Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
File: 5GWsyQgJ77RczaJQoQV2GElLhus.mft (raw, json)
Hash identifier: ZrORneIAs2mv8A+2sgKhWrjCrhoS28m/2V80qEnhKoU=
Subject key identifier: 26:61:02:AF:2B:03:B8:D4:31:9E:C2:31:08:71:33:D6:D3:E6:8F:BD
Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
Certificate issuer: /CN=e465acc90809efb45ccda250a1057618494b86eb
Certificate serial: 019A5451D20E9285E68F23C8ECB5C84F85E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 14:00:39 +0000
Manifest this update: Wed 05 Nov 2025 14:00:39 +0000
Manifest next update: Thu 06 Nov 2025 14:00:39 +0000
Files and hashes: 1: 5GWsyQgJ77RczaJQoQV2GElLhus.crl (hash: pPClugR3Qo91pDZHTJZMRmK92fIqLsRwww0rhCkuWfs=)
2: HXkMZsrBmT3pdly4pNHClnxxiAs.roa (hash: uINrlSFHfmPOAUFp+GFnrxpC6bCJm76Z7RhHxB80xWI=)
3: g56Uh-QZpNYvH0QrLNbigssPnrQ.roa (hash: wrpYwLhb1No98RIDJLncVQMkGDqMDtvmrpGIa2b7nWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:d2:0e:92:85:e6:8f:23:c8:ec:b5:c8:4f:85:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb
Validity
Not Before: Nov 5 14:00:39 2025 GMT
Not After : Nov 6 14:00:39 2025 GMT
Subject: CN=266102af2b03b8d4319ec231087133d6d3e68fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f7:a3:98:37:1a:51:b1:10:b4:f4:e2:b6:c6:
4c:01:d7:d6:b6:2b:a6:61:d1:04:50:19:6b:16:cf:
67:57:2b:cd:5f:95:ee:04:32:a6:02:b0:b6:4f:0d:
63:bc:a6:fc:4e:10:6c:bb:97:17:a8:3f:ad:b9:22:
17:fe:d8:76:6b:d6:5d:3b:26:d3:53:a5:a4:44:65:
3f:a1:09:86:e2:5b:69:af:bb:56:05:27:60:c8:13:
3c:a2:dd:59:94:ea:e0:e0:b9:dd:f8:1a:f6:95:16:
94:24:a5:77:74:bd:77:64:a7:d0:1e:95:5c:3a:a2:
50:e6:46:bd:db:a7:6d:88:1d:b3:7c:78:ff:ac:f5:
1e:45:57:80:38:32:b6:30:20:81:c0:56:2d:3a:48:
9b:6a:85:38:19:08:c2:18:4a:57:06:64:00:99:e8:
96:61:8b:0d:d5:70:cd:e2:1f:16:4a:a0:89:7d:1a:
c8:63:ea:2d:ec:ec:63:85:26:37:36:b5:92:3b:ee:
a0:46:d6:e3:db:eb:08:de:90:be:a1:c2:fb:0d:66:
96:85:b1:f6:da:4e:5f:ae:22:fd:db:98:a9:1e:ee:
b9:4c:f0:75:9a:c0:fc:e7:15:e5:4f:69:18:d1:74:
83:ff:05:fd:50:56:1c:c2:c6:6c:d1:ec:cc:53:64:
d1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:61:02:AF:2B:03:B8:D4:31:9E:C2:31:08:71:33:D6:D3:E6:8F:BD
X509v3 Authority Key Identifier:
keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ee:d3:7d:00:a5:9c:dd:63:18:51:f4:af:aa:38:f7:75:ae:
d4:31:a3:5f:52:31:74:87:34:21:0c:c1:3c:a4:ad:1a:7f:86:
f6:63:ee:7c:b3:b0:9d:a3:4f:ba:0b:43:25:32:78:97:82:82:
c2:1a:97:c6:f1:a2:1d:57:f2:86:a6:79:ca:30:db:a5:f2:ba:
b6:d5:a5:b3:de:08:ea:22:1a:29:36:0b:fb:bd:aa:58:e7:60:
ec:8f:8a:6f:66:13:e6:48:34:1f:f7:55:ff:ec:b4:2c:12:44:
d4:b9:ac:02:96:3d:6c:c7:20:73:e9:a6:b1:43:1f:a4:40:39:
de:72:05:56:a1:b2:3d:a0:2e:d5:10:bc:eb:26:89:9f:c8:67:
a6:47:4e:9d:45:09:20:9a:af:b1:23:e3:cf:01:3e:b7:28:31:
74:13:96:a0:c7:2a:26:df:6d:57:2b:61:c7:24:e2:fb:d1:ed:
24:80:1d:b6:47:17:a2:d1:9a:06:bb:ce:2d:7d:a0:ac:f2:fd:
b4:f4:78:5d:e6:69:15:7e:21:c8:2b:7e:3d:ca:81:37:fc:08:
1b:58:e5:cb:62:42:e4:15:76:c2:f1:b8:85:5d:71:24:82:59:
39:8f:06:23:02:4e:a9:ec:ac:29:8d:b3:23:e1:20:02:2f:8b:
b7:63:cc:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUUdIOkoXmjyPI7LXIT4XnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NjVhY2M5MDgwOWVmYjQ1Y2NkYTI1MGExMDU3NjE4NDk0
Yjg2ZWIwHhcNMjUxMTA1MTQwMDM5WhcNMjUxMTA2MTQwMDM5WjAzMTEwLwYDVQQD
EygyNjYxMDJhZjJiMDNiOGQ0MzE5ZWMyMzEwODcxMzNkNmQzZTY4ZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/ejmDcaUbEQtPTitsZMAdfWtium
YdEEUBlrFs9nVyvNX5XuBDKmArC2Tw1jvKb8ThBsu5cXqD+tuSIX/th2a9ZdOybT
U6WkRGU/oQmG4ltpr7tWBSdgyBM8ot1ZlOrg4Lnd+Br2lRaUJKV3dL13ZKfQHpVc
OqJQ5ka926dtiB2zfHj/rPUeRVeAODK2MCCBwFYtOkibaoU4GQjCGEpXBmQAmeiW
YYsN1XDN4h8WSqCJfRrIY+ot7OxjhSY3NrWSO+6gRtbj2+sI3pC+ocL7DWaWhbH2
2k5friL925ipHu65TPB1msD85xXlT2kY0XSD/wX9UFYcwsZs0ezMU2TRUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZhAq8rA7jUMZ7CMQhxM9bT5o+9MB8GA1UdIwQY
MBaAFORlrMkICe+0XM2iUKEFdhhJS4brMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUdXc3lRZ0o3N1JjemFKUW9RVjJHRWxMaHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85ZWY2MGEtNzNlZS00MGUxLTkwMDYt
YzBiM2IwZjU0YmViLzEvNUdXc3lRZ0o3N1JjemFKUW9RVjJHRWxMaHVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi85ZWY2MGEtNzNlZS00MGUxLTkwMDYtYzBiM2IwZjU0YmVi
LzEvNUdXc3lRZ0o3N1JjemFKUW9RVjJHRWxMaHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp+7TfQCl
nN1jGFH0r6o493Wu1DGjX1IxdIc0IQzBPKStGn+G9mPufLOwnaNPugtDJTJ4l4KC
whqXxvGiHVfyhqZ5yjDbpfK6ttWls94I6iIaKTYL+72qWOdg7I+Kb2YT5kg0H/dV
/+y0LBJE1LmsApY9bMcgc+mmsUMfpEA53nIFVqGyPaAu1RC86yaJn8hnpkdOnUUJ
IJqvsSPjzwE+tygxdBOWoMcqJt9tVythxyTi+9HtJIAdtkcXotGaBrvOLX2grPL9
tPR4XeZpFX4hyCt+PcqBN/wIG1jly2JC5BV2wvG4hV1xJIJZOY8GIwJOqeysKY2z
I+EgAi+Lt2PMaQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:00:34 2025 by rpki-client