Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
File: 5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json)
Hash identifier: QkdqHnogjglGWJ3tSBEo2HQQlO8FhUyy6OU28PKQFdU=
Subject key identifier: 8E:AA:45:FE:BA:6E:D2:A9:D7:64:73:EF:74:35:35:A0:EF:61:C3:0C
Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Certificate issuer: /CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Certificate serial: 019A0290FF9F3F2C53FAFFE0FFCD25021768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
Manifest number: 0669
Signing time: Mon 20 Oct 2025 17:00:48 +0000
Manifest this update: Mon 20 Oct 2025 17:00:48 +0000
Manifest next update: Tue 21 Oct 2025 17:00:48 +0000
Files and hashes: 1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: 3u1shGY4p7HVvZXoLPsmSaH9G655R9L/31WAGi22DcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:ff:9f:3f:2c:53:fa:ff:e0:ff:cd:25:02:17:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Validity
Not Before: Oct 20 17:00:48 2025 GMT
Not After : Oct 21 17:00:48 2025 GMT
Subject: CN=8eaa45feba6ed2a9d76473ef743535a0ef61c30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:d8:7e:2b:71:4e:75:ae:ae:96:f1:0d:55:
76:81:3b:98:f4:9b:97:75:33:35:93:33:8c:c2:08:
f9:ed:c6:04:9e:15:3a:da:d7:b1:01:b3:2f:97:d8:
4e:68:e7:c2:bf:6b:0b:68:40:dc:bf:34:6f:15:5b:
a9:8b:71:dc:73:83:7f:cb:a0:2a:12:ba:8a:0e:7b:
ec:1c:71:66:4a:a0:77:68:65:2f:4d:62:dd:71:40:
08:a5:06:3b:7e:d9:62:ea:2f:0a:61:1c:1c:74:e9:
77:d9:bc:6d:87:b6:6b:64:75:26:1e:4e:b6:00:35:
5f:b9:b7:1f:db:b7:54:9c:11:df:a6:ee:2e:11:05:
1c:3f:df:28:38:3e:b3:0b:ca:cf:3f:92:a4:08:e4:
ce:5c:aa:c1:cb:a8:0f:fd:20:01:cb:47:a4:2e:64:
83:a5:bf:60:ce:c6:99:36:c4:fd:06:ad:a3:61:72:
f1:04:b4:b5:f5:48:0e:fe:88:c7:5a:4c:f8:7c:ca:
e6:a0:00:67:c6:c5:74:32:17:fc:53:2c:1b:57:4e:
00:34:98:75:e2:44:79:e5:eb:0f:73:08:1a:dc:12:
fe:2a:ea:0b:6c:ec:b2:a2:0d:15:90:02:c6:cb:77:
ab:bb:6f:28:0f:31:35:82:6f:28:01:8f:cc:9e:a8:
d3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AA:45:FE:BA:6E:D2:A9:D7:64:73:EF:74:35:35:A0:EF:61:C3:0C
X509v3 Authority Key Identifier:
keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a7:1f:de:4c:2b:bc:6f:27:a9:d6:a3:e2:ea:ee:2a:40:f4:
42:56:80:2b:ae:0f:7c:72:08:da:e6:4d:bb:03:5d:ce:05:b4:
c1:68:6b:5c:2f:78:da:82:22:66:bb:2b:3f:73:79:6f:88:0d:
e9:75:f6:7c:3c:2c:a2:d6:00:96:3d:63:63:5d:5b:c4:83:c3:
d2:48:e2:13:79:31:17:70:a5:45:89:ad:d0:46:b7:a9:fc:c7:
69:49:0a:6a:dc:c1:e5:9d:32:63:01:cf:f3:7a:70:4b:b7:63:
d1:38:43:f7:cc:1d:09:64:be:90:c8:44:b7:e1:85:12:81:35:
b8:ad:2d:4d:5c:a5:e3:94:40:90:a9:6e:16:30:fa:fa:9c:4d:
23:b3:ec:35:a8:ce:9f:9b:24:e3:44:6c:36:18:78:bb:22:5e:
e0:1e:4e:7f:64:85:c2:6e:7b:0b:2e:a3:2f:2e:60:6b:5d:fa:
d2:47:29:c2:31:91:9b:61:f3:b9:fe:17:97:4f:51:d9:98:20:
f7:12:7c:ca:02:3d:74:c9:d0:c6:18:b5:cb:75:98:c3:ee:e0:
e1:f9:64:b5:e4:62:19:ce:c8:06:56:d5:05:a1:ac:d5:39:e3:
8f:dd:7a:93:fe:53:f4:10:1e:bd:4b:ad:eb:e6:12:37:f4:5e:
b4:9a:14:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCkP+fPyxT+v/g/80lAhdoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZmFkNTFiZmFkZDI0NTMyMWJlMDkyZTY4MWQ4ZGU2ZTJk
Mjc1YzMwHhcNMjUxMDIwMTcwMDQ4WhcNMjUxMDIxMTcwMDQ4WjAzMTEwLwYDVQQD
Eyg4ZWFhNDVmZWJhNmVkMmE5ZDc2NDczZWY3NDM1MzVhMGVmNjFjMzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt3YfitxTnWurpbxDVV2gTuY9JuX
dTM1kzOMwgj57cYEnhU62texAbMvl9hOaOfCv2sLaEDcvzRvFVupi3Hcc4N/y6Aq
ErqKDnvsHHFmSqB3aGUvTWLdcUAIpQY7ftli6i8KYRwcdOl32bxth7ZrZHUmHk62
ADVfubcf27dUnBHfpu4uEQUcP98oOD6zC8rPP5KkCOTOXKrBy6gP/SABy0ekLmSD
pb9gzsaZNsT9Bq2jYXLxBLS19UgO/ojHWkz4fMrmoABnxsV0Mhf8UywbV04ANJh1
4kR55esPcwga3BL+KuoLbOyyog0VkALGy3eru28oDzE1gm8oAY/MnqjTXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6qRf66btKp12Rz73Q1NaDvYcMMMB8GA1UdIwQY
MBaAFOX61Rv63SRTIb4JLmgdjebi0nXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWZyVkdfcmRKRk1odmdrdWFCMk41dUxTZGNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wMjBiN2EtNzRhMy00NTk0LTljNDYt
ZDViZGI2MzlmYmNhLzEvNWZyVkdfcmRKRk1odmdrdWFCMk41dUxTZGNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wMjBiN2EtNzRhMy00NTk0LTljNDYtZDViZGI2MzlmYmNh
LzEvNWZyVkdfcmRKRk1odmdrdWFCMk41dUxTZGNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvacf3kwr
vG8nqdaj4uruKkD0QlaAK64PfHII2uZNuwNdzgW0wWhrXC942oIiZrsrP3N5b4gN
6XX2fDwsotYAlj1jY11bxIPD0kjiE3kxF3ClRYmt0Ea3qfzHaUkKatzB5Z0yYwHP
83pwS7dj0ThD98wdCWS+kMhEt+GFEoE1uK0tTVyl45RAkKluFjD6+pxNI7PsNajO
n5sk40RsNhh4uyJe4B5Of2SFwm57Cy6jLy5ga1360kcpwjGRm2Hzuf4Xl09R2Zgg
9xJ8ygI9dMnQxhi1y3WYw+7g4flkteRiGc7IBlbVBaGs1Tnjj916k/5T9BAevUut
6+YSN/RetJoUkw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:22:32 2025 by rpki-client