Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
File: X5ZnbPOY05lMTdSilllGFN_1hsc.mft (raw, json)
Hash identifier: qbLZCLMqwlXg4FXbRkPdtdxE6wBVr8K/jfXpOxUCtTk=
Subject key identifier: 31:54:70:4E:A3:50:12:DA:F9:F7:6F:4D:1D:C2:37:11:EC:6E:48:A6
Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7
Certificate serial: 019A522CC2CF7C5644915AC5EA815CA78DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
Manifest number: 1726
Signing time: Wed 05 Nov 2025 04:00:56 +0000
Manifest this update: Wed 05 Nov 2025 04:00:56 +0000
Manifest next update: Thu 06 Nov 2025 04:00:56 +0000
Files and hashes: 1: 2zkARhYQi5MZVSVViedBzAUUfQU.roa (hash: DjES1xG44afB1DWsZff60m/UWnCi+Z0rElpzn4HCOqg=)
2: X5ZnbPOY05lMTdSilllGFN_1hsc.crl (hash: rdej9AjpP1JFWf6PtA8ze+XjLjtVVV4WNBtMDzqa2GM=)
3: XyWUYm4k4aoyZu4exVkzUEY6NsM.roa (hash: nfbYF1NSykMyHcBytLNKjU++mQtuxfs2vY7BM12cSnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:c2:cf:7c:56:44:91:5a:c5:ea:81:5c:a7:8d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7
Validity
Not Before: Nov 5 04:00:56 2025 GMT
Not After : Nov 6 04:00:56 2025 GMT
Subject: CN=3154704ea35012daf9f76f4d1dc23711ec6e48a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:42:65:35:8e:e6:de:e0:1f:ff:30:7a:3a:
c2:80:6f:b9:1c:04:3c:e6:be:72:ad:d0:5b:5e:bd:
09:f8:de:44:fc:76:7a:8c:43:0c:96:91:ba:45:e1:
e3:95:97:0f:cd:80:0e:93:e2:01:c8:78:27:06:bc:
3e:22:45:a0:50:1e:d0:5f:97:2e:b5:51:95:a4:d3:
b6:98:cc:17:ad:08:3c:4e:0b:7f:ad:ad:c7:5a:0c:
9b:6e:08:81:ff:81:ea:95:e2:30:92:38:17:53:64:
f9:2a:95:66:e9:0c:9a:11:cd:c9:12:02:1e:cc:1b:
bf:9a:db:42:aa:de:9d:11:4d:2d:db:39:12:6f:be:
b8:06:91:92:1e:da:1c:77:c7:84:3d:3d:ff:17:d5:
ab:41:78:7f:c8:7a:55:47:62:46:4d:fe:e5:a4:5e:
46:40:90:5e:77:c6:14:f8:30:27:35:bc:99:ec:7d:
d5:55:fe:91:ee:f4:f2:05:d5:a3:7d:7f:df:84:6e:
f0:ff:a4:72:3f:bb:b6:75:03:15:72:00:06:42:e9:
6e:9f:24:99:e6:ab:bc:74:e9:82:49:72:37:9e:9d:
a5:4a:1e:00:3d:50:53:7a:42:89:17:42:e2:06:b3:
d7:a2:07:f0:29:88:86:b6:f0:49:20:46:e4:e0:a5:
08:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:54:70:4E:A3:50:12:DA:F9:F7:6F:4D:1D:C2:37:11:EC:6E:48:A6
X509v3 Authority Key Identifier:
keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d2:14:3d:35:70:bb:41:5f:62:23:0a:bf:40:87:f9:c0:81:
04:ee:80:70:c3:60:9f:6c:cd:27:bb:e5:24:16:b6:c2:28:7d:
e6:57:63:fe:ed:7a:bd:a8:f6:83:fa:66:89:7c:14:20:3c:ef:
56:60:9e:34:93:0d:7b:57:79:4a:e1:be:27:1c:56:7d:c5:b7:
23:a5:43:fc:ad:d8:73:11:e4:19:61:8f:51:fa:89:d4:62:98:
75:13:30:d5:95:52:70:74:a6:51:67:3a:49:c6:81:2a:2a:06:
5f:2e:82:ed:50:d1:e8:21:09:94:e2:96:3d:e8:9b:1d:18:7f:
f5:a8:63:e8:3e:18:d3:f9:ae:56:3f:03:2a:2a:9e:c9:31:75:
bd:3f:48:6d:40:b2:d4:6e:dc:2d:d8:ee:f5:ce:8a:40:a1:2a:
20:2d:72:41:4b:47:06:d7:64:13:02:3b:4d:f6:6f:6f:24:74:
cc:74:2b:1a:4e:79:71:bb:46:87:12:68:dd:11:3e:a2:13:ef:
98:cc:6d:17:42:bf:b5:d3:4e:48:92:4a:f7:eb:ea:ce:d9:50:
28:7d:4b:97:e2:4e:60:c8:9f:a7:11:44:96:f6:b3:94:06:e5:
b4:2d:6f:bc:ae:15:f5:e4:0d:bb:a5:77:c0:5c:bd:b6:52:0f:
1c:89:f0:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLMLPfFZEkVrF6oFcp43AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOTY2NzZjZjM5OGQzOTk0YzRkZDRhMjk2NTk0NjE0ZGZm
NTg2YzcwHhcNMjUxMTA1MDQwMDU2WhcNMjUxMTA2MDQwMDU2WjAzMTEwLwYDVQQD
EygzMTU0NzA0ZWEzNTAxMmRhZjlmNzZmNGQxZGMyMzcxMWVjNmU0OGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOBCZTWO5t7gH/8wejrCgG+5HAQ8
5r5yrdBbXr0J+N5E/HZ6jEMMlpG6ReHjlZcPzYAOk+IByHgnBrw+IkWgUB7QX5cu
tVGVpNO2mMwXrQg8Tgt/ra3HWgybbgiB/4HqleIwkjgXU2T5KpVm6QyaEc3JEgIe
zBu/mttCqt6dEU0t2zkSb764BpGSHtocd8eEPT3/F9WrQXh/yHpVR2JGTf7lpF5G
QJBed8YU+DAnNbyZ7H3VVf6R7vTyBdWjfX/fhG7w/6RyP7u2dQMVcgAGQulunySZ
5qu8dOmCSXI3np2lSh4APVBTekKJF0LiBrPXogfwKYiGtvBJIEbk4KUIWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFUcE6jUBLa+fdvTR3CNxHsbkimMB8GA1UdIwQY
MBaAFF+WZ2zzmNOZTE3UopZZRhTf9YbHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDVabmJQT1kwNWxNVGRTaWxsbEdGTl8xaHNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82YTY4MDUtNWNlMC00MTI4LWEwNGMt
ZjYyZjM1YWY0MzcxLzEvWDVabmJQT1kwNWxNVGRTaWxsbEdGTl8xaHNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC82YTY4MDUtNWNlMC00MTI4LWEwNGMtZjYyZjM1YWY0Mzcx
LzEvWDVabmJQT1kwNWxNVGRTaWxsbEdGTl8xaHNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9IUPTVw
u0FfYiMKv0CH+cCBBO6AcMNgn2zNJ7vlJBa2wih95ldj/u16vaj2g/pmiXwUIDzv
VmCeNJMNe1d5SuG+JxxWfcW3I6VD/K3YcxHkGWGPUfqJ1GKYdRMw1ZVScHSmUWc6
ScaBKioGXy6C7VDR6CEJlOKWPeibHRh/9ahj6D4Y0/muVj8DKiqeyTF1vT9IbUCy
1G7cLdju9c6KQKEqIC1yQUtHBtdkEwI7TfZvbyR0zHQrGk55cbtGhxJo3RE+ohPv
mMxtF0K/tdNOSJJK9+vqztlQKH1Ll+JOYMifpxFElvazlAbltC1vvK4V9eQNu6V3
wFy9tlIPHInwhA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:46:39 2025 by rpki-client