Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: GoqsfZwj8e7ZAsO9ICCavtVyKG5r0xCbvG0RpvuNVgU=
Subject key identifier: F0:B8:11:98:2C:95:B7:45:99:96:4F:D8:E4:F9:C3:FF:6A:70:25:B6
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 019A1FBF480072E4A50F11759A77E8A56A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 067B
Signing time: Sun 26 Oct 2025 09:00:20 +0000
Manifest this update: Sun 26 Oct 2025 09:00:20 +0000
Manifest next update: Mon 27 Oct 2025 09:00:20 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: aqOstFugZvZPXifH1wVT1DVhZb93k6skGaERGUDpZhc=)
2: u-lGXvBrrOtS45APR_Waw4axrTc.roa (hash: W3bOvfQ0kiPnMkAC0M/+bR7qhmdbihjJm/WhE44sz9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:48:00:72:e4:a5:0f:11:75:9a:77:e8:a5:6a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: Oct 26 09:00:20 2025 GMT
Not After : Oct 27 09:00:20 2025 GMT
Subject: CN=f0b811982c95b74599964fd8e4f9c3ff6a7025b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:95:52:ec:78:b6:bf:9a:d4:af:c6:f7:77:0c:
7e:f8:c7:b4:59:6c:10:f2:5c:49:aa:b9:90:4a:73:
48:6a:00:bc:97:d6:73:53:25:9b:42:78:a7:6e:b3:
44:eb:6c:39:46:4f:6e:e1:11:e5:ff:30:6b:52:5e:
c3:ac:04:eb:c9:f7:b3:02:a4:96:41:4b:7b:a7:0b:
fc:4a:a5:9f:ef:86:80:63:11:69:c4:2f:b8:f7:e9:
a4:31:9c:1f:95:99:4f:d3:2a:6f:85:22:8f:7c:5d:
96:3f:16:50:fd:08:0b:95:39:f5:5f:56:4f:8d:83:
04:a8:2d:a5:8a:87:d7:da:12:2d:de:c4:ae:30:c5:
71:dc:21:aa:ee:58:cc:14:43:ba:c2:cd:14:29:65:
8a:82:94:aa:02:c5:50:ef:ec:50:95:31:62:6d:16:
5b:99:7f:13:3d:e6:db:4c:ec:3c:8d:3d:50:24:d2:
aa:7b:18:73:c0:3b:54:4a:b6:97:90:bb:af:74:85:
ab:3d:cc:2a:0f:a1:56:6d:99:db:ed:41:15:6e:70:
1e:39:25:33:5f:61:a7:f3:23:e8:1d:e1:8c:a9:41:
de:08:ba:12:a4:32:5b:b0:d5:20:91:87:f4:ad:8a:
3e:92:8e:8e:90:d6:92:bc:34:fb:da:7f:0d:4d:8a:
48:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B8:11:98:2C:95:B7:45:99:96:4F:D8:E4:F9:C3:FF:6A:70:25:B6
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:03:72:f6:ab:1c:e8:3b:e5:3f:60:bc:2f:49:ce:28:65:f7:
8f:df:a5:90:1c:e1:99:65:b7:c5:d1:d6:7d:28:8b:c0:02:5d:
ef:b8:92:c2:05:06:ca:18:b2:8c:34:75:79:bb:09:b3:61:82:
47:b9:2d:f3:38:7a:40:6c:cf:71:b9:8b:7c:d5:0e:b3:d6:22:
5d:84:87:61:67:15:44:cd:f1:48:ca:3b:6c:df:53:0c:95:2e:
55:01:bd:68:5e:83:73:5b:59:b4:1d:30:59:5d:5d:65:5d:94:
00:64:be:a8:5e:2b:d2:ca:bc:2e:44:2b:31:90:1c:ec:6e:e0:
1d:79:66:31:a2:70:98:72:91:b0:2e:67:d8:e0:bd:5b:c6:14:
83:0c:08:ad:93:9b:a7:e1:1f:69:ac:8e:75:d1:7a:72:ba:7b:
d9:a2:c3:4e:9b:5b:06:bd:88:98:c2:13:23:b3:73:03:04:8a:
e2:89:9f:68:77:a4:27:1a:d4:8a:b4:89:6e:df:f3:b7:c3:86:
e9:2f:37:ff:83:b2:63:a9:d3:95:9f:e7:99:4b:43:e5:eb:86:
8a:f5:63:10:bc:2e:be:a9:5b:38:af:38:51:b4:bb:96:b0:2e:
bb:52:e4:10:0f:c2:c8:ad:7c:19:2d:8e:a1:9d:3e:79:60:62:
0c:2a:d3:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofv0gAcuSlDxF1mnfopWocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYTM4NmU5NzY1NmQ2NDhhYjUzODFiMjk2NjY0MTQwODFi
MDAwODQwHhcNMjUxMDI2MDkwMDIwWhcNMjUxMDI3MDkwMDIwWjAzMTEwLwYDVQQD
EyhmMGI4MTE5ODJjOTViNzQ1OTk5NjRmZDhlNGY5YzNmZjZhNzAyNWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpVS7Hi2v5rUr8b3dwx++Me0WWwQ
8lxJqrmQSnNIagC8l9ZzUyWbQninbrNE62w5Rk9u4RHl/zBrUl7DrATryfezAqSW
QUt7pwv8SqWf74aAYxFpxC+49+mkMZwflZlP0ypvhSKPfF2WPxZQ/QgLlTn1X1ZP
jYMEqC2liofX2hIt3sSuMMVx3CGq7ljMFEO6ws0UKWWKgpSqAsVQ7+xQlTFibRZb
mX8TPebbTOw8jT1QJNKqexhzwDtUSraXkLuvdIWrPcwqD6FWbZnb7UEVbnAeOSUz
X2Gn8yPoHeGMqUHeCLoSpDJbsNUgkYf0rYo+ko6OkNaSvDT72n8NTYpIiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPC4EZgslbdFmZZP2OT5w/9qcCW2MB8GA1UdIwQY
MBaAFF+jhul2VtZIq1OBspZmQUCBsACEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgt
OTUwY2UzOWE5NzdjLzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgtOTUwY2UzOWE5Nzdj
LzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwNy9qsc
6DvlP2C8L0nOKGX3j9+lkBzhmWW3xdHWfSiLwAJd77iSwgUGyhiyjDR1ebsJs2GC
R7kt8zh6QGzPcbmLfNUOs9YiXYSHYWcVRM3xSMo7bN9TDJUuVQG9aF6Dc1tZtB0w
WV1dZV2UAGS+qF4r0sq8LkQrMZAc7G7gHXlmMaJwmHKRsC5n2OC9W8YUgwwIrZOb
p+EfaayOddF6crp72aLDTptbBr2ImMITI7NzAwSK4omfaHekJxrUirSJbt/zt8OG
6S83/4OyY6nTlZ/nmUtD5euGivVjELwuvqlbOK84UbS7lrAuu1LkEA/CyK18GS2O
oZ0+eWBiDCrTfg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 17:44:41 2025 by rpki-client