Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
File: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft (raw, json)
Hash identifier: Pq0Bqew3S5AFEe0EYcB3PGJCb76X8Bq1E30T2ZCJ7b8=
Subject key identifier: C3:A9:15:3F:48:81:CA:4B:CD:B2:F4:60:B0:16:33:3C:01:ED:53:6E
Authority key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
Certificate issuer: /CN=e5503498ff185d0c607353f43f55e911f62a6802
Certificate serial: 019A02C7DFC4BB5033EA7D8CD4B20F5AD373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
Manifest number: 16F6
Signing time: Mon 20 Oct 2025 18:00:44 +0000
Manifest this update: Mon 20 Oct 2025 18:00:44 +0000
Manifest next update: Tue 21 Oct 2025 18:00:44 +0000
Files and hashes: 1: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl (hash: bBYtxLhfVBlleywZmiQwyCjVhWajeGxXWjnmT7Si7Lo=)
2: KZNT-sZZNOeQ3ZQO6BjaXLuoD9g.roa (hash: +2sZTVLc367S2ob/w+tSdpZn/g4nvkTyjPLtfOVjhN8=)
3: o-NtXLRHL-S0Y-O2GlCnHQAffNw.roa (hash: dxc+WfWonf57/frz8JHxuwGakdxRPwah5tbEWGWiZgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:df:c4:bb:50:33:ea:7d:8c:d4:b2:0f:5a:d3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5503498ff185d0c607353f43f55e911f62a6802
Validity
Not Before: Oct 20 18:00:44 2025 GMT
Not After : Oct 21 18:00:44 2025 GMT
Subject: CN=c3a9153f4881ca4bcdb2f460b016333c01ed536e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:cc:fb:23:95:d5:65:53:26:bf:72:26:9e:
b3:a0:bb:35:bc:16:7b:fb:2a:c5:2d:f1:a1:a3:72:
2f:b8:84:9c:42:4e:04:89:c6:0a:cc:84:43:55:1d:
57:26:85:20:a8:32:da:92:a0:34:0f:19:ca:fd:8b:
a5:95:97:ce:bb:e2:37:b3:fc:bc:02:a4:03:29:23:
47:43:2f:31:f6:90:43:33:f4:b9:53:ea:cd:31:2f:
fc:0d:73:05:64:2b:db:cd:65:fd:de:b1:d1:6b:d5:
fe:36:fe:80:69:f7:17:a9:f8:8a:49:90:c7:f9:5f:
60:d0:c5:45:94:2f:d3:57:48:04:89:38:8a:ac:76:
73:11:15:db:f8:1e:6f:b6:6e:2c:e1:fb:48:a7:bf:
33:bb:14:08:e7:c5:9c:25:5c:06:98:00:f3:24:b1:
d3:80:38:00:bc:f6:59:11:81:c8:3e:f3:4d:c8:4d:
c2:43:db:28:40:c8:c2:d5:47:1c:ca:02:16:b3:49:
77:df:33:03:b6:27:c5:13:7e:1a:13:25:7d:b3:f4:
13:5c:62:1a:61:c5:90:da:04:64:0b:ba:7d:23:d5:
99:1e:36:c4:ed:6e:43:da:0b:1b:54:e9:a9:73:50:
b1:74:28:43:b3:f1:f0:95:27:f2:68:c4:45:1e:df:
46:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A9:15:3F:48:81:CA:4B:CD:B2:F4:60:B0:16:33:3C:01:ED:53:6E
X509v3 Authority Key Identifier:
keyid:E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:be:9b:13:3e:19:af:79:0d:5f:fb:1e:27:f9:1d:3c:ab:a9:
08:4d:6d:7b:b5:56:91:5d:28:9f:d0:44:07:01:5f:1e:32:ac:
8f:4b:82:18:9f:9a:2b:3b:be:bd:74:ec:17:5b:1b:34:dc:42:
ff:a4:cc:14:52:2e:a0:1e:d4:c0:c4:67:8a:6d:a4:fa:01:d1:
6e:45:0d:e9:59:1b:96:61:e7:c9:7f:da:0a:af:c2:95:bd:f5:
00:96:cd:ca:3f:6c:c5:6b:a1:e0:87:de:73:1a:00:3a:96:23:
63:23:e3:2a:93:09:65:a3:a5:43:e3:0c:4b:ee:ce:f2:0d:6c:
1d:4e:4e:36:a3:b7:60:67:2f:87:8d:39:0b:6a:6d:9e:b4:17:
5d:30:44:9a:83:7b:50:d2:a8:c5:0b:80:e2:51:32:be:25:71:
df:6a:a3:9a:d6:c0:c4:e6:7e:7b:c4:6e:94:09:c0:eb:e5:7a:
b5:98:b7:16:a2:bd:ef:86:93:37:f0:36:1a:e7:26:05:a7:49:
21:e8:7e:ed:b3:95:18:3e:70:86:94:d2:cb:40:d2:83:9a:7d:
08:e0:3f:cb:92:9a:b7:e2:79:02:10:4b:17:92:db:5c:5c:bb:
27:2f:08:76:8e:73:3e:97:a3:75:de:30:b7:80:53:c4:57:79:
fe:c2:22:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCx9/Eu1Az6n2M1LIPWtNzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NTAzNDk4ZmYxODVkMGM2MDczNTNmNDNmNTVlOTExZjYy
YTY4MDIwHhcNMjUxMDIwMTgwMDQ0WhcNMjUxMDIxMTgwMDQ0WjAzMTEwLwYDVQQD
EyhjM2E5MTUzZjQ4ODFjYTRiY2RiMmY0NjBiMDE2MzMzYzAxZWQ1MzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKLM+yOV1WVTJr9yJp6zoLs1vBZ7
+yrFLfGho3IvuIScQk4EicYKzIRDVR1XJoUgqDLakqA0DxnK/YullZfOu+I3s/y8
AqQDKSNHQy8x9pBDM/S5U+rNMS/8DXMFZCvbzWX93rHRa9X+Nv6AafcXqfiKSZDH
+V9g0MVFlC/TV0gEiTiKrHZzERXb+B5vtm4s4ftIp78zuxQI58WcJVwGmADzJLHT
gDgAvPZZEYHIPvNNyE3CQ9soQMjC1UccygIWs0l33zMDtifFE34aEyV9s/QTXGIa
YcWQ2gRkC7p9I9WZHjbE7W5D2gsbVOmpc1CxdChDs/HwlSfyaMRFHt9GLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOpFT9IgcpLzbL0YLAWMzwB7VNuMB8GA1UdIwQY
MBaAFOVQNJj/GF0MYHNT9D9V6RH2KmgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVZBMG1QOFlYUXhnYzFQMFAxWHBFZllxYUFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85N2IwYmMtZjRmOC00ZjkwLTg1NTQt
MWUyNzlmN2I2MDIzLzEvNVZBMG1QOFlYUXhnYzFQMFAxWHBFZllxYUFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC85N2IwYmMtZjRmOC00ZjkwLTg1NTQtMWUyNzlmN2I2MDIz
LzEvNVZBMG1QOFlYUXhnYzFQMFAxWHBFZllxYUFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfr6bEz4Z
r3kNX/seJ/kdPKupCE1te7VWkV0on9BEBwFfHjKsj0uCGJ+aKzu+vXTsF1sbNNxC
/6TMFFIuoB7UwMRnim2k+gHRbkUN6VkblmHnyX/aCq/Clb31AJbNyj9sxWuh4Ife
cxoAOpYjYyPjKpMJZaOlQ+MMS+7O8g1sHU5ONqO3YGcvh405C2ptnrQXXTBEmoN7
UNKoxQuA4lEyviVx32qjmtbAxOZ+e8RulAnA6+V6tZi3FqK974aTN/A2GucmBadJ
Ieh+7bOVGD5whpTSy0DSg5p9COA/y5Kat+J5AhBLF5LbXFy7Jy8Ido5zPpejdd4w
t4BTxFd5/sIiqw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:13:31 2025 by rpki-client