Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json)
Hash identifier: dV6HXv1tkpm4cnBh154EU61RXos2szOhdutnSpzSDXY=
Subject key identifier: 1F:D5:A5:1C:9C:DF:26:20:7E:2A:F1:D9:6F:29:81:FB:6A:0B:D1:B5
Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Certificate serial: 019A4E4FDAF18C22C69B4C08F2AC78D936C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
Manifest number: 0726
Signing time: Tue 04 Nov 2025 10:00:47 +0000
Manifest this update: Tue 04 Nov 2025 10:00:47 +0000
Manifest next update: Wed 05 Nov 2025 10:00:47 +0000
Files and hashes: 1: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: xjvo2VYpNwuXNFye0FCEaP+sKnk+cGBeN9W+3ymqK2k=)
2: bmXZpHHxtrkVL17e18KvIxTw5lc.roa (hash: 8ICDtcdjlLyMFFUIIbeNdV9LHsXmbPFx6BjBW2piZ4U=)
3: vQFumMlickMAeqfmQnyl7TY_Pzg.roa (hash: fsxJlhkOiwS8utSdO9amMMp5rJDtdsaC3KUWPM6ffgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:da:f1:8c:22:c6:9b:4c:08:f2:ac:78:d9:36:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6
Validity
Not Before: Nov 4 10:00:47 2025 GMT
Not After : Nov 5 10:00:47 2025 GMT
Subject: CN=1fd5a51c9cdf26207e2af1d96f2981fb6a0bd1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:0b:ee:b6:92:eb:b8:c4:7f:3d:14:6d:eb:
c6:66:e7:59:aa:b8:9e:aa:ed:7f:af:87:f5:ad:96:
16:7e:5e:40:d2:64:7f:f6:6a:b5:41:01:5e:79:e0:
eb:42:b4:23:82:74:32:d3:f7:63:56:ce:9b:e2:af:
17:ae:b7:99:e7:cd:55:71:34:a2:37:5d:0e:61:6a:
ee:30:30:c7:a6:15:32:4f:43:c1:a4:9e:4e:78:d5:
6e:88:c6:35:0a:97:1b:eb:b6:5b:5a:af:1c:0c:69:
a5:ab:b4:3f:33:71:6d:47:ae:f8:02:38:2a:a3:08:
c4:b7:45:66:cb:b8:bd:10:db:dc:46:6d:b9:8d:47:
b5:11:64:f0:d5:12:68:7c:a1:24:63:db:33:55:fb:
31:bc:ae:aa:f5:56:c2:ea:9a:7d:46:ac:30:6c:93:
62:e9:95:22:68:e0:ec:77:94:f4:76:4c:6f:ba:1a:
f7:4b:a7:fb:34:42:f9:48:91:ad:b5:33:46:83:54:
3e:e4:c4:78:ed:8c:fd:e9:97:53:6d:80:19:ca:6f:
23:39:5b:4f:e8:22:a0:65:c1:f3:75:4a:2e:e7:97:
d4:4b:5e:7b:87:6a:93:3e:d4:4c:e7:ec:04:d0:4a:
3a:bc:fb:a3:c9:ee:e8:b4:24:de:b2:2b:8d:b7:f7:
e3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D5:A5:1C:9C:DF:26:20:7E:2A:F1:D9:6F:29:81:FB:6A:0B:D1:B5
X509v3 Authority Key Identifier:
keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3e:17:57:eb:84:e5:71:ef:d4:89:78:7c:8f:52:6b:92:ca:
c4:93:77:53:ea:b4:4c:dc:a1:1d:ca:ab:85:d0:ba:45:30:ca:
eb:fb:8c:1a:2e:21:36:a2:5b:2e:f0:76:3f:84:85:ce:1c:13:
6a:9a:04:ee:de:42:76:ff:2b:9a:2f:27:1d:c6:52:8b:1e:80:
b9:30:84:e8:99:3e:a4:07:81:cf:b6:52:f5:f3:3a:b4:7a:82:
1e:f3:c1:05:09:7c:dd:f0:71:40:df:8e:5e:9b:62:08:0f:cc:
a9:5b:c5:d5:e1:65:92:04:67:95:d2:54:5f:d8:0e:18:ae:77:
92:87:36:17:11:bf:71:18:e2:66:d7:f6:dd:17:5a:10:95:43:
3d:3f:b4:c5:23:b4:cf:35:21:61:3c:a1:42:86:fa:d3:c5:45:
2b:55:2d:20:61:42:fa:e9:9c:28:1b:ec:09:34:68:6f:a4:64:
f1:4f:67:40:1a:98:c7:fe:39:ee:50:2d:ba:ec:6f:84:ea:b4:
3f:54:ec:9f:2a:1a:7a:eb:75:a3:7d:a2:2b:3e:2c:c6:f5:26:
54:56:52:d1:d0:0a:e4:84:de:4f:76:1a:b4:ea:fe:a6:13:28:
6f:81:13:9e:f1:f3:7b:56:03:13:40:a0:21:09:76:d7:68:d4:
99:97:42:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:41 2025 by rpki-client