Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
File: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft (raw, json)
Hash identifier: i/yN5+/ekjxBRCPicjzrOmuqxsXXO2uRyxF45PxIkF4=
Subject key identifier: 43:EE:27:0E:90:39:B9:FC:47:10:87:18:AB:66:FD:AF:B6:0A:12:23
Authority key identifier: E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
Certificate issuer: /CN=e578bc065072b40baf08416e216a1307b24bc44b
Certificate serial: 019A71B80FEBEBB2D12224B9B2CA29263D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:19 +0000
Manifest this update: Tue 11 Nov 2025 07:01:19 +0000
Manifest next update: Wed 12 Nov 2025 07:01:19 +0000
Files and hashes: 1: 5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl (hash: e3IDfg2Xih9tnTtyvxvTdHx3+LaG/mBJvg8C5uF7Q+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:0f:eb:eb:b2:d1:22:24:b9:b2:ca:29:26:3d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e578bc065072b40baf08416e216a1307b24bc44b
Validity
Not Before: Nov 11 07:01:19 2025 GMT
Not After : Nov 12 07:01:19 2025 GMT
Subject: CN=43ee270e9039b9fc47108718ab66fdafb60a1223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fd:6b:da:d0:71:c1:46:e3:4a:a1:53:f4:4c:
f7:05:fc:54:8b:55:fa:a3:37:eb:35:17:d7:34:9c:
bc:3e:1b:64:94:8d:c6:89:d6:85:50:e6:f4:89:58:
42:54:68:f0:ff:0d:ae:b8:67:f9:3b:84:21:45:e1:
07:77:92:d1:fc:01:87:c3:51:92:d1:b7:df:3e:75:
e3:7e:7f:62:3b:f5:51:69:fd:44:b1:0b:b1:9d:f7:
99:71:ff:28:cb:cd:0e:ee:11:55:45:12:76:72:85:
99:10:b5:11:b0:9c:89:19:d1:81:d3:75:62:83:ee:
31:49:bc:6d:de:19:3b:41:88:5b:4a:d9:f3:77:69:
27:68:ea:03:8a:92:66:1b:18:d9:79:cd:17:09:ac:
b2:a8:43:60:bc:c1:61:d7:e8:9f:82:f2:09:a1:d1:
a4:61:4f:37:d3:50:82:f9:d1:3d:94:27:f7:25:15:
d5:39:d7:b7:eb:9c:5c:93:fe:e1:3e:c9:df:70:ee:
51:31:9e:b8:cc:c0:f0:83:ad:ba:66:c7:55:9e:01:
27:38:5a:c4:a7:2d:9e:36:d6:ce:16:9e:f5:c8:8a:
98:63:66:6f:c8:ea:68:1e:2b:dc:7d:81:f8:3e:e1:
08:39:bd:b9:9f:c5:09:75:df:e4:9a:a8:da:cf:67:
4a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EE:27:0E:90:39:B9:FC:47:10:87:18:AB:66:FD:AF:B6:0A:12:23
X509v3 Authority Key Identifier:
keyid:E5:78:BC:06:50:72:B4:0B:AF:08:41:6E:21:6A:13:07:B2:4B:C4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xi8BlBytAuvCEFuIWoTB7JLxEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/79e589-a2c2-4b0a-bf1a-fbff60cfb96a/1/5Xi8BlBytAuvCEFuIWoTB7JLxEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cc:d5:5c:01:ad:ec:23:c1:a1:ba:08:e4:ea:6f:87:30:91:
dd:7e:34:37:7e:3c:67:ad:1b:7c:f4:39:31:aa:3c:a7:9a:05:
4a:a6:0b:79:f6:71:48:d6:a8:40:9a:44:9a:30:d5:cb:96:54:
c3:05:59:b9:8c:f4:d7:4e:90:83:95:d2:f5:fb:45:53:12:23:
d8:55:ba:d8:3e:7a:9a:d5:18:63:12:55:a5:45:0e:c9:b7:ab:
90:19:89:b9:12:c1:f8:79:dc:bd:1d:36:98:10:c4:89:e4:dd:
02:1c:07:74:66:b3:5b:71:8f:91:99:46:71:d7:8b:6f:4f:5b:
f0:18:4e:07:7b:09:fc:2d:67:71:36:79:5f:cb:3d:f4:13:07:
c2:33:b9:9e:93:33:bb:c7:61:e8:53:70:db:8d:78:95:b6:98:
be:bf:14:7f:67:d6:46:e9:73:e9:98:38:9d:9d:ff:bf:62:0d:
c0:81:81:ee:01:e7:b6:85:42:35:d0:95:ce:5f:07:df:0b:85:
c7:28:58:02:48:d3:b0:05:d5:c5:d1:36:c1:ac:b7:1b:eb:43:
37:80:ac:4d:2d:bd:a7:a6:78:ce:6b:19:17:02:2d:be:e4:ee:
ee:db:74:c2:dd:28:00:6b:9f:63:77:af:df:ff:9e:d1:0f:33:
3f:1b:97:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuA/r67LRIiS5ssopJj1TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzhiYzA2NTA3MmI0MGJhZjA4NDE2ZTIxNmExMzA3YjI0
YmM0NGIwHhcNMjUxMTExMDcwMTE5WhcNMjUxMTEyMDcwMTE5WjAzMTEwLwYDVQQD
Eyg0M2VlMjcwZTkwMzliOWZjNDcxMDg3MThhYjY2ZmRhZmI2MGExMjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4P1r2tBxwUbjSqFT9Ez3BfxUi1X6
ozfrNRfXNJy8PhtklI3GidaFUOb0iVhCVGjw/w2uuGf5O4QhReEHd5LR/AGHw1GS
0bffPnXjfn9iO/VRaf1EsQuxnfeZcf8oy80O7hFVRRJ2coWZELURsJyJGdGB03Vi
g+4xSbxt3hk7QYhbStnzd2knaOoDipJmGxjZec0XCayyqENgvMFh1+ifgvIJodGk
YU8301CC+dE9lCf3JRXVOde365xck/7hPsnfcO5RMZ64zMDwg626ZsdVngEnOFrE
py2eNtbOFp71yIqYY2ZvyOpoHivcfYH4PuEIOb25n8UJdd/kmqjaz2dKxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPuJw6QObn8RxCHGKtm/a+2ChIjMB8GA1UdIwQY
MBaAFOV4vAZQcrQLrwhBbiFqEweyS8RLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEt
ZmJmZjYwY2ZiOTZhLzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS83OWU1ODktYTJjMi00YjBhLWJmMWEtZmJmZjYwY2ZiOTZh
LzEvNVhpOEJsQnl0QXV2Q0VGdUlXb1RCN0pMeEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMzVXAGt
7CPBoboI5OpvhzCR3X40N348Z60bfPQ5Mao8p5oFSqYLefZxSNaoQJpEmjDVy5ZU
wwVZuYz0106Qg5XS9ftFUxIj2FW62D56mtUYYxJVpUUOyberkBmJuRLB+HncvR02
mBDEieTdAhwHdGazW3GPkZlGcdeLb09b8BhOB3sJ/C1ncTZ5X8s99BMHwjO5npMz
u8dh6FNw2414lbaYvr8Uf2fWRulz6Zg4nZ3/v2INwIGB7gHntoVCNdCVzl8H3wuF
xyhYAkjTsAXVxdE2way3G+tDN4CsTS29p6Z4zmsZFwItvuTu7tt0wt0oAGufY3ev
3/+e0Q8zPxuXDg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:44 2025 by rpki-client