Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
File: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft (raw, json)
Hash identifier: c5vNnIchZ+FtPLbfV09XmwpbwdjJb+fYE+16BVQnVv8=
Subject key identifier: 52:28:07:13:47:D3:91:A6:66:C6:D0:A0:2A:70:F4:BB:A2:BC:AB:AC
Authority key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
Certificate issuer: /CN=fb959fb90a158f17de5d8296df954482a8d6211c
Certificate serial: 0199FBEB1BFE8E5E3B0D408CD43BCACBE174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
Manifest number: 053B
Signing time: Sun 19 Oct 2025 10:01:53 +0000
Manifest this update: Sun 19 Oct 2025 10:01:53 +0000
Manifest next update: Mon 20 Oct 2025 10:01:53 +0000
Files and hashes: 1: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl (hash: 9KNhrmwTPa2EOQywRHFeQntBbNlZ3EXKtD22WHTDoZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:1b:fe:8e:5e:3b:0d:40:8c:d4:3b:ca:cb:e1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb959fb90a158f17de5d8296df954482a8d6211c
Validity
Not Before: Oct 19 10:01:53 2025 GMT
Not After : Oct 20 10:01:53 2025 GMT
Subject: CN=5228071347d391a666c6d0a02a70f4bba2bcabac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:75:6f:9c:06:02:da:ee:bd:c4:1d:4a:27:41:
ba:0d:5e:10:47:ef:9a:8f:27:9e:32:50:1e:e8:b8:
15:2c:88:54:08:b7:67:1d:f3:62:ba:43:fa:51:a3:
fe:55:c9:4c:53:93:56:ef:00:08:06:26:22:41:3d:
10:7e:55:53:da:6e:66:12:a1:3e:e6:44:b3:1e:1e:
fd:92:84:e3:52:85:5d:56:95:a4:69:31:2e:16:93:
de:d7:f9:4d:46:4e:aa:08:e4:cf:0e:88:a8:c8:96:
ad:94:5c:35:28:de:a2:e2:b6:9b:ef:f6:44:7d:db:
60:a4:21:6c:3e:48:79:b3:3c:f4:32:13:e2:ba:e5:
8b:91:47:7f:a7:fa:38:25:b4:8b:5a:04:32:64:04:
4e:73:99:0e:53:58:01:84:c7:77:b7:86:c2:a2:56:
9a:9c:0b:ed:60:d6:70:e9:ad:dc:08:ef:8d:81:d0:
7c:c3:59:fc:e1:ce:d5:f2:09:23:3e:5a:06:4c:f4:
99:ea:8b:94:35:01:c7:b9:7a:67:87:d6:7e:4f:cb:
5e:3b:84:ea:0c:34:a3:6d:9b:65:2d:b5:3a:b0:61:
90:1e:12:c5:1c:25:14:8d:bf:38:b6:8d:21:9e:71:
ee:ae:23:66:9d:0a:0e:96:c3:30:9f:5a:58:ee:d4:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:28:07:13:47:D3:91:A6:66:C6:D0:A0:2A:70:F4:BB:A2:BC:AB:AC
X509v3 Authority Key Identifier:
keyid:FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:50:b5:81:4f:85:48:5c:55:aa:a2:bf:b6:83:e3:44:1b:d4:
50:ce:64:56:a8:e1:47:95:8d:30:56:69:b8:46:ba:bc:3b:ab:
79:c8:e0:91:c6:b6:9c:ab:b9:39:eb:8f:31:a4:f8:69:49:30:
