Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
File: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft (raw, json)
Hash identifier: iFXxigo3+zawssncTnQg7ZvmUjGBYbkkvqXndDV6JAs=
Subject key identifier: C5:B1:4A:3A:05:DF:05:89:82:AF:E6:75:D7:D5:1E:AF:24:72:45:E3
Authority key identifier: E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04
Certificate issuer: /CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
Certificate serial: 0199FCC6945CD9CEBC53BE5131523B36AF6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 14:01:36 +0000
Manifest this update: Sun 19 Oct 2025 14:01:36 +0000
Manifest next update: Mon 20 Oct 2025 14:01:36 +0000
Files and hashes: 1: 5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl (hash: hAe1kdUMCRu7Vsn7zwLcHYTJlFngsWy9DEIgCuRTeBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:94:5c:d9:ce:bc:53:be:51:31:52:3b:36:af:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61b9a5d6d98703c3872a1bb3f90d103685cbd04
Validity
Not Before: Oct 19 14:01:36 2025 GMT
Not After : Oct 20 14:01:36 2025 GMT
Subject: CN=c5b14a3a05df058982afe675d7d51eaf247245e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:44:e7:39:fd:3e:6b:16:71:15:d2:ee:f2:e4:
24:40:3b:ed:68:28:66:1b:96:57:47:a6:20:d2:d5:
c1:76:cf:26:d7:20:90:53:3a:b0:43:c8:4e:a8:51:
4a:17:e2:db:e3:c3:0f:ae:60:31:39:c1:9f:0f:bf:
17:8e:eb:71:6a:78:98:e2:d6:5d:03:d5:f5:4b:66:
44:17:d0:43:b4:92:8e:3f:6d:2a:68:03:08:e3:85:
12:a8:55:3d:29:30:60:3e:8e:64:dd:b1:c7:db:c0:
56:3b:52:a8:da:77:b1:a9:48:a0:f3:21:bf:31:32:
ea:c8:ba:23:6e:f6:69:82:33:e8:26:65:23:ea:02:
fd:cd:4a:94:35:01:ab:66:c5:02:c3:0e:e9:14:89:
c5:28:02:0d:7b:b1:b8:58:10:c5:9b:d5:79:01:02:
9d:ae:9d:56:20:8b:01:0c:bc:c7:4b:d2:12:21:4e:
e4:c2:bc:48:4c:77:e0:36:93:bd:31:68:79:38:11:
58:4e:4f:62:c5:47:0d:3e:9d:7e:9f:4e:23:da:3d:
15:4a:57:fc:84:5a:d4:8e:3a:c1:3b:9f:d6:a1:73:
c2:ca:ef:39:39:35:bc:9c:66:d8:99:83:62:8e:12:
08:28:2a:34:fe:50:ef:21:13:cb:ab:a8:92:0b:ac:
f3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B1:4A:3A:05:DF:05:89:82:AF:E6:75:D7:D5:1E:AF:24:72:45:E3
X509v3 Authority Key Identifier:
keyid:E6:1B:9A:5D:6D:98:70:3C:38:72:A1:BB:3F:90:D1:03:68:5C:BD:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5huaXW2YcDw4cqG7P5DRA2hcvQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cb879b-9c96-429a-9bb3-e18d998c64ef/1/5huaXW2YcDw4cqG7P5DRA2hcvQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:0f:9f:90:01:b6:43:10:2b:60:e9:eb:08:33:94:5a:f4:f7:
