Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
File: F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft (raw, json)
Hash identifier: 0XJ74qF5Rpee60YjA+RA2Yu29ttJC0nYhadD8QggxFc=
Subject key identifier: AE:E7:A7:73:66:4F:43:AA:88:D2:58:79:0A:1C:F7:90:02:F2:B6:3A
Authority key identifier: 17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72
Certificate issuer: /CN=1792582aa0b18d6073592f121a6e563fec424672
Certificate serial: 019A2B1EFD37D0E55A08E989EF3B0F36F9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
Manifest number: 0799
Signing time: Tue 28 Oct 2025 14:00:42 +0000
Manifest this update: Tue 28 Oct 2025 14:00:42 +0000
Manifest next update: Wed 29 Oct 2025 14:00:42 +0000
Files and hashes: 1: F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl (hash: GPi+bi8TYCn79+TQj5Nj76PMALXyfUcmLTMbBN4tW6I=)
2: X1Hk6Afe1QrSetXg0Fl8YXsPzIQ.roa (hash: XOR8QJ4EQ0MnwLrp2DnXgyEFhnN9pPQ9poUD3LAPUHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1e:fd:37:d0:e5:5a:08:e9:89:ef:3b:0f:36:f9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1792582aa0b18d6073592f121a6e563fec424672
Validity
Not Before: Oct 28 14:00:42 2025 GMT
Not After : Oct 29 14:00:42 2025 GMT
Subject: CN=aee7a773664f43aa88d258790a1cf79002f2b63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:e1:e2:4f:b9:e7:49:48:e5:f6:d6:3b:52:
b4:ed:bc:2b:d0:20:10:2e:62:c5:ee:0e:f8:61:23:
08:7f:9a:5a:79:74:34:52:78:41:71:2c:3f:38:d8:
db:a1:a3:ef:dc:fd:2a:ab:9f:0e:06:2a:e2:06:81:
b2:62:c2:be:d1:69:1c:50:04:18:7a:35:4c:d2:b1:
5c:df:61:0e:55:e0:11:c2:81:97:76:63:53:09:3e:
0e:29:6d:2a:d4:78:b3:16:78:75:22:5d:46:ed:5a:
51:b3:c9:5a:6c:50:77:20:ec:a9:27:40:02:9d:e2:
18:ee:5c:7e:84:18:05:19:e3:3b:79:00:22:52:aa:
1c:2f:14:21:78:2e:7b:98:ff:67:9f:f6:45:5c:ca:
18:c4:c5:79:8e:c6:4a:9a:77:9b:de:91:e1:20:78:
3e:6a:7f:e7:7a:4e:09:2b:27:9d:5c:52:57:f5:4a:
4b:91:75:86:53:91:e7:c2:83:f0:c0:af:7a:95:b6:
e3:68:9d:52:21:c4:03:c2:24:86:58:3a:70:00:bc:
cb:72:0a:08:2b:d9:56:a2:9e:5c:42:d4:33:6b:17:
38:d1:ed:9e:4a:8b:8f:96:c1:e2:e6:9d:e8:9c:5b:
e3:e9:8e:ff:c0:9c:63:7f:ac:ad:1e:0d:fe:b1:dc:
31:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E7:A7:73:66:4F:43:AA:88:D2:58:79:0A:1C:F7:90:02:F2:B6:3A
X509v3 Authority Key Identifier:
keyid:17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0d:44:39:58:30:fb:cd:90:61:1b:76:57:1e:bb:6c:78:8b:
5c:97:89:a8:3a:4e:df:38:85:d0:0e:2d:07:13:90:46:5b:62:
