Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
File: b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft (raw, json)
Hash identifier: s/J3ZbJKZhH+y6Jk+2WHGueovUXVLyJ/j79AJtCff3A=
Subject key identifier: 7A:65:31:F5:85:EC:D2:96:60:CD:55:51:D8:93:B2:ED:F8:DE:E2:2B
Authority key identifier: 6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
Certificate issuer: /CN=6f930698733bad33c081719c7b68bd19723a5a77
Certificate serial: 0199FCC696F9D3B4384BA0CC9C37ED378C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
Manifest number: 09C5
Signing time: Sun 19 Oct 2025 14:01:37 +0000
Manifest this update: Sun 19 Oct 2025 14:01:37 +0000
Manifest next update: Mon 20 Oct 2025 14:01:37 +0000
Files and hashes: 1: b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl (hash: XQ5FNyAKUpjePzS9oL5O55MFJI0nSO2/EXA012Lf66U=)
2: eC2MphkCG1tQ_l_Eef-rvB7MGJg.roa (hash: oipT2bxgVMIIjaLCh5p0XGkacdhDbfRQ9fsmYqX5jVM=)
3: qgdTTthzOjRLa7QV75nMnKkp5w4.roa (hash: F0+rz8Lam1NmL6Yk8x5fjqey+/+WuThLB5gD8xHNDd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:96:f9:d3:b4:38:4b:a0:cc:9c:37:ed:37:8c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f930698733bad33c081719c7b68bd19723a5a77
Validity
Not Before: Oct 19 14:01:37 2025 GMT
Not After : Oct 20 14:01:37 2025 GMT
Subject: CN=7a6531f585ecd29660cd5551d893b2edf8dee22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:43:51:45:c8:50:10:a2:c4:f0:08:74:c8:
9c:3f:df:46:57:7d:bf:8d:bd:b5:92:f4:8e:9d:41:
85:70:7c:38:60:8d:75:fb:1c:55:dc:6d:30:c7:e2:
2d:bb:5f:1a:f9:6b:ab:63:6d:a8:6a:64:41:b4:33:
b4:89:5d:4a:d8:95:38:a8:b8:a0:9e:85:2f:1b:b1:
63:b5:db:7a:cd:ac:5e:c6:d4:ec:fd:a2:79:cc:2b:
9d:48:87:70:20:89:46:a2:ca:9b:7f:00:bf:80:37:
c4:e0:e2:c1:39:44:75:5d:38:44:20:99:3a:8a:7b:
fa:89:45:65:6e:fc:0c:a5:ec:33:ce:99:fb:cd:3a:
2b:31:b1:a5:d5:f2:78:53:77:0d:88:7f:53:a8:8a:
19:3e:5b:ed:7b:1e:e0:13:a5:54:6c:a7:9e:d9:bf:
fd:0d:cc:27:13:4c:cb:5c:a5:9c:59:dd:1b:ca:01:
54:a2:75:49:8e:92:1d:6e:63:e2:7e:06:13:9d:ed:
a5:a6:6a:9f:9d:b0:42:42:b3:b9:c7:bf:06:18:72:
ab:82:7e:04:04:05:ed:ce:24:a6:aa:ca:70:3f:82:
49:6d:71:27:f0:c0:f2:53:fb:ec:ca:96:8d:67:93:
53:fc:a7:9e:98:45:7f:13:5b:2e:1c:33:7a:fe:17:
b5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:65:31:F5:85:EC:D2:96:60:CD:55:51:D8:93:B2:ED:F8:DE:E2:2B
X509v3 Authority Key Identifier:
