Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
File: 5YBpdIdI6a69e-QFh9gUDv3lW2s.mft (raw, json)
Hash identifier: PUuU701+M34KUasuD8Ern1RcEDrntuSj+9WiptGZsKI=
Subject key identifier: 49:53:23:DA:11:58:28:8F:D6:62:D7:12:C8:22:42:E9:9D:2A:79:98
Authority key identifier: E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
Certificate issuer: /CN=e58069748748e9aebd7be40587d8140efde55b6b
Certificate serial: 019A4FD03705A2A5D3F400B1105C980E24C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 17:00:36 +0000
Manifest this update: Tue 04 Nov 2025 17:00:36 +0000
Manifest next update: Wed 05 Nov 2025 17:00:36 +0000
Files and hashes: 1: 5YBpdIdI6a69e-QFh9gUDv3lW2s.crl (hash: jvNdWRuWAW+QpW1VmqLCiSvnNGVkysZ3cKUWU8m71Lo=)
2: vmkVgb9N_5wAEFtAOAjwuSdx1Xs.roa (hash: To73D5BDmwWuULrYV7q3UmXkLh1DadkYNkNoo+AcLqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:37:05:a2:a5:d3:f4:00:b1:10:5c:98:0e:24:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58069748748e9aebd7be40587d8140efde55b6b
Validity
Not Before: Nov 4 17:00:36 2025 GMT
Not After : Nov 5 17:00:36 2025 GMT
Subject: CN=495323da1158288fd662d712c82242e99d2a7998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:e5:af:e9:a0:75:a8:05:1b:a8:70:e5:79:
9b:48:db:a5:64:80:37:89:f7:4c:af:67:47:ab:49:
3f:06:0a:72:18:16:ba:49:18:b0:b8:33:0e:6d:9a:
d2:ed:23:7d:1e:47:5a:af:ef:b0:3b:22:f0:13:81:
db:ee:7e:04:36:61:04:67:ca:16:cf:ed:3f:7c:cb:
72:1e:1e:b7:01:32:1b:92:5d:6d:76:13:57:88:f7:
a6:10:ec:43:b3:68:61:7b:75:e8:22:55:21:f2:21:
4b:91:69:63:4e:61:09:c1:da:3b:a2:ba:08:3b:6c:
56:2f:20:e7:3b:8c:df:6b:6f:03:13:c8:e3:73:01:
94:db:09:ad:6d:d6:2a:6a:56:9d:47:82:e9:a9:b5:
26:40:5c:5f:90:9f:50:21:97:ce:0a:56:6e:55:7e:
af:d9:db:15:ad:07:78:3b:53:8d:78:c5:80:8f:00:
22:b9:a9:fa:9e:75:ff:d8:7f:15:a5:e4:1a:45:9c:
e9:ee:8b:37:d2:f2:1a:12:4c:42:ce:d9:f4:12:5c:
08:98:17:8b:9e:3c:98:5a:00:da:2a:50:76:ef:db:
ba:62:3e:35:dd:3d:a1:57:db:eb:8a:0b:52:3b:67:
94:1f:d7:d7:9b:60:95:6e:70:2c:87:86:c3:b1:2a:
06:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:53:23:DA:11:58:28:8F:D6:62:D7:12:C8:22:42:E9:9D:2A:79:98
X509v3 Authority Key Identifier:
keyid:E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d8:de:73:7a:fb:2e:88:32:fe:65:89:68:f2:24:49:82:77:
13:fd:c7:0c:23:c2:cc:1c:c5:02:7b:1c:ee:81:ba:9a:62:3f:
68:61:47:24:06:1b:60:9c:1e:9f:62:72:a8:b6:e0:08:fd:b5:
de:23:32:0f:db:3a:bc:28:39:14:1c:64:59:0a:14:15:84:47:
8e:af:af:1b:e9:ff:a7:e9:54:fa:3c:e3:e2:13:e9:79:8c:66:
d1:d0:d4:a9:07:5d:e6:d7:ab:04:5e:05:48:e6:d6:75:aa:be:
04:b1:41:ef:71:12:bf:e0:f8:6b:b2:70:2e:9e:e6:87:73:d2:
65:ea:25:d9:93:d2:4a:c2:fa:86:29:9f:85:5e:a9:5d:96:a6:
a9:6d:82:48:76:65:e9:12:cf:09:66:69:66:aa:9e:47:7b:cc:
36:8c:81:c8:d5:d1:ed:a8:79:e1:8f:5c:06:35:c1:cf:8b:43:
4f:29:3d:6e:eb:e4:c9:48:31:72:53:82:49:bc:a0:b2:0d:a8:
d6:6c:5f:4a:17:de:70:53:3f:4a:63:0a:77:11:1b:37:e6:65:
35:72:41:92:f3:78:dd:7d:0a:cd:ed:49:90:02:9d:34:d5:e1:
da:5d:8e:0f:80:cd:0e:53:e3:eb:aa:fd:13:77:0e:72:ef:ed:
ef:60:d5:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0DcFoqXT9ACxEFyYDiTEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ODA2OTc0ODc0OGU5YWViZDdiZTQwNTg3ZDgxNDBlZmRl
NTViNmIwHhcNMjUxMTA0MTcwMDM2WhcNMjUxMTA1MTcwMDM2WjAzMTEwLwYDVQQD
Eyg0OTUzMjNkYTExNTgyODhmZDY2MmQ3MTJjODIyNDJlOTlkMmE3OTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw7lr+mgdagFG6hw5XmbSNulZIA3
ifdMr2dHq0k/BgpyGBa6SRiwuDMObZrS7SN9Hkdar++wOyLwE4Hb7n4ENmEEZ8oW
z+0/fMtyHh63ATIbkl1tdhNXiPemEOxDs2hhe3XoIlUh8iFLkWljTmEJwdo7oroI
O2xWLyDnO4zfa28DE8jjcwGU2wmtbdYqaladR4LpqbUmQFxfkJ9QIZfOClZuVX6v
2dsVrQd4O1ONeMWAjwAiuan6nnX/2H8VpeQaRZzp7os30vIaEkxCztn0ElwImBeL
njyYWgDaKlB279u6Yj413T2hV9vrigtSO2eUH9fXm2CVbnAsh4bDsSoGeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElTI9oRWCiP1mLXEsgiQumdKnmYMB8GA1UdIwQY
MBaAFOWAaXSHSOmuvXvkBYfYFA795VtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84ZWZkODAtN2RiMy00ZTUyLWFkNzYt
MGY4OTZlYmNhNGY4LzEvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84ZWZkODAtN2RiMy00ZTUyLWFkNzYtMGY4OTZlYmNhNGY4
LzEvNVlCcGRJZEk2YTY5ZS1RRmg5Z1VEdjNsVzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNjec3r7
Logy/mWJaPIkSYJ3E/3HDCPCzBzFAnsc7oG6mmI/aGFHJAYbYJwen2JyqLbgCP21
3iMyD9s6vCg5FBxkWQoUFYRHjq+vG+n/p+lU+jzj4hPpeYxm0dDUqQdd5terBF4F
SObWdaq+BLFB73ESv+D4a7JwLp7mh3PSZeol2ZPSSsL6himfhV6pXZamqW2CSHZl
6RLPCWZpZqqeR3vMNoyByNXR7ah54Y9cBjXBz4tDTyk9buvkyUgxclOCSbygsg2o
1mxfShfecFM/SmMKdxEbN+ZlNXJBkvN43X0Kze1JkAKdNNXh2l2OD4DNDlPj66r9
E3cOcu/t72DVPA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:42 2025 by rpki-client