Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
File: 5tF7E2U_8ePngi6x5eChf01PeIE.mft (raw, json)
Hash identifier: 8xiltPTyEovuSFQuq8ON4HkpaYdWFaFFvgrsUOOjAAA=
Subject key identifier: 3A:3F:65:D6:AD:7C:A2:22:CC:D9:ED:54:8B:83:ED:C6:67:42:95:6A
Authority key identifier: E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
Certificate issuer: /CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Certificate serial: 019A00A383B0E81A16D3360584B73AE3E551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
Manifest number: 0CFA
Signing time: Mon 20 Oct 2025 08:01:47 +0000
Manifest this update: Mon 20 Oct 2025 08:01:47 +0000
Manifest next update: Tue 21 Oct 2025 08:01:47 +0000
Files and hashes: 1: 5tF7E2U_8ePngi6x5eChf01PeIE.crl (hash: 2vFlRM4n8anJ2pZCbfH4HOCqA4+hVywTAL8mkDJHE1I=)
2: MwlTna0ke4fMkgBxDifihFV6g70.roa (hash: UKWdlo0uXeQ4k7xeAT+wCpraLRrIa922Ee9c18u5sVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:83:b0:e8:1a:16:d3:36:05:84:b7:3a:e3:e5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Validity
Not Before: Oct 20 08:01:47 2025 GMT
Not After : Oct 21 08:01:47 2025 GMT
Subject: CN=3a3f65d6ad7ca222ccd9ed548b83edc66742956a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ae:46:e6:5d:55:78:73:57:9c:36:ae:06:bc:
f6:d0:43:79:dd:4e:70:0a:1d:4c:03:a7:fa:62:db:
9a:4a:d0:8b:93:8e:40:f6:1c:f1:cd:45:d6:04:01:
60:67:06:a1:a1:44:63:67:cf:82:01:41:65:53:2d:
50:bb:bc:5e:9e:1b:2e:93:86:2d:a8:70:cc:a9:b4:
93:99:d3:50:07:ee:03:0a:99:f7:df:9d:8d:b9:7a:
a3:cf:25:39:f9:69:08:d9:3b:95:84:1a:9d:61:ec:
9f:29:6d:10:fa:4a:00:b6:aa:a8:fe:33:92:49:cd:
7d:f9:67:95:37:f1:5d:6e:c4:6c:fa:b0:37:25:98:
e5:d6:4e:e5:cf:b2:f6:0d:27:91:25:0d:2e:91:eb:
fd:61:71:8a:9f:c1:b8:38:97:37:e0:4e:a5:72:74:
87:de:fd:19:ce:6c:04:40:23:31:ee:fd:1f:bc:96:
c1:83:ea:64:83:99:55:32:75:84:30:85:32:f8:cd:
ec:a0:10:d0:fb:45:9f:b8:55:61:81:ec:88:a2:5c:
31:c1:ad:3f:23:fa:74:b0:8b:ac:bb:82:ba:87:b0:
f7:6d:8b:c1:31:78:29:9a:8a:a5:16:99:6a:7d:6c:
6d:5e:7e:7f:c4:bd:55:fa:fa:f2:0d:26:56:84:88:
3e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3F:65:D6:AD:7C:A2:22:CC:D9:ED:54:8B:83:ED:C6:67:42:95:6A
X509v3 Authority Key Identifier:
keyid:E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2d:1e:f7:69:10:c4:5e:8a:22:b1:a1:07:ae:a0:82:03:87:
4a:1a:6d:44:40:84:fa:16:96:af:b7:19:a3:a0:f0:d3:20:29:
