Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
File: B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft (raw, json)
Hash identifier: i4rptrxne8vtbtyFbopx5nZvvWK5nLWjmP8a/61mcIw=
Subject key identifier: 53:C3:30:6D:C9:83:FE:E6:43:57:1A:71:0E:A7:22:F9:6E:7A:7A:9D
Authority key identifier: 07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38
Certificate issuer: /CN=079889d9de4f07014beb2c0a312cd73652a3fc38
Certificate serial: 0199FEB51B6AFCECAFA694BF41E8855BFCFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 23:01:45 +0000
Manifest this update: Sun 19 Oct 2025 23:01:45 +0000
Manifest next update: Mon 20 Oct 2025 23:01:45 +0000
Files and hashes: 1: B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl (hash: 9iOZfri4Sshnx93XhkuEcL3EDvRLISyARNeJGM2Tbds=)
2: NU7LpjX_c-YRDnvo18YVHXBujbY.roa (hash: odut5lYelTDd0ROdgEZa5uhbKyC1bMMR57mT+YqgUgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:1b:6a:fc:ec:af:a6:94:bf:41:e8:85:5b:fc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079889d9de4f07014beb2c0a312cd73652a3fc38
Validity
Not Before: Oct 19 23:01:45 2025 GMT
Not After : Oct 20 23:01:45 2025 GMT
Subject: CN=53c3306dc983fee643571a710ea722f96e7a7a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:00:f7:1c:5c:ad:71:1e:de:84:48:40:64:
50:74:c7:7c:0b:43:68:1e:a7:55:63:dd:32:41:f8:
c8:34:e7:6f:98:ae:7e:c3:7a:58:d3:45:79:84:89:
41:e8:82:4b:9d:65:99:4e:b6:84:e3:19:1e:53:02:
b9:c0:81:cf:53:de:bf:d2:66:60:47:5d:7e:0a:fb:
08:fe:89:53:fa:ff:bf:2a:33:e6:c3:04:bc:da:e9:
20:08:88:3b:93:68:c2:52:81:fc:e6:eb:54:cd:23:
06:51:e1:8e:24:2d:3b:50:1f:30:2d:24:e9:93:7b:
f6:a9:a9:b3:c9:5d:5f:d5:b9:bb:66:06:d5:22:55:
88:14:94:4b:7f:e6:f5:41:87:f5:ca:75:8a:5b:4b:
a7:0a:64:1a:38:52:1e:30:bc:24:03:9c:2a:b6:b0:
85:f9:16:7e:5f:1f:e8:d0:a0:49:bb:1e:12:bb:37:
e5:33:60:1c:53:64:19:7d:2f:86:ed:e8:73:12:2d:
e6:a3:37:b5:0a:43:27:22:19:82:aa:31:de:87:b8:
33:20:7a:e2:35:f8:aa:a2:16:a0:91:56:58:a6:86:
a4:33:66:42:c3:30:00:fe:3e:53:26:bf:0d:ca:2f:
aa:19:b7:73:a5:ac:90:b7:24:97:4b:4b:1f:45:5a:
ff:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C3:30:6D:C9:83:FE:E6:43:57:1A:71:0E:A7:22:F9:6E:7A:7A:9D
X509v3 Authority Key Identifier:
keyid:07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:fa:eb:25:db:b8:bf:01:e8:6b:9a:e8:bf:53:8f:e0:83:19:
66:33:6b:80:ab:a2:e5:a1:4a:dc:69:af:a7:e4:f0:41:45:08:
e6:8e:35:5d:98:c0:c4:4d:77:98:62:34:59:71:e2:fb:68:12:
72:70:31:a7:56:8e:99:56:f5:63:3c:d6:a9:16:de:c3:00:27:
94:fb:24:8a:5a:57:dc:55:4f:91:9e:35:4c:06:c6:82:23:61:
d0:9a:d5:87:fa:b4:ba:73:36:27:f9:e5:fd:0f:fc:bf:4d:f8:
59:d9:5c:7d:2a:b3:dc:f3:b3:36:bd:03:a4:55:ca:33:05:7f:
76:f2:69:64:ff:32:cd:66:80:c0:93:b1:c6:6a:14:c0:04:dd:
ad:f2:1f:56:bd:3d:d4:aa:eb:02:ef:a5:3f:ea:36:27:8d:3e:
d3:31:01:1f:d4:98:75:b4:a0:0e:23:6c:32:ea:9a:71:36:94:
ba:84:4e:9a:5e:08:12:f1:d6:64:9e:8b:e4:90:1f:b2:37:6b:
04:27:bd:d1:3c:ec:23:7b:d7:ee:2c:71:ca:d2:d6:1d:8c:45:
8f:65:9c:c5:c0:86:37:3b:e6:f1:c6:9e:26:76:82:ef:bc:fa:
e7:64:44:dc:3d:dd:22:f5:56:cf:67:95:a0:c3:77:db:e4:2b:
07:e2:b0:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tRtq/OyvppS/QeiFW/z7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OTg4OWQ5ZGU0ZjA3MDE0YmViMmMwYTMxMmNkNzM2NTJh
M2ZjMzgwHhcNMjUxMDE5MjMwMTQ1WhcNMjUxMDIwMjMwMTQ1WjAzMTEwLwYDVQQD
Eyg1M2MzMzA2ZGM5ODNmZWU2NDM1NzFhNzEwZWE3MjJmOTZlN2E3YTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo8A9xxcrXEe3oRIQGRQdMd8C0No
HqdVY90yQfjINOdvmK5+w3pY00V5hIlB6IJLnWWZTraE4xkeUwK5wIHPU96/0mZg
R11+CvsI/olT+v+/KjPmwwS82ukgCIg7k2jCUoH85utUzSMGUeGOJC07UB8wLSTp
k3v2qamzyV1f1bm7ZgbVIlWIFJRLf+b1QYf1ynWKW0unCmQaOFIeMLwkA5wqtrCF
+RZ+Xx/o0KBJux4SuzflM2AcU2QZfS+G7ehzEi3moze1CkMnIhmCqjHeh7gzIHri
NfiqohagkVZYpoakM2ZCwzAA/j5TJr8Nyi+qGbdzpayQtySXS0sfRVr/iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPDMG3Jg/7mQ1cacQ6nIvluenqdMB8GA1UdIwQY
MBaAFAeYidneTwcBS+ssCjEs1zZSo/w4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjVpSjJkNVBCd0ZMNnl3S01TelhObEtqX0RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9kZDM5NDAtZmZkNi00YjY5LTlmMDEt
ZmQ4ZDI1YTI2M2QyLzEvQjVpSjJkNVBCd0ZMNnl3S01TelhObEtqX0RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9kZDM5NDAtZmZkNi00YjY5LTlmMDEtZmQ4ZDI1YTI2M2Qy
LzEvQjVpSjJkNVBCd0ZMNnl3S01TelhObEtqX0RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfrrJdu4
vwHoa5rov1OP4IMZZjNrgKui5aFK3Gmvp+TwQUUI5o41XZjAxE13mGI0WXHi+2gS
cnAxp1aOmVb1YzzWqRbewwAnlPskilpX3FVPkZ41TAbGgiNh0JrVh/q0unM2J/nl
/Q/8v034WdlcfSqz3POzNr0DpFXKMwV/dvJpZP8yzWaAwJOxxmoUwATdrfIfVr09
1KrrAu+lP+o2J40+0zEBH9SYdbSgDiNsMuqacTaUuoROml4IEvHWZJ6L5JAfsjdr
BCe90TzsI3vX7ixxytLWHYxFj2WcxcCGNzvm8caeJnaC77z652RE3D3dIvVWz2eV
oMN32+QrB+KwcQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:41 2025 by rpki-client