Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
File: 51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft (raw, json)
Hash identifier: aClnOJDiYAGF6H8/dAE6kqwguf7hoSLx+gFkT01wv8A=
Subject key identifier: 2B:8D:89:C5:65:8F:2C:07:1F:70:D1:E8:48:CF:68:0E:A4:59:5F:90
Authority key identifier: E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88
Certificate issuer: /CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
Certificate serial: 019A72CA8D80FFF576D5C0C81E9A49E49780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 12:01:08 +0000
Manifest this update: Tue 11 Nov 2025 12:01:08 +0000
Manifest next update: Wed 12 Nov 2025 12:01:08 +0000
Files and hashes: 1: 51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl (hash: uxWPgK1Aof98y6+WE7aiGiI2eNBys07lay3ADq6Wrac=)
2: JjZhvhphZRDZH5Oh3OKMQHamrqo.roa (hash: I0uqH2D54bPvPhDVGHzvDh0kw0oClKnlcruCIfR9TBs=)
3: uttZJDL3LQ7QDxUT6eilC7zrvqs.roa (hash: w5gBSlKjA5Lu1HULnBbNVdum/zMpOaAXAiNTMSLvzE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:8d:80:ff:f5:76:d5:c0:c8:1e:9a:49:e4:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
Validity
Not Before: Nov 11 12:01:08 2025 GMT
Not After : Nov 12 12:01:08 2025 GMT
Subject: CN=2b8d89c5658f2c071f70d1e848cf680ea4595f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:58:84:a3:fb:4f:c3:1b:33:c6:bd:b7:5c:41:
37:8d:0e:2a:6c:38:29:53:94:3c:20:10:ae:85:eb:
71:2e:c6:8f:c4:e9:16:3c:54:fc:21:48:d4:de:72:
e2:92:ea:55:18:f3:ec:bb:74:dc:91:6e:e4:fe:cc:
6c:be:52:95:69:f7:f6:ba:da:f2:9b:a6:45:1f:7a:
51:9f:20:e1:43:3b:08:c2:a1:27:21:2e:c0:d4:38:
c8:20:ff:f3:96:d2:b5:fd:7f:9e:ce:46:29:2c:37:
41:4b:e5:c3:67:95:c0:db:f3:95:4b:f0:5f:70:f8:
e6:b6:e6:a5:3d:f1:b1:80:29:dd:da:9f:e4:64:36:
50:f0:33:fe:af:60:d0:79:62:a9:83:48:12:83:8d:
7c:f8:65:a4:48:00:f5:5c:63:98:b5:d6:49:d0:94:
81:64:2b:04:28:7b:15:37:ab:6b:cb:d5:25:bd:a7:
ab:a3:9f:ad:c9:a7:4d:7c:e6:f5:8e:86:c2:08:ad:
3d:ac:b1:be:44:ab:1c:23:56:b2:7f:e6:52:00:d1:
08:8b:25:6a:f0:ec:f2:c0:b8:5e:54:4e:ad:fc:44:
d5:17:ac:10:fb:75:46:0b:c7:31:ac:74:3a:4d:fb:
43:c8:65:30:a5:f0:0d:05:80:25:2f:f9:d9:d4:fd:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8D:89:C5:65:8F:2C:07:1F:70:D1:E8:48:CF:68:0E:A4:59:5F:90
X509v3 Authority Key Identifier:
keyid:E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:f4:8f:66:bc:6e:f3:44:79:bd:56:3b:80:3c:41:10:f5:ac:
