Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
File: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json)
Hash identifier: OCieVT9C+DoxLjpbikF0m/YC6ZABUlDkYtnpPBnkqYA=
Subject key identifier: D8:65:F4:39:20:B1:EC:6A:45:05:47:78:EF:DC:92:56:CA:48:CD:FF
Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
Certificate issuer: /CN=e578bc065072b40baf08416e216a1307b24bc44b
Certificate serial: 0199239EB7DFC47EDACA0F0B16F8347DBCE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 10:00:28 +0000
Manifest this update: Sun 07 Sep 2025 10:00:28 +0000
Manifest next update: Mon 08 Sep 2025 10:00:28 +0000
Files and hashes: 1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: 4LJvrRNbh/MAbJv4YuwERmdNvjaUbTIiVgqN1+U8FZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:b7:df:c4:7e:da:ca:0f:0b:16:f8:34:7d:bc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b
Validity
Not Before: Sep 7 10:00:28 2025 GMT
Not After : Sep 8 10:00:28 2025 GMT
Subject: CN=d865f43920b1ec6a45054778efdc9256ca48cdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:fc:07:b5:9f:68:3e:63:8a:c2:5a:5b:b1:
dd:ae:08:a2:76:2f:de:7f:dc:78:3b:0f:f2:84:a6:
94:e1:74:1f:d9:55:47:ea:52:b8:e0:8c:ee:65:54:
ce:a7:e1:a8:b2:f9:eb:0c:6a:9e:60:e2:97:3e:5c:
ba:11:3f:33:78:be:02:78:74:f1:eb:03:7f:8d:98:
ea:8b:ee:28:9f:13:d5:2b:a8:dc:e0:49:f2:05:0a:
42:8e:95:95:4c:cb:24:62:d5:a8:92:1d:29:59:4e:
c1:d5:cc:81:26:3d:f0:e6:0d:ee:3e:f6:5a:2d:04:
79:a8:f8:c4:d6:5e:10:6d:65:90:1f:a9:00:f6:a4:
e9:1c:d0:01:24:60:52:22:88:12:99:a4:d7:a8:e6:
ca:68:37:93:4d:d3:e4:a5:45:a5:ca:29:57:eb:23:
d8:5e:88:1a:04:92:64:53:a9:ca:7d:55:42:0f:d7:
02:a1:50:03:2e:f8:9a:ba:cb:9d:27:95:df:3c:9a:
74:86:00:3c:6f:bc:88:c6:51:74:fe:08:06:3e:9d:
63:eb:ea:8c:e7:e7:78:71:78:36:01:e9:5d:c6:e1:
32:79:af:44:17:b5:0e:5f:90:4d:3e:4c:9e:dc:c5:
f1:5b:53:71:42:4c:60:51:4e:ca:99:03:f7:a3:09:
0c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:65:F4:39:20:B1:EC:6A:45:05:47:78:EF:DC:92:56:CA:48:CD:FF
X509v3 Authority Key Identifier:
keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f4:80:b5:ba:2c:d2:2f:56:cd:85:cf:6b:af:d9:04:96:b5:
7f:62:bc:fc:b4:2e:ce:10:5c:c2:25:cb:cc:5b:07:1f:bf:a8:
85:15:93:43:e4:2d:3c:ec:be:4c:62:7e:7c:84:e0:79:02:56:
48:c9:66:0c:44:e1:71:cf:ad:1c:af:22:f9:30:12:51:54:be:
03:2a:d2:63:a0:7e:68:bc:ac:02:bf:45:3c:eb:be:a8:fe:0c:
a1:84:fa:76:7c:53:69:4c:e6:e2:e5:00:25:64:e9:06:8c:9b:
ff:82:e6:fc:75:ad:87:da:55:9a:35:fd:72:22:50:ea:33:36:
0a:76:a7:bf:20:05:80:e2:85:c5:3a:ce:47:2c:e5:d3:df:4a:
1a:88:8e:39:08:88:c6:94:66:76:23:3a:16:98:4c:72:bf:5a:
30:32:26:55:16:8d:e0:67:fa:99:db:53:0b:d8:11:1a:9d:56:
84:18:f5:fb:94:41:af:af:ad:74:20:a5:12:0d:13:48:a3:7b:
a3:a3:de:74:62:b0:fc:2c:29:ae:6e:15:6a:7b:52:53:c4:90:
c8:f5:a5:5c:d3:7d:2a:a3:18:69:fb:2a:4c:12:07:70:ba:17:
ec:b7:4c:f6:6b:9f:9a:83:d8:8c:1c:3a:c6:cb:25:2e:0d:3e:
0c:46:a7:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnrffxH7ayg8LFvg0fbziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzhiYzA2NTA3MmI0MGJhZjA4NDE2ZTIxNmExMzA3YjI0
YmM0NGIwHhcNMjUwOTA3MTAwMDI4WhcNMjUwOTA4MTAwMDI4WjAzMTEwLwYDVQQD
EyhkODY1ZjQzOTIwYjFlYzZhNDUwNTQ3NzhlZmRjOTI1NmNhNDhjZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrX8B7WfaD5jisJaW7Hdrgiidi/e
f9x4Ow/yhKaU4XQf2VVH6lK44IzuZVTOp+GosvnrDGqeYOKXPly6ET8zeL4CeHTx
6wN/jZjqi+4onxPVK6jc4EnyBQpCjpWVTMskYtWokh0pWU7B1cyBJj3w5g3uPvZa
LQR5qPjE1l4QbWWQH6kA9qTpHNABJGBSIogSmaTXqObKaDeTTdPkpUWlyilX6yPY
XogaBJJkU6nKfVVCD9cCoVADLviausudJ5XfPJp0hgA8b7yIxlF0/ggGPp1j6+qM
5+d4cXg2AeldxuEyea9EF7UOX5BNPkye3MXxW1NxQkxgUU7KmQP3owkMBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhl9DkgsexqRQVHeO/cklbKSM3/MB8GA1UdIwQY
MBaAFOV4vAZQcrQLrwhBbiFqEweyS8RLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEt
ZmJmZjYwY2ZiOTZhLzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEtZmJmZjYwY2ZiOTZh
LzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfSAtbos
0i9WzYXPa6/ZBJa1f2K8/LQuzhBcwiXLzFsHH7+ohRWTQ+QtPOy+TGJ+fITgeQJW
SMlmDEThcc+tHK8i+TASUVS+AyrSY6B+aLysAr9FPOu+qP4MoYT6dnxTaUzm4uUA
JWTpBoyb/4Lm/HWth9pVmjX9ciJQ6jM2CnanvyAFgOKFxTrORyzl099KGoiOOQiI
xpRmdiM6FphMcr9aMDImVRaN4Gf6mdtTC9gRGp1WhBj1+5RBr6+tdCClEg0TSKN7
o6PedGKw/Cwprm4VantSU8SQyPWlXNN9KqMYafsqTBIHcLoX7LdM9mufmoPYjBw6
xsslLg0+DEan/A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:33 2025 by rpki-client