Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
File: mrL5l1qR5xN52hAOyEvUSgooDZs.mft (raw, json)
Hash identifier: 5l9vc5dEU+0Dk2wWjJxvKxsR29xMlWtUuZ7fSpV815A=
Subject key identifier: F2:54:7C:67:31:61:4F:6D:93:CE:3A:E8:3F:68:A1:1E:DD:68:82:45
Authority key identifier: 9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B
Certificate issuer: /CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b
Certificate serial: 0199FB7D0C44A831972AA1FE00D61361EE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
Manifest number: 1426
Signing time: Sun 19 Oct 2025 08:01:40 +0000
Manifest this update: Sun 19 Oct 2025 08:01:40 +0000
Manifest next update: Mon 20 Oct 2025 08:01:40 +0000
Files and hashes: 1: PbBhRej558nP-vCP2i5bq2vF02I.roa (hash: k4y0Lkz3mWSRjZ9l7iXnliVmD502EHJIpmvxtHIQNOU=)
2: mrL5l1qR5xN52hAOyEvUSgooDZs.crl (hash: QtoxZFiVU/1E0UvK428dKnL6on1K2pkRhRG2iT4Ump0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:0c:44:a8:31:97:2a:a1:fe:00:d6:13:61:ee:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab2f9975a91e71379da100ec84bd44a0a280d9b
Validity
Not Before: Oct 19 08:01:40 2025 GMT
Not After : Oct 20 08:01:40 2025 GMT
Subject: CN=f2547c6731614f6d93ce3ae83f68a11edd688245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:4b:61:34:89:67:75:3e:7b:d1:58:e0:8d:
78:c6:52:4a:f5:0b:8d:93:e8:fa:0c:6c:a3:b8:62:
db:d5:21:8d:e9:92:73:0b:9b:59:f1:2f:89:2e:11:
d8:0d:b1:ea:a7:e2:6c:ff:e4:90:40:1a:8a:f4:76:
d3:f1:36:65:56:b7:7d:2d:1c:21:5a:30:3c:50:1d:
e5:2b:93:f4:18:99:36:4b:8c:80:74:95:b6:85:60:
fe:33:5a:ac:ce:87:0e:8a:90:5c:26:49:4f:c8:65:
15:0d:18:31:79:22:6f:fc:da:f2:e1:90:10:03:54:
79:66:d5:cf:00:dc:5a:b3:43:ef:2e:12:0e:81:c1:
7f:52:c8:84:0a:c0:98:c6:a3:e2:bd:97:fd:f2:32:
9e:83:11:b4:ee:0f:e1:a2:b2:25:89:1a:50:a8:e3:
f7:17:88:bb:13:8d:fe:24:16:96:6b:25:1a:75:dd:
70:90:a5:8b:8b:ee:14:80:46:04:e7:47:e9:f1:1f:
94:a9:be:30:61:f8:9d:1e:88:50:73:56:e2:39:a4:
1c:90:5c:d0:87:cb:7c:2c:e4:95:83:2f:c7:16:ef:
a3:76:11:30:59:b1:60:ae:43:e4:bf:e8:5b:5e:f4:
b1:ea:99:09:d6:7e:11:4f:e6:34:08:6b:af:13:11:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:54:7C:67:31:61:4F:6D:93:CE:3A:E8:3F:68:A1:1E:DD:68:82:45
X509v3 Authority Key Identifier:
keyid:9A:B2:F9:97:5A:91:E7:13:79:DA:10:0E:C8:4B:D4:4A:0A:28:0D:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrL5l1qR5xN52hAOyEvUSgooDZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/07a487-26cb-4b18-bb39-15fe06fff8bc/1/mrL5l1qR5xN52hAOyEvUSgooDZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:27:5e:41:f3:c4:e9:ad:47:a2:59:69:9d:a7:c6:5a:82:70:
1d:8c:a9:69:0b:78:f5:87:cd:c8:dd:20:0d:0d:a3:a2:23:74:
bd:8b:2a:2b:21:92:17:eb:ab:a3:a8:05:fe:d2:ce:d3:2b:23:
f8:ca:68:39:14:19:86:fc:40:1c:34:c0:41:55:57:4d:da:bf:
c1:ce:04:7c:8f:9a:95:7a:e2:ec:8a:15:18:e8:25:69:0b:1c:
47:3b:9c:a9:19:5d:e2:ed:3f:24:a1:f3:f4:06:ec:bb:17:70:
65:f9:93:a9:82:ad:ec:56:38:e1:3e:a8:ae:c7:cc:eb:24:ea:
80:0b:b6:b2:a5:83:eb:8f:2a:a9:f7:de:8c:24:8f:f5:14:db:
23:c1:04:8d:38:f7:2d:fd:ee:05:9f:fb:f0:93:14:6d:20:ef:
7d:4e:5f:a8:47:c1:e2:ba:aa:91:7e:7a:6f:7c:78:35:63:fc:
53:81:3d:45:02:92:e9:69:44:b1:22:af:02:a0:21:71:cf:01:
19:b7:12:77:8a:d8:18:ea:00:26:c6:ee:ed:6a:a1:86:16:01:
91:b9:3d:5e:29:d9:1d:35:4e:e6:29:7e:61:e5:6b:b3:59:18:
28:3b:ac:13:ba:72:e6:ad:1d:c5:0d:41:88:1c:b8:89:56:70:
8b:4c:ee:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fQxEqDGXKqH+ANYTYe5BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYjJmOTk3NWE5MWU3MTM3OWRhMTAwZWM4NGJkNDRhMGEy
ODBkOWIwHhcNMjUxMDE5MDgwMTQwWhcNMjUxMDIwMDgwMTQwWjAzMTEwLwYDVQQD
EyhmMjU0N2M2NzMxNjE0ZjZkOTNjZTNhZTgzZjY4YTExZWRkNjg4MjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKRLYTSJZ3U+e9FY4I14xlJK9QuN
k+j6DGyjuGLb1SGN6ZJzC5tZ8S+JLhHYDbHqp+Js/+SQQBqK9HbT8TZlVrd9LRwh
WjA8UB3lK5P0GJk2S4yAdJW2hWD+M1qszocOipBcJklPyGUVDRgxeSJv/Nry4ZAQ
A1R5ZtXPANxas0PvLhIOgcF/UsiECsCYxqPivZf98jKegxG07g/horIliRpQqOP3
F4i7E43+JBaWayUadd1wkKWLi+4UgEYE50fp8R+Uqb4wYfidHohQc1biOaQckFzQ
h8t8LOSVgy/HFu+jdhEwWbFgrkPkv+hbXvSx6pkJ1n4RT+Y0CGuvExGAjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJUfGcxYU9tk8466D9ooR7daIJFMB8GA1UdIwQY
MBaAFJqy+ZdakecTedoQDshL1EoKKA2bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXJMNWwxcVI1eE41MmhBT3lFdlVTZ29vRFpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wN2E0ODctMjZjYi00YjE4LWJiMzkt
MTVmZTA2ZmZmOGJjLzEvbXJMNWwxcVI1eE41MmhBT3lFdlVTZ29vRFpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8wN2E0ODctMjZjYi00YjE4LWJiMzktMTVmZTA2ZmZmOGJj
LzEvbXJMNWwxcVI1eE41MmhBT3lFdlVTZ29vRFpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOideQfPE
6a1HollpnafGWoJwHYypaQt49YfNyN0gDQ2joiN0vYsqKyGSF+uro6gF/tLO0ysj
+MpoORQZhvxAHDTAQVVXTdq/wc4EfI+alXri7IoVGOglaQscRzucqRld4u0/JKHz
9AbsuxdwZfmTqYKt7FY44T6orsfM6yTqgAu2sqWD648qqffejCSP9RTbI8EEjTj3
Lf3uBZ/78JMUbSDvfU5fqEfB4rqqkX56b3x4NWP8U4E9RQKS6WlEsSKvAqAhcc8B
GbcSd4rYGOoAJsbu7WqhhhYBkbk9XinZHTVO5il+YeVrs1kYKDusE7py5q0dxQ1B
iBy4iVZwi0zuQQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:14 2025 by rpki-client