keyid:6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f8:24:75:5c:79:23:59:9f:f0:74:23:3a:bf:c6:3d:30:f1:
6f:1f:34:ae:f4:93:d2:92:42:9b:b7:a5:a9:9d:ae:f8:4e:44:
d7:48:d3:df:e0:51:bf:e6:dc:88:88:4f:11:7c:d4:be:32:a7:
5f:e3:1b:40:c2:19:df:90:e5:6c:aa:b1:89:59:86:80:c1:56:
51:29:26:2f:bb:db:8d:4a:34:c4:42:b8:fa:55:6e:0c:e7:75:
17:70:fa:9c:69:30:6e:3b:5b:0f:18:67:e7:a4:cb:ac:d4:a9:
2a:84:40:b9:0f:64:f1:77:b5:1e:8c:6d:aa:5e:4f:45:42:b5:
80:a1:9e:bb:2c:a9:3a:bd:5e:b7:63:3a:40:69:2c:04:3e:66:
1c:1c:b1:6f:af:28:31:6b:3b:e5:75:75:39:a1:bc:d9:a9:b5:
0d:98:d9:28:83:68:7d:1d:ad:80:00:84:84:4b:9d:15:98:1f:
7b:09:5a:a7:57:ae:16:96:96:a9:1a:f2:c8:ac:50:9a:3e:ae:
11:81:f7:c4:bd:df:f0:03:c6:24:cd:35:09:e0:6e:3d:04:c7:
78:8e:08:bc:8b:d3:36:93:40:84:fc:dd:1d:72:29:ed:9c:d9:
9f:3a:7e:d3:fe:3a:68:f0:91:dd:7d:7a:e5:67:8b:8d:dd:1c:
0d:81:81:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xpb507Q4S6DMnDftN4xxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOTMwNjk4NzMzYmFkMzNjMDgxNzE5YzdiNjhiZDE5NzIz
YTVhNzcwHhcNMjUxMDE5MTQwMTM3WhcNMjUxMDIwMTQwMTM3WjAzMTEwLwYDVQQD
Eyg3YTY1MzFmNTg1ZWNkMjk2NjBjZDU1NTFkODkzYjJlZGY4ZGVlMjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt09DUUXIUBCixPAIdMicP99GV32/
jb21kvSOnUGFcHw4YI11+xxV3G0wx+Itu18a+WurY22oamRBtDO0iV1K2JU4qLig
noUvG7Fjtdt6zaxextTs/aJ5zCudSIdwIIlGosqbfwC/gDfE4OLBOUR1XThEIJk6
inv6iUVlbvwMpewzzpn7zTorMbGl1fJ4U3cNiH9TqIoZPlvtex7gE6VUbKee2b/9
DcwnE0zLXKWcWd0bygFUonVJjpIdbmPifgYTne2lpmqfnbBCQrO5x78GGHKrgn4E
BAXtziSmqspwP4JJbXEn8MDyU/vsypaNZ5NT/KeemEV/E1suHDN6/he16QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHplMfWF7NKWYM1VUdiTsu343uIrMB8GA1UdIwQY
MBaAFG+TBphzO60zwIFxnHtovRlyOlp3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS81ZTYxZjctODM2My00YWNjLWI4YTQt
ZmUxMDNmZDM4NTdjLzEvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS81ZTYxZjctODM2My00YWNjLWI4YTQtZmUxMDNmZDM4NTdj
LzEvYjVNR21ITTdyVFBBZ1hHY2UyaTlHWEk2V25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvgkdVx5
I1mf8HQjOr/GPTDxbx80rvST0pJCm7elqZ2u+E5E10jT3+BRv+bciIhPEXzUvjKn
X+MbQMIZ35DlbKqxiVmGgMFWUSkmL7vbjUo0xEK4+lVuDOd1F3D6nGkwbjtbDxhn
56TLrNSpKoRAuQ9k8Xe1Hoxtql5PRUK1gKGeuyypOr1et2M6QGksBD5mHByxb68o
MWs75XV1OaG82am1DZjZKINofR2tgACEhEudFZgfewlap1euFpaWqRryyKxQmj6u
EYH3xL3f8APGJM01CeBuPQTHeI4IvIvTNpNAhPzdHXIp7ZzZnzp+0/46aPCR3X16
5WeLjd0cDYGB8w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:10 2025 by rpki-client