Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
File: r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft (raw, json)
Hash identifier: aYwHvOHoW/oegOx6kCDnwUjyNIzoCoIl+lshMAUVNxM=
Subject key identifier: C4:19:A2:75:52:13:5E:FF:7B:DB:DA:BC:1D:B5:99:CA:87:7D:6E:B2
Authority key identifier: AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
Certificate issuer: /CN=af934ec694af68134b7514c10dcd13857b459e38
Certificate serial: 0199FAD813AD065311D3078FEBA81B78CED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
Manifest number: 10DE
Signing time: Sun 19 Oct 2025 05:01:28 +0000
Manifest this update: Sun 19 Oct 2025 05:01:28 +0000
Manifest next update: Mon 20 Oct 2025 05:01:28 +0000
Files and hashes: 1: 3KVjDh6tV6LcIk6BDE6xPuXzBDM.roa (hash: bQvllPBonHjb5qHCFeaDeGABQpp//k5Dnzxk+0td390=)
2: r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl (hash: XefEeAH3l/FfjY7Jt5JQylsxiI/NBv46lePjLHCwI8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:13:ad:06:53:11:d3:07:8f:eb:a8:1b:78:ce:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af934ec694af68134b7514c10dcd13857b459e38
Validity
Not Before: Oct 19 05:01:28 2025 GMT
Not After : Oct 20 05:01:28 2025 GMT
Subject: CN=c419a27552135eff7bdbdabc1db599ca877d6eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:93:98:71:e7:a8:09:2a:17:25:fc:6d:14:
cf:e9:4b:b3:62:1d:ba:44:0b:aa:23:ee:2c:00:ba:
af:44:8c:fe:f7:6a:73:b8:90:e1:65:47:a1:6e:14:
65:0a:d3:aa:32:13:c8:0c:75:ae:f4:c2:90:a0:67:
d0:0f:cd:9b:b9:17:2f:74:b2:c7:ca:da:78:46:d4:
56:92:01:8a:63:98:43:39:d8:12:3f:da:2e:48:6f:
38:46:ea:c6:0e:62:01:61:15:ad:98:47:5b:16:e4:
22:ff:c0:a6:4d:21:be:0b:70:85:fc:5e:bc:81:34:
2c:a3:70:75:f3:42:32:7c:8d:f6:62:23:65:fb:58:
6d:09:b9:89:27:3f:39:91:f4:ec:49:e2:e3:86:bc:
39:92:d8:20:e2:98:b2:d3:05:f5:20:c8:a3:cb:ae:
7c:d0:03:74:8d:9d:4a:28:a6:cd:f7:60:07:b1:10:
cd:c7:08:cf:a3:fa:5b:42:e4:f6:d3:10:2b:e2:61:
56:2f:e3:27:80:c3:0c:7d:12:54:14:58:b5:91:6c:
1b:74:09:4f:49:92:cf:c4:49:6a:4b:fc:49:d7:4c:
13:d5:59:65:dc:a1:08:e5:99:a3:06:8e:8c:c6:f6:
80:04:d0:b7:3a:35:e2:37:81:af:71:b7:9f:64:91:
66:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:19:A2:75:52:13:5E:FF:7B:DB:DA:BC:1D:B5:99:CA:87:7D:6E:B2
X509v3 Authority Key Identifier:
keyid:AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9c:11:6b:52:07:98:34:74:fe:2a:06:91:2f:56:2e:3d:56:
36:c2:e6:84:6b:92:18:91:a6:8a:22:29:d2:24:30:e1:ed:49:
79:4a:7c:ed:b0:9e:33:f2:ae:e4:e3:ec:41:a1:69:73:1b:3c:
44:48:b1:d7:e2:d0:ff:98:16:d5:d3:db:85:92:8b:1d:8b:1c:
d1:62:20:a5:f3:de:58:fd:d1:bc:86:ba:a0:54:53:67:15:2e:
14:b8:c4:18:ec:df:51:56:e8:91:f7:08:e6:96:f3:24:0b:d8:
0b:e6:93:11:23:c2:06:4b:eb:f2:b5:39:80:e1:90:7b:6b:49:
bd:38:62:a6:dc:87:96:62:a1:55:51:3c:a3:99:20:cf:13:59:
5a:ff:86:e7:55:79:5f:18:64:ca:01:a3:71:87:cf:71:51:2c:
88:7e:2b:fe:27:c9:b1:6d:41:65:68:ef:a0:e1:48:a0:29:e6:
70:70:07:16:42:62:45:a8:dc:9a:b3:70:be:6a:d6:71:01:db:
1e:e7:13:e5:2c:68:18:99:26:47:f1:73:da:fa:c5:e8:2b:e6:
fb:00:2e:17:9b:46:72:f1:bb:c6:67:f2:07:10:73:8d:a8:b0:
21:69:d4:31:63:39:08:4d:75:b0:96:8e:12:5c:e9:0b:d4:ea:
e6:6b:09:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62BOtBlMR0weP66gbeM7SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOTM0ZWM2OTRhZjY4MTM0Yjc1MTRjMTBkY2QxMzg1N2I0
NTllMzgwHhcNMjUxMDE5MDUwMTI4WhcNMjUxMDIwMDUwMTI4WjAzMTEwLwYDVQQD
EyhjNDE5YTI3NTUyMTM1ZWZmN2JkYmRhYmMxZGI1OTljYTg3N2Q2ZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKuTmHHnqAkqFyX8bRTP6UuzYh26
RAuqI+4sALqvRIz+92pzuJDhZUehbhRlCtOqMhPIDHWu9MKQoGfQD82buRcvdLLH
ytp4RtRWkgGKY5hDOdgSP9ouSG84RurGDmIBYRWtmEdbFuQi/8CmTSG+C3CF/F68
gTQso3B180IyfI32YiNl+1htCbmJJz85kfTsSeLjhrw5ktgg4piy0wX1IMijy658
0AN0jZ1KKKbN92AHsRDNxwjPo/pbQuT20xAr4mFWL+MngMMMfRJUFFi1kWwbdAlP
SZLPxElqS/xJ10wT1Vll3KEI5ZmjBo6MxvaABNC3OjXiN4GvcbefZJFmEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQZonVSE17/e9vavB21mcqHfW6yMB8GA1UdIwQY
MBaAFK+TTsaUr2gTS3UUwQ3NE4V7RZ44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVOT3hwU3ZhQk5MZFJUQkRjMFRoWHRGbmpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85OWJlODAtMTUyYy00YjY1LThiMzIt
MDcxOGFhOGRkOWE3LzEvcjVOT3hwU3ZhQk5MZFJUQkRjMFRoWHRGbmpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85OWJlODAtMTUyYy00YjY1LThiMzItMDcxOGFhOGRkOWE3
LzEvcjVOT3hwU3ZhQk5MZFJUQkRjMFRoWHRGbmpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5wRa1IH
mDR0/ioGkS9WLj1WNsLmhGuSGJGmiiIp0iQw4e1JeUp87bCeM/Ku5OPsQaFpcxs8
REix1+LQ/5gW1dPbhZKLHYsc0WIgpfPeWP3RvIa6oFRTZxUuFLjEGOzfUVbokfcI
5pbzJAvYC+aTESPCBkvr8rU5gOGQe2tJvThiptyHlmKhVVE8o5kgzxNZWv+G51V5
XxhkygGjcYfPcVEsiH4r/ifJsW1BZWjvoOFIoCnmcHAHFkJiRajcmrNwvmrWcQHb
HucT5SxoGJkmR/Fz2vrF6Cvm+wAuF5tGcvG7xmfyBxBzjaiwIWnUMWM5CE11sJaO
ElzpC9Tq5msJvQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:00 2025 by rpki-client