Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
File: 5J_xmt1LshEp7ogjFL5zy3jM7bM.mft (raw, json)
Hash identifier: MtYCilD5F3DFB86YagFfjU6xWzK2Q5XCcOSzhmjgERg=
Subject key identifier: 5F:DA:75:E7:D4:22:7E:66:CD:7A:E0:BE:48:47:C4:B1:4A:02:0D:6C
Authority key identifier: E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3
Certificate issuer: /CN=e49ff19add4bb21129ee882314be73cb78ccedb3
Certificate serial: 019A4E18C88794DF3D21EB7581D618B53D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
Manifest number: 07FE
Signing time: Tue 04 Nov 2025 09:00:38 +0000
Manifest this update: Tue 04 Nov 2025 09:00:38 +0000
Manifest next update: Wed 05 Nov 2025 09:00:38 +0000
Files and hashes: 1: 5J_xmt1LshEp7ogjFL5zy3jM7bM.crl (hash: LvBX/+vnWEckbZKf3BQqXe5DPJluX/EdzPbd1JDmizQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c8:87:94:df:3d:21:eb:75:81:d6:18:b5:3d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49ff19add4bb21129ee882314be73cb78ccedb3
Validity
Not Before: Nov 4 09:00:38 2025 GMT
Not After : Nov 5 09:00:38 2025 GMT
Subject: CN=5fda75e7d4227e66cd7ae0be4847c4b14a020d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:30:48:1f:6d:ba:cd:06:e4:57:24:5f:43:
ce:d6:74:61:6f:c1:63:43:27:9c:8b:77:5f:f4:eb:
2e:80:99:55:3b:ea:d2:ab:fb:8a:af:c1:6f:de:ee:
3e:1b:b5:7c:99:20:18:c2:2e:75:6c:7e:9c:ef:e3:
ac:1b:8a:bb:5f:a5:fc:5d:02:50:41:60:f4:97:82:
b0:f3:de:ec:54:a0:4d:3d:1d:da:92:79:13:60:cf:
8d:78:93:fe:39:6d:26:0b:7c:da:f7:0f:3b:2c:be:
1e:3b:eb:1a:38:77:15:f5:1b:18:8e:f7:32:d4:6d:
b9:00:42:a9:7f:67:aa:2e:b1:67:1d:7b:0c:3a:0e:
74:d9:f4:c0:f8:e0:1d:0b:da:2d:93:66:28:c5:3b:
e0:b9:35:26:c5:bb:90:9a:6a:41:4c:3c:0e:a8:49:
c9:1c:6c:d9:10:7c:c2:76:8a:7c:4c:35:f9:00:d0:
a4:4f:42:bd:ae:a5:38:d5:04:d7:75:e8:f8:b0:1b:
ad:53:91:fc:c5:2c:2e:d6:d9:2b:eb:2a:d4:aa:1f:
78:23:66:d7:f4:fe:ab:41:ca:67:5b:fd:9e:50:95:
6a:c4:0c:94:df:f4:04:5f:40:e7:72:a7:e6:51:3e:
ba:88:ee:92:89:d6:cd:88:0a:d8:c9:fb:56:68:b8:
81:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DA:75:E7:D4:22:7E:66:CD:7A:E0:BE:48:47:C4:B1:4A:02:0D:6C
X509v3 Authority Key Identifier:
keyid:E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:42:f9:9e:aa:bc:3f:b1:54:a2:37:1c:71:e6:61:54:cb:97:
f6:9a:73:f0:21:5f:5b:13:d1:9f:1f:8b:f0:d1:90:a9:f8:1f:
9e:ea:25:15:7d:c5:a9:f6:0a:f8:45:9e:3c:ff:2e:09:9a:fe:
be:74:de:f3:59:e7:3d:af:ae:4a:c2:be:56:da:e9:db:ca:f0:
b0:49:1c:d2:d4:fb:c5:53:b5:7c:21:13:8f:a3:9e:82:71:e3:
95:ec:8b:93:39:d7:44:5f:c5:1e:4a:79:38:59:a4:ac:83:14:
1c:6e:79:6f:4d:1b:90:53:60:19:56:e2:88:70:62:19:93:48:
62:34:8c:8a:ef:ad:f6:c7:b8:78:bb:ef:ef:d7:b4:78:a0:20:
d8:05:30:c5:fc:4e:72:bd:ee:34:69:d1:54:4c:d8:88:81:2a:
fa:bf:12:d4:a6:84:0d:dc:3f:06:e2:a9:23:86:a1:f4:de:66:
c7:ea:c5:76:d1:8e:72:8b:bc:29:2c:98:d0:94:86:5c:bd:f6:
9a:6f:b0:cb:3f:9f:eb:f0:47:6e:29:53:c6:91:20:5a:48:2a:
c8:c5:78:fd:47:26:54:8b:b0:54:6a:c7:05:a9:fb:b5:87:dd:
fc:fa:96:63:b5:15:28:a5:d4:0f:1b:12:8f:68:af:81:2b:6e:
f5:ab:ea:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGMiHlN89Iet1gdYYtT2eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OWZmMTlhZGQ0YmIyMTEyOWVlODgyMzE0YmU3M2NiNzhj
Y2VkYjMwHhcNMjUxMTA0MDkwMDM4WhcNMjUxMTA1MDkwMDM4WjAzMTEwLwYDVQQD
Eyg1ZmRhNzVlN2Q0MjI3ZTY2Y2Q3YWUwYmU0ODQ3YzRiMTRhMDIwZDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv48wSB9tus0G5FckX0PO1nRhb8Fj
Qyeci3df9OsugJlVO+rSq/uKr8Fv3u4+G7V8mSAYwi51bH6c7+OsG4q7X6X8XQJQ
QWD0l4Kw897sVKBNPR3aknkTYM+NeJP+OW0mC3za9w87LL4eO+saOHcV9RsYjvcy
1G25AEKpf2eqLrFnHXsMOg502fTA+OAdC9otk2YoxTvguTUmxbuQmmpBTDwOqEnJ
HGzZEHzCdop8TDX5ANCkT0K9rqU41QTXdej4sButU5H8xSwu1tkr6yrUqh94I2bX
9P6rQcpnW/2eUJVqxAyU3/QEX0DncqfmUT66iO6SidbNiArYyftWaLiB8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/adefUIn5mzXrgvkhHxLFKAg1sMB8GA1UdIwQY
MBaAFOSf8ZrdS7IRKe6IIxS+c8t4zO2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUpfeG10MUxzaEVwN29nakZMNXp5M2pNN2JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yODAyNmYtYmM4Yi00NGE4LWJlNDIt
ZDZiMDU1ZGFiNDdiLzEvNUpfeG10MUxzaEVwN29nakZMNXp5M2pNN2JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8yODAyNmYtYmM4Yi00NGE4LWJlNDItZDZiMDU1ZGFiNDdi
LzEvNUpfeG10MUxzaEVwN29nakZMNXp5M2pNN2JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkL5nqq8
P7FUojccceZhVMuX9ppz8CFfWxPRnx+L8NGQqfgfnuolFX3FqfYK+EWePP8uCZr+
vnTe81nnPa+uSsK+Vtrp28rwsEkc0tT7xVO1fCETj6OegnHjleyLkznXRF/FHkp5
OFmkrIMUHG55b00bkFNgGVbiiHBiGZNIYjSMiu+t9se4eLvv79e0eKAg2AUwxfxO
cr3uNGnRVEzYiIEq+r8S1KaEDdw/BuKpI4ah9N5mx+rFdtGOcou8KSyY0JSGXL32
mm+wyz+f6/BHbilTxpEgWkgqyMV4/UcmVIuwVGrHBan7tYfd/PqWY7UVKKXUDxsS
j2ivgStu9avq8w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:04 2025 by rpki-client