Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
File: 51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft (raw, json)
Hash identifier: L1fyi/d2mv89OL2jFoYFBO7A1hO+tGCZYJ/lhHeLzVs=
Subject key identifier: F2:1C:55:DB:F1:04:7E:B6:F1:17:7C:7B:EC:F4:C2:17:03:9C:17:8F
Authority key identifier: E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88
Certificate issuer: /CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
Certificate serial: 019A51F585CEFB2FA1C6AF4EC79E714FB34A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 03:00:36 +0000
Manifest this update: Wed 05 Nov 2025 03:00:36 +0000
Manifest next update: Thu 06 Nov 2025 03:00:36 +0000
Files and hashes: 1: 51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl (hash: 3sazsE95xOnN5xXims48Gq+urNtyZ72fHBQ2lwN2S/E=)
2: JjZhvhphZRDZH5Oh3OKMQHamrqo.roa (hash: I0uqH2D54bPvPhDVGHzvDh0kw0oClKnlcruCIfR9TBs=)
3: uttZJDL3LQ7QDxUT6eilC7zrvqs.roa (hash: w5gBSlKjA5Lu1HULnBbNVdum/zMpOaAXAiNTMSLvzE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:85:ce:fb:2f:a1:c6:af:4e:c7:9e:71:4f:b3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
Validity
Not Before: Nov 5 03:00:36 2025 GMT
Not After : Nov 6 03:00:36 2025 GMT
Subject: CN=f21c55dbf1047eb6f1177c7becf4c217039c178f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:31:26:15:e2:96:13:1d:ad:9f:fb:29:d5:13:
23:e9:b4:19:e5:e4:c4:20:89:18:ae:ac:2c:64:a7:
35:d3:8d:fb:d8:ab:d0:68:80:a4:8d:2e:00:f4:ae:
e2:61:1d:66:22:9b:d8:73:6e:6d:cb:53:e3:40:db:
e4:74:ca:1f:5e:c1:00:50:78:d0:72:88:91:c5:13:
e9:af:47:3c:44:5c:2a:ac:86:87:60:ac:8d:ba:41:
32:9d:56:9a:1b:a5:29:6b:ac:79:e3:3d:e1:9c:a9:
2e:f8:f5:6e:0d:7c:b1:9d:69:f1:a5:bc:d1:5c:b6:
64:32:be:66:be:c3:bf:f1:cb:21:b8:cc:f4:7c:7d:
55:2a:1a:08:cc:c5:8a:37:33:e5:66:99:a7:c1:de:
aa:8e:5c:8c:2f:7b:0a:3e:70:84:d6:7e:05:18:d2:
d6:f9:38:84:3f:7b:27:4a:b7:9a:ed:27:45:ee:e2:
b4:ad:a9:a0:8f:21:38:73:86:5b:06:eb:8b:30:36:
66:84:5d:af:16:35:ce:b1:34:d5:ed:f1:73:bd:9b:
ed:85:ef:ce:50:25:f3:bc:c0:8f:9e:67:67:8c:af:
81:4e:01:50:2a:4c:7d:2e:06:ce:ea:1b:3c:0e:f5:
05:46:9f:7e:c2:35:b3:26:fa:90:bc:03:aa:d0:76:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1C:55:DB:F1:04:7E:B6:F1:17:7C:7B:EC:F4:C2:17:03:9C:17:8F
X509v3 Authority Key Identifier:
keyid:E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ff:82:a9:33:7a:be:75:51:39:df:0a:33:08:01:b6:4e:61:
0d:68:82:f4:17:f3:0f:2d:3c:2b:4d:cb:1a:41:53:47:90:af:
b8:0a:87:92:e6:29:e6:e3:9b:c8:68:0a:3b:45:ef:5d:b7:e3:
5d:aa:4a:b7:64:ee:f0:24:3a:90:10:57:39:d9:a3:7a:f0:ac:
0d:aa:e5:e6:2f:d3:5a:bb:2b:65:c9:4a:3b:22:6d:83:9f:b2:
7a:bc:2f:b4:db:68:5b:ea:36:e3:38:0c:02:7b:68:2d:0f:98:
33:1c:7a:3c:f8:8f:8a:02:92:e2:84:b0:5a:25:03:cb:f9:70:
0f:9d:77:71:a8:02:50:2f:f5:36:60:32:5f:08:8c:81:da:c5:
c7:b2:b9:a6:14:a7:7e:41:25:71:26:44:9e:13:55:05:42:03:
16:cd:56:9a:be:be:88:e9:aa:02:1f:82:cb:a9:f0:2b:b2:7c:
6b:51:bc:d0:9e:93:3f:ae:b4:c4:d2:9e:57:b7:46:1c:41:89:
bf:55:45:c4:88:f7:1c:0c:1b:44:ec:66:9d:80:20:5f:aa:be:
34:d5:9b:b2:9a:c2:f7:27:ba:53:d8:ca:46:02:3c:83:0c:f0:
3b:78:fa:76:b1:0c:fa:4d:cb:4f:16:de:29:d7:e2:2b:77:d0:
d9:c4:c7:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9YXO+y+hxq9Ox55xT7NKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NWJjZTE2M2NiNTAyYTY1N2YyNzJmNzlmZDNlNDg3ZmJi
ZDRiODgwHhcNMjUxMTA1MDMwMDM2WhcNMjUxMTA2MDMwMDM2WjAzMTEwLwYDVQQD
EyhmMjFjNTVkYmYxMDQ3ZWI2ZjExNzdjN2JlY2Y0YzIxNzAzOWMxNzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jEmFeKWEx2tn/sp1RMj6bQZ5eTE
IIkYrqwsZKc104372KvQaICkjS4A9K7iYR1mIpvYc25ty1PjQNvkdMofXsEAUHjQ
coiRxRPpr0c8RFwqrIaHYKyNukEynVaaG6Upa6x54z3hnKku+PVuDXyxnWnxpbzR
XLZkMr5mvsO/8cshuMz0fH1VKhoIzMWKNzPlZpmnwd6qjlyML3sKPnCE1n4FGNLW
+TiEP3snSrea7SdF7uK0ramgjyE4c4ZbBuuLMDZmhF2vFjXOsTTV7fFzvZvthe/O
UCXzvMCPnmdnjK+BTgFQKkx9LgbO6hs8DvUFRp9+wjWzJvqQvAOq0HbrVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIcVdvxBH628Rd8e+z0whcDnBePMB8GA1UdIwQY
MBaAFOdbzhY8tQKmV/Jy95/T5If7vUuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTF2T0ZqeTFBcVpYOG5MM245UGtoX3U5UzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jNTcwOGItZmFmOS00MmE0LWJmNDgt
NGI4NTc4NzE1MTU0LzEvNTF2T0ZqeTFBcVpYOG5MM245UGtoX3U5UzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9jNTcwOGItZmFmOS00MmE0LWJmNDgtNGI4NTc4NzE1MTU0
LzEvNTF2T0ZqeTFBcVpYOG5MM245UGtoX3U5UzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZv+CqTN6
vnVROd8KMwgBtk5hDWiC9BfzDy08K03LGkFTR5CvuAqHkuYp5uObyGgKO0XvXbfj
XapKt2Tu8CQ6kBBXOdmjevCsDarl5i/TWrsrZclKOyJtg5+yerwvtNtoW+o24zgM
AntoLQ+YMxx6PPiPigKS4oSwWiUDy/lwD513cagCUC/1NmAyXwiMgdrFx7K5phSn
fkElcSZEnhNVBUIDFs1Wmr6+iOmqAh+Cy6nwK7J8a1G80J6TP660xNKeV7dGHEGJ
v1VFxIj3HAwbROxmnYAgX6q+NNWbsprC9ye6U9jKRgI8gwzwO3j6drEM+k3LTxbe
KdfiK3fQ2cTHmg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:03:50 2025 by rpki-client