
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
File: X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft (raw, json)
Hash identifier: Kjf19InSew3kPzyQZRPGyJFmZoJIe18ce+yFDxR1bQ8=
Subject key identifier: 44:C2:03:85:18:7A:D6:DA:48:BF:FA:F9:1C:C9:43:19:B7:54:D0:C1
Authority key identifier: 5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
Certificate issuer: /CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Certificate serial: 01987C77A4C18D4FA24B600F66ED288E549C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
Manifest number: 051C
Signing time: Tue 05 Aug 2025 23:01:12 +0000
Manifest this update: Tue 05 Aug 2025 23:01:12 +0000
Manifest next update: Wed 06 Aug 2025 23:01:12 +0000
Files and hashes: 1: Ngryz_JDCTWxsZghCdDW2bggtbY.roa (hash: OLqWc5pDqp3VYp84vSGxFeZ1JPG4ouAU9S0kjVUHjeY=)
2: X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl (hash: S6eJMW+MmfVLwSV2MtYrxxksLaY358uqHkkGpRwTC7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:a4:c1:8d:4f:a2:4b:60:0f:66:ed:28:8e:54:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Validity
Not Before: Aug 5 23:01:12 2025 GMT
Not After : Aug 6 23:01:12 2025 GMT
Subject: CN=44c20385187ad6da48bffaf91cc94319b754d0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6c:04:6c:85:be:85:df:99:0f:8c:62:7f:6c:
c8:6e:6b:27:9c:53:8b:be:b3:40:e8:c6:93:86:61:
7d:dd:3a:61:d7:e5:08:d1:02:83:df:f8:9e:56:ba:
d8:76:4e:17:30:88:ba:ad:ff:6a:2f:5b:52:06:39:
36:b0:a8:78:1a:8c:5a:5f:01:f9:46:96:12:b3:62:
be:1a:1a:4c:4d:82:90:9e:68:f4:2a:0c:29:de:8a:
80:54:3e:23:73:92:05:f4:a0:71:4e:ec:1c:ed:56:
1d:7b:62:29:c3:00:70:30:e0:d1:b1:98:ed:97:9c:
50:c5:4b:ae:82:ab:53:7c:58:97:7b:9d:a3:fc:95:
6c:37:54:ad:6b:f3:cb:3c:63:bf:87:a8:b5:38:4b:
de:0c:89:07:4f:ae:29:b5:bc:e6:f7:4a:b6:26:74:
e1:fa:d9:fd:ad:4f:2d:13:82:b9:f8:21:a3:ff:09:
89:e0:c5:9b:46:78:f0:c8:38:35:63:ca:99:91:a8:
34:50:e8:6a:49:83:37:4d:b5:ad:81:11:ae:1b:0c:
31:f2:47:65:f8:17:c7:55:5b:a1:1d:ee:32:36:82:
c8:53:d9:46:fa:df:63:25:94:04:5b:c4:94:2e:38:
cc:c8:6c:aa:22:96:a7:0b:a5:bb:f3:f2:e5:83:f9:
90:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C2:03:85:18:7A:D6:DA:48:BF:FA:F9:1C:C9:43:19:B7:54:D0:C1
X509v3 Authority Key Identifier:
keyid:5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:92:2f:1f:d0:d9:0f:7a:f3:57:25:7e:f3:67:a1:4b:08:d6:
a3:f4:f0:ae:9d:58:79:43:1a:bc:6a:ba:20:89:11:af:13:64:
70:1a:73:68:34:71:87:22:cf:ab:54:0e:f8:de:2c:08:c9:92:
60:03:fb:ff:16:1a:49:1c:54:07:ab:d7:36:3d:58:15:c2:52:
b4:64:96:dd:d6:f6:97:ba:79:39:42:55:dc:23:ca:f2:33:64:
05:53:97:39:f3:25:c5:06:af:ab:12:96:a0:54:f4:6d:e1:50:
f0:ae:4c:e4:58:74:64:42:3e:1a:bb:f3:5a:8b:d0:d4:ae:ec:
86:2e:6c:46:5c:ea:90:c4:4f:00:e2:e8:aa:a7:79:c8:a9:4e:
1f:4d:8f:7d:48:ac:8a:a4:c8:33:aa:dd:50:6b:aa:b8:5d:0b:
27:25:70:fb:9a:9b:e1:7d:1c:3a:3f:a7:c8:ef:8b:c8:97:cc:
71:1e:51:28:db:cf:c8:81:a7:7c:42:76:0f:cf:d0:74:91:02:
08:bb:73:60:e2:52:32:63:68:63:2e:dc:3f:29:69:6e:2b:b0:
3b:d2:92:14:8f:6d:46:8c:47:73:9f:d3:71:30:58:2e:6b:61:
b9:67:2f:c3:4a:b7:ac:02:9c:f6:38:d8:dd:af:67:93:47:7b:
90:66:04:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8d6TBjU+iS2APZu0ojlScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNzE3OWVmZjVlMGU2N2QwMzM3YWE4OTEyZjk1YTY4N2Zk
NDQwODkwHhcNMjUwODA1MjMwMTEyWhcNMjUwODA2MjMwMTEyWjAzMTEwLwYDVQQD
Eyg0NGMyMDM4NTE4N2FkNmRhNDhiZmZhZjkxY2M5NDMxOWI3NTRkMGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mwEbIW+hd+ZD4xif2zIbmsnnFOL
vrNA6MaThmF93Tph1+UI0QKD3/ieVrrYdk4XMIi6rf9qL1tSBjk2sKh4GoxaXwH5
RpYSs2K+GhpMTYKQnmj0Kgwp3oqAVD4jc5IF9KBxTuwc7VYde2IpwwBwMODRsZjt
l5xQxUuugqtTfFiXe52j/JVsN1Sta/PLPGO/h6i1OEveDIkHT64ptbzm90q2JnTh
+tn9rU8tE4K5+CGj/wmJ4MWbRnjwyDg1Y8qZkag0UOhqSYM3TbWtgRGuGwwx8kdl
+BfHVVuhHe4yNoLIU9lG+t9jJZQEW8SULjjMyGyqIpanC6W78/Llg/mQswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETCA4UYetbaSL/6+RzJQxm3VNDBMB8GA1UdIwQY
MBaAFF9xee/14OZ9AzeqiRL5Wmh/1ECJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jNDRkOTMtMTY5NS00YWIxLTkxNDIt
NDI5NmQ3YWJkM2QxLzEvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jNDRkOTMtMTY5NS00YWIxLTkxNDItNDI5NmQ3YWJkM2Qx
LzEvWDNGNTdfWGc1bjBETjZxSkV2bGFhSF9VUUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw5IvH9DZ
D3rzVyV+82ehSwjWo/Twrp1YeUMavGq6IIkRrxNkcBpzaDRxhyLPq1QO+N4sCMmS
YAP7/xYaSRxUB6vXNj1YFcJStGSW3db2l7p5OUJV3CPK8jNkBVOXOfMlxQavqxKW
oFT0beFQ8K5M5Fh0ZEI+GrvzWovQ1K7shi5sRlzqkMRPAOLoqqd5yKlOH02PfUis
iqTIM6rdUGuquF0LJyVw+5qb4X0cOj+nyO+LyJfMcR5RKNvPyIGnfEJ2D8/QdJEC
CLtzYOJSMmNoYy7cPylpbiuwO9KSFI9tRoxHc5/TcTBYLmthuWcvw0q3rAKc9jjY
3a9nk0d7kGYEaw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:21:55 2025 by rpki-client