Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
File: 5lluFVL8CliEqIGzUoF9C3MAkIM.mft (raw, json)
Hash identifier: mj7kffQNGOvys7fC5Sgcd2Wl3Ef6mOXjdpe+U5ySuMc=
Subject key identifier: 2B:33:D0:54:A2:F1:B4:DF:6C:92:DF:4B:2F:F0:5A:D3:22:5E:E4:CE
Authority key identifier: E6:59:6E:15:52:FC:0A:58:84:A8:81:B3:52:81:7D:0B:73:00:90:83
Certificate issuer: /CN=e6596e1552fc0a5884a881b352817d0b73009083
Certificate serial: 0199FEB4A3EC033E9BC126A176432FDE87AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
Manifest number: 063F
Signing time: Sun 19 Oct 2025 23:01:15 +0000
Manifest this update: Sun 19 Oct 2025 23:01:15 +0000
Manifest next update: Mon 20 Oct 2025 23:01:15 +0000
Files and hashes: 1: 5lluFVL8CliEqIGzUoF9C3MAkIM.crl (hash: eRV+QPqLYUOMnEF4SsqZRoLgC/s3lBfdoFk5SYw51xE=)
2: ZchGG8A8nhqHRHzSz8wIeuBKy7A.roa (hash: fyy0T0JEDqACIzgC4O1cOibFQ+4m6gfIvZEPpikdJzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:a3:ec:03:3e:9b:c1:26:a1:76:43:2f:de:87:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596e1552fc0a5884a881b352817d0b73009083
Validity
Not Before: Oct 19 23:01:15 2025 GMT
Not After : Oct 20 23:01:15 2025 GMT
Subject: CN=2b33d054a2f1b4df6c92df4b2ff05ad3225ee4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ab:0f:98:14:dc:03:5c:a1:e8:ee:5b:c7:f0:
05:b4:08:50:78:c3:90:07:d6:c0:39:b2:43:c4:03:
96:c6:79:ad:30:0a:7f:ec:9c:cf:9f:ae:e6:0e:30:
49:34:18:b7:91:c3:39:3a:62:c9:08:74:02:a8:0f:
a8:54:36:f9:15:61:82:e1:1d:7a:47:54:d4:bb:56:
40:f5:f2:9f:7b:34:c6:bc:1d:0a:9d:3c:dc:14:4b:
e6:f0:dd:79:14:7d:81:1d:a5:4c:1d:30:8c:12:55:
cd:53:fd:9f:c3:8e:11:3e:a8:f0:e5:90:b1:8c:98:
1a:01:db:1a:eb:37:c8:84:79:3e:7e:53:f5:aa:51:
8d:f8:10:fb:bf:fe:11:c1:ad:57:62:3f:d0:70:2d:
bf:6f:01:ac:85:c1:fd:a8:73:96:c0:53:58:c5:1a:
a0:eb:e3:2f:6c:7b:52:40:7c:6b:4b:62:e1:1d:f7:
d7:70:9a:0d:11:41:f5:cf:21:02:6c:f7:76:da:a7:
9a:19:9d:f4:54:20:13:2b:1c:ba:b0:24:04:48:e8:
b2:d7:80:ee:76:89:00:8c:5e:3b:a2:75:5a:f9:7c:
65:4c:8f:fa:24:72:ab:fd:34:fa:a4:6d:77:7a:18:
2a:7b:34:e8:93:af:2c:0a:7a:66:92:64:63:49:de:
a5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:33:D0:54:A2:F1:B4:DF:6C:92:DF:4B:2F:F0:5A:D3:22:5E:E4:CE
X509v3 Authority Key Identifier:
keyid:E6:59:6E:15:52:FC:0A:58:84:A8:81:B3:52:81:7D:0B:73:00:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c1:4b:25:5a:0d:b9:af:1a:2b:fa:97:0e:ed:d3:d5:c8:82:
26:26:a2:1f:d0:ec:e3:28:69:5d:6c:16:f3:d6:4a:8f:a4:b6:
20:dc:d5:4a:59:4c:23:a4:bb:de:30:8c:23:c9:c6:f2:c0:97:
2a:bd:b8:73:b5:fa:19:15:31:3a:0c:e0:36:b6:78:d5:7e:5d:
af:31:ab:86:25:91:b0:1d:25:8f:50:5f:a0:17:c7:db:b0:9c:
6f:88:84:ed:ec:97:af:e0:fb:8b:1e:6d:e4:11:67:3b:2c:36:
59:13:13:26:84:16:f4:57:77:96:da:a6:3e:dc:23:70:25:41:
5c:fa:e7:78:df:9f:9b:5f:4b:c0:01:90:e6:81:ad:6e:84:0a:
4c:f6:eb:2c:66:9e:71:7a:e3:25:44:c0:36:b1:c9:1b:79:88:
9f:e4:60:d6:f9:d7:6a:8f:d0:d6:78:a3:f4:56:b9:13:65:18:
eb:18:2e:e6:c1:97:d8:c5:de:d2:f0:82:37:93:fe:80:e4:80:
0d:af:06:bb:32:16:4d:ec:bb:9e:96:ab:b5:1e:88:0b:59:d3:
42:ea:06:f5:4c:0e:27:5f:f2:b7:9b:d0:dd:1c:56:b4:ae:96:
6a:0d:1b:4e:ce:f1:13:da:8f:a8:41:5f:85:fa:e4:a7:c3:65:
f5:87:dd:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tKPsAz6bwSahdkMv3oerMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NTk2ZTE1NTJmYzBhNTg4NGE4ODFiMzUyODE3ZDBiNzMw
MDkwODMwHhcNMjUxMDE5MjMwMTE1WhcNMjUxMDIwMjMwMTE1WjAzMTEwLwYDVQQD
EygyYjMzZDA1NGEyZjFiNGRmNmM5MmRmNGIyZmYwNWFkMzIyNWVlNGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46sPmBTcA1yh6O5bx/AFtAhQeMOQ
B9bAObJDxAOWxnmtMAp/7JzPn67mDjBJNBi3kcM5OmLJCHQCqA+oVDb5FWGC4R16
R1TUu1ZA9fKfezTGvB0KnTzcFEvm8N15FH2BHaVMHTCMElXNU/2fw44RPqjw5ZCx
jJgaAdsa6zfIhHk+flP1qlGN+BD7v/4Rwa1XYj/QcC2/bwGshcH9qHOWwFNYxRqg
6+MvbHtSQHxrS2LhHffXcJoNEUH1zyECbPd22qeaGZ30VCATKxy6sCQESOiy14Du
dokAjF47onVa+XxlTI/6JHKr/TT6pG13ehgqezTok68sCnpmkmRjSd6lJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsz0FSi8bTfbJLfSy/wWtMiXuTOMB8GA1UdIwQY
MBaAFOZZbhVS/ApYhKiBs1KBfQtzAJCDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWxsdUZWTDhDbGlFcUlHelVvRjlDM01Ba0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wY2EyODctM2VlZi00MTRjLTg4M2Et
MDgxNjkxMjU3YTI2LzEvNWxsdUZWTDhDbGlFcUlHelVvRjlDM01Ba0lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8wY2EyODctM2VlZi00MTRjLTg4M2EtMDgxNjkxMjU3YTI2
LzEvNWxsdUZWTDhDbGlFcUlHelVvRjlDM01Ba0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsFLJVoN
ua8aK/qXDu3T1ciCJiaiH9Ds4yhpXWwW89ZKj6S2INzVSllMI6S73jCMI8nG8sCX
Kr24c7X6GRUxOgzgNrZ41X5drzGrhiWRsB0lj1BfoBfH27Ccb4iE7eyXr+D7ix5t
5BFnOyw2WRMTJoQW9Fd3ltqmPtwjcCVBXPrneN+fm19LwAGQ5oGtboQKTPbrLGae
cXrjJUTANrHJG3mIn+Rg1vnXao/Q1nij9Fa5E2UY6xgu5sGX2MXe0vCCN5P+gOSA
Da8GuzIWTey7npartR6IC1nTQuoG9UwOJ1/yt5vQ3RxWtK6Wag0bTs7xE9qPqEFf
hfrkp8Nl9YfdgA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:08:52 2025 by rpki-client