Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
File: 5YJfvufEOimDjqvk_IfXlDScDIA.mft (raw, json)
Hash identifier: IHjqarpDBlZK8T2QASoiZSHBQtnC87grZZSkbxig4YU=
Subject key identifier: 18:06:3B:A2:B5:8D:14:04:F9:D6:CF:38:EC:C5:64:D6:6C:8B:2A:64
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 0199FC8FA9159608D39C2DB0D451B22F41C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
Manifest number: 143C
Signing time: Sun 19 Oct 2025 13:01:37 +0000
Manifest this update: Sun 19 Oct 2025 13:01:37 +0000
Manifest next update: Mon 20 Oct 2025 13:01:37 +0000
Files and hashes: 1: 243IV1WXDUNyw7rjuRN5vP7IoKY.roa (hash: 0O92Hb85YHbJvLZRlVOgE6xTVbqzeKYfm5ftactSgfc=)
2: 5YJfvufEOimDjqvk_IfXlDScDIA.crl (hash: TP0bC2UBcKZX0bDoM36vaf5jSMX8zZ7I3GBgEgbdIWE=)
3: 9MYfbdEtLjtEuoq4B1OcPGIAtDU.roa (hash: zTkYPMu8h5Z/txGXaV3nKQYC/0+0sqJF536VnkSLAUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a9:15:96:08:d3:9c:2d:b0:d4:51:b2:2f:41:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Oct 19 13:01:37 2025 GMT
Not After : Oct 20 13:01:37 2025 GMT
Subject: CN=18063ba2b58d1404f9d6cf38ecc564d66c8b2a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5f:a1:9b:e8:87:a0:1c:24:f6:7d:4d:57:c3:
bc:3b:62:dc:0b:2e:8b:b2:01:35:0d:7c:38:cf:ac:
7e:6e:09:fc:ae:0f:17:a4:7c:bb:31:35:7f:c1:dd:
cf:84:8d:fe:5b:ad:06:a3:a4:74:62:e9:41:b5:7a:
74:16:45:2e:b0:c0:ee:95:d6:52:58:a2:65:35:93:
3e:32:41:3c:08:50:21:5a:8c:66:7a:6a:0f:5a:0a:
ae:df:5e:6e:9b:82:76:98:33:4e:1b:4b:5e:2d:03:
3e:38:fc:c5:22:a2:db:b6:46:02:d8:15:32:16:ea:
c8:af:12:c6:8b:b2:2a:e5:ae:73:5d:f3:da:51:19:
20:4e:34:c7:d0:e3:42:34:40:3b:05:aa:aa:2d:53:
0c:a7:19:01:4e:de:ba:96:cc:3b:60:0a:e1:b8:44:
eb:cc:0a:eb:18:51:25:ec:f5:85:14:10:9e:d3:4a:
c6:36:bc:c4:96:39:0c:71:03:93:e1:56:6b:69:fa:
b4:3a:c3:0f:fb:59:e2:24:25:67:11:d6:3e:d8:4a:
24:00:3b:6c:83:38:a0:cb:2e:0c:b6:4b:84:e0:7d:
8f:36:3d:cd:2c:bc:21:95:5b:60:78:a6:0a:27:4d:
e6:31:78:18:24:b1:9f:df:59:0c:d1:35:43:32:28:
1c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:06:3B:A2:B5:8D:14:04:F9:D6:CF:38:EC:C5:64:D6:6C:8B:2A:64
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d3:63:76:f7:66:cc:43:90:7d:5e:58:02:09:8a:17:65:68:
de:88:cd:e8:70:da:04:13:a9:8d:d0:f0:f7:83:3e:58:81:3d:
bd:5d:a3:63:17:f2:b6:b0:16:98:98:f6:ef:76:ff:f4:e7:61:
5d:18:ca:93:7e:63:4e:b6:88:97:6a:9b:81:9d:fc:f4:88:2d:
ff:38:aa:23:a3:94:fe:ea:e5:d8:1c:53:45:5d:a6:25:b0:c6:
7c:b3:da:f6:0c:12:96:8e:22:10:48:51:dc:cb:71:40:ae:b0:
87:6b:0a:e7:30:67:c5:b1:f6:cc:7c:20:e5:3f:07:10:e1:4d:
9c:0d:a5:81:eb:4f:02:e2:b4:66:fb:99:d3:53:f2:5f:4b:2a:
01:73:0d:68:ed:b5:86:2a:82:7f:f3:ca:6c:91:d0:a9:7f:fd:
36:1b:30:85:42:6c:e3:ea:5d:3f:7f:e7:ec:a2:b5:b7:ce:52:
89:74:04:f9:2d:44:b4:8d:94:11:1c:b2:24:71:40:85:a7:d3:
6d:3a:59:3c:c4:7b:77:8f:e0:43:a3:6b:e9:6d:66:ed:b7:16:
24:f9:2e:96:64:27:77:d8:d6:02:b9:50:ca:94:45:5c:23:e2:
2c:66:b5:4b:78:13:2c:81:01:16:f0:50:46:1e:78:d7:da:76:
df:e5:12:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j6kVlgjTnC2w1FGyL0HIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ODI1ZmJlZTdjNDNhMjk4MzhlYWJlNGZjODdkNzk0MzQ5
YzBjODAwHhcNMjUxMDE5MTMwMTM3WhcNMjUxMDIwMTMwMTM3WjAzMTEwLwYDVQQD
EygxODA2M2JhMmI1OGQxNDA0ZjlkNmNmMzhlY2M1NjRkNjZjOGIyYTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4V+hm+iHoBwk9n1NV8O8O2LcCy6L
sgE1DXw4z6x+bgn8rg8XpHy7MTV/wd3PhI3+W60Go6R0YulBtXp0FkUusMDuldZS
WKJlNZM+MkE8CFAhWoxmemoPWgqu315um4J2mDNOG0teLQM+OPzFIqLbtkYC2BUy
FurIrxLGi7Iq5a5zXfPaURkgTjTH0ONCNEA7BaqqLVMMpxkBTt66lsw7YArhuETr
zArrGFEl7PWFFBCe00rGNrzEljkMcQOT4VZrafq0OsMP+1niJCVnEdY+2EokADts
gzigyy4MtkuE4H2PNj3NLLwhlVtgeKYKJ03mMXgYJLGf31kM0TVDMigcWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgGO6K1jRQE+dbPOOzFZNZsiypkMB8GA1UdIwQY
MBaAFOWCX77nxDopg46r5PyH15Q0nAyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2Qt
MDQxYWIzMDJjMmY5LzEvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2QtMDQxYWIzMDJjMmY5
LzEvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdNjdvdm
zEOQfV5YAgmKF2Vo3ojN6HDaBBOpjdDw94M+WIE9vV2jYxfytrAWmJj273b/9Odh
XRjKk35jTraIl2qbgZ389Igt/ziqI6OU/url2BxTRV2mJbDGfLPa9gwSlo4iEEhR
3MtxQK6wh2sK5zBnxbH2zHwg5T8HEOFNnA2lgetPAuK0ZvuZ01PyX0sqAXMNaO21
hiqCf/PKbJHQqX/9NhswhUJs4+pdP3/n7KK1t85SiXQE+S1EtI2UERyyJHFAhafT
bTpZPMR7d4/gQ6Nr6W1m7bcWJPkulmQnd9jWArlQypRFXCPiLGa1S3gTLIEBFvBQ
Rh5419p23+USlg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:53 2025 by rpki-client