Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: X+Y/V9dF8dm0ef6CmRH1mWpkftoI4WelnMBtNw0Onxw=
Subject key identifier: 1D:FB:8A:96:C6:F7:3A:C6:20:1D:B0:15:D5:F0:AC:D7:32:E5:07:3E
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 0199FD345C7B6DEF6A701D41E8F5D0B3552C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 06FC
Signing time: Sun 19 Oct 2025 16:01:31 +0000
Manifest this update: Sun 19 Oct 2025 16:01:31 +0000
Manifest next update: Mon 20 Oct 2025 16:01:31 +0000
Files and hashes: 1: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: DtCtqEaeFS3qJgUX5keMIsDU2ogyb0PP+DwqZkEZl8c=)
2: bmXZpHHxtrkVL17e18KvIxTw5lc.roa (hash: 8ICDtcdjlLyMFFUIIbeNdV9LHsXmbPFx6BjBW2piZ4U=)
3: vQFumMlickMAeqfmQnyl7TY_Pzg.roa (hash: fsxJlhkOiwS8utSdO9amMMp5rJDtdsaC3KUWPM6ffgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:5c:7b:6d:ef:6a:70:1d:41:e8:f5:d0:b3:55:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Oct 19 16:01:31 2025 GMT
Not After : Oct 20 16:01:31 2025 GMT
Subject: CN=1dfb8a96c6f73ac6201db015d5f0acd732e5073e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ab:5c:ef:ca:03:7f:f6:8e:a6:90:5c:11:03:
30:2f:da:88:10:88:69:d9:6f:a8:70:2a:65:94:95:
67:1e:a7:83:78:6c:6d:2b:d6:3e:77:f7:cf:e5:7e:
92:47:5a:dc:2a:a3:58:af:4a:b7:d3:b8:01:14:52:
7c:f2:0c:b6:88:11:3f:e4:5c:cd:10:57:f2:cf:ac:
78:28:f5:d2:76:b3:a9:c1:51:81:1c:59:58:83:c1:
10:d5:a1:e6:55:c6:9a:a7:73:7a:d6:73:a0:ee:e9:
f1:f2:c8:8e:cb:90:0f:7d:59:bb:3f:37:03:f7:b4:
e0:9a:4a:2f:2f:39:7b:d7:52:19:2a:1f:08:6c:7b:
08:3c:24:ce:78:9a:3a:d6:5c:a2:56:e5:18:6c:db:
67:ee:dc:69:fa:68:c5:0b:3e:a7:f4:51:aa:32:6b:
10:45:e9:60:32:e6:7e:f9:8f:46:c1:3f:88:03:90:
f6:41:90:54:93:2a:42:58:4e:02:0c:70:30:3b:2b:
16:5d:19:a4:f3:e5:54:1f:2d:65:f3:dc:97:84:8e:
9a:b2:13:f7:09:e3:ff:87:3f:7c:c1:4a:5b:33:c8:
48:7e:c3:44:53:1f:8e:d2:fd:73:b0:5e:8a:f6:eb:
53:e7:d5:3b:67:04:d4:71:ba:4b:02:b5:06:bd:97:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FB:8A:96:C6:F7:3A:C6:20:1D:B0:15:D5:F0:AC:D7:32:E5:07:3E
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c2:54:e9:e7:19:d6:b2:ef:55:ab:dd:ec:5e:b2:64:a6:a9:
cb:21:fd:ae:da:4b:63:42:27:a2:3e:1e:a4:10:45:74:ad:82:
22:a3:d9:75:e7:70:a1:e7:8e:0d:1e:99:78:d3:c1:cd:c9:ec:
e6:34:ea:e8:72:f5:ff:04:7d:39:f9:b7:01:d6:9e:67:41:5c:
20:2e:ce:af:ba:3e:b0:9b:8a:41:fd:a4:29:ee:00:88:e5:d8:
5c:b8:8e:17:84:23:7d:e9:a8:4a:27:8a:62:92:05:75:aa:f1:
21:80:b8:e8:eb:8f:42:0f:a5:57:6a:08:7c:0a:45:9d:40:db:
ea:89:72:21:d5:f2:ab:21:75:b5:3f:7d:fa:7a:a4:e5:00:eb:
78:bf:23:9f:12:ed:67:5e:47:c6:14:0e:94:ad:cd:2e:3a:69:
84:b5:32:02:b1:0d:18:63:6c:c4:a5:f4:e8:dd:a8:dc:49:00:
f4:03:bf:33:e6:ff:73:ea:dc:8a:13:ea:ce:0f:55:f3:a4:39:
cc:36:f8:74:91:d3:2e:c6:b4:de:05:69:8b:62:1f:ca:55:0b:
c0:7c:77:07:00:c1:1f:63:41:24:9a:c0:05:45:95:49:af:b3:
59:b6:68:66:c8:b3:3f:05:95:c9:03:b1:49:94:95:d9:09:72:
b5:a8:e1:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NFx7be9qcB1B6PXQs1UsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNWVkOTkyMWM2M2JmMTBkYjA4NGJhZDMzMmVhOWZmOWY4
MTk5ZTYwHhcNMjUxMDE5MTYwMTMxWhcNMjUxMDIwMTYwMTMxWjAzMTEwLwYDVQQD
EygxZGZiOGE5NmM2ZjczYWM2MjAxZGIwMTVkNWYwYWNkNzMyZTUwNzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKtc78oDf/aOppBcEQMwL9qIEIhp
2W+ocCpllJVnHqeDeGxtK9Y+d/fP5X6SR1rcKqNYr0q307gBFFJ88gy2iBE/5FzN
EFfyz6x4KPXSdrOpwVGBHFlYg8EQ1aHmVcaap3N61nOg7unx8siOy5APfVm7PzcD
97TgmkovLzl711IZKh8IbHsIPCTOeJo61lyiVuUYbNtn7txp+mjFCz6n9FGqMmsQ
RelgMuZ++Y9GwT+IA5D2QZBUkypCWE4CDHAwOysWXRmk8+VUHy1l89yXhI6ashP3
CeP/hz98wUpbM8hIfsNEUx+O0v1zsF6K9utT59U7ZwTUcbpLArUGvZcXxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB37ipbG9zrGIB2wFdXwrNcy5Qc+MB8GA1UdIwQY
MBaAFF9e2ZIcY78Q2whLrTMuqf+fgZnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9kZjBiN2EtNjhiMy00N2Q1LWI2NzEt
ZGYyN2YxMGM3MDk3LzEvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9kZjBiN2EtNjhiMy00N2Q1LWI2NzEtZGYyN2YxMGM3MDk3
LzEvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQcJU6ecZ
1rLvVavd7F6yZKapyyH9rtpLY0Inoj4epBBFdK2CIqPZdedwoeeODR6ZeNPBzcns
5jTq6HL1/wR9Ofm3AdaeZ0FcIC7Or7o+sJuKQf2kKe4AiOXYXLiOF4QjfemoSieK
YpIFdarxIYC46OuPQg+lV2oIfApFnUDb6olyIdXyqyF1tT99+nqk5QDreL8jnxLt
Z15HxhQOlK3NLjpphLUyArENGGNsxKX06N2o3EkA9AO/M+b/c+rcihPqzg9V86Q5
zDb4dJHTLsa03gVpi2IfylULwHx3BwDBH2NBJJrABUWVSa+zWbZoZsizPwWVyQOx
SZSV2Qlytajhgg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:28:37 2025 by rpki-client