Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
File: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft (raw, json)
Hash identifier: h7kCj6dFPgWu6huiMK5UGySJm1Ud2pStAfl9aEH/c1c=
Subject key identifier: C5:3A:B0:7D:36:30:2C:0D:DF:AB:9E:AC:2B:AE:89:14:EC:91:36:3B
Authority key identifier: 5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
Certificate issuer: /CN=5fab019d98b88c585d5f016204113c839ae067d1
Certificate serial: 0199FC2185225CB12C51E2CDD3B4E8247AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
Manifest number: 0508
Signing time: Sun 19 Oct 2025 11:01:19 +0000
Manifest this update: Sun 19 Oct 2025 11:01:19 +0000
Manifest next update: Mon 20 Oct 2025 11:01:19 +0000
Files and hashes: 1: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl (hash: p4leJufTO8nsTJggc29yjv1AcJTpNjZj3RYTFBoITTI=)
2: zN7bolKHX5-8_T6xAiHUcxzsXEU.roa (hash: Ja9ytSf2n5JngXin2znXRtSQXJwWKPjF0nquQXGWBgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:85:22:5c:b1:2c:51:e2:cd:d3:b4:e8:24:7a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fab019d98b88c585d5f016204113c839ae067d1
Validity
Not Before: Oct 19 11:01:19 2025 GMT
Not After : Oct 20 11:01:19 2025 GMT
Subject: CN=c53ab07d36302c0ddfab9eac2bae8914ec91363b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:79:e7:92:63:bc:01:d2:47:e1:39:38:c0:f2:
d4:f2:72:5e:f3:25:e1:db:ad:ff:25:14:8f:8e:7e:
49:2f:ff:c3:30:18:fb:85:f2:45:72:93:44:9e:fb:
e2:7d:e4:40:cc:f5:5c:92:93:87:9d:f1:f4:3c:a6:
a5:ce:27:60:40:12:f8:c5:9e:ef:0d:10:b5:f3:59:
39:61:ef:88:cf:c3:62:0b:bc:1d:15:f3:e4:b6:0c:
93:9f:fb:24:bc:a0:b1:83:59:b9:2e:57:86:b5:c1:
87:12:77:68:05:38:b9:7b:95:3d:da:c8:98:97:94:
1f:a2:10:12:9d:2d:1b:c1:24:5a:a0:b0:88:ae:42:
1d:f2:54:3f:dc:18:04:e0:5c:bc:5f:e7:2f:25:95:
5f:90:26:db:0c:54:87:a1:09:c9:c3:a7:19:15:4b:
0d:fc:33:70:1b:75:d4:c6:e1:c6:2d:27:23:9d:83:
b9:a0:9f:02:25:e6:6c:4e:6b:73:4d:d9:d8:de:5e:
83:50:56:e7:7d:7b:76:78:ed:33:82:0d:b4:af:cf:
7d:dd:8f:a1:db:89:80:b9:63:ee:1c:f7:5e:f5:89:
8b:2d:32:74:b7:0a:c8:0d:88:15:cc:c3:d5:d6:17:
19:c3:6d:e1:25:4e:54:67:ba:45:e7:7c:7b:ad:ac:
fd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3A:B0:7D:36:30:2C:0D:DF:AB:9E:AC:2B:AE:89:14:EC:91:36:3B
X509v3 Authority Key Identifier:
keyid:5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:42:c2:63:68:1b:2e:0f:eb:12:de:04:7c:02:81:46:f3:6c:
79:d2:98:47:c7:85:1f:5d:9f:20:62:8e:d3:bd:d6:9e:e5:9e:
