Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
File: 5gFfHiAENZyudla5aK2ypUpDTx4.mft (raw, json)
Hash identifier: 9COxtRaJWaRzdNUdXnqYVt6vcaEBu+/9g1zdd60u3wE=
Subject key identifier: 56:36:27:55:3B:41:73:2B:63:9F:6C:FB:A6:61:9F:AE:6E:04:D5:5C
Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
Certificate issuer: /CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Certificate serial: 0199FFC8D9862D5E44237DE4A6B2547CC1B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 04:02:56 +0000
Manifest this update: Mon 20 Oct 2025 04:02:56 +0000
Manifest next update: Tue 21 Oct 2025 04:02:56 +0000
Files and hashes: 1: 5gFfHiAENZyudla5aK2ypUpDTx4.crl (hash: 4DPLI2EPsGbQ6y58flonx2lDQj3hJ4dVWXpnVzqAg40=)
2: MvZ9UpTU1jkxQ9uFTXHU8G59uDg.roa (hash: kL1zPGLwfZE8020kfHibTnemsjFNFBdHlurHXKEnCxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:d9:86:2d:5e:44:23:7d:e4:a6:b2:54:7c:c1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Validity
Not Before: Oct 20 04:02:56 2025 GMT
Not After : Oct 21 04:02:56 2025 GMT
Subject: CN=563627553b41732b639f6cfba6619fae6e04d55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a2:fe:33:c8:05:a2:a1:90:be:a0:fa:a4:13:
1a:e7:f8:8f:4c:3a:cd:29:cd:57:57:fa:a4:36:ef:
18:86:46:43:28:86:ec:87:ba:46:a5:d2:05:59:16:
2d:d0:19:e1:82:10:78:0a:f1:67:c9:e4:e7:6b:3f:
d9:33:3e:b1:97:b4:e0:69:3a:ec:6e:15:5b:2b:a2:
ca:fd:45:67:ba:62:b7:9b:15:9f:f1:ab:fc:ab:10:
db:a3:d6:5a:7b:42:c3:4d:3f:50:8f:87:04:40:71:
aa:e1:54:fb:f2:b7:63:90:29:8a:1f:d3:5c:6b:4f:
70:6d:f8:73:be:3f:2d:0a:84:60:88:6d:c8:e6:3b:
45:c6:33:39:08:46:78:9e:fe:d2:59:b9:4b:69:1f:
d4:a9:75:e0:e6:20:78:3a:56:23:09:02:11:a7:4b:
80:41:35:4d:f2:ec:41:1e:af:1e:4b:ab:a2:35:ac:
44:4a:b0:d1:9e:60:7a:04:3d:75:3c:80:95:64:e0:
e7:d7:ff:50:68:7f:17:9c:df:a6:dd:64:c0:b4:8c:
b4:85:ac:23:b9:cb:0e:2c:c6:17:00:b5:fd:28:94:
9f:88:fe:05:31:45:ff:0d:8e:f7:58:e1:47:87:27:
ee:f8:1f:84:bf:26:1e:73:ce:b4:fb:25:8d:38:0a:
07:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:36:27:55:3B:41:73:2B:63:9F:6C:FB:A6:61:9F:AE:6E:04:D5:5C
X509v3 Authority Key Identifier:
keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f5:8b:32:dc:91:ba:b9:79:71:7e:3d:7f:28:8e:44:19:12:
d1:e7:64:3b:21:cc:ad:45:8d:79:a9:51:8a:c8:ec:5a:96:a9:
8d:9e:b1:a6:ed:82:b7:a3:c3:66:b0:fc:ec:e7:1b:af:2d:39:
79:59:51:58:dc:93:e5:2a:5e:17:52:59:17:df:c1:b3:5b:e4:
ea:ce:c9:6b:64:7c:08:0d:4c:0e:99:14:72:ec:f1:70:a4:c0:
07:49:4d:29:47:82:08:70:35:00:86:91:ca:52:51:70:73:5c:
c3:4b:39:9f:0c:51:73:7b:38:fe:5a:ee:7d:49:88:90:99:62:
d0:55:34:27:9d:b0:8c:75:17:42:35:fe:ee:4f:b0:57:73:d4:
1c:50:e0:3c:bb:fe:44:a2:84:63:61:cb:3c:89:7c:69:8b:b6:
a8:56:c5:e3:7d:f5:ea:29:6b:bd:85:36:ea:00:ce:e9:5f:82:
97:e7:d6:0a:90:37:9c:5d:e4:2c:39:76:b4:4c:40:4c:51:f3:
dc:fc:c8:30:bd:61:59:fe:c1:80:65:4c:05:91:7d:c0:a1:45:
ca:d7:7a:14:ca:39:f9:e5:e0:e1:90:0a:1b:04:19:a0:df:26:
e5:ad:f3:50:b0:0f:cd:1c:2d:c2:b4:c6:d2:1d:33:92:d9:bd:
0c:95:7c:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yNmGLV5EI33kprJUfMG5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MDE1ZjFlMjAwNDM1OWNhZTc2NTZiOTY4YWRiMmE1NGE0
MzRmMWUwHhcNMjUxMDIwMDQwMjU2WhcNMjUxMDIxMDQwMjU2WjAzMTEwLwYDVQQD
Eyg1NjM2Mjc1NTNiNDE3MzJiNjM5ZjZjZmJhNjYxOWZhZTZlMDRkNTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaL+M8gFoqGQvqD6pBMa5/iPTDrN
Kc1XV/qkNu8YhkZDKIbsh7pGpdIFWRYt0BnhghB4CvFnyeTnaz/ZMz6xl7TgaTrs
bhVbK6LK/UVnumK3mxWf8av8qxDbo9Zae0LDTT9Qj4cEQHGq4VT78rdjkCmKH9Nc
a09wbfhzvj8tCoRgiG3I5jtFxjM5CEZ4nv7SWblLaR/UqXXg5iB4OlYjCQIRp0uA
QTVN8uxBHq8eS6uiNaxESrDRnmB6BD11PICVZODn1/9QaH8XnN+m3WTAtIy0hawj
ucsOLMYXALX9KJSfiP4FMUX/DY73WOFHhyfu+B+EvyYec860+yWNOAoHGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFY2J1U7QXMrY59s+6Zhn65uBNVcMB8GA1UdIwQY
MBaAFOYBXx4gBDWcrnZWuWitsqVKQ08eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWdGZkhpQUVOWnl1ZGxhNWFLMnlwVXBEVHg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MDgzMjEtMmRmYS00MjUzLWEzY2It
MmY5MjY1MTBmZmJmLzEvNWdGZkhpQUVOWnl1ZGxhNWFLMnlwVXBEVHg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81MDgzMjEtMmRmYS00MjUzLWEzY2ItMmY5MjY1MTBmZmJm
LzEvNWdGZkhpQUVOWnl1ZGxhNWFLMnlwVXBEVHg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/WLMtyR
url5cX49fyiORBkS0edkOyHMrUWNealRisjsWpapjZ6xpu2Ct6PDZrD87Ocbry05
eVlRWNyT5SpeF1JZF9/Bs1vk6s7Ja2R8CA1MDpkUcuzxcKTAB0lNKUeCCHA1AIaR
ylJRcHNcw0s5nwxRc3s4/lrufUmIkJli0FU0J52wjHUXQjX+7k+wV3PUHFDgPLv+
RKKEY2HLPIl8aYu2qFbF43316ilrvYU26gDO6V+Cl+fWCpA3nF3kLDl2tExATFHz
3PzIML1hWf7BgGVMBZF9wKFFytd6FMo5+eXg4ZAKGwQZoN8m5a3zULAPzRwtwrTG
0h0zktm9DJV8Yg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:49 2025 by rpki-client