Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
File: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft (raw, json)
Hash identifier: /sPf7Vc+252BhBKkVTmAeGhBShMVv2rtVp46S1mY/28=
Subject key identifier: CC:99:A8:5E:AB:7F:6B:4C:88:D4:0F:B5:FA:BD:98:16:DF:07:C5:29
Authority key identifier: E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
Certificate issuer: /CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Certificate serial: 0199FBEB4ABAC793849183D312408BA193F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
Manifest number: 04C6
Signing time: Sun 19 Oct 2025 10:02:05 +0000
Manifest this update: Sun 19 Oct 2025 10:02:05 +0000
Manifest next update: Mon 20 Oct 2025 10:02:05 +0000
Files and hashes: 1: 5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl (hash: Y9sKVFYydldQ9Le6YfGzkJINlVQ2uFP0OehF872ffYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4a:ba:c7:93:84:91:83:d3:12:40:8b:a1:93:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e418cddc39d347563c6dc1e5ec5e59621e40e4d9
Validity
Not Before: Oct 19 10:02:05 2025 GMT
Not After : Oct 20 10:02:05 2025 GMT
Subject: CN=cc99a85eab7f6b4c88d40fb5fabd9816df07c529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:26:a8:3d:fc:f1:b7:90:1c:e8:c2:49:f0:0f:
d5:fa:90:f6:b5:42:78:e9:34:2e:e0:b4:4c:b1:59:
04:66:79:fd:b0:15:3b:a5:45:f4:a2:d9:80:f4:b9:
db:3d:2a:ba:c5:fa:72:80:01:f8:56:b1:1c:43:0c:
3f:12:e6:d2:90:ee:72:d4:be:8a:c2:a9:94:f7:37:
cf:83:95:48:27:c8:54:25:9a:67:27:07:6e:6b:d7:
95:e4:88:4b:d6:f5:36:81:8f:81:19:6f:47:07:21:
72:9f:85:b2:bf:27:31:c3:4a:c3:01:37:f9:6d:7d:
c2:8a:85:e2:ab:d7:9b:b4:4e:d4:ed:ba:0c:f4:83:
d8:9b:3f:68:08:d5:4b:ad:12:1a:2d:6c:9a:af:3a:
27:e1:6a:c1:55:b2:73:f2:9a:30:da:13:bc:13:a0:
65:50:13:75:73:b5:54:36:d9:e6:e9:16:5a:aa:ec:
42:ce:7d:a3:b8:2a:ed:48:9d:df:63:53:d9:05:81:
8f:81:36:3c:ad:af:1b:86:08:ff:ca:90:eb:15:c5:
1b:ed:17:16:d1:03:ba:05:f1:f9:5b:7a:9b:97:0d:
e3:1e:3d:8e:27:7d:a6:b1:54:7a:cd:af:6d:61:45:
5e:05:57:31:11:77:72:2b:7f:9b:11:96:a3:1e:cb:
9e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:99:A8:5E:AB:7F:6B:4C:88:D4:0F:B5:FA:BD:98:16:DF:07:C5:29
X509v3 Authority Key Identifier:
keyid:E4:18:CD:DC:39:D3:47:56:3C:6D:C1:E5:EC:5E:59:62:1E:40:E4:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3eed28-230c-4b9f-904c-777e6ca4eff6/1/5BjN3DnTR1Y8bcHl7F5ZYh5A5Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b8:33:ed:6c:a0:61:93:fc:6e:5f:c8:87:b1:77:74:2e:ce:
59:01:11:de:22:b0:0e:3b:6f:ec:9b:b8:e3:b6:1a:dd:9c:f2:
35:30:8a:68:b1:c9:b3:b9:eb:b0:c0:3c:5a:1b:72:47:41:16:
d2:a3:29:c2:37:bc:d6:ff:0d:44:6d:7d:69:d0:8a:f0:1b:24:
4f:02:ac:14:8d:f6:ea:ba:cc:aa:09:36:e2:4e:3e:01:bf:78:
73:a4:cb:3c:51:87:b2:3f:4d:0a:15:2e:1c:b5:c7:5c:ee:10:
bb:f1:68:c4:23:64:aa:86:9b:9c:84:1a:9c:2a:87:a7:62:b9:
43:9e:fe:e0:ea:8f:fd:42:e0:7c:f2:db:1f:1d:74:71:1c:62:
e3:81:55:04:75:90:1a:3b:0c:77:0e:7d:c9:82:7f:ab:55:90:
b4:7d:b8:52:8a:aa:43:ce:ed:a1:a9:f7:c5:51:f7:dc:83:d7:
d6:72:72:c8:3d:ff:84:c6:a6:ae:bc:21:8f:e4:f2:53:cd:6f:
2c:97:22:99:69:7d:67:a8:20:34:8f:70:28:6d:55:c1:85:1d:
12:d8:2b:ee:5d:65:72:2c:06:03:39:65:78:03:63:24:22:c6:
9f:f1:b9:9b:b7:71:de:61:9e:5f:b0:dd:98:eb:33:ea:bf:99:
f7:ca:b6:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn760q6x5OEkYPTEkCLoZP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MThjZGRjMzlkMzQ3NTYzYzZkYzFlNWVjNWU1OTYyMWU0
MGU0ZDkwHhcNMjUxMDE5MTAwMjA1WhcNMjUxMDIwMTAwMjA1WjAzMTEwLwYDVQQD
EyhjYzk5YTg1ZWFiN2Y2YjRjODhkNDBmYjVmYWJkOTgxNmRmMDdjNTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSaoPfzxt5Ac6MJJ8A/V+pD2tUJ4
6TQu4LRMsVkEZnn9sBU7pUX0otmA9LnbPSq6xfpygAH4VrEcQww/EubSkO5y1L6K
wqmU9zfPg5VIJ8hUJZpnJwdua9eV5IhL1vU2gY+BGW9HByFyn4Wyvycxw0rDATf5
bX3CioXiq9ebtE7U7boM9IPYmz9oCNVLrRIaLWyarzon4WrBVbJz8pow2hO8E6Bl
UBN1c7VUNtnm6RZaquxCzn2juCrtSJ3fY1PZBYGPgTY8ra8bhgj/ypDrFcUb7RcW
0QO6BfH5W3qblw3jHj2OJ32msVR6za9tYUVeBVcxEXdyK3+bEZajHsue7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyZqF6rf2tMiNQPtfq9mBbfB8UpMB8GA1UdIwQY
MBaAFOQYzdw500dWPG3B5exeWWIeQOTZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUJqTjNEblRSMVk4YmNIbDdGNVpZaDVBNU5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zZWVkMjgtMjMwYy00YjlmLTkwNGMt
Nzc3ZTZjYTRlZmY2LzEvNUJqTjNEblRSMVk4YmNIbDdGNVpZaDVBNU5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8zZWVkMjgtMjMwYy00YjlmLTkwNGMtNzc3ZTZjYTRlZmY2
LzEvNUJqTjNEblRSMVk4YmNIbDdGNVpZaDVBNU5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrgz7Wyg
YZP8bl/Ih7F3dC7OWQER3iKwDjtv7Ju447Ya3ZzyNTCKaLHJs7nrsMA8WhtyR0EW
0qMpwje81v8NRG19adCK8BskTwKsFI326rrMqgk24k4+Ab94c6TLPFGHsj9NChUu
HLXHXO4Qu/FoxCNkqoabnIQanCqHp2K5Q57+4OqP/ULgfPLbHx10cRxi44FVBHWQ
GjsMdw59yYJ/q1WQtH24UoqqQ87toan3xVH33IPX1nJyyD3/hMamrrwhj+TyU81v
LJcimWl9Z6ggNI9wKG1VwYUdEtgr7l1lciwGAzlleANjJCLGn/G5m7dx3mGeX7Dd
mOsz6r+Z98q2fg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:21 2025 by rpki-client