Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
File: g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft (raw, json)
Hash identifier: VnKoSxFkWLu7v6bFI9vKH0pGOV2waFv1ADT+xcWYwDY=
Subject key identifier: ED:A6:C0:3B:DB:D9:34:37:1C:10:6B:42:1D:46:77:5A:A8:6B:14:B5
Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Certificate serial: 0199FD33F276D6A8CC81393675877B0C7A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
Manifest number: 0D51
Signing time: Sun 19 Oct 2025 16:01:04 +0000
Manifest this update: Sun 19 Oct 2025 16:01:04 +0000
Manifest next update: Mon 20 Oct 2025 16:01:04 +0000
Files and hashes: 1: 1-eVtiZIJZtejkcxnJZbMOuqtkvM.roa (hash: /dozujzBruht/lOgqwCLtQNFBrpieolWDy5kZ5Mel3s=)
2: 56FwlKZ7KIhARLPC6HlmmMABBnU.roa (hash: Z+1GZvGlxeBEP1crVQ4oVXjpJKgbOm4WDdf1clBCOOM=)
3: g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl (hash: qzaHTHMV/2g+r6vLSegyf05pfsoy8hgL3wEKt73BY5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f2:76:d6:a8:cc:81:39:36:75:87:7b:0c:7a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Validity
Not Before: Oct 19 16:01:04 2025 GMT
Not After : Oct 20 16:01:04 2025 GMT
Subject: CN=eda6c03bdbd934371c106b421d46775aa86b14b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5f:d7:df:89:6f:69:73:c6:0d:73:fd:44:7a:
26:55:dc:2e:50:dd:3b:56:0e:ea:68:41:f4:81:49:
b6:a6:00:1c:aa:72:f1:a3:a9:8b:ef:14:e3:e2:c1:
b3:90:a0:15:54:17:05:6d:4a:a3:84:75:8a:2c:b6:
66:1f:1e:b1:75:d6:5d:55:d0:8c:1d:01:28:2d:24:
99:c4:05:30:9b:e1:79:96:88:15:46:35:29:e7:d2:
77:d3:87:d2:69:2b:2e:e7:6b:6c:7d:4f:4c:8b:10:
9a:c3:79:79:fe:40:e2:f4:e1:54:f9:58:a8:f8:f7:
22:de:a2:b0:84:c5:44:25:d6:af:11:93:a4:e0:33:
5d:e2:55:96:42:e7:f9:34:67:f3:4d:bc:74:db:bc:
80:11:2f:ab:0c:70:5f:6a:ae:77:6f:da:a5:bd:e1:
8e:f2:66:a0:06:dd:84:d1:97:f0:f3:89:1b:7b:e1:
c5:f3:55:87:79:66:e9:71:db:c5:45:b1:20:d3:7c:
a2:e9:09:1c:9d:6a:6e:0c:0e:8b:2c:18:50:ee:22:
b8:99:2f:20:f5:12:16:97:5b:c5:33:c4:29:3b:a9:
db:db:b0:15:84:08:87:d4:c4:dc:e8:88:a5:59:17:
57:e6:5a:cf:cf:42:89:b4:c0:be:59:5d:4d:72:91:
ae:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A6:C0:3B:DB:D9:34:37:1C:10:6B:42:1D:46:77:5A:A8:6B:14:B5
X509v3 Authority Key Identifier:
keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1f:47:96:19:50:5b:76:17:f6:0d:ec:b6:70:b5:46:11:1b:
ba:37:1c:70:a3:27:96:f4:07:0c:1c:29:bc:88:06:db:7a:d7:
fc:bb:73:7a:30:c5:3e:7c:e0:b1:4e:2e:0e:5e:59:1e:e5:12:
22:e0:3a:65:26:8a:fe:da:01:da:83:82:09:3c:3b:8f:d2:a8:
21:25:57:f7:f0:f8:00:d6:8a:64:6e:6e:31:3f:0a:17:3a:fa:
aa:d7:ce:d6:e4:c0:68:e7:21:a2:7a:3c:9f:cb:98:bb:9e:0b:
bd:af:59:0a:f3:ae:ae:1f:44:16:d5:1c:39:8e:c9:4c:08:2a:
1f:0e:4d:9a:82:ae:0d:00:16:c3:51:bb:f4:20:9b:1d:12:0b:
45:83:0d:04:e1:01:cf:f2:7b:30:03:3a:48:7d:d4:2e:32:15:
6e:eb:8d:44:d3:e6:5c:6f:06:4a:73:ce:b3:cf:7d:6c:fe:fd:
30:a7:2b:b3:09:ce:2d:2f:42:fb:bb:61:06:65:ed:fe:a6:ba:
b7:c3:9e:e3:fe:8a:f8:83:db:cf:45:75:fd:c4:f8:81:f7:02:
ef:1b:1e:5f:e2:f4:6b:2d:83:fa:46:0a:16:fd:8f:4f:ec:7a:
bd:23:24:17:30:50:ba:1b:ba:6b:25:38:60:fe:ef:5e:b8:19:
37:49:d4:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M/J21qjMgTk2dYd7DHojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZTVkOTAzMDFkM2NmNjdiODhmZWU0MmRkNTQ1YWZjZjE0
ZWE1NjEwHhcNMjUxMDE5MTYwMTA0WhcNMjUxMDIwMTYwMTA0WjAzMTEwLwYDVQQD
EyhlZGE2YzAzYmRiZDkzNDM3MWMxMDZiNDIxZDQ2Nzc1YWE4NmIxNGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV/X34lvaXPGDXP9RHomVdwuUN07
Vg7qaEH0gUm2pgAcqnLxo6mL7xTj4sGzkKAVVBcFbUqjhHWKLLZmHx6xddZdVdCM
HQEoLSSZxAUwm+F5logVRjUp59J304fSaSsu52tsfU9MixCaw3l5/kDi9OFU+Vio
+Pci3qKwhMVEJdavEZOk4DNd4lWWQuf5NGfzTbx027yAES+rDHBfaq53b9qlveGO
8magBt2E0Zfw84kbe+HF81WHeWbpcdvFRbEg03yi6QkcnWpuDA6LLBhQ7iK4mS8g
9RIWl1vFM8QpO6nb27AVhAiH1MTc6IilWRdX5lrPz0KJtMC+WV1NcpGuVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2mwDvb2TQ3HBBrQh1Gd1qoaxS1MB8GA1UdIwQY
MBaAFIPl2QMB089nuI/uQt1UWvzxTqVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xNTdiYTktNWFlNy00NDYwLTg4N2It
NzgyYjgyZWJjYWFlLzEvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xNTdiYTktNWFlNy00NDYwLTg4N2ItNzgyYjgyZWJjYWFl
LzEvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfh9HlhlQ
W3YX9g3stnC1RhEbujcccKMnlvQHDBwpvIgG23rX/LtzejDFPnzgsU4uDl5ZHuUS
IuA6ZSaK/toB2oOCCTw7j9KoISVX9/D4ANaKZG5uMT8KFzr6qtfO1uTAaOchono8
n8uYu54Lva9ZCvOurh9EFtUcOY7JTAgqHw5NmoKuDQAWw1G79CCbHRILRYMNBOEB
z/J7MAM6SH3ULjIVbuuNRNPmXG8GSnPOs899bP79MKcrswnOLS9C+7thBmXt/qa6
t8Oe4/6K+IPbz0V1/cT4gfcC7xseX+L0ay2D+kYKFv2PT+x6vSMkFzBQuhu6ayU4
YP7vXrgZN0nUPg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:29 2025 by rpki-client