Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
File: d5LD_GkVSsfVFbysnaoH54vCKcw.mft (raw, json)
Hash identifier: dJfUqMUYMY9/SsI31l3202IdrjMcSGuHwcVWS84P1Mk=
Subject key identifier: 51:57:6D:6B:16:9E:9E:F3:3C:AF:41:3C:C5:67:35:85:B5:E6:C6:CB
Authority key identifier: 77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC
Certificate issuer: /CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
Certificate serial: 019A1E3F21B2F376E172B4520FB31C1E0CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
Manifest number: 16F4
Signing time: Sun 26 Oct 2025 02:00:45 +0000
Manifest this update: Sun 26 Oct 2025 02:00:45 +0000
Manifest next update: Mon 27 Oct 2025 02:00:45 +0000
Files and hashes: 1: XufdK4JaU0kijhaCZqp6MWC7lI8.roa (hash: tAIQSyAZo/oGjmfexz3lVWcMQblwf+06mjxANWC5dis=)
2: d5LD_GkVSsfVFbysnaoH54vCKcw.crl (hash: LAlza7ATPIeFCuiENm/TkmBhFdZPVWl98Z6EWr3Gquw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3f:21:b2:f3:76:e1:72:b4:52:0f:b3:1c:1e:0c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7792c3fc69154ac7d515bcac9daa07e78bc229cc
Validity
Not Before: Oct 26 02:00:45 2025