Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
File: 5yHQ6mg8xnWULAmPWcQRyGDorto.mft (raw, json)
Hash identifier: hAXMvo9kPwF52uv3qxwta99gGZx6H8il9eaB4dqi/oU=
Subject key identifier: 3A:A7:D7:58:16:BB:39:B5:2C:9A:6D:4D:DA:C5:B1:A8:66:D5:9A:A2
Authority key identifier: E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
Certificate issuer: /CN=e721d0ea683cc675942c098f59c411c860e8aeda
Certificate serial: 0199FC21E2AC417CAC4B483B0274427FC8C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
Manifest number: 02C3
Signing time: Sun 19 Oct 2025 11:01:42 +0000
Manifest this update: Sun 19 Oct 2025 11:01:42 +0000
Manifest next update: Mon 20 Oct 2025 11:01:42 +0000
Files and hashes: 1: 5yHQ6mg8xnWULAmPWcQRyGDorto.crl (hash: vUho4vUyRH+xYVAarHpdou5RabxEqdmsIH2LaosoJWg=)
2: jgoeY3coRJMRVNj7rT_gdCxKrt4.roa (hash: HO7ymkMaYgqdA88q8uGMkiN43bUDJb9bwGWjnqtMFDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:e2:ac:41:7c:ac:4b:48:3b:02:74:42:7f:c8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e721d0ea683cc675942c098f59c411c860e8aeda
Validity
Not Before: Oct 19 11:01:42 2025 GMT
Not After : Oct 20 11:01:42 2025 GMT
Subject: CN=3aa7d75816bb39b52c9a6d4ddac5b1a866d59aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:91:ff:98:47:ff:58:db:43:48:f2:c1:ee:58:
43:65:81:8a:f8:86:55:92:ba:1a:74:48:fe:6d:d7:
33:4e:8c:2b:8b:f1:78:6e:bb:27:30:99:02:b4:03:
1c:54:8f:18:3d:74:00:2c:44:a2:72:1f:e8:20:4a:
38:2c:89:84:fe:68:a3:66:e1:a3:11:f0:a5:c5:e6:
e5:5f:20:bb:58:5c:72:4b:3e:fc:d2:cd:de:c2:cb:
17:f8:72:3e:c1:05:56:99:30:fb:99:ac:59:f3:1e:
51:96:37:2f:35:d4:ca:e7:a1:e8:35:55:a3:db:df:
bc:68:1b:60:e1:2c:c4:8f:5b:f4:d2:a7:d7:8c:36:
d7:6e:66:31:dd:a1:f3:7c:9b:c2:ab:7a:9d:94:8e:
fa:98:37:bf:dc:c8:6e:71:dc:7e:bd:fd:d2:2f:84:
7e:4c:cc:cc:b7:0b:59:e6:4f:45:f0:de:3e:31:93:
e2:6a:fd:2c:44:17:af:df:d5:2e:eb:a2:87:89:b6:
29:d0:31:19:40:ea:73:70:80:3d:1a:f5:4b:a4:bf:
29:1e:ac:0a:12:50:fa:6f:3f:5a:d9:df:b9:b4:07:
3c:ea:22:b7:d4:5d:b4:0b:28:7f:f3:b5:49:31:5c:
54:2f:10:02:7d:51:66:ea:30:50:93:49:c0:82:c6:
e2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A7:D7:58:16:BB:39:B5:2C:9A:6D:4D:DA:C5:B1:A8:66:D5:9A:A2
X509v3 Authority Key Identifier:
keyid:E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c1:1c:a2:2f:1a:fd:62:08:81:eb:6b:4b:e0:a0:89:19:38:
e7:2f:a9:45:0e:a0:7a:8b:05:c0:74:79:f1:4e:1f:87:b1:9f:
56:b6:3c:11:ab:e8:91:b5:07:04:00:4e:57:72:59:28:46:ea:
f4:9a:50:a0:79:71:2f:51:94:ca:19:c9:71:6d:3e:71:68:d5:
79:26:61:fa:ad:1a:c1:84:43:73:d5:46:33:e6:03:5b:5f:cb:
01:fc:4d:99:cd:86:1b:3f:cc:3b:6b:ec:9e:aa:ad:81:44:80:
8b:6f:31:89:46:fe:49:d6:f1:c9:8f:0f:01:de:8e:60:47:3b:
b2:67:79:14:d5:87:94:81:e5:78:b6:9e:f0:25:05:ef:a9:98:
ad:0e:77:2e:ac:48:58:03:4d:5e:d8:d6:38:09:c2:8f:9a:91:
47:f2:10:29:94:c5:fc:92:48:3b:94:a9:72:13:d4:6b:d9:1c:
a5:b4:2b:c6:09:f9:77:e8:18:5f:ff:a3:05:a6:6d:cf:d1:bb:
40:5d:41:de:4a:45:ef:16:d6:11:66:4c:a8:2c:ce:28:7d:3d:
3a:65:e3:5b:f0:26:ac:4f:7b:de:c8:11:8a:14:07:5f:db:de:
2b:87:8e:24:58:db:a9:c5:06:2c:19:db:21:45:9a:5e:75:2e:
87:76:c8:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IeKsQXysS0g7AnRCf8jBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MjFkMGVhNjgzY2M2NzU5NDJjMDk4ZjU5YzQxMWM4NjBl
OGFlZGEwHhcNMjUxMDE5MTEwMTQyWhcNMjUxMDIwMTEwMTQyWjAzMTEwLwYDVQQD
EygzYWE3ZDc1ODE2YmIzOWI1MmM5YTZkNGRkYWM1YjFhODY2ZDU5YWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35H/mEf/WNtDSPLB7lhDZYGK+IZV
kroadEj+bdczTowri/F4brsnMJkCtAMcVI8YPXQALESich/oIEo4LImE/mijZuGj
EfClxeblXyC7WFxySz780s3ewssX+HI+wQVWmTD7maxZ8x5RljcvNdTK56HoNVWj
29+8aBtg4SzEj1v00qfXjDbXbmYx3aHzfJvCq3qdlI76mDe/3Mhucdx+vf3SL4R+
TMzMtwtZ5k9F8N4+MZPiav0sRBev39Uu66KHibYp0DEZQOpzcIA9GvVLpL8pHqwK
ElD6bz9a2d+5tAc86iK31F20Cyh/87VJMVxULxACfVFm6jBQk0nAgsbiOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqn11gWuzm1LJptTdrFsahm1ZqiMB8GA1UdIwQY
MBaAFOch0OpoPMZ1lCwJj1nEEchg6K7aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXlIUTZtZzh4bldVTEFtUFdjUVJ5R0RvcnRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84NDEyNTctOWQ5My00OTE4LWE4YWUt
NzJjYTEzZGZhZDJiLzEvNXlIUTZtZzh4bldVTEFtUFdjUVJ5R0RvcnRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS84NDEyNTctOWQ5My00OTE4LWE4YWUtNzJjYTEzZGZhZDJi
LzEvNXlIUTZtZzh4bldVTEFtUFdjUVJ5R0RvcnRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8Ecoi8a
/WIIgetrS+CgiRk45y+pRQ6geosFwHR58U4fh7GfVrY8EavokbUHBABOV3JZKEbq
9JpQoHlxL1GUyhnJcW0+cWjVeSZh+q0awYRDc9VGM+YDW1/LAfxNmc2GGz/MO2vs
nqqtgUSAi28xiUb+SdbxyY8PAd6OYEc7smd5FNWHlIHleLae8CUF76mYrQ53LqxI
WANNXtjWOAnCj5qRR/IQKZTF/JJIO5SpchPUa9kcpbQrxgn5d+gYX/+jBaZtz9G7
QF1B3kpF7xbWEWZMqCzOKH09OmXjW/AmrE973sgRihQHX9veK4eOJFjbqcUGLBnb
IUWaXnUuh3bIrw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:13 2025 by rpki-client