Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
File: 5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json)
Hash identifier: p5ziXDQnXtAlihXArYu+XlKtm1KsL6M3BYsXDSjEeKY=
Subject key identifier: 07:1F:9A:4E:FD:7F:F1:E6:04:1E:B1:12:CE:27:73:46:6E:A2:1C:BD
Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
Certificate issuer: /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Certificate serial: 0199FBEB3A9AFEE3BF9694F9426FA3D38A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:02:01 +0000
Manifest this update: Sun 19 Oct 2025 10:02:01 +0000
Manifest next update: Mon 20 Oct 2025 10:02:01 +0000
Files and hashes: 1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: HlHUCcCDGQdEsi6GPJAFvBe6+2WhsKJWEAJbDhi/5KY=)
2: LeXJLi-TLu5NLRkSo2hJnEK9QDQ.roa (hash: 1KfkyTUePDTOuHMENqew1KmyeJrolI/GoAGN74JhXHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:3a:9a:fe:e3:bf:96:94:f9:42:6f:a3:d3:8a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Validity
Not Before: Oct 19 10:02:01 2025 GMT
Not After : Oct 20 10:02:01 2025 GMT
Subject: CN=071f9a4efd7ff1e6041eb112ce2773466ea21cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b4:fa:9b:80:00:33:9b:0a:a0:83:b3:b0:fd:
ae:f6:82:db:b1:c7:57:42:d7:8e:65:be:d0:bb:ea:
4a:9e:55:5e:63:81:68:83:f6:f0:7a:ff:02:fa:4f:
a0:31:4c:ae:29:8c:37:64:3d:b5:9d:99:45:48:e6:
d5:c3:cd:3d:f4:32:88:bd:87:eb:7c:7a:e1:7d:76:
bd:9e:41:31:72:9c:05:cd:e4:9f:2f:19:e9:1b:08:
27:db:67:1d:13:da:66:28:ab:20:47:3b:67:c5:56:
71:48:5b:49:ae:7e:f4:d2:68:30:0c:ce:bc:d6:96:
c3:79:8c:32:d9:f9:84:1b:a4:61:8c:e1:b5:38:4a:
f2:90:db:e4:68:f8:91:e7:db:b0:1d:18:43:36:36:
8e:b0:ee:34:34:c3:0e:c4:7a:0c:fa:83:36:d2:28:
17:90:99:09:56:98:c6:36:01:12:2f:d1:13:b2:4d:
8e:7b:be:9b:35:04:74:a9:fc:da:bf:a4:90:44:67:
aa:15:d7:30:d9:19:18:1e:e4:59:c7:f1:a5:2d:68:
84:2a:42:44:94:d2:ca:f7:d3:d0:cc:96:7a:ce:e2:
19:9e:3e:3e:ca:43:d5:6d:a5:26:56:6f:ab:2f:dc:
bf:b0:63:ac:68:86:22:99:a4:1f:09:93:f7:14:76:
2c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1F:9A:4E:FD:7F:F1:E6:04:1E:B1:12:CE:27:73:46:6E:A2:1C:BD
X509v3 Authority Key Identifier:
keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:87:9e:27:98:b8:36:f0:a9:53:7c:2c:94:8b:d2:35:a5:9a:
25:e8:a8:59:c8:a8:4b:bc:29:d2:68:84:23:73:12:16:39:a4:
8e:f8:b3:4e:73:f9:99:a3:0f:ce:5b:7a:c2:26:26:6c:ad:4c:
ab:28:c7:26:3e:2a:2b:5c:33:3c:32:60:a7:8d:ed:f7:0a:be:
47:12:68:3f:87:8b:5b:f6:7a:5a:8c:27:c8:da:6c:67:5b:ab:
b2:f3:b6:9e:94:ca:2a:55:a5:30:25:51:80:28:51:39:eb:d9:
2e:b5:b8:19:99:38:51:33:7b:c9:c9:62:a1:ed:56:5f:8d:0d:
49:4a:be:6e:0b:c9:e1:28:fc:e8:6f:7f:d3:93:c3:16:9e:ad:
03:d0:3a:84:67:f1:4f:cc:14:ec:f3:35:6d:6c:fc:ce:5e:21:
20:89:a0:75:38:a6:d1:af:f8:f8:f5:d8:7c:e9:39:11:51:cb:
91:19:70:da:f6:35:f7:b5:f1:53:bd:17:c3:3f:cf:6d:85:47:
9c:92:b3:10:cd:02:b5:9f:6e:b6:ce:94:4a:b4:3f:9d:5b:42:
e5:c6:16:c4:21:ae:5b:b9:36:ce:9b:8a:6c:4e:9b:8a:17:9b:
70:8f:23:06:82:48:97:f3:d8:c0:83:1d:21:60:6a:1b:f8:27:
a9:6c:7a:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76zqa/uO/lpT5Qm+j04pCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NDRlMjY2ZDRlYjljYzdkZWQyOTJjMTJiMDZiMWNhN2Jj
ZWE3NzgwHhcNMjUxMDE5MTAwMjAxWhcNMjUxMDIwMTAwMjAxWjAzMTEwLwYDVQQD
EygwNzFmOWE0ZWZkN2ZmMWU2MDQxZWIxMTJjZTI3NzM0NjZlYTIxY2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrT6m4AAM5sKoIOzsP2u9oLbscdX
QteOZb7Qu+pKnlVeY4Fog/bwev8C+k+gMUyuKYw3ZD21nZlFSObVw8099DKIvYfr
fHrhfXa9nkExcpwFzeSfLxnpGwgn22cdE9pmKKsgRztnxVZxSFtJrn700mgwDM68
1pbDeYwy2fmEG6RhjOG1OErykNvkaPiR59uwHRhDNjaOsO40NMMOxHoM+oM20igX
kJkJVpjGNgESL9ETsk2Oe76bNQR0qfzav6SQRGeqFdcw2RkYHuRZx/GlLWiEKkJE
lNLK99PQzJZ6zuIZnj4+ykPVbaUmVm+rL9y/sGOsaIYimaQfCZP3FHYsjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcfmk79f/HmBB6xEs4nc0Zuohy9MB8GA1UdIwQY
MBaAFOVE4mbU65zH3tKSwSsGscp7zqd4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iZmY3OTktOWUzMi00M2JlLTg1Y2Qt
ODI0NzYwNzE0ZGZiLzEvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9iZmY3OTktOWUzMi00M2JlLTg1Y2QtODI0NzYwNzE0ZGZi
LzEvNVVUaVp0VHJuTWZlMHBMQkt3YXh5bnZPcDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIeeJ5i4
NvCpU3wslIvSNaWaJeioWcioS7wp0miEI3MSFjmkjvizTnP5maMPzlt6wiYmbK1M
qyjHJj4qK1wzPDJgp43t9wq+RxJoP4eLW/Z6WownyNpsZ1ursvO2npTKKlWlMCVR
gChROevZLrW4GZk4UTN7yclioe1WX40NSUq+bgvJ4Sj86G9/05PDFp6tA9A6hGfx
T8wU7PM1bWz8zl4hIImgdTim0a/4+PXYfOk5EVHLkRlw2vY197XxU70Xwz/PbYVH
nJKzEM0CtZ9uts6USrQ/nVtC5cYWxCGuW7k2zpuKbE6bihebcI8jBoJIl/PYwIMd
IWBqG/gnqWx6DQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:45 2025 by rpki-client