Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
File: 5iq6ZBCCl1gsyujnuobyz8nh1ao.mft (raw, json)
Hash identifier: EPwSf2WAvUmkAKuEvFDX/nZv/auAKCD7TmczrMbs2A4=
Subject key identifier: DE:44:DE:78:E5:8A:7C:7D:65:3F:1E:98:20:75:6A:D0:25:9C:9D:26
Authority key identifier: E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
Certificate issuer: /CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Certificate serial: 019A4D3CB172C38AE48C78CB7864A3105C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
Manifest number: 070D
Signing time: Tue 04 Nov 2025 05:00:14 +0000
Manifest this update: Tue 04 Nov 2025 05:00:14 +0000
Manifest next update: Wed 05 Nov 2025 05:00:14 +0000
Files and hashes: 1: 5iq6ZBCCl1gsyujnuobyz8nh1ao.crl (hash: PqpokMk+IwapjlW6DpFuFoMsvmu5FCI0d9H7HAuGOlg=)
2: 7C47IJ6PzEDLOdL0QvIP0xqQesA.roa (hash: ISA+HvV+2Juv2ntFCKzEfQOpWZqwF1hA9L7d5xR7Wl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:b1:72:c3:8a:e4:8c:78:cb:78:64:a3:10:5c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Validity
Not Before: Nov 4 05:00:14 2025 GMT
Not After : Nov 5 05:00:14 2025 GMT
Subject: CN=de44de78e58a7c7d653f1e9820756ad0259c9d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:57:08:5c:37:cf:ec:3b:55:50:13:bf:00:be:
bd:59:50:57:5a:c8:5c:d5:32:58:61:ba:3e:fd:05:
36:c8:28:32:43:e1:d0:df:a0:3b:45:a1:c9:8f:73:
6a:0d:16:6f:05:cf:0b:ac:5c:ba:b5:53:1e:a2:7d:
c5:d9:0a:f0:82:24:a5:c7:cf:c2:ad:f8:c3:ac:b2:
d3:8b:63:d3:a2:0b:e9:a5:f9:06:f7:7a:e7:15:03:
72:e2:c0:3c:42:99:02:d2:9f:54:88:e8:48:26:06:
95:d1:c3:d3:c8:60:24:60:02:a8:ad:40:ce:fa:3f:
27:94:91:d1:e1:be:e7:48:90:1b:d2:47:ee:a2:72:
00:6a:89:dc:e2:27:61:bd:fb:d6:b5:23:5b:e7:fe:
6e:47:a6:72:1d:28:b4:e1:66:09:40:6d:07:ad:d8:
fe:5d:a5:3e:0b:3b:32:87:3e:1e:2b:3e:b8:a6:07:
b0:c8:13:b3:06:85:00:14:9d:49:8b:da:8a:07:77:
b1:3e:fc:3f:61:26:96:b1:a6:1b:a8:2f:01:16:30:
95:1b:15:9a:3b:96:f0:b7:09:0e:9f:49:31:b7:20:
13:8b:ea:ed:b7:a5:17:6d:cd:c6:52:fd:5d:1f:fb:
ea:8f:73:e7:0f:92:ac:00:e7:8c:79:5f:23:a8:4b:
64:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:44:DE:78:E5:8A:7C:7D:65:3F:1E:98:20:75:6A:D0:25:9C:9D:26
X509v3 Authority Key Identifier:
keyid:E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:77:c0:0d:53:10:ea:6d:b5:ef:68:04:ba:8d:10:91:68:7e:
5c:d0:82:6e:5a:76:d8:83:a1:7e:bb:28:d2:66:27:07:95:ce:
39:07:57:7d:51:ea:7a:77:a8:d6:25:df:ba:43:e4:ab:5e:14:
e8:e1:8b:92:9c:54:80:b3:b6:f2:c1:30:33:06:05:22:0d:9c:
06:81:40:1b:d6:e8:4b:e1:71:e1:f4:89:3c:1f:d1:25:7c:89:
17:4f:43:c5:f5:d5:3c:29:17:61:d2:9d:5f:2c:b4:35:21:6d:
a0:ec:2e:e3:ca:7a:6a:0f:bf:f5:c5:52:08:e2:92:1d:23:09:
e3:59:54:a7:42:a3:b3:bf:5b:21:c1:8e:93:b2:f5:1a:4a:44:
4d:96:5a:e0:d5:66:15:9e:51:15:e0:7e:17:99:14:70:76:e9:
71:30:d2:20:72:25:a1:f0:a8:b6:80:c3:da:b7:cb:28:52:90:
ca:13:f6:7a:2a:7a:c1:ff:61:ac:39:ca:64:04:41:27:8c:1b:
78:43:85:31:e9:ec:62:51:c3:97:86:d3:e8:6f:9f:7f:51:4c:
d9:4b:a8:84:20:cd:bb:dc:03:0c:2d:d2:5c:f2:52:9e:41:da:
6e:06:99:36:2c:8d:4d:09:cc:07:f2:1d:87:9f:3e:8e:39:ab:
01:99:c2:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPLFyw4rkjHjLeGSjEFw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MmFiYTY0MTA4Mjk3NTgyY2NhZThlN2JhODZmMmNmYzll
MWQ1YWEwHhcNMjUxMTA0MDUwMDE0WhcNMjUxMTA1MDUwMDE0WjAzMTEwLwYDVQQD
EyhkZTQ0ZGU3OGU1OGE3YzdkNjUzZjFlOTgyMDc1NmFkMDI1OWM5ZDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylcIXDfP7DtVUBO/AL69WVBXWshc
1TJYYbo+/QU2yCgyQ+HQ36A7RaHJj3NqDRZvBc8LrFy6tVMeon3F2QrwgiSlx8/C
rfjDrLLTi2PTogvppfkG93rnFQNy4sA8QpkC0p9UiOhIJgaV0cPTyGAkYAKorUDO
+j8nlJHR4b7nSJAb0kfuonIAaonc4idhvfvWtSNb5/5uR6ZyHSi04WYJQG0Hrdj+
XaU+Czsyhz4eKz64pgewyBOzBoUAFJ1Ji9qKB3exPvw/YSaWsaYbqC8BFjCVGxWa
O5bwtwkOn0kxtyATi+rtt6UXbc3GUv1dH/vqj3PnD5KsAOeMeV8jqEtkCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5E3njlinx9ZT8emCB1atAlnJ0mMB8GA1UdIwQY
MBaAFOYqumQQgpdYLMro57qG8s/J4dWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWlxNlpCQ0NsMWdzeXVqbnVvYnl6OG5oMWFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82NDcwYWMtMTgwOS00ZDU5LTg3MTQt
NzNiZGNiOWRlNzU1LzEvNWlxNlpCQ0NsMWdzeXVqbnVvYnl6OG5oMWFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy82NDcwYWMtMTgwOS00ZDU5LTg3MTQtNzNiZGNiOWRlNzU1
LzEvNWlxNlpCQ0NsMWdzeXVqbnVvYnl6OG5oMWFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXfADVMQ
6m2172gEuo0QkWh+XNCCblp22IOhfrso0mYnB5XOOQdXfVHqeneo1iXfukPkq14U
6OGLkpxUgLO28sEwMwYFIg2cBoFAG9boS+Fx4fSJPB/RJXyJF09DxfXVPCkXYdKd
Xyy0NSFtoOwu48p6ag+/9cVSCOKSHSMJ41lUp0Kjs79bIcGOk7L1GkpETZZa4NVm
FZ5RFeB+F5kUcHbpcTDSIHIlofCotoDD2rfLKFKQyhP2eip6wf9hrDnKZARBJ4wb
eEOFMensYlHDl4bT6G+ff1FM2UuohCDNu9wDDC3SXPJSnkHabgaZNiyNTQnMB/Id
h58+jjmrAZnCiw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:12:28 2025 by rpki-client