Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
File: X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json)
Hash identifier: bbSz/hpiSua+wobTkyVAi9CEhR662pbw4IUrTpWfyhA=
Subject key identifier: 36:4A:83:D7:54:14:FC:37:4C:A1:3A:A8:11:D2:D4:18:29:D8:A7:8E
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Certificate issuer: /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial: 019A4FD09A3DB815A7692C2D068C14F8CAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 17:01:02 +0000
Manifest this update: Tue 04 Nov 2025 17:01:02 +0000
Manifest next update: Wed 05 Nov 2025 17:01:02 +0000
Files and hashes: 1: 3AF9vTlPGn0LP4BTNbyIFClKdiE.roa (hash: ErhtxdYMFohKoMlTBF3cO6zqIkHAYZYYcv46l0Ht4TU=)
2: FEeoPiD21ay-PeH3iQ-gflQJ0UI.roa (hash: El+8B1KQ8rtMV0Fbf7tHPn5styqhe70y2ZAwIAOnKkU=)
3: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: 3aukErPBzIH+QBRsmWFciA4If3iOfHWj8IbEcxK2x3I=)
4: wpMWqws0Dpp8GOASm90aVo7qq2k.roa (hash: 1SPWjmebIHPEJohavvOHRjKSIv+zhB1rg2pQffIZDP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:9a:3d:b8:15:a7:69:2c:2d:06:8c:14:f8:ca:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
Validity
Not Before: Nov 4 17:01:02 2025 GMT
Not After : Nov 5 17:01:02 2025 GMT
Subject: CN=364a83d75414fc374ca13aa811d2d41829d8a78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:68:68:e5:e4:c2:18:55:0f:ba:b8:6e:7d:51:
2d:3a:f2:74:b7:54:ff:a7:22:40:58:e1:3b:cb:98:
76:e1:b0:d1:5a:55:ef:09:30:54:bc:1f:97:d5:be:
9a:3c:24:ea:27:c6:82:b2:2c:89:17:21:38:74:b8:
e8:d5:a6:1b:df:d0:d2:79:13:b1:46:ff:ce:57:f5:
b8:e7:16:d9:cd:e7:6e:45:97:d3:97:21:3f:0f:e3:
7f:cd:7c:09:31:66:4f:3c:09:08:11:eb:e2:cf:4a:
7f:a7:c6:a0:e7:3b:b4:e2:33:3d:59:0b:04:36:01:
92:ca:85:ed:11:8e:53:99:d0:79:73:67:bf:82:ff:
ef:49:34:1f:ef:f2:1e:0b:3f:8e:8d:a5:a0:46:84:
7e:4b:fe:0b:15:fc:ca:15:5d:20:e9:b0:82:27:0d:
4a:7f:ba:d4:3a:7c:a7:16:0b:03:6d:fb:14:40:fe:
50:e4:9f:b9:dd:89:88:5e:00:a7:c5:33:c2:f7:cf:
86:e2:39:b5:ca:fe:ca:7e:2f:36:0d:74:20:0f:5f:
d0:a8:31:68:ac:5b:ac:ed:48:cd:eb:09:d3:9d:e2:
26:05:30:5b:c2:c6:2c:37:b1:45:73:4c:6f:76:d0:
a8:39:34:69:8d:81:05:0f:59:da:89:b8:89:55:30:
1f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4A:83:D7:54:14:FC:37:4C:A1:3A:A8:11:D2:D4:18:29:D8:A7:8E
X509v3 Authority Key Identifier:
keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:70:1f:a9:74:86:56:d9:e4:6f:46:29:3f:ea:5a:cc:f1:21:
e8:d5:cf:ae:f9:00:a1:9f:2e:81:33:04:a3:6f:a3:c3:47:ca:
20:82:15:84:fe:26:f2:7a:e4:68:7b:f8:54:d7:07:18:ff:ba:
db:bd:cc:ca:92:f0:9f:57:a6:40:01:0f:c1:94:f3:19:bf:cd:
15:e6:51:ac:93:a6:ad:c4:8b:7e:fe:68:2f:64:71:b6:c0:25:
1e:53:a7:57:a6:17:83:5b:67:cb:69:53:c4:6f:d7:18:f3:ac:
fe:53:59:09:ea:ae:92:17:57:68:51:18:9c:27:ea:a9:bc:fd:
bd:02:8a:ec:2b:a5:0b:66:52:c4:e6:81:17:0a:a6:26:40:50:
8d:4a:4d:31:5b:f6:33:64:dc:f4:63:be:d9:c5:31:4a:61:e8:
79:26:75:ec:90:6c:4f:87:6f:d7:81:f3:b6:7b:33:f4:2f:6f:
61:fd:be:2e:71:d4:8b:09:74:e6:9f:14:e3:3c:69:99:3f:ed:
bf:83:1b:a6:a2:96:d1:ec:c1:f6:98:d9:2f:23:32:ae:ab:dc:
5e:68:ce:3c:ef:16:56:86:89:27:4b:ed:1e:ba:b0:f7:3e:33:
7b:3a:25:6b:35:49:f2:d1:09:0f:c8:89:f4:17:26:d5:e6:9d:
40:cf:3a:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0Jo9uBWnaSwtBowU+MryMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZjczNTJkNDdkYjk3ODVmNDkxMTgwOTJkZTg3MDRhNjdm
NjUyMGQwHhcNMjUxMTA0MTcwMTAyWhcNMjUxMTA1MTcwMTAyWjAzMTEwLwYDVQQD
EygzNjRhODNkNzU0MTRmYzM3NGNhMTNhYTgxMWQyZDQxODI5ZDhhNzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWho5eTCGFUPurhufVEtOvJ0t1T/
pyJAWOE7y5h24bDRWlXvCTBUvB+X1b6aPCTqJ8aCsiyJFyE4dLjo1aYb39DSeROx
Rv/OV/W45xbZzeduRZfTlyE/D+N/zXwJMWZPPAkIEeviz0p/p8ag5zu04jM9WQsE
NgGSyoXtEY5TmdB5c2e/gv/vSTQf7/IeCz+OjaWgRoR+S/4LFfzKFV0g6bCCJw1K
f7rUOnynFgsDbfsUQP5Q5J+53YmIXgCnxTPC98+G4jm1yv7Kfi82DXQgD1/QqDFo
rFus7UjN6wnTneImBTBbwsYsN7FFc0xvdtCoOTRpjYEFD1naibiJVTAfEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZKg9dUFPw3TKE6qBHS1Bgp2KeOMB8GA1UdIwQY
MBaAFF/3NS1H25eF9JEYCS3ocEpn9lINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kNWQyYjMtN2M0Mi00Nzg1LTk1OTYt
NTE3NDgxZDBmODUwLzEvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kNWQyYjMtN2M0Mi00Nzg1LTk1OTYtNTE3NDgxZDBmODUw
LzEvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXAfqXSG
Vtnkb0YpP+pazPEh6NXPrvkAoZ8ugTMEo2+jw0fKIIIVhP4m8nrkaHv4VNcHGP+6
273MypLwn1emQAEPwZTzGb/NFeZRrJOmrcSLfv5oL2RxtsAlHlOnV6YXg1tny2lT
xG/XGPOs/lNZCequkhdXaFEYnCfqqbz9vQKK7CulC2ZSxOaBFwqmJkBQjUpNMVv2
M2Tc9GO+2cUxSmHoeSZ17JBsT4dv14Hztnsz9C9vYf2+LnHUiwl05p8U4zxpmT/t
v4MbpqKW0ezB9pjZLyMyrqvcXmjOPO8WVoaJJ0vtHrqw9z4zezolazVJ8tEJD8iJ
9Bcm1eadQM861w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:28:30 2025 by rpki-client