3c:0b:83:56:5e:61:7e:4e:33:cf:0f:d3:66:4c:fa:ad:b1:14:
7e:7e:c4:23:cb:19:b9:4b:60:63:20:63:4d:af:bd:6f:31:56:
66:ef:eb:41:98:28:3f:8b:38:53:5d:b1:22:49:d3:a1:40:84:
26:aa:e0:94:3b:5c:19:0d:de:0b:e2:17:a9:27:23:69:83:83:
91:f2:4e:1b:d0:21:60:05:cc:a9:29:73:21:36:b0:b7:3e:94:
96:5f:53:93:86:9d:33:70:4d:4b:1d:83:33:b1:25:b1:30:e8:
6a:fb:bb:0a:e1:d5:46:af:1d:8f:59:c8:09:3d:67:12:74:60:
63:a7:2e:61:83:2b:34:e2:6c:65:c2:b8:dc:84:12:93:24:16:
9c:1a:a2:22:a9:b2:29:71:37:72:3f:32:10:72:9f:50:fd:0d:
ae:8d:82:80:62:7a:2f:4c:cd:bb:f4:55:62:c9:2c:dc:38:3b:
51:2f:0f:2b:c5:6e:33:58:e3:25:2e:5e:86:98:0e:32:8e:78:
18:31:12:21:3d:7f:c5:7c:d0:a8:52:10:a0:12:3f:07:db:ab:
c4:9f:77:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAo4Ow6BoW0zYFhLc64+VRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZDE3YjEzNjUzZmYxZTNlNzgyMmViMWU1ZTBhMTdmNGQ0
Zjc4ODEwHhcNMjUxMDIwMDgwMTQ3WhcNMjUxMDIxMDgwMTQ3WjAzMTEwLwYDVQQD
EygzYTNmNjVkNmFkN2NhMjIyY2NkOWVkNTQ4YjgzZWRjNjY3NDI5NTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9q5G5l1VeHNXnDauBrz20EN53U5w
Ch1MA6f6YtuaStCLk45A9hzxzUXWBAFgZwahoURjZ8+CAUFlUy1Qu7xenhsuk4Yt
qHDMqbSTmdNQB+4DCpn3352NuXqjzyU5+WkI2TuVhBqdYeyfKW0Q+koAtqqo/jOS
Sc19+WeVN/FdbsRs+rA3JZjl1k7lz7L2DSeRJQ0ukev9YXGKn8G4OJc34E6lcnSH
3v0ZzmwEQCMx7v0fvJbBg+pkg5lVMnWEMIUy+M3soBDQ+0WfuFVhgeyIolwxwa0/
I/p0sIusu4K6h7D3bYvBMXgpmoqlFplqfWxtXn5/xL1V+vryDSZWhIg+mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDo/ZdatfKIizNntVIuD7cZnQpVqMB8GA1UdIwQY
MBaAFObRexNlP/Hj54IuseXgoX9NT3iBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXRGN0UyVV84ZVBuZ2k2eDVlQ2hmMDFQZUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ODRlM2UtN2I1My00NzVjLTg2MWYt
NmFjZDU4MWQ0YjBmLzEvNXRGN0UyVV84ZVBuZ2k2eDVlQ2hmMDFQZUlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ODRlM2UtN2I1My00NzVjLTg2MWYtNmFjZDU4MWQ0YjBm
LzEvNXRGN0UyVV84ZVBuZ2k2eDVlQ2hmMDFQZUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANi0e92kQ
xF6KIrGhB66gggOHShptRECE+haWr7cZo6Dw0yApPAuDVl5hfk4zzw/TZkz6rbEU
fn7EI8sZuUtgYyBjTa+9bzFWZu/rQZgoP4s4U12xIknToUCEJqrglDtcGQ3eC+IX
qScjaYODkfJOG9AhYAXMqSlzITawtz6Ull9Tk4adM3BNSx2DM7ElsTDoavu7CuHV
Rq8dj1nICT1nEnRgY6cuYYMrNOJsZcK43IQSkyQWnBqiIqmyKXE3cj8yEHKfUP0N
ro2CgGJ6L0zNu/RVYsks3Dg7US8PK8VuM1jjJS5ehpgOMo54GDESIT1/xXzQqFIQ
oBI/B9urxJ93Nw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:08:04 2025 by rpki-client