9b:0d:6a:7a:d1:91:27:9e:b2:5f:a7:fa:71:30:38:43:ea:93:
30:2a:44:04:37:f9:a9:44:59:b3:48:ca:1a:d9:ab:b3:b5:5c:
f7:a8:ae:e0:e2:20:75:d8:35:6e:82:3f:9a:b6:b3:df:8b:2e:
f4:af:0f:f9:58:1a:fe:23:7d:7a:0d:b9:a3:f3:d7:d9:39:d2:
0a:12:8f:da:4a:cb:52:c1:66:01:f1:f7:e2:d7:22:27:20:d8:
41:f6:49:25:5f:41:1c:43:9d:99:f5:8e:e8:ce:85:d3:b3:02:
e2:21:87:92:16:cd:a8:bd:c8:77:b7:8a:7a:55:da:d8:5d:52:
d2:ff:db:0c:af:a6:06:09:1a:54:4e:8e:bb:c6:07:8a:97:e0:
30:7d:c4:fc:af:02:89:33:8c:e4:30:33:c3:86:60:f9:cb:c9:
99:d1:46:dc:51:17:22:ab:84:42:4f:8d:eb:6e:58:2a:ef:ff:
f5:ed:35:c0:f1:ad:02:ef:92:60:ad:cd:4e:77:50:65:5d:b0:
72:70:42:b4:0d:03:93:c1:04:ae:df:1f:54:a9:c0:d5:4b:4c:
e5:8d:b7:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IYUiXLEsUeLN07ToJHrgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYWIwMTlkOThiODhjNTg1ZDVmMDE2MjA0MTEzYzgzOWFl
MDY3ZDEwHhcNMjUxMDE5MTEwMTE5WhcNMjUxMDIwMTEwMTE5WjAzMTEwLwYDVQQD
EyhjNTNhYjA3ZDM2MzAyYzBkZGZhYjllYWMyYmFlODkxNGVjOTEzNjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXnnkmO8AdJH4Tk4wPLU8nJe8yXh
263/JRSPjn5JL//DMBj7hfJFcpNEnvvifeRAzPVckpOHnfH0PKalzidgQBL4xZ7v
DRC181k5Ye+Iz8NiC7wdFfPktgyTn/skvKCxg1m5LleGtcGHEndoBTi5e5U92siY
l5QfohASnS0bwSRaoLCIrkId8lQ/3BgE4Fy8X+cvJZVfkCbbDFSHoQnJw6cZFUsN
/DNwG3XUxuHGLScjnYO5oJ8CJeZsTmtzTdnY3l6DUFbnfXt2eO0zgg20r8993Y+h
24mAuWPuHPde9YmLLTJ0twrIDYgVzMPV1hcZw23hJU5UZ7pF53x7raz9lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMU6sH02MCwN36uerCuuiRTskTY7MB8GA1UdIwQY
MBaAFF+rAZ2YuIxYXV8BYgQRPIOa4GfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDZzQm5aaTRqRmhkWHdGaUJCRThnNXJnWjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mYjI3OWMtYmQxZS00M2JkLWE0OTct
Yzk1M2E4OGJiZmEzLzEvWDZzQm5aaTRqRmhkWHdGaUJCRThnNXJnWjlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9mYjI3OWMtYmQxZS00M2JkLWE0OTctYzk1M2E4OGJiZmEz
LzEvWDZzQm5aaTRqRmhkWHdGaUJCRThnNXJnWjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALELCY2gb
Lg/rEt4EfAKBRvNsedKYR8eFH12fIGKO073WnuWemw1qetGRJ56yX6f6cTA4Q+qT
MCpEBDf5qURZs0jKGtmrs7Vc96iu4OIgddg1boI/mraz34su9K8P+Vga/iN9eg25
o/PX2TnSChKP2krLUsFmAfH34tciJyDYQfZJJV9BHEOdmfWO6M6F07MC4iGHkhbN
qL3Id7eKelXa2F1S0v/bDK+mBgkaVE6Ou8YHipfgMH3E/K8CiTOM5DAzw4Zg+cvJ
mdFG3FEXIquEQk+N625YKu//9e01wPGtAu+SYK3NTndQZV2wcnBCtA0Dk8EErt8f
VKnA1UtM5Y23ig==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:07 2025 by rpki-client