Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: RNrfAEVG2369ye7d9lpg5HiRnkFPvHAwf+7rFw8gHSQ=
Subject key identifier: F1:53:94:AB:F5:E0:DA:69:66:D5:FA:0D:2D:71:CA:B1:C1:2F:D4:5F
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 019A1873EC34BCF50FFF364CF14E73B84F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 0511
Signing time: Fri 24 Oct 2025 23:00:41 +0000
Manifest this update: Fri 24 Oct 2025 23:00:41 +0000
Manifest next update: Sat 25 Oct 2025 23:00:41 +0000
Files and hashes: 1: 5CWyh9PK5o0CRshOuZZrSEZUYvo.roa (hash: fLRtRssfXw0tGSXMJxuEbYJSjSGokpVQlmfs5gVL6NQ=)
2: UVYnKt_30APPOeuH0s5UjzlGPFA.roa (hash: Ew+BOeWWwETAT/J2F3S8Uy7N2dyPufBElP43bD+0M6A=)
3: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: cd8XtOQutP+r1DHapE6XuE/N0XoEEzJ/ZpMsmodhDRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:73:ec:34:bc:f5:0f:ff:36:4c:f1:4e:73:b8:4f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Oct 24 23:00:41 2025 GMT
Not After : Oct 25 23:00:41 2025 GMT
Subject: CN=f15394abf5e0da6966d5fa0d2d71cab1c12fd45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:77:fa:d2:61:c8:a7:7e:47:6e:70:25:51:f0:
32:dc:98:2c:b1:4e:58:cf:e7:b4:32:21:0a:9c:8e:
fb:f6:9c:44:11:16:ab:a4:6a:c7:c4:3f:e4:ff:e1:
c2:2e:66:9c:6b:6c:28:ad:9a:a4:43:07:07:3c:b4:
a1:0c:fe:b5:3e:7c:a8:6a:f5:4e:43:68:75:bb:de:
77:7e:9c:50:6d:8d:58:74:13:32:3e:ce:23:22:c8:
e3:02:95:0d:40:1d:6b:21:f8:29:76:37:53:5a:c0:
f9:0e:61:b4:e3:27:b4:a8:73:00:2a:4d:62:3e:1a:
da:ac:a6:4f:00:22:bd:4f:41:d4:46:a0:f3:61:b7:
62:bf:6c:6f:a0:c4:17:fd:14:ac:3d:e1:af:4d:31:
f0:15:0d:16:c3:24:d9:47:fc:aa:1d:59:86:3d:88:
81:55:35:65:ea:d6:10:a1:b1:a5:16:88:ec:23:64:
1f:cb:2c:ca:14:ce:0f:44:18:81:b9:8a:d5:49:39:
2a:5c:e4:81:cb:3d:20:21:4d:a5:a4:fa:d5:dd:e2:
cc:3f:2f:6d:35:64:18:b7:72:6b:9a:97:e5:24:3d:
ae:56:c4:ca:41:a4:da:7c:f6:2a:a7:d8:f3:00:bb:
94:02:0a:a0:12:1c:99:a5:7d:70:cb:0c:ac:27:6b:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:53:94:AB:F5:E0:DA:69:66:D5:FA:0D:2D:71:CA:B1:C1:2F:D4:5F
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:fe:f1:c9:66:41:91:01:08:93:8f:d8:24:a1:6d:c1:b0:f3:
bb:de:cb:bc:3c:e6:d6:26:d5:45:67:08:33:f4:cd:2d:f6:0d:
46:5b:89:9b:d6:2d:01:57:09:88:ef:78:27:f4:d0:85:57:7b:
5c:23:64:1c:64:74:51:a4:1f:9a:80:7a:75:c9:40:bf:ed:0a:
a9:79:ec:45:5c:6c:dc:e9:ca:6e:15:87:5e:92:ac:24:51:18:
9e:4a:63:40:40:3f:a7:eb:74:d3:32:9a:f7:3d:99:48:ff:f3:
bb:03:79:87:4d:38:fa:4f:9b:ad:a3:f8:f1:a3:38:80:77:c7:
85:d2:e2:b0:d3:95:b9:82:16:98:c0:a9:86:60:44:d6:4a:8a:
d2:42:ee:1a:54:84:ef:7c:65:68:28:cb:bd:cb:85:1f:63:8c:
95:b2:18:83:34:47:7e:96:18:c3:97:f0:d0:c4:63:47:06:d7:
28:2c:37:4b:44:7a:5f:18:b1:f1:b5:f7:29:ef:cd:64:78:e5:
42:a9:a7:53:41:53:11:41:cf:35:b5:e4:f6:62:53:2e:86:a7:
e1:57:fa:36:51:f4:4b:1b:ac:fd:13:ac:85:a6:a0:ef:32:42:
d5:9c:d2:a1:ca:d9:9b:f9:52:9c:43:a3:fd:2e:4f:df:c7:dd:
8f:37:d7:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoYc+w0vPUP/zZM8U5zuE9aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDEzOTg5NzZiMmY0ODc3MjViYzEzZDdmYWViZWQzZTE2
ZDgyYzkwHhcNMjUxMDI0MjMwMDQxWhcNMjUxMDI1MjMwMDQxWjAzMTEwLwYDVQQD
EyhmMTUzOTRhYmY1ZTBkYTY5NjZkNWZhMGQyZDcxY2FiMWMxMmZkNDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXf60mHIp35HbnAlUfAy3JgssU5Y
z+e0MiEKnI779pxEERarpGrHxD/k/+HCLmaca2worZqkQwcHPLShDP61PnyoavVO
Q2h1u953fpxQbY1YdBMyPs4jIsjjApUNQB1rIfgpdjdTWsD5DmG04ye0qHMAKk1i
PhrarKZPACK9T0HURqDzYbdiv2xvoMQX/RSsPeGvTTHwFQ0WwyTZR/yqHVmGPYiB
VTVl6tYQobGlFojsI2QfyyzKFM4PRBiBuYrVSTkqXOSByz0gIU2lpPrV3eLMPy9t
NWQYt3JrmpflJD2uVsTKQaTafPYqp9jzALuUAgqgEhyZpX1wywysJ2vIGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFTlKv14NppZtX6DS1xyrHBL9RfMB8GA1UdIwQY
MBaAFF3ROYl2svSHclvBPX+uvtPhbYLJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRFNWlYYXk5SWR5VzhFOWY2Ni0wLUZ0Z3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zZTgxMDAtOTg4ZC00ODNlLWJjODYt
NjAwODEwNjM0ODc4LzEvWGRFNWlYYXk5SWR5VzhFOWY2Ni0wLUZ0Z3NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zZTgxMDAtOTg4ZC00ODNlLWJjODYtNjAwODEwNjM0ODc4
LzEvWGRFNWlYYXk5SWR5VzhFOWY2Ni0wLUZ0Z3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdv7xyWZB
kQEIk4/YJKFtwbDzu97LvDzm1ibVRWcIM/TNLfYNRluJm9YtAVcJiO94J/TQhVd7
XCNkHGR0UaQfmoB6dclAv+0KqXnsRVxs3OnKbhWHXpKsJFEYnkpjQEA/p+t00zKa
9z2ZSP/zuwN5h004+k+braP48aM4gHfHhdLisNOVuYIWmMCphmBE1kqK0kLuGlSE
73xlaCjLvcuFH2OMlbIYgzRHfpYYw5fw0MRjRwbXKCw3S0R6Xxix8bX3Ke/NZHjl
QqmnU0FTEUHPNbXk9mJTLoan4Vf6NlH0Sxus/ROshaag7zJC1ZzSocrZm/lSnEOj
/S5P38fdjzfXhQ==
-----END CERTIFICATE-----
Generated at Sat Oct 25 04:21:41 2025 by rpki-client