Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
File: 5_X6RuHGsFy_7JdpIQyxUUer4jE.mft (raw, json)
Hash identifier: xQaRh9o0L/4WsD3aiqjwsPicrqFtvHCC0g0syuCz2aI=
Subject key identifier: E8:51:9D:2F:24:9A:7E:E1:9A:00:0B:99:5D:3E:5E:68:D8:3B:4F:00
Authority key identifier: E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
Certificate issuer: /CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Certificate serial: 019A4EF440256ECAFAD5AE9338F708544B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
Manifest number: 169B
Signing time: Tue 04 Nov 2025 13:00:21 +0000
Manifest this update: Tue 04 Nov 2025 13:00:21 +0000
Manifest next update: Wed 05 Nov 2025 13:00:21 +0000
Files and hashes: 1: 5_X6RuHGsFy_7JdpIQyxUUer4jE.crl (hash: nNGgBsu2kLTJMn8QymBnydKFR/yJ6itLSTlvxZnFx40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:40:25:6e:ca:fa:d5:ae:93:38:f7:08:54:4b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Validity
Not Before: Nov 4 13:00:21 2025 GMT
Not After : Nov 5 13:00:21 2025 GMT
Subject: CN=e8519d2f249a7ee19a000b995d3e5e68d83b4f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:c8:23:a1:12:70:39:59:32:24:8b:af:fb:
31:8d:bf:9e:3f:b1:d1:0f:9f:13:e6:2c:2f:03:7e:
cc:d5:e2:67:2a:ce:d9:a4:4b:68:b0:fe:90:d6:93:
a2:5f:3d:9d:76:ad:ce:d7:12:dd:f4:cf:f1:c6:c4:
76:15:ac:e3:3a:d1:75:f8:70:2a:a5:b3:ee:f8:d7:
6f:e1:02:83:08:44:57:74:75:4c:f0:78:ad:0c:d8:
77:70:8e:92:00:0f:5b:70:46:01:9e:28:06:e4:cb:
30:3c:da:8b:5e:12:63:26:b9:a9:87:4a:fb:a1:7b:
8a:1d:7e:15:78:29:c4:15:1e:16:d2:76:f1:0c:e1:
22:0f:a4:0e:f4:0a:f3:1e:74:49:f9:1c:7f:9a:03:
6f:dd:91:eb:75:f4:72:0a:b0:27:61:7f:a2:2f:93:
db:53:b9:ad:3b:0b:8f:38:34:f8:d6:7b:f9:48:8a:
f6:6b:0c:9f:36:12:45:f4:3f:f0:d5:af:e4:50:b5:
a1:ba:4a:9c:ff:f6:1a:73:20:32:7e:98:4e:f8:fb:
e9:69:f2:2c:f2:f4:6c:c6:76:6e:c2:ec:9a:1c:79:
90:18:6e:25:49:2d:81:f4:56:a0:23:54:a7:71:26:
20:e9:ca:5b:89:15:bc:da:28:80:75:a2:72:14:86:
2c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:51:9D:2F:24:9A:7E:E1:9A:00:0B:99:5D:3E:5E:68:D8:3B:4F:00
X509v3 Authority Key Identifier:
keyid:E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d5:b8:6b:fb:94:24:bc:89:f8:86:e5:0c:35:ec:46:8f:eb:
33:ea:3d:f8:14:95:e7:46:37:12:3a:3a:5d:df:4c:b9:0a:bb:
1d:b4:7a:65:5d:80:9d:fd:60:fa:0c:c7:74:8e:f7:aa:7e:72:
de:48:e2:3c:52:3c:d2:f4:41:16:1e:b8:cc:fb:38:d5:25:67:
31:03:d0:43:57:d0:b0:b1:9c:4e:4c:63:2c:f5:46:37:ec:8d:
38:14:4e:99:c4:61:3c:cd:f0:90:f0:75:b3:78:1a:21:35:30:
4a:74:17:e5:36:76:a0:f0:1d:d1:1f:4e:fd:6f:5c:ac:f2:52:
f8:b6:a1:60:9e:64:36:2b:1d:41:ec:63:30:2c:cd:2e:80:70:
4b:fd:e1:a9:80:e6:5e:fa:b5:ea:0a:b1:aa:cd:8d:24:d0:2f:
ac:2b:43:31:7c:7b:3b:21:9b:18:c1:33:b8:98:e2:0b:a2:26:
0d:97:f9:2c:8b:4d:6b:c3:3c:7c:1c:e0:e3:d8:3c:4e:20:88:
fa:6e:47:da:7e:31:86:fa:35:70:a3:ed:4d:5f:e1:ca:50:ad:
e1:9f:c0:ea:a4:94:58:86:2a:bb:e8:dd:a2:4c:a9:b8:56:f4:
c0:38:4b:bb:60:7e:1f:cd:60:09:e9:de:e9:76:8c:e4:52:87:
2f:ca:01:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9EAlbsr61a6TOPcIVEtUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZjVmYTQ2ZTFjNmIwNWNiZmVjOTc2OTIxMGNiMTUxNDdh
YmUyMzEwHhcNMjUxMTA0MTMwMDIxWhcNMjUxMTA1MTMwMDIxWjAzMTEwLwYDVQQD
EyhlODUxOWQyZjI0OWE3ZWUxOWEwMDBiOTk1ZDNlNWU2OGQ4M2I0ZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKnII6EScDlZMiSLr/sxjb+eP7HR
D58T5iwvA37M1eJnKs7ZpEtosP6Q1pOiXz2ddq3O1xLd9M/xxsR2FazjOtF1+HAq
pbPu+Ndv4QKDCERXdHVM8HitDNh3cI6SAA9bcEYBnigG5MswPNqLXhJjJrmph0r7
oXuKHX4VeCnEFR4W0nbxDOEiD6QO9ArzHnRJ+Rx/mgNv3ZHrdfRyCrAnYX+iL5Pb
U7mtOwuPODT41nv5SIr2awyfNhJF9D/w1a/kULWhukqc//YacyAyfphO+PvpafIs
8vRsxnZuwuyaHHmQGG4lSS2B9FagI1SncSYg6cpbiRW82iiAdaJyFIYsKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhRnS8kmn7hmgALmV0+XmjYO08AMB8GA1UdIwQY
MBaAFOf1+kbhxrBcv+yXaSEMsVFHq+IxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV9YNlJ1SEdzRnlfN0pkcElReXhVVWVyNGpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MDQzMjItNmY4YS00NGJiLTg5MmMt
MGM0MTdlZmY0NzIwLzEvNV9YNlJ1SEdzRnlfN0pkcElReXhVVWVyNGpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi84MDQzMjItNmY4YS00NGJiLTg5MmMtMGM0MTdlZmY0NzIw
LzEvNV9YNlJ1SEdzRnlfN0pkcElReXhVVWVyNGpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNW4a/uU
JLyJ+IblDDXsRo/rM+o9+BSV50Y3Ejo6Xd9MuQq7HbR6ZV2Anf1g+gzHdI73qn5y
3kjiPFI80vRBFh64zPs41SVnMQPQQ1fQsLGcTkxjLPVGN+yNOBROmcRhPM3wkPB1
s3gaITUwSnQX5TZ2oPAd0R9O/W9crPJS+LahYJ5kNisdQexjMCzNLoBwS/3hqYDm
Xvq16gqxqs2NJNAvrCtDMXx7OyGbGMEzuJjiC6ImDZf5LItNa8M8fBzg49g8TiCI
+m5H2n4xhvo1cKPtTV/hylCt4Z/A6qSUWIYqu+jdokypuFb0wDhLu2B+H81gCene
6XaM5FKHL8oBVA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:22 2025 by rpki-client