01:0a:be:d7:b5:e3:69:a2:ab:63:4e:0c:b7:48:82:63:47:42:
f5:c1:12:5b:4e:e3:ec:c2:9c:5f:ba:81:d3:d5:b7:2a:80:e5:
cc:a2:c8:69:c6:1a:60:c9:af:5e:2a:24:c9:51:a9:b4:59:aa:
3c:09:7b:2c:41:66:41:da:c8:7f:84:5c:77:a1:0a:ff:00:51:
c5:86:38:b2:db:4c:6e:e4:f2:27:5c:1e:64:1e:fe:14:f5:86:
eb:a6:75:36:79:cc:bf:a5:6d:26:6e:76:b1:7a:a6:d5:17:fa:
fe:cf:1f:22:7f:86:43:26:11:ab:b7:16:91:35:ea:2a:bc:3b:
6b:cb:b6:0d:e3:9c:66:d7:55:05:16:27:06:d9:a8:08:0e:4a:
f7:e5:ae:c4:0b:04:80:a6:b1:1a:05:80:48:24:3b:e3:8f:fb:
46:f9:09:b1:44:30:54:ce:88:7d:18:33:8b:d9:f7:f5:f2:c2:
7f:bd:88:6a:dc:05:9b:19:8d:d4:30:e9:b6:57:ee:82:3c:7f:
eb:c2:69:5e:e2:8a:37:06:4d:c7:6d:86:65:1e:e4:ce:8f:80:
63:9c:05:29:0c:58:cc:58:9e:78:4e:35:58:17:09:2b:13:44:
bc:22:fa:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyo2A//V21cDIHppJ5JeAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NWJjZTE2M2NiNTAyYTY1N2YyNzJmNzlmZDNlNDg3ZmJi
ZDRiODgwHhcNMjUxMTExMTIwMTA4WhcNMjUxMTEyMTIwMTA4WjAzMTEwLwYDVQQD
EygyYjhkODljNTY1OGYyYzA3MWY3MGQxZTg0OGNmNjgwZWE0NTk1ZjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1iEo/tPwxszxr23XEE3jQ4qbDgp
U5Q8IBCuhetxLsaPxOkWPFT8IUjU3nLikupVGPPsu3TckW7k/sxsvlKVaff2utry
m6ZFH3pRnyDhQzsIwqEnIS7A1DjIIP/zltK1/X+ezkYpLDdBS+XDZ5XA2/OVS/Bf
cPjmtualPfGxgCnd2p/kZDZQ8DP+r2DQeWKpg0gSg418+GWkSAD1XGOYtdZJ0JSB
ZCsEKHsVN6try9Ulvaero5+tyadNfOb1jobCCK09rLG+RKscI1ayf+ZSANEIiyVq
8OzywLheVE6t/ETVF6wQ+3VGC8cxrHQ6TftDyGUwpfANBYAlL/nZ1P0GUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuNicVljywHH3DR6EjPaA6kWV+QMB8GA1UdIwQY
MBaAFOdbzhY8tQKmV/Jy95/T5If7vUuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTF2T0ZqeTFBcVpYOG5MM245UGtoX3U5UzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jNTcwOGItZmFmOS00MmE0LWJmNDgt
NGI4NTc4NzE1MTU0LzEvNTF2T0ZqeTFBcVpYOG5MM245UGtoX3U5UzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9jNTcwOGItZmFmOS00MmE0LWJmNDgtNGI4NTc4NzE1MTU0
LzEvNTF2T0ZqeTFBcVpYOG5MM245UGtoX3U5UzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1PSPZrxu
80R5vVY7gDxBEPWsAQq+17XjaaKrY04Mt0iCY0dC9cESW07j7MKcX7qB09W3KoDl
zKLIacYaYMmvXiokyVGptFmqPAl7LEFmQdrIf4Rcd6EK/wBRxYY4sttMbuTyJ1we
ZB7+FPWG66Z1NnnMv6VtJm52sXqm1Rf6/s8fIn+GQyYRq7cWkTXqKrw7a8u2DeOc
ZtdVBRYnBtmoCA5K9+WuxAsEgKaxGgWASCQ744/7RvkJsUQwVM6IfRgzi9n39fLC
f72IatwFmxmN1DDptlfugjx/68JpXuKKNwZNx22GZR7kzo+AY5wFKQxYzFieeE41
WBcJKxNEvCL6yA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:08:38 2025 by rpki-client