Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
File: v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft (raw, json)
Hash identifier: KAtyYfbqIpJjVByvs5hV/30JVI8CuCaNcYub+rJ14zw=
Subject key identifier: C7:79:C4:D9:CD:E3:34:5E:BB:E9:95:EB:6E:09:27:56:C6:21:A5:52
Authority key identifier: BF:EE:53:11:55:60:71:46:30:4D:C6:5D:D5:76:FB:EE:9F:0D:6E:4E
Certificate issuer: /CN=bfee531155607146304dc65dd576fbee9f0d6e4e
Certificate serial: 0199FC21B8A662197307CE4DCA21271B2D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
Manifest number: 0504
Signing time: Sun 19 Oct 2025 11:01:32 +0000
Manifest this update: Sun 19 Oct 2025 11:01:32 +0000
Manifest next update: Mon 20 Oct 2025 11:01:32 +0000
Files and hashes: 1: v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl (hash: /aB+KDUYKgA6yGkYEydZPm2yJvBKiPB+vyDrP4Ojjc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b8:a6:62:19:73:07:ce:4d:ca:21:27:1b:2d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfee531155607146304dc65dd576fbee9f0d6e4e
Validity
Not Before: Oct 19 11:01:32 2025 GMT
Not After : Oct 20 11:01:32 2025 GMT
Subject: CN=c779c4d9cde3345ebbe995eb6e092756c621a552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4f:2a:d5:63:c4:94:68:90:5c:37:44:04:2b:
c5:dd:f2:d4:b3:02:28:79:d3:b9:2c:ae:5c:2a:fa:
a1:98:90:e7:80:3b:fd:ff:fa:fa:1f:56:ea:57:64:
e8:cd:e6:a4:95:df:1c:a5:9d:b0:d8:a2:4a:72:32:
97:91:bc:d4:ec:99:2c:74:5b:50:73:4c:10:64:5f:
f3:b6:45:43:45:42:49:f8:fb:40:8c:a3:dd:07:f3:
97:45:1a:6d:ee:97:5b:74:f6:e7:cc:df:c0:a2:db:
7c:53:4b:c4:27:8a:e4:52:7c:9c:f0:51:53:90:1e:
6a:04:17:95:db:ff:a8:7d:e1:88:87:e6:7e:78:b4:
4e:c6:ea:91:66:e8:72:bf:46:8a:23:af:00:6d:3f:
a4:6a:37:b1:99:c3:ee:18:11:7f:01:6f:a3:5a:c9:
d6:db:3b:9e:22:79:e9:06:dc:3c:29:50:30:ec:b1:
83:b1:cd:89:bc:d2:2a:5c:97:0f:9d:68:9f:17:4d:
7c:ef:83:73:16:44:0c:61:07:27:c3:ed:0f:44:ae:
67:4e:ed:92:45:a6:a6:24:43:c3:c6:ac:74:58:72:
8b:62:2a:d6:fd:47:1e:d2:10:36:8c:09:e8:0d:b1:
8e:a2:ca:a2:65:05:bc:ed:70:b1:fa:3a:40:69:a2:
46:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:79:C4:D9:CD:E3:34:5E:BB:E9:95:EB:6E:09:27:56:C6:21:A5:52
X509v3 Authority Key Identifier:
keyid:BF:EE:53:11:55:60:71:46:30:4D:C6:5D:D5:76:FB:EE:9F:0D:6E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:77:47:13:2d:13:e2:d3:20:6f:92:cb:02:d4:da:88:91:03:
1c:7b:00:ce:de:50:ad:6f:db:fd:79:f5:2a:ec:0d:93:fe:f2:
bf:33:90:0a:59:9e:b0:02:38:c3:77:7a:43:10:8c:60:68:f1:
01:7c:87:7a:4b:d6:0e:5a:b0:ab:1c:6c:3e:10:f9:ea:a5:55:
a3:c4:de:34:ed:5f:f6:dd:ef:30:ee:09:0a:51:f0:23:bd:35:
75:7d:2a:8a:e9:d8:8c:54:f3:21:5d:f9:7f:5c:49:3c:7d:87:
5e:27:0d:9c:29:eb:f2:56:d3:9b:06:f2:83:f2:80:de:10:0a:
67:75:d6:59:a1:94:57:3c:dd:ed:3b:f7:b0:5b:61:97:b3:4d:
3e:0d:06:5c:0d:0d:5d:fc:38:a4:54:da:0f:c8:c3:37:bc:69:
a1:61:7d:8e:76:fe:0b:61:78:24:2f:d0:86:1d:e1:7e:c3:5c:
17:cf:bc:c1:a9:5b:6b:d9:72:95:fa:7b:b1:a9:ac:4b:f1:05:
1e:e5:0a:aa:aa:3d:c0:f9:3b:84:4f:1e:a9:1c:aa:ca:c5:c6:
9f:0e:e8:ce:56:9f:91:5d:39:d1:c3:25:f2:fd:f1:d7:17:ed:
b1:bd:ce:47:47:c1:b9:dd:d7:54:03:77:67:b0:59:31:41:37:
31:2e:ad:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IbimYhlzB85NyiEnGy2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZWU1MzExNTU2MDcxNDYzMDRkYzY1ZGQ1NzZmYmVlOWYw
ZDZlNGUwHhcNMjUxMDE5MTEwMTMyWhcNMjUxMDIwMTEwMTMyWjAzMTEwLwYDVQQD
EyhjNzc5YzRkOWNkZTMzNDVlYmJlOTk1ZWI2ZTA5Mjc1NmM2MjFhNTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA008q1WPElGiQXDdEBCvF3fLUswIo
edO5LK5cKvqhmJDngDv9//r6H1bqV2Tozeakld8cpZ2w2KJKcjKXkbzU7JksdFtQ
c0wQZF/ztkVDRUJJ+PtAjKPdB/OXRRpt7pdbdPbnzN/Aott8U0vEJ4rkUnyc8FFT
kB5qBBeV2/+ofeGIh+Z+eLROxuqRZuhyv0aKI68AbT+kajexmcPuGBF/AW+jWsnW
2zueInnpBtw8KVAw7LGDsc2JvNIqXJcPnWifF01874NzFkQMYQcnw+0PRK5nTu2S
RaamJEPDxqx0WHKLYirW/Uce0hA2jAnoDbGOosqiZQW87XCx+jpAaaJGIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMd5xNnN4zReu+mV624JJ1bGIaVSMB8GA1UdIwQY
MBaAFL/uUxFVYHFGME3GXdV2++6fDW5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi01VEVWVmdjVVl3VGNaZDFYYjc3cDhOYms0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zZWM2NGItZDNhMS00MzMxLTkyNTIt
ZDRmODMzODBhOWM1LzEvdi01VEVWVmdjVVl3VGNaZDFYYjc3cDhOYms0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zZWM2NGItZDNhMS00MzMxLTkyNTItZDRmODMzODBhOWM1
LzEvdi01VEVWVmdjVVl3VGNaZDFYYjc3cDhOYms0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADndHEy0T
4tMgb5LLAtTaiJEDHHsAzt5QrW/b/Xn1KuwNk/7yvzOQClmesAI4w3d6QxCMYGjx
AXyHekvWDlqwqxxsPhD56qVVo8TeNO1f9t3vMO4JClHwI701dX0qiunYjFTzIV35
f1xJPH2HXicNnCnr8lbTmwbyg/KA3hAKZ3XWWaGUVzzd7Tv3sFthl7NNPg0GXA0N
Xfw4pFTaD8jDN7xpoWF9jnb+C2F4JC/Qhh3hfsNcF8+8walba9lylfp7samsS/EF
HuUKqqo9wPk7hE8eqRyqysXGnw7ozlafkV050cMl8v3x1xftsb3OR0fBud3XVAN3
Z7BZMUE3MS6tsQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:57 2025 by rpki-client