Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
File: x24D_30L_eMoOcKP7IHGJ1wE0z8.mft (raw, json)
Hash identifier: p5b0dOTAWElWPjznJgPQN9zZYdZ8nBCywOqw4kSS6PU=
Subject key identifier: 5C:7C:13:43:9D:98:7E:4B:1F:BE:82:BA:88:C5:ED:A2:E1:ED:29:FB
Authority key identifier: C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F
Certificate issuer: /CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f
Certificate serial: 0199FCFD69941A29E50F7C95CD8B4790652A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 15:01:29 +0000
Manifest this update: Sun 19 Oct 2025 15:01:29 +0000
Manifest next update: Mon 20 Oct 2025 15:01:29 +0000
Files and hashes: 1: N35ogLyeBi2BuFWlUXcGcxqHzqk.roa (hash: KCN204MjqT3ieOgIgu9cP0A/BCFFBOWU+ExI90E1Oec=)
2: gMMT4CFkCWRYtDrF3UxIZfPsxKc.roa (hash: 2/OhbtZSnC9mHzUn7UoTXNOmX1wP26fthpipUmjf41Y=)
3: x24D_30L_eMoOcKP7IHGJ1wE0z8.crl (hash: j16VXFufvRnympJY3gd1vM1f7D05F4YbBUefGUmjaa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:69:94:1a:29:e5:0f:7c:95:cd:8b:47:90:65:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f
Validity
Not Before: Oct 19 15:01:29 2025 GMT
Not After : Oct 20 15:01:29 2025 GMT
Subject: CN=5c7c13439d987e4b1fbe82ba88c5eda2e1ed29fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:0d:af:f9:57:dd:4a:c5:b2:08:fc:c6:da:
36:0c:58:33:ae:c3:dd:7c:4c:3d:b9:8f:63:ea:90:
fd:d3:50:69:b6:12:75:b6:a8:03:82:d3:49:32:d5:
4c:27:24:57:95:53:96:a4:51:50:04:a4:bd:4f:5b:
4b:14:68:b1:1b:f4:c3:d9:33:48:9c:8c:b7:4d:19:
84:bb:23:28:45:15:c7:f5:43:af:7a:86:83:72:1b:
6a:82:d4:4c:e4:fe:85:3a:ef:ae:9d:e2:1e:80:87:
ad:2d:34:f1:f2:91:bc:f5:0a:14:87:87:e4:b5:aa:
02:8f:d7:86:e8:86:7f:0a:16:0c:6f:b9:ec:4f:62:
98:25:8d:ca:98:32:00:41:0f:b3:6b:57:a8:bf:94:
86:64:44:fc:9f:fd:98:82:3e:e5:1c:5f:e6:a0:9f:
72:85:07:3c:4a:0d:59:e8:9f:7d:2f:91:b1:9a:5c:
15:24:1e:3b:70:01:65:95:77:b4:c8:b2:f4:4e:68:
ba:4c:5e:4c:5e:80:1a:23:b9:04:7e:de:b0:3b:ca:
c3:56:29:8f:35:7b:4d:75:91:ec:d6:1e:c4:50:55:
ab:82:28:b7:52:76:e0:fd:ba:0f:74:59:2f:de:e4:
01:ee:bd:6c:32:ea:ea:e4:a8:fa:7a:97:4c:72:93:
87:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7C:13:43:9D:98:7E:4B:1F:BE:82:BA:88:C5:ED:A2:E1:ED:29:FB
X509v3 Authority Key Identifier:
keyid:C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:49:42:ee:a7:f1:7e:8b:1b:18:ba:4b:83:7e:37:bc:9a:42:
fe:43:45:fb:e6:93:af:c9:43:32:3d:c8:3c:77:a3:70:65:6e:
ce:85:81:0b:1c:cd:a4:b5:1c:e6:a0:53:bb:44:bb:bd:86:b8:
cd:bc:f2:e1:2d:72:54:65:81:66:8a:69:a4:f2:47:a0:6f:33:
74:6f:8a:75:bc:8b:fb:98:ca:73:04:c0:1c:84:98:80:c5:2d:
68:b7:d0:cf:42:a6:e1:04:14:2b:64:38:85:bc:30:60:1b:67:
75:0e:74:79:09:ea:4a:22:25:f1:c1:bd:7d:1b:9c:f9:6f:0a:
79:32:02:e6:85:1e:d1:0d:0d:f8:ca:54:95:2e:98:b7:65:ab:
3e:be:2c:9c:94:dc:7b:26:e3:5f:73:7e:5b:98:21:e9:06:f4:
41:b5:16:a3:03:f7:24:28:48:68:63:34:57:98:cb:0d:b4:2c:
9f:00:bd:f1:b7:27:b7:0c:07:8c:00:8c:44:c3:cd:fd:27:c7:
6e:f8:8e:d0:40:6e:df:6a:12:0c:55:df:e3:70:96:46:f3:d0:
88:5e:58:4f:68:6f:4f:b7:a8:a4:2a:61:a2:c7:73:5c:bd:a2:
95:9e:7c:80:f5:51:cf:05:95:1c:28:24:59:56:67:fd:2f:a6:
00:d6:b1:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/WmUGinlD3yVzYtHkGUqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NmUwM2ZmN2QwYmZkZTMyODM5YzI4ZmVjODFjNjI3NWMw
NGQzM2YwHhcNMjUxMDE5MTUwMTI5WhcNMjUxMDIwMTUwMTI5WjAzMTEwLwYDVQQD
Eyg1YzdjMTM0MzlkOTg3ZTRiMWZiZTgyYmE4OGM1ZWRhMmUxZWQyOWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFYNr/lX3UrFsgj8xto2DFgzrsPd
fEw9uY9j6pD901BpthJ1tqgDgtNJMtVMJyRXlVOWpFFQBKS9T1tLFGixG/TD2TNI
nIy3TRmEuyMoRRXH9UOveoaDchtqgtRM5P6FOu+uneIegIetLTTx8pG89QoUh4fk
taoCj9eG6IZ/ChYMb7nsT2KYJY3KmDIAQQ+za1eov5SGZET8n/2Ygj7lHF/moJ9y
hQc8Sg1Z6J99L5GxmlwVJB47cAFllXe0yLL0Tmi6TF5MXoAaI7kEft6wO8rDVimP
NXtNdZHs1h7EUFWrgii3Unbg/boPdFkv3uQB7r1sMurq5Kj6epdMcpOH1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFx8E0OdmH5LH76CuojF7aLh7Sn7MB8GA1UdIwQY
MBaAFMduA/99C/3jKDnCj+yBxidcBNM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDI0RF8zMExfZU1vT2NLUDdJSEdKMXdFMHo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zMzQ3ZjctNTI1OS00MjM4LWFkYjYt
ODM1ZGUwZjU4OTJlLzEveDI0RF8zMExfZU1vT2NLUDdJSEdKMXdFMHo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zMzQ3ZjctNTI1OS00MjM4LWFkYjYtODM1ZGUwZjU4OTJl
LzEveDI0RF8zMExfZU1vT2NLUDdJSEdKMXdFMHo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0lC7qfx
fosbGLpLg343vJpC/kNF++aTr8lDMj3IPHejcGVuzoWBCxzNpLUc5qBTu0S7vYa4
zbzy4S1yVGWBZopppPJHoG8zdG+KdbyL+5jKcwTAHISYgMUtaLfQz0Km4QQUK2Q4
hbwwYBtndQ50eQnqSiIl8cG9fRuc+W8KeTIC5oUe0Q0N+MpUlS6Yt2WrPr4snJTc
eybjX3N+W5gh6Qb0QbUWowP3JChIaGM0V5jLDbQsnwC98bcntwwHjACMRMPN/SfH
bviO0EBu32oSDFXf43CWRvPQiF5YT2hvT7eopCphosdzXL2ilZ58gPVRzwWVHCgk
WVZn/S+mANax1Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:47 2025 by rpki-client