
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
File: 5r62dxRfZMr7zXE26B81onSujow.mft (raw, json)
Hash identifier: skfuMLvWk8BSBAkam8o+cJjAoB142Iiorxw0PYcf8UY=
Subject key identifier: 9D:32:8C:45:5C:67:CB:F4:B0:17:5B:80:20:D0:3E:10:95:0F:2B:97
Authority key identifier: E6:BE:B6:77:14:5F:64:CA:FB:CD:71:36:E8:1F:35:A2:74:AE:8E:8C
Certificate issuer: /CN=e6beb677145f64cafbcd7136e81f35a274ae8e8c
Certificate serial: 0199FB0EC012FF2011A3441880FDE3832F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
Manifest number: 25
Signing time: Sun 19 Oct 2025 06:01:11 +0000
Manifest this update: Sun 19 Oct 2025 06:01:11 +0000
Manifest next update: Mon 20 Oct 2025 06:01:11 +0000
Files and hashes: 1: 5r62dxRfZMr7zXE26B81onSujow.crl (hash: pIxXRCXppKlGfO3xKKOUi4R5ikHWeEsASG3hdMmzH7U=)
2: _4Y--84lEsBn20PgX6M05x1F5_A.roa (hash: q0rbhIJFPrPOpvAXOzX/aS9tNPbzDnyOozHI6yKGmWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:c0:12:ff:20:11:a3:44:18:80:fd:e3:83:2f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6beb677145f64cafbcd7136e81f35a274ae8e8c
Validity
Not Before: Oct 19 06:01:11 2025 GMT
Not After : Oct 20 06:01:11 2025 GMT
Subject: CN=9d328c455c67cbf4b0175b8020d03e10950f2b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:f8:17:4c:54:38:51:87:b9:50:b1:cd:d1:
b6:82:c7:5e:5b:37:73:6e:b4:b4:cb:0d:72:61:cd:
d1:91:fe:48:c0:06:66:90:ae:67:3e:35:72:d5:75:
00:fc:cf:a7:1d:68:31:7b:b1:56:2e:ba:ed:7c:dd:
d5:65:a6:a1:d1:92:d1:f1:19:87:b5:fe:63:c0:d6:
7a:19:28:f6:80:8b:d8:ad:a9:14:80:04:10:7f:21:
32:06:b4:c8:97:5a:5b:14:bb:13:50:3b:df:3c:45:
f8:21:dc:ea:af:1e:97:8b:a4:26:72:07:c4:e6:a7:
d4:6f:9f:f9:f2:62:79:c6:2e:ca:a8:51:6d:05:36:
74:96:ca:6a:fb:a5:c3:20:c5:e5:02:3a:c3:c2:71:
bb:c0:71:d1:2f:cb:6c:33:e7:b3:56:2a:03:b8:24:
f9:f9:56:a5:5e:5f:ef:34:ff:fe:52:1b:66:9a:e2:
44:54:d3:46:18:96:9d:82:09:ad:e3:9f:11:e3:c4:
cd:f3:4e:7b:d6:32:59:98:6f:2e:f7:fd:22:a6:81:
ce:48:41:5a:5b:6c:5a:b5:21:80:d5:c0:6b:f3:4a:
3d:40:67:a4:b4:74:b3:09:bb:de:aa:10:96:b9:99:
e9:84:3e:39:26:49:53:6e:ee:19:ca:be:90:56:7a:
4a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:32:8C:45:5C:67:CB:F4:B0:17:5B:80:20:D0:3E:10:95:0F:2B:97
X509v3 Authority Key Identifier:
keyid:E6:BE:B6:77:14:5F:64:CA:FB:CD:71:36:E8:1F:35:A2:74:AE:8E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:72:c9:47:36:87:a1:bc:69:83:54:cf:10:8f:12:d7:70:ae:
7f:03:e0:d2:4e:6e:42:13:1a:b4:8e:5d:37:aa:91:7d:91:18:
bb:1d:8d:3d:17:71:26:ac:d8:82:c8:48:df:10:9c:be:35:79:
94:26:b4:56:35:1a:2c:08:c2:ca:de:13:26:97:76:46:2a:fa:
66:5a:43:39:47:7d:7f:ec:78:e4:03:28:ed:46:62:bb:5c:bd:
fa:a4:71:ad:83:60:8f:4c:17:b5:01:39:f3:74:04:58:14:bc:
40:ad:00:94:ef:0a:ad:2d:3a:8c:13:2a:2b:88:be:03:a1:60:
0b:96:24:35:7a:dc:3b:2c:d5:e8:be:14:a9:f2:0e:82:b3:00:
51:dd:44:49:1a:20:fa:eb:ed:96:40:d2:50:44:0a:af:70:aa:
56:0a:d2:da:5e:9f:53:94:12:10:03:e3:d3:cd:45:15:af:22:
bd:62:04:42:43:0c:ad:b6:dc:56:ea:4d:63:cf:cb:ef:3a:a2:
c5:e8:f8:c9:1c:cb:5d:ea:0e:ab:df:81:68:20:26:42:ea:41:
b4:1f:04:ee:34:0f:7a:c4:7b:4d:df:db:0a:fe:ed:28:28:18:
29:96:a4:9f:a2:f6:d8:42:49:a2:d3:2f:55:87:6c:d4:70:fc:
a0:9a:29:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DsAS/yARo0QYgP3jgy8HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YmViNjc3MTQ1ZjY0Y2FmYmNkNzEzNmU4MWYzNWEyNzRh
ZThlOGMwHhcNMjUxMDE5MDYwMTExWhcNMjUxMDIwMDYwMTExWjAzMTEwLwYDVQQD
Eyg5ZDMyOGM0NTVjNjdjYmY0YjAxNzViODAyMGQwM2UxMDk1MGYyYjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWb4F0xUOFGHuVCxzdG2gsdeWzdz
brS0yw1yYc3Rkf5IwAZmkK5nPjVy1XUA/M+nHWgxe7FWLrrtfN3VZaah0ZLR8RmH
tf5jwNZ6GSj2gIvYrakUgAQQfyEyBrTIl1pbFLsTUDvfPEX4Idzqrx6Xi6QmcgfE
5qfUb5/58mJ5xi7KqFFtBTZ0lspq+6XDIMXlAjrDwnG7wHHRL8tsM+ezVioDuCT5
+ValXl/vNP/+UhtmmuJEVNNGGJadggmt458R48TN80571jJZmG8u9/0ipoHOSEFa
W2xatSGA1cBr80o9QGektHSzCbveqhCWuZnphD45JklTbu4Zyr6QVnpKbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0yjEVcZ8v0sBdbgCDQPhCVDyuXMB8GA1UdIwQY
MBaAFOa+tncUX2TK+81xNugfNaJ0ro6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXI2MmR4UmZaTXI3elhFMjZCODFvblN1am93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yYjI2NGQtMWQwYy00NGM1LWFlZTct
ZjEzMmFlYTZmN2EyLzEvNXI2MmR4UmZaTXI3elhFMjZCODFvblN1am93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8yYjI2NGQtMWQwYy00NGM1LWFlZTctZjEzMmFlYTZmN2Ey
LzEvNXI2MmR4UmZaTXI3elhFMjZCODFvblN1am93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHLJRzaH
obxpg1TPEI8S13CufwPg0k5uQhMatI5dN6qRfZEYux2NPRdxJqzYgshI3xCcvjV5
lCa0VjUaLAjCyt4TJpd2Rir6ZlpDOUd9f+x45AMo7UZiu1y9+qRxrYNgj0wXtQE5
83QEWBS8QK0AlO8KrS06jBMqK4i+A6FgC5YkNXrcOyzV6L4UqfIOgrMAUd1ESRog
+uvtlkDSUEQKr3CqVgrS2l6fU5QSEAPj081FFa8ivWIEQkMMrbbcVupNY8/L7zqi
xej4yRzLXeoOq9+BaCAmQupBtB8E7jQPesR7Td/bCv7tKCgYKZakn6L22EJJotMv
VYds1HD8oJopkA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:03 2025 by rpki-client