Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
File: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft (raw, json)
Hash identifier: RZ6v/tEXBziE3dFUDATUpWWRyh0/SDxe3OWh7uY1uMw=
Subject key identifier: 60:2D:B8:40:6B:03:54:81:7A:95:4B:12:27:10:14:7C:7C:F2:BB:20
Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
Certificate issuer: /CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Certificate serial: 0199FC8F26301ADF771297688BAB7A2A339B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:03 +0000
Manifest this update: Sun 19 Oct 2025 13:01:03 +0000
Manifest next update: Mon 20 Oct 2025 13:01:03 +0000
Files and hashes: 1: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl (hash: LczxZx0G+zgdXbAR46ZEKQi4HvC/YjbNeKYtBOGAvoY=)
2: qvfFT1waDERLpkfbuL979IFfQzo.roa (hash: paMjx2cHD10xNMb2RegQEWwQPemRR0QtwqJzV/kovDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:26:30:1a:df:77:12:97:68:8b:ab:7a:2a:33:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Validity
Not Before: Oct 19 13:01:03 2025 GMT
Not After : Oct 20 13:01:03 2025 GMT
Subject: CN=602db8406b0354817a954b122710147c7cf2bb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:38:83:c2:31:44:c4:8e:2a:9f:5c:66:b6:
71:fb:cd:5c:7d:1d:9d:c3:30:1d:92:bb:d7:78:f7:
88:08:0d:ab:8d:3e:46:0a:82:6b:1d:93:88:13:df:
57:67:1c:d0:50:e8:e3:09:8d:59:64:4b:47:d2:2f:
c0:3f:c6:32:ec:ad:a0:e5:21:c6:73:6d:0d:c9:92:
bb:0f:04:5f:8d:54:e4:ed:a9:89:3d:35:f1:2a:ae:
46:49:a9:f2:10:bf:41:0d:45:21:9c:4c:e3:34:e1:
d9:97:5b:62:d4:cc:60:ef:e8:91:5d:f4:eb:3b:32:
d3:11:f3:77:93:07:76:b2:b0:36:16:d5:f2:0d:51:
d7:b8:f3:50:9a:60:a9:f3:58:95:e1:c3:eb:ad:a1:
f6:c5:4e:ca:1f:d1:60:cf:f0:be:a7:40:61:8c:77:
ed:31:fb:59:40:e8:8d:5c:bc:38:ab:45:02:d3:7a:
30:c5:66:bf:56:db:d5:7c:38:59:81:cf:15:0e:11:
ef:fd:23:8e:d2:f0:80:c1:ce:3a:8f:4b:0b:f2:18:
4d:d4:d0:9e:ad:05:78:01:d0:cd:6f:cb:ef:b3:6e:
44:5d:46:9b:9a:78:ca:e7:d6:08:5a:58:b0:9d:17:
ed:37:b0:2e:26:ca:fe:8f:74:3f:93:a3:49:91:ec:
e7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2D:B8:40:6B:03:54:81:7A:95:4B:12:27:10:14:7C:7C:F2:BB:20
X509v3 Authority Key Identifier:
keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1a:fa:43:16:19:d7:70:b3:43:8f:89:2e:92:32:30:ea:1e:
8e:4b:29:56:2a:c4:a3:cb:f0:b9:8f:18:8f:4b:7e:26:46:90:
40:fe:19:0b:33:24:bd:37:92:c6:30:ed:d6:51:3a:e7:e6:41:
24:a3:45:2d:7c:ad:66:19:48:3b:d2:1c:7c:d4:5c:a4:6d:08:
3a:06:cc:4b:1f:ba:42:dd:17:1b:a2:c6:67:e9:cf:8d:49:5f:
d9:e6:23:11:a4:83:3f:f4:9e:01:57:a0:d8:37:d2:57:2c:a0:
07:95:7e:82:a6:01:06:77:15:69:05:b1:a6:9b:3e:11:92:ef:
91:bf:ab:1c:40:a7:c3:90:a4:1e:1d:a2:76:cd:14:09:bd:75:
23:42:0f:0d:50:9c:02:f8:41:9a:c2:fd:5a:6a:7a:39:fd:b2:
eb:f4:e0:41:60:c0:12:a9:5f:57:c9:5b:9c:06:d7:91:f3:4b:
c6:55:0a:28:cc:fe:7e:d8:25:4d:1d:e5:29:f2:32:a3:af:7a:
63:bb:fc:e8:f7:9b:f1:c3:99:80:0c:ad:a5:0e:cb:b6:56:43:
c5:65:50:4c:55:d9:44:d4:15:0b:ea:72:4a:c9:47:04:a8:4a:
53:ce:ea:93:5a:35:62:e5:fe:e6:7f:66:e6:2a:23:4f:3d:c0:
35:e3:6f:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jyYwGt93Epdoi6t6KjObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MWQ3MDlkOGIxODRjNWE1MGM5NDMxZGNjYWY2NDliYzg2
ODQ3MDQwHhcNMjUxMDE5MTMwMTAzWhcNMjUxMDIwMTMwMTAzWjAzMTEwLwYDVQQD
Eyg2MDJkYjg0MDZiMDM1NDgxN2E5NTRiMTIyNzEwMTQ3YzdjZjJiYjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSY4g8IxRMSOKp9cZrZx+81cfR2d
wzAdkrvXePeICA2rjT5GCoJrHZOIE99XZxzQUOjjCY1ZZEtH0i/AP8Yy7K2g5SHG
c20NyZK7DwRfjVTk7amJPTXxKq5GSanyEL9BDUUhnEzjNOHZl1ti1Mxg7+iRXfTr
OzLTEfN3kwd2srA2FtXyDVHXuPNQmmCp81iV4cPrraH2xU7KH9Fgz/C+p0BhjHft
MftZQOiNXLw4q0UC03owxWa/VtvVfDhZgc8VDhHv/SOO0vCAwc46j0sL8hhN1NCe
rQV4AdDNb8vvs25EXUabmnjK59YIWliwnRftN7AuJsr+j3Q/k6NJkeznEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAtuEBrA1SBepVLEicQFHx88rsgMB8GA1UdIwQY
MBaAFOcdcJ2LGExaUMlDHcyvZJvIaEcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80Nzk5ZjYtNzY1Zi00YWQyLThjNDMt
MWM1YjEwMTJkMmMzLzEvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80Nzk5ZjYtNzY1Zi00YWQyLThjNDMtMWM1YjEwMTJkMmMz
LzEvNXgxd25Zc1lURnBReVVNZHpLOWttOGhvUndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxr6QxYZ
13CzQ4+JLpIyMOoejkspVirEo8vwuY8Yj0t+JkaQQP4ZCzMkvTeSxjDt1lE65+ZB
JKNFLXytZhlIO9IcfNRcpG0IOgbMSx+6Qt0XG6LGZ+nPjUlf2eYjEaSDP/SeAVeg
2DfSVyygB5V+gqYBBncVaQWxpps+EZLvkb+rHECnw5CkHh2ids0UCb11I0IPDVCc
AvhBmsL9Wmp6Of2y6/TgQWDAEqlfV8lbnAbXkfNLxlUKKMz+ftglTR3lKfIyo696
Y7v86Peb8cOZgAytpQ7LtlZDxWVQTFXZRNQVC+pySslHBKhKU87qk1o1YuX+5n9m
5iojTz3ANeNvNg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:09 2025 by rpki-client