WZaWUkt1tkBffgVXdZTK7B
PVXwexZdo+MMDvILJl6b1CDvNZ0C88cmFWhBziqqJhbXg/oXiBGhYrHaF16aFF/z
Er41Q/zLr8mxOY7DiTdaaOJ091DpKfXK/JKwDFG9kaD59WDEtTryEYDoTet2KXJg
zbxWhuZY+a3iebZTxPdKKUj05SFQYjDvPSDtJFY5gmigA8A5JDKNINHVNoRrfe8D
L+0/cb+EX4rgp4YUfmiHirQC+Bg8aAkHDmloVIi97TeQyEJKsgCLU3tqU1I+dtun
AUUGH1PFDLSm2EfuBtWvhur7p9q27QmeOGjD5l75nMExyQAc5s1GWMCZkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgLBiNdti78+yafzq1SyyLeNi4wMB8GA1UdIwQY
MBaAFOTWCOD3oQhshFHeXWN4R7UiF6u0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5ZSTRQZWhDR3lFVWQ1ZFkzaEh0U0lYcTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lZWM3MGEtYWE5Zi00MmFlLThhZDYt
YjdiYmY1YTFhYzczLzEvNU5ZSTRQZWhDR3lFVWQ1ZFkzaEh0U0lYcTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lZWM3MGEtYWE5Zi00MmFlLThhZDYtYjdiYmY1YTFhYzcz
LzEvNU5ZSTRQZWhDR3lFVWQ1ZFkzaEh0U0lYcTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOK5XwIOt
ooWCg/jQW7cOu1BeFWeFqmDgk9I7ed79iTIdLrwby0HFJ5pCZ9Mh9OTlFMTEcKBl
iB47RWQ9h/tjG7NyiiLj+1MUZ6rRr+FZqPJSzu9PcJ+dhkEmd1kUY2jlMLEy65Qk
eTRwmqbuIpUVChTr3ewt1RLae/dz61fAxTjDSv0nLMFb0u7rSuRA5H9ncJ3yJBWz
UJBsqOSIR+73un8jI8/reD3hnk9SCgqNRsqEzPVgyz1cM3yWvkoKWK7Zcw4UaZ0J
vYqNC75br5c8q56yezysStY0ouo1hC4iES/tCasyd6mCXnmxbuXfAoCLNgE3VuPp
CshxGyFyudCvHg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:35 2025 by rpki-client