3e:9f:b4:4b:71:3a:ed:b5:7e:52:3b:4e:b2:81:6a:68:ae:e2:
b9:d2:6f:9f:10:be:f7:b6:a1:82:cc:27:2c:31:51:c0:2a:9a:
f1:6e:f4:49:64:77:45:fd:cf:e0:65:0c:c3:81:b2:83:4c:47:
d4:01:e2:fe:aa:75:e3:fe:1e:5c:61:8e:ae:d2:7c:cc:12:2b:
68:fb:4c:36:9e:1d:cd:fe:45:bd:93:0a:ee:5e:8a:fa:fa:ed:
c1:f9:92:43:cc:e9:36:a5:5c:c4:41:45:d6:9f:b1:e9:11:a6:
bf:5f:25:e7:e7:19:85:d0:38:29:aa:a4:cd:88:25:81:8f:b7:
45:7f:43:76:1d:f9:58:17:62:a8:29:55:cd:e8:db:4d:61:75:
f2:ca:cc:8b:01:5d:af:30:86:ee:26:22:35:52:0d:2b:22:84:
00:80:4e:85:cb:30:cb:7a:d9:4d:62:c5:b6:ce:a3:df:64:16:
ab:fa:39:9d:57:56:02:17:e6:65:c9:70:9f:aa:2f:f8:79:63:
f6:2d:60:8d:01:5e:ec:9a:05:5d:ff:83:c8:ab:98:e6:80:95:
78:33:fb:6a:3a:8e:ac:89:e7:cd:e8:91:0e:c6:96:d4:3d:14:
c0:46:2f:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xpRc2c68U75RMVI7Nq9tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MWI5YTVkNmQ5ODcwM2MzODcyYTFiYjNmOTBkMTAzNjg1
Y2JkMDQwHhcNMjUxMDE5MTQwMTM2WhcNMjUxMDIwMTQwMTM2WjAzMTEwLwYDVQQD
EyhjNWIxNGEzYTA1ZGYwNTg5ODJhZmU2NzVkN2Q1MWVhZjI0NzI0NWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnETnOf0+axZxFdLu8uQkQDvtaChm
G5ZXR6Yg0tXBds8m1yCQUzqwQ8hOqFFKF+Lb48MPrmAxOcGfD78XjutxaniY4tZd
A9X1S2ZEF9BDtJKOP20qaAMI44USqFU9KTBgPo5k3bHH28BWO1Ko2nexqUig8yG/
MTLqyLojbvZpgjPoJmUj6gL9zUqUNQGrZsUCww7pFInFKAINe7G4WBDFm9V5AQKd
rp1WIIsBDLzHS9ISIU7kwrxITHfgNpO9MWh5OBFYTk9ixUcNPp1+n04j2j0VSlf8
hFrUjjrBO5/WoXPCyu85OTW8nGbYmYNijhIIKCo0/lDvIRPLq6iSC6zzDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWxSjoF3wWJgq/mddfVHq8kckXjMB8GA1UdIwQY
MBaAFOYbml1tmHA8OHKhuz+Q0QNoXL0EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWh1YVhXMlljRHc0Y3FHN1A1RFJBMmhjdlFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYjg3OWItOWM5Ni00MjlhLTliYjMt
ZTE4ZDk5OGM2NGVmLzEvNWh1YVhXMlljRHc0Y3FHN1A1RFJBMmhjdlFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jYjg3OWItOWM5Ni00MjlhLTliYjMtZTE4ZDk5OGM2NGVm
LzEvNWh1YVhXMlljRHc0Y3FHN1A1RFJBMmhjdlFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAA+fkAG2
QxArYOnrCDOUWvT3Pp+0S3E67bV+UjtOsoFqaK7iudJvnxC+97ahgswnLDFRwCqa
8W70SWR3Rf3P4GUMw4Gyg0xH1AHi/qp14/4eXGGOrtJ8zBIraPtMNp4dzf5FvZMK
7l6K+vrtwfmSQ8zpNqVcxEFF1p+x6RGmv18l5+cZhdA4KaqkzYglgY+3RX9Ddh35
WBdiqClVzejbTWF18srMiwFdrzCG7iYiNVINKyKEAIBOhcswy3rZTWLFts6j32QW
q/o5nVdWAhfmZclwn6ov+Hlj9i1gjQFe7JoFXf+DyKuY5oCVeDP7ajqOrInnzeiR
DsaW1D0UwEYvkA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:59:36 2025 by rpki-client