Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
File: 5qTLdM9STBgSHVO1MsA8BvSta-Y.mft (raw, json)
Hash identifier: IDuMtk9Yo6b5N0nkKeqzOApwhSUrNhTg2+SkHnyAjE8=
Subject key identifier: 78:27:04:CC:80:37:D6:2B:31:96:DB:20:56:66:A5:02:E1:FD:81:83
Authority key identifier: E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
Certificate issuer: /CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Certificate serial: 0199FC58563EAA598BD54A46291B9D38B278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
Manifest number: 10DC
Signing time: Sun 19 Oct 2025 12:01:11 +0000
Manifest this update: Sun 19 Oct 2025 12:01:11 +0000
Manifest next update: Mon 20 Oct 2025 12:01:11 +0000
Files and hashes: 1: 5qTLdM9STBgSHVO1MsA8BvSta-Y.crl (hash: aDXnUrGNh7maKnofuIQAAP5C7PAYv6r+9w81iUMy+NA=)
2: FXr_S2B4fxLM9qAbLsO0vh-M550.roa (hash: XI0iDABL8ODtA8iq4rY+TAYyWpnlmsL+6qt8rzYOd/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:56:3e:aa:59:8b:d5:4a:46:29:1b:9d:38:b2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Validity
Not Before: Oct 19 12:01:11 2025 GMT
Not After : Oct 20 12:01:11 2025 GMT
Subject: CN=782704cc8037d62b3196db205666a502e1fd8183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:df:b1:e8:b2:fb:79:21:d9:ab:1f:7c:88:47:
e2:9a:13:64:db:95:9c:42:93:84:fd:7e:33:bb:a1:
db:fc:47:4d:23:0c:98:e0:ac:85:85:9e:9c:8d:26:
a7:27:7d:70:78:6e:b5:48:a2:07:9f:be:b6:77:22:
0c:3b:db:15:76:67:b1:f3:0e:8e:85:77:90:b7:66:
5d:4c:43:e9:c6:97:0b:3e:9a:9e:4f:91:5d:1f:fc:
4d:fb:bc:32:54:a6:31:c7:e6:8e:01:83:5e:f2:88:
fb:c0:55:3b:de:2d:d7:e7:85:fc:db:7a:e9:34:bd:
9c:65:aa:db:28:4a:05:4d:01:ac:54:a4:17:07:68:
31:c1:24:f4:2c:ce:e7:39:c6:c9:78:9c:92:b6:85:
b3:82:eb:87:88:58:a0:dd:98:12:8e:bc:c4:db:df:
61:89:61:8e:a5:9e:e6:cc:c1:d0:91:d1:5b:0c:21:
95:70:40:a0:12:f4:a2:8c:75:6a:d3:17:fb:3f:66:
cf:98:09:78:54:a3:0e:f3:7e:b3:20:7a:3f:38:a5:
bf:05:c0:17:7e:e0:e9:57:5a:8f:8f:05:58:84:2d:
85:7e:65:8e:32:4c:79:0d:c7:a9:d4:f1:b1:7e:a9:
ed:0b:e5:5c:2d:72:d6:e7:32:6a:fd:bb:19:64:d7:
6c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:27:04:CC:80:37:D6:2B:31:96:DB:20:56:66:A5:02:E1:FD:81:83
X509v3 Authority Key Identifier:
keyid:E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:40:64:77:74:b3:39:37:f5:95:10:94:50:c0:85:b3:77:1a:
67:6b:49:4e:61:a3:f5:ca:dd:d8:c9:a2:b4:12:11:78:e0:a6:
dc:d3:ef:1c:7c:64:ab:0b:4a:1a:a1:af:33:87:0d:26:78:83:
e9:38:fe:23:0c:2a:a4:08:f8:81:53:a9:09:fd:f5:f7:75:96:
4c:f5:fe:01:b2:c0:ce:b0:1c:28:f0:cf:18:ef:77:21:94:44:
39:5c:1a:71:bd:17:97:cf:99:34:83:84:b9:63:97:44:af:70:
83:28:2e:cb:8f:ef:cc:12:0b:63:89:3a:42:e7:a8:c7:d5:ea:
ed:1d:4c:24:42:3b:3b:7c:d8:52:75:bd:f3:b7:67:b2:35:f5:
de:73:04:6b:b8:cc:6d:51:ce:d1:e1:ba:10:6e:02:ad:4a:43:
bd:10:e6:3d:7c:79:cd:c8:fd:73:28:c4:59:8b:42:87:83:05:
26:23:14:bb:23:95:45:78:f5:46:b2:95:f4:bc:1b:4c:61:4e:
be:a5:f9:2e:1b:7f:4b:71:0f:43:ea:d9:12:3d:86:de:4b:e5:
0a:ff:ef:08:ea:8c:08:5d:81:2b:29:14:71:43:9d:82:5d:60:
ef:b5:6e:81:2e:51:18:07:f4:5b:cb:b8:2a:83:96:e5:be:fa:
39:a3:a5:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WFY+qlmL1UpGKRudOLJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YTRjYjc0Y2Y1MjRjMTgxMjFkNTNiNTMyYzAzYzA2ZjRh
ZDZiZTYwHhcNMjUxMDE5MTIwMTExWhcNMjUxMDIwMTIwMTExWjAzMTEwLwYDVQQD
Eyg3ODI3MDRjYzgwMzdkNjJiMzE5NmRiMjA1NjY2YTUwMmUxZmQ4MTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d+x6LL7eSHZqx98iEfimhNk25Wc
QpOE/X4zu6Hb/EdNIwyY4KyFhZ6cjSanJ31weG61SKIHn762dyIMO9sVdmex8w6O
hXeQt2ZdTEPpxpcLPpqeT5FdH/xN+7wyVKYxx+aOAYNe8oj7wFU73i3X54X823rp
NL2cZarbKEoFTQGsVKQXB2gxwST0LM7nOcbJeJyStoWzguuHiFig3ZgSjrzE299h
iWGOpZ7mzMHQkdFbDCGVcECgEvSijHVq0xf7P2bPmAl4VKMO836zIHo/OKW/BcAX
fuDpV1qPjwVYhC2FfmWOMkx5Dcep1PGxfqntC+VcLXLW5zJq/bsZZNdszwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgnBMyAN9YrMZbbIFZmpQLh/YGDMB8GA1UdIwQY
MBaAFOaky3TPUkwYEh1TtTLAPAb0rWvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mOWY3NzMtMTIxZS00NTBkLWI2MDYt
OThiZjQyODlkZjNiLzEvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mOWY3NzMtMTIxZS00NTBkLWI2MDYtOThiZjQyODlkZjNi
LzEvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUBkd3Sz
OTf1lRCUUMCFs3caZ2tJTmGj9crd2MmitBIReOCm3NPvHHxkqwtKGqGvM4cNJniD
6Tj+IwwqpAj4gVOpCf3193WWTPX+AbLAzrAcKPDPGO93IZREOVwacb0Xl8+ZNIOE
uWOXRK9wgyguy4/vzBILY4k6Queox9Xq7R1MJEI7O3zYUnW987dnsjX13nMEa7jM
bVHO0eG6EG4CrUpDvRDmPXx5zcj9cyjEWYtCh4MFJiMUuyOVRXj1RrKV9LwbTGFO
vqX5Lht/S3EPQ+rZEj2G3kvlCv/vCOqMCF2BKykUcUOdgl1g77VugS5RGAf0W8u4
KoOW5b76OaOlmw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:18 2025 by rpki-client