Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
File: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft (raw, json)
Hash identifier: sNIMlI8jV3z0LbLGA+x44JkSNakLftWzQilUZdFK/f8=
Subject key identifier: 48:69:87:AA:DF:6E:D8:73:01:29:81:F6:C4:B7:72:59:F4:79:81:53
Authority key identifier: E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
Certificate issuer: /CN=e505d93497f19d2563066b409200969711f28c67
Certificate serial: 0199FB0EBEA17422613AB2C8982D5484691C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
Manifest number: 0E80
Signing time: Sun 19 Oct 2025 06:01:11 +0000
Manifest this update: Sun 19 Oct 2025 06:01:11 +0000
Manifest next update: Mon 20 Oct 2025 06:01:11 +0000
Files and hashes: 1: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl (hash: LEAmGkJgvLB6hfK2/XTjGt70p9UsudVITNbaI4lbUPc=)
2: TeyiHHpQzPXntQ9zcodgsnssabQ.roa (hash: 99RzEV6KxbBUQmEGjwYOg/0KALhFJ98CPqecVaZd8t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:be:a1:74:22:61:3a:b2:c8:98:2d:54:84:69:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e505d93497f19d2563066b409200969711f28c67
Validity
Not Before: Oct 19 06:01:11 2025 GMT
Not After : Oct 20 06:01:11 2025 GMT
Subject: CN=486987aadf6ed873012981f6c4b77259f4798153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:b8:45:7f:71:e5:17:a9:c2:94:52:9a:e0:
86:c2:d7:30:ca:c9:e1:94:ea:6c:7a:3b:4e:81:2c:
e7:3b:42:af:47:75:f3:cb:c8:0c:f3:31:c7:39:4f:
ed:93:d5:7d:13:45:46:c3:7a:64:44:9e:b8:39:49:
2f:66:6c:97:a8:b3:df:00:0d:68:4f:79:af:72:0c:
65:a1:66:1a:6d:a9:4a:61:f4:72:99:d9:04:ff:68:
23:32:4f:01:94:8b:8a:39:fa:00:ad:e9:77:24:ee:
b1:96:16:5e:0d:1c:34:62:aa:f2:ed:49:07:21:d2:
b9:08:2c:6c:28:7e:f0:59:88:44:ab:26:23:12:b4:
72:5b:25:86:03:78:63:82:9a:38:44:76:96:1a:20:
cb:fb:69:09:d7:01:bc:2a:ea:b2:1d:7f:c6:c8:1e:
61:57:5c:f8:d3:06:bb:8e:aa:00:2b:3d:b1:45:1d:
02:6a:b4:9e:2e:cd:28:d4:c4:cc:52:fd:d5:3d:8b:
b3:f9:61:4e:e0:22:d8:f9:e8:c4:de:78:d8:39:61:
97:0c:57:d8:d9:f3:55:5b:31:84:2d:f9:14:99:cc:
90:7d:f5:0d:1b:c7:4c:dc:35:b7:d1:81:25:27:35:
56:a7:20:49:8d:0c:3b:c2:4b:3f:d5:5e:08:44:64:
31:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:69:87:AA:DF:6E:D8:73:01:29:81:F6:C4:B7:72:59:F4:79:81:53
X509v3 Authority Key Identifier:
keyid:E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ac:22:42:2d:a1:d4:d8:1b:28:2b:7b:22:9b:99:cd:a5:1c:
f2:45:d3:2e:30:01:ec:5d:45:6b:d5:54:23:89:d0:58:d0:9c:
aa:a6:5c:26:7e:55:b5:f7:3d:6b:99:9e:aa:b4:0c:a4:37:ca:
b0:cd:e8:7b:3f:dc:bb:04:f0:b0:7f:1a:ed:60:dc:89:03:10:
fa:37:f2:f9:a1:b4:e2:ce:48:eb:07:bc:fb:e1:c9:b9:e2:de:
6d:36:86:f5:ac:24:f8:07:33:34:47:b3:3e:2b:67:4d:4b:03:
13:92:d3:45:c4:1e:40:5a:71:c9:9a:47:4a:2b:be:7e:81:7d:
e0:94:89:48:91:49:5e:15:7f:82:c5:84:4d:10:6e:02:80:53:
02:16:fc:e1:b7:7d:ea:31:14:6a:37:cf:4a:3b:6b:23:13:22:
dd:9b:ba:2f:91:16:c6:6c:88:2e:b4:ef:e6:aa:69:8b:15:b4:
8d:92:8b:3a:6c:61:82:33:d1:dc:58:52:f2:f6:ac:4a:c8:ec:
94:ad:a4:58:de:bc:7d:09:12:7c:29:21:99:a0:94:d9:1d:dc:
ae:e2:10:eb:ae:11:fd:ce:d9:b2:dc:66:42:97:61:a6:d7:e8:
27:99:8f:8f:51:d8:50:45:1c:75:2d:fc:30:e4:76:4c:6d:ca:
97:4b:70:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Dr6hdCJhOrLImC1UhGkcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MDVkOTM0OTdmMTlkMjU2MzA2NmI0MDkyMDA5Njk3MTFm
MjhjNjcwHhcNMjUxMDE5MDYwMTExWhcNMjUxMDIwMDYwMTExWjAzMTEwLwYDVQQD
Eyg0ODY5ODdhYWRmNmVkODczMDEyOTgxZjZjNGI3NzI1OWY0Nzk4MTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaO4RX9x5RepwpRSmuCGwtcwysnh
lOpsejtOgSznO0KvR3Xzy8gM8zHHOU/tk9V9E0VGw3pkRJ64OUkvZmyXqLPfAA1o
T3mvcgxloWYabalKYfRymdkE/2gjMk8BlIuKOfoArel3JO6xlhZeDRw0Yqry7UkH
IdK5CCxsKH7wWYhEqyYjErRyWyWGA3hjgpo4RHaWGiDL+2kJ1wG8KuqyHX/GyB5h
V1z40wa7jqoAKz2xRR0CarSeLs0o1MTMUv3VPYuz+WFO4CLY+ejE3njYOWGXDFfY
2fNVWzGELfkUmcyQffUNG8dM3DW30YElJzVWpyBJjQw7wks/1V4IRGQxtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhph6rfbthzASmB9sS3cln0eYFTMB8GA1UdIwQY
MBaAFOUF2TSX8Z0lYwZrQJIAlpcR8oxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVFYWk5KZnhuU1ZqQm10QWtnQ1dseEh5akdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NDBlNTMtYzRhNi00ZjUyLTgxMWUt
NmFmYzRlYzYzY2YwLzEvNVFYWk5KZnhuU1ZqQm10QWtnQ1dseEh5akdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC81NDBlNTMtYzRhNi00ZjUyLTgxMWUtNmFmYzRlYzYzY2Yw
LzEvNVFYWk5KZnhuU1ZqQm10QWtnQ1dseEh5akdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkawiQi2h
1NgbKCt7IpuZzaUc8kXTLjAB7F1Fa9VUI4nQWNCcqqZcJn5Vtfc9a5meqrQMpDfK
sM3oez/cuwTwsH8a7WDciQMQ+jfy+aG04s5I6we8++HJueLebTaG9awk+AczNEez
PitnTUsDE5LTRcQeQFpxyZpHSiu+foF94JSJSJFJXhV/gsWETRBuAoBTAhb84bd9
6jEUajfPSjtrIxMi3Zu6L5EWxmyILrTv5qppixW0jZKLOmxhgjPR3FhS8vasSsjs
lK2kWN68fQkSfCkhmaCU2R3cruIQ664R/c7ZstxmQpdhptfoJ5mPj1HYUEUcdS38
MOR2TG3Kl0tw/w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:41 2025 by rpki-client