Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
File: 5dJyqNwEH1rcer0A1k0_MsIE2rI.mft (raw, json)
Hash identifier: sO0c6aObc+D4SXFTjNTL7nU6iCJSsEZXUds7HvgOWp0=
Subject key identifier: 43:2C:8B:11:92:8A:86:B3:8E:97:90:CE:74:72:E2:BF:BC:9D:E4:52
Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
Certificate issuer: /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Certificate serial: 0199FC8F2AEAEC1CE6FE995F41288C447496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
Manifest number: 0D9C
Signing time: Sun 19 Oct 2025 13:01:04 +0000
Manifest this update: Sun 19 Oct 2025 13:01:04 +0000
Manifest next update: Mon 20 Oct 2025 13:01:04 +0000
Files and hashes: 1: 5dJyqNwEH1rcer0A1k0_MsIE2rI.crl (hash: Gtgc6ovCzLd1QxyFcmYAznJ0T2aAORl6gz1WR+uQu/0=)
2: BSxB6YJq2jQPtYNgk4RjDz0LLwo.roa (hash: 0H0jQmEDdYcS0G88hDG7z0fv29sDbdsIXn2r0lKdjdI=)
3: DOxLN4SU2YKVe0VPHjqcaGZlpe0.roa (hash: SrolEIibncQUXL/HWDj/0Ei9nEoCbSOrTFYN2mtGMDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2a:ea:ec:1c:e6:fe:99:5f:41:28:8c:44:74:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Validity
Not Before: Oct 19 13:01:04 2025 GMT
Not After : Oct 20 13:01:04 2025 GMT
Subject: CN=432c8b11928a86b38e9790ce7472e2bfbc9de452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a2:86:88:7f:e4:f4:3d:50:ab:96:95:8f:2e:
19:63:5c:53:26:05:bb:71:bc:39:df:b3:a3:fa:65:
67:d4:ad:d0:4e:f7:6a:a1:bc:7f:b7:04:f9:3e:ce:
ef:0f:44:60:c3:de:5f:0b:63:01:5f:16:e1:c2:e8:
52:4c:b9:5e:98:af:fa:99:be:0a:5c:39:4d:fe:fe:
a1:d7:32:65:e8:e9:30:d4:04:ad:9e:69:72:19:58:
eb:c0:37:f6:d7:62:fe:8e:99:50:05:37:a2:5e:8f:
40:10:2f:07:02:8a:f7:87:9b:59:a7:30:91:4a:ef:
ef:7f:fa:64:57:82:82:21:12:83:85:73:c7:49:a7:
1b:a1:b5:1d:ff:90:22:c0:fb:9f:70:d8:d8:ac:f5:
8b:9d:ae:99:4f:86:15:f7:30:e7:ba:63:8d:a9:28:
e9:0c:b5:61:c4:f7:8a:8b:8a:78:25:be:cf:1b:ba:
da:f7:6d:c4:3e:1b:19:5b:d8:7e:00:14:13:df:07:
d3:d9:ca:52:56:a0:3a:bd:93:e6:b5:cb:70:fa:81:
14:f4:aa:66:f0:33:28:65:9a:5e:f2:00:0b:dd:d3:
b7:c1:47:a9:66:f1:37:61:01:d7:4a:3e:7a:21:b7:
a0:c9:ed:b0:22:42:2b:43:cd:d6:37:06:79:dd:46:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2C:8B:11:92:8A:86:B3:8E:97:90:CE:74:72:E2:BF:BC:9D:E4:52
X509v3 Authority Key Identifier:
keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c7:98:07:56:fe:08:fc:9f:58:a3:37:bd:c3:48:52:8d:c1:
31:f1:4c:5e:01:cf:d6:7b:43:6e:b0:b7:12:70:45:bb:7b:87:
84:67:54:27:cb:12:37:ba:20:fb:e0:48:06:92:35:77:b0:52:
6c:d0:71:36:94:20:11:cc:88:70:67:4a:d9:01:f0:35:e4:05:
7d:c3:b7:ed:4a:d1:76:f8:3d:f2:81:28:22:a9:e8:47:29:73:
ff:38:4d:9c:05:35:25:00:12:4c:09:77:af:ef:09:af:ed:12:
d7:43:bd:61:8a:61:a4:24:17:e1:c6:21:e5:06:f9:c7:e5:77:
6a:29:17:91:3c:a0:dd:4b:08:dc:69:92:54:a6:21:e8:60:a8:
60:1d:53:df:ac:58:c3:46:fd:27:da:7e:d6:ba:b0:79:43:dd:
53:b1:2d:9b:12:fc:38:81:da:ff:04:30:58:a7:2d:53:ec:bf:
22:8c:f2:f0:a5:5c:b3:01:22:ee:b4:72:f3:5e:d5:ac:ef:34:
71:24:f0:b2:12:8a:b3:51:1f:cb:76:e7:ed:8a:41:ef:6f:dc:
a7:46:99:52:d1:62:8e:56:1c:ae:c8:94:6a:54:0f:61:be:21:
1c:2e:08:21:f1:84:a2:03:32:be:bf:2a:68:f4:7b:c1:11:75:
d5:8f:23:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jyrq7Bzm/plfQSiMRHSWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZDI3MmE4ZGMwNDFmNWFkYzdhYmQwMGQ2NGQzZjMyYzIw
NGRhYjIwHhcNMjUxMDE5MTMwMTA0WhcNMjUxMDIwMTMwMTA0WjAzMTEwLwYDVQQD
Eyg0MzJjOGIxMTkyOGE4NmIzOGU5NzkwY2U3NDcyZTJiZmJjOWRlNDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qKGiH/k9D1Qq5aVjy4ZY1xTJgW7
cbw537Oj+mVn1K3QTvdqobx/twT5Ps7vD0Rgw95fC2MBXxbhwuhSTLlemK/6mb4K
XDlN/v6h1zJl6Okw1AStnmlyGVjrwDf212L+jplQBTeiXo9AEC8HAor3h5tZpzCR
Su/vf/pkV4KCIRKDhXPHSacbobUd/5AiwPufcNjYrPWLna6ZT4YV9zDnumONqSjp
DLVhxPeKi4p4Jb7PG7ra923EPhsZW9h+ABQT3wfT2cpSVqA6vZPmtctw+oEU9Kpm
8DMoZZpe8gAL3dO3wUepZvE3YQHXSj56Ibegye2wIkIrQ83WNwZ53UYB3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMsixGSioazjpeQznRy4r+8neRSMB8GA1UdIwQY
MBaAFOXScqjcBB9a3Hq9ANZNPzLCBNqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWRKeXFOd0VIMXJjZXIwQTFrMF9Nc0lFMnJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80MTdjMWQtYTJlNC00NGE2LWFmMjQt
ZDRmNTAyNzYwMGFlLzEvNWRKeXFOd0VIMXJjZXIwQTFrMF9Nc0lFMnJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80MTdjMWQtYTJlNC00NGE2LWFmMjQtZDRmNTAyNzYwMGFl
LzEvNWRKeXFOd0VIMXJjZXIwQTFrMF9Nc0lFMnJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQseYB1b+
CPyfWKM3vcNIUo3BMfFMXgHP1ntDbrC3EnBFu3uHhGdUJ8sSN7og++BIBpI1d7BS
bNBxNpQgEcyIcGdK2QHwNeQFfcO37UrRdvg98oEoIqnoRylz/zhNnAU1JQASTAl3
r+8Jr+0S10O9YYphpCQX4cYh5Qb5x+V3aikXkTyg3UsI3GmSVKYh6GCoYB1T36xY
w0b9J9p+1rqweUPdU7EtmxL8OIHa/wQwWKctU+y/Iozy8KVcswEi7rRy817VrO80
cSTwshKKs1Efy3bn7YpB72/cp0aZUtFijlYcrsiUalQPYb4hHC4IIfGEogMyvr8q
aPR7wRF11Y8jpw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:59:56 2025 by rpki-client