Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.mft
File: s5hg55nVMGYfFSE1RiKOmSmlPJw.mft (raw, json)
Hash identifier: MY0hSPSsNjYPAKMi/+3GezYxpYv5+4/2kalzjAxWgMI=
Subject key identifier: FE:78:8E:A2:66:77:A2:E3:DC:6D:C5:F4:6C:36:47:53:DE:D3:E5:C9
Authority key identifier: B3:98:60:E7:99:D5:30:66:1F:15:21:35:46:22:8E:99:29:A5:3C:9C
Certificate issuer: /CN=b39860e799d530661f15213546228e9929a53c9c
Certificate serial: 0199FB7CC16E23384C177C9BB53095A91B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5hg55nVMGYfFSE1RiKOmSmlPJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.mft
Manifest number: 04E8
Signing time: Sun 19 Oct 2025 08:01:21 +0000
Manifest this update: Sun 19 Oct 2025 08:01:21 +0000
Manifest next update: Mon 20 Oct 2025 08:01:21 +0000
Files and hashes: 1: s5hg55nVMGYfFSE1RiKOmSmlPJw.crl (hash: osxgnZOe5N7+xVE5boHBRIrxx2VflDBFaL723mbLsvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5hg55nVMGYfFSE1RiKOmSmlPJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c1:6e:23:38:4c:17:7c:9b:b5:30:95:a9:1b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39860e799d530661f15213546228e9929a53c9c
Validity
Not Before: Oct 19 08:01:21 2025 GMT
Not After : Oct 20 08:01:21 2025 GMT
Subject: CN=fe788ea26677a2e3dc6dc5f46c364753ded3e5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a1:bd:31:ae:f9:08:5c:15:c0:74:1f:d3:72:
66:3f:ba:ca:e0:40:94:ab:f5:f4:92:7d:48:f1:c7:
5b:3c:a2:60:64:37:08:3f:c3:5c:87:0f:39:b2:fe:
b6:29:8e:42:a8:6b:4c:52:d6:e7:43:69:22:1d:1e:
a6:90:f9:cb:39:53:db:02:b2:4e:2f:0d:f0:9a:c5:
18:6b:91:8b:e8:4e:4f:35:69:53:cc:63:16:84:36:
18:ef:37:b4:46:22:69:15:84:d9:57:d7:f3:2b:f9:
2b:34:6f:a7:9e:8e:ec:e3:8d:dc:94:c9:97:c9:9f:
ef:a5:1d:76:38:33:ee:27:e8:a2:1d:ec:24:13:78:
37:55:6b:15:fd:5b:9f:85:7b:d0:17:6c:f5:22:1b:
87:c4:3b:c7:bf:ff:d9:8b:0c:e3:a5:0f:c8:7e:18:
13:ba:0f:26:ef:98:e0:61:df:8b:fb:4b:19:2b:1b:
a8:3b:c7:05:57:47:d7:3f:c4:68:e0:71:0d:eb:27:
bf:fe:d0:6d:af:85:24:28:36:0f:71:fe:6c:50:af:
11:ad:03:16:3c:65:81:fa:f7:04:13:cf:af:2c:ff:
1d:5a:84:24:69:22:6d:e7:65:cb:4c:9f:0e:6e:c6:
97:fa:d0:08:44:19:29:50:a0:c6:31:d7:b8:76:e4:
06:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:78:8E:A2:66:77:A2:E3:DC:6D:C5:F4:6C:36:47:53:DE:D3:E5:C9
X509v3 Authority Key Identifier:
keyid:B3:98:60:E7:99:D5:30:66:1F:15:21:35:46:22:8E:99:29:A5:3C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5hg55nVMGYfFSE1RiKOmSmlPJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:70:04:bb:e7:a3:26:0a:e1:5a:42:25:40:f7:9d:04:29:42:
84:83:5f:a5:8a:95:6f:19:3b:b7:ea:74:63:5e:da:7b:3c:cc:
a6:1d:fa:d3:31:6b:7f:6a:b9:2b:2e:5d:97:52:4e:85:95:52:
03:41:8e:13:ad:ef:ce:c2:6e:68:7e:d5:60:e4:80:62:bd:c6:
91:03:81:89:6e:45:08:5c:8d:40:81:ac:4d:85:9b:eb:66:43:
7c:eb:f1:bf:5c:c5:f2:ec:8e:e0:05:57:8b:f9:92:bd:1a:5c:
23:58:ac:9c:f2:ca:06:ec:55:15:2d:2d:cd:03:f2:c8:d5:84:
01:96:53:43:1e:09:85:81:52:1b:20:f4:9a:23:a4:db:95:68:
1b:bd:e0:fb:ec:50:5a:fd:fb:33:a8:93:eb:b9:15:ec:7c:41:
e4:27:28:ea:37:1b:29:bf:0e:19:7f:2d:79:9a:6e:56:b3:f7:
7b:6b:12:b8:c7:a2:17:19:36:aa:23:1d:ba:44:ec:b6:f3:ca:
c1:ec:be:98:39:96:16:88:a8:75:6e:bf:d5:e3:e0:ff:43:f5:
05:41:1f:0a:94:58:0d:f7:5c:d5:d7:25:1c:2e:f6:aa:0c:f6:
74:cd:ff:ff:f6:1c:8a:7e:e9:7d:c5:86:ec:f4:bf:d1:d9:0c:
a5:98:97:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fMFuIzhMF3ybtTCVqRtOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOTg2MGU3OTlkNTMwNjYxZjE1MjEzNTQ2MjI4ZTk5Mjlh
NTNjOWMwHhcNMjUxMDE5MDgwMTIxWhcNMjUxMDIwMDgwMTIxWjAzMTEwLwYDVQQD
EyhmZTc4OGVhMjY2NzdhMmUzZGM2ZGM1ZjQ2YzM2NDc1M2RlZDNlNWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KG9Ma75CFwVwHQf03JmP7rK4ECU
q/X0kn1I8cdbPKJgZDcIP8Nchw85sv62KY5CqGtMUtbnQ2kiHR6mkPnLOVPbArJO
Lw3wmsUYa5GL6E5PNWlTzGMWhDYY7ze0RiJpFYTZV9fzK/krNG+nno7s443clMmX
yZ/vpR12ODPuJ+iiHewkE3g3VWsV/VufhXvQF2z1IhuHxDvHv//ZiwzjpQ/IfhgT
ug8m75jgYd+L+0sZKxuoO8cFV0fXP8Ro4HEN6ye//tBtr4UkKDYPcf5sUK8RrQMW
PGWB+vcEE8+vLP8dWoQkaSJt52XLTJ8ObsaX+tAIRBkpUKDGMde4duQG3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP54jqJmd6Lj3G3F9Gw2R1Pe0+XJMB8GA1UdIwQY
MBaAFLOYYOeZ1TBmHxUhNUYijpkppTycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczVoZzU1blZNR1lmRlNFMVJpS09tU21sUEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS80ZTIwNmUtMGM5NS00YzhlLTg0N2Qt
YzEzZjMwZmRjYWRkLzEvczVoZzU1blZNR1lmRlNFMVJpS09tU21sUEp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS80ZTIwNmUtMGM5NS00YzhlLTg0N2QtYzEzZjMwZmRjYWRk
LzEvczVoZzU1blZNR1lmRlNFMVJpS09tU21sUEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXAEu+ej
JgrhWkIlQPedBClChINfpYqVbxk7t+p0Y17aezzMph360zFrf2q5Ky5dl1JOhZVS
A0GOE63vzsJuaH7VYOSAYr3GkQOBiW5FCFyNQIGsTYWb62ZDfOvxv1zF8uyO4AVX
i/mSvRpcI1isnPLKBuxVFS0tzQPyyNWEAZZTQx4JhYFSGyD0miOk25VoG73g++xQ
Wv37M6iT67kV7HxB5Cco6jcbKb8OGX8teZpuVrP3e2sSuMeiFxk2qiMdukTstvPK
wey+mDmWFoiodW6/1ePg/0P1BUEfCpRYDfdc1dclHC72qgz2dM3///Ycin7pfcWG
7PS/0dkMpZiXkg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:32 2025 by rpki-client