db:ce:25:01:97:a8:3b:68:17:e6:fe:bd:9b:20:90:87:44:1d:
24:d5:3a:86:e3:cf:09:f7:f1:c2:73:32:43:18:90:9c:55:44:
2d:dd:fe:5c:54:01:e5:68:93:c6:ac:91:e5:eb:1d:88:58:38:
23:a3:85:ae:4f:ab:25:d0:e3:bb:04:e9:3f:49:c7:a9:38:73:
97:33:dd:ed:84:b1:02:91:62:34:52:c8:1f:6d:70:89:19:30:
b4:8f:2f:e3:99:28:45:d4:92:8a:bd:fc:1a:d6:16:34:40:4e:
9a:48:f8:24:e1:f3:23:04:58:d7:13:81:ed:df:ba:32:46:55:
96:0d:07:be:4d:15:4b:27:16:9e:93:c1:c4:0b:9f:f8:49:03:
ea:66:1c:c8:94:48:2a:91:f4:93:14:70:5d:22:89:ad:0a:5c:
f7:fc:73:43:c5:83:dc:57:e9:c3:61:b4:26:2d:ef:8d:7d:3c:
b2:9f:07:10:b9:fb:4b:2c:d5:78:be:01:23:84:7f:fa:9e:40:
18:3d:10:4e:e8:cc:8a:01:e8:1d:ca:ad:b7:fc:30:10:18:59:
42:8d:dd:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZorHv030OVaCOmJ7zsPNvmzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTI1ODJhYTBiMThkNjA3MzU5MmYxMjFhNmU1NjNmZWM0
MjQ2NzIwHhcNMjUxMDI4MTQwMDQyWhcNMjUxMDI5MTQwMDQyWjAzMTEwLwYDVQQD
EyhhZWU3YTc3MzY2NGY0M2FhODhkMjU4NzkwYTFjZjc5MDAyZjJiNjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygTh4k+550lI5fbWO1K07bwr0CAQ
LmLF7g74YSMIf5paeXQ0UnhBcSw/ONjboaPv3P0qq58OBiriBoGyYsK+0WkcUAQY
ejVM0rFc32EOVeARwoGXdmNTCT4OKW0q1HizFnh1Il1G7VpRs8labFB3IOypJ0AC
neIY7lx+hBgFGeM7eQAiUqocLxQheC57mP9nn/ZFXMoYxMV5jsZKmneb3pHhIHg+
an/nek4JKyedXFJX9UpLkXWGU5HnwoPwwK96lbbjaJ1SIcQDwiSGWDpwALzLcgoI
K9lWop5cQtQzaxc40e2eSouPlsHi5p3onFvj6Y7/wJxjf6ytHg3+sdwxEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7np3NmT0OqiNJYeQoc95AC8rY6MB8GA1UdIwQY
MBaAFBeSWCqgsY1gc1kvEhpuVj/sQkZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVKWUtxQ3hqV0J6V1M4U0dtNVdQLXhDUm5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yZDM2MDctYmU1OC00YTA1LTlkNjgt
ZTg0ZjNiNDkyN2FkLzEvRjVKWUtxQ3hqV0J6V1M4U0dtNVdQLXhDUm5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8yZDM2MDctYmU1OC00YTA1LTlkNjgtZTg0ZjNiNDkyN2Fk
LzEvRjVKWUtxQ3hqV0J6V1M4U0dtNVdQLXhDUm5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARg1EOVgw
+82QYRt2Vx67bHiLXJeJqDpO3ziF0A4tBxOQRlti284lAZeoO2gX5v69myCQh0Qd
JNU6huPPCffxwnMyQxiQnFVELd3+XFQB5WiTxqyR5esdiFg4I6OFrk+rJdDjuwTp
P0nHqThzlzPd7YSxApFiNFLIH21wiRkwtI8v45koRdSSir38GtYWNEBOmkj4JOHz
IwRY1xOB7d+6MkZVlg0Hvk0VSycWnpPBxAuf+EkD6mYcyJRIKpH0kxRwXSKJrQpc
9/xzQ8WD3Ffpw2G0Ji3vjX08sp8HELn7SyzVeL4BI4R/+p5AGD0QTujMigHoHcqt
t/wwEBhZQo3d2w==
-----END CERTIFICATE-----
Generated at Tue Oct 28 16:11:14 2025 by rpki-client