ce:a3:7c:cc:ca:d7:45:65:38:3b:7e:bf:af:12:12:dc:5a:8b:
be:c4:57:1e:73:63:7a:32:40:ea:bf:f8:04:db:d9:24:22:cf:
68:67:3a:ec:79:3f:53:a9:00:9c:d6:c5:44:9b:6d:14:ae:90:
b7:b8:69:f0:c9:c9:65:28:94:fe:78:c9:06:4d:00:22:ed:df:
b5:dd:8a:f5:b7:8e:86:c7:e2:37:1e:dc:ce:f8:3f:fb:bf:3d:
b2:8a:ec:c6:ca:b3:ee:1f:ff:a0:28:b0:3d:72:13:2c:f8:27:
fe:9a:b9:15:3e:5a:ca:e7:f9:5a:ae:2f:5c:4e:a1:f4:8a:95:
a8:80:4c:6b:7d:d1:38:34:6b:aa:1b:dd:81:f5:20:a9:10:8b:
a5:bf:bd:31:4e:9f:32:4c:ee:f9:72:19:28:01:0e:7c:65:90:
72:f6:9e:6e:2a:6a:d3:f6:66:54:2b:c9:b5:35:37:13:2f:72:
90:5d:a3:68:b2:40:47:c4:89:9e:b2:d2:89:22:5b:b3:4c:da:
c6:a4:1f:65
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn76xv+jl47DUCM1DvKy+F0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOTU5ZmI5MGExNThmMTdkZTVkODI5NmRmOTU0NDgyYThk
NjIxMWMwHhcNMjUxMDE5MTAwMTUzWhcNMjUxMDIwMTAwMTUzWjAzMTEwLwYDVQQD
Eyg1MjI4MDcxMzQ3ZDM5MWE2NjZjNmQwYTAyYTcwZjRiYmEyYmNhYmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HVvnAYC2u69xB1KJ0G6DV4QR++a
jyeeMlAe6LgVLIhUCLdnHfNiukP6UaP+VclMU5NW7wAIBiYiQT0QflVT2m5mEqE+
5kSzHh79koTjUoVdVpWkaTEuFpPe1/lNRk6qCOTPDoioyJatlFw1KN6i4rab7/ZE
fdtgpCFsPkh5szz0MhPiuuWLkUd/p/o4JbSLWgQyZAROc5kOU1gBhMd3t4bColaa
nAvtYNZw6a3cCO+NgdB8w1n84c7V8gkjPloGTPSZ6ouUNQHHuXpnh9Z+T8teO4Tq
DDSjbZtlLbU6sGGQHhLFHCUUjb84to0hnnHuriNmnQoOlsMwn1pY7tQmdwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFIoBxNH05GmZsbQoCpw9LuivKusMB8GA1UdIwQY
MBaAFPuVn7kKFY8X3l2Clt+VRIKo1iEcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01V2Z1UW9WanhmZVhZS1czNVZFZ3FqV0lSdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvZTMzNmFmLTQ1OTEtNGQzNS05NTM2
LTVhYmY5YTA0MjkzZS8xLzEtNVdmdVFvVmp4ZmVYWUtXMzVWRWdxaldJUncubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA5L2UzMzZhZi00NTkxLTRkMzUtOTUzNi01YWJmOWEwNDI5
M2UvMS8xLTVXZnVRb1ZqeGZlWFlLVzM1VkVncWpXSVJ3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1C1
gU+FSFxVqqK/toPjRBvUUM5kVqjhR5WNMFZpuEa6vDurecjgkca2nKu5OeuPMaT4
aUkwzqN8zMrXRWU4O36/rxIS3FqLvsRXHnNjejJA6r/4BNvZJCLPaGc67Hk/U6kA
nNbFRJttFK6Qt7hp8MnJZSiU/njJBk0AIu3ftd2K9beOhsfiNx7czvg/+789sors
xsqz7h//oCiwPXITLPgn/pq5FT5ayuf5Wq4vXE6h9IqVqIBMa33RODRrqhvdgfUg
qRCLpb+9MU6fMkzu+XIZKAEOfGWQcvaebipq0/ZmVCvJtTU3Ey9ykF2jaLJAR8SJ
nrLSiSJbs0zaxqQfZQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:47 2025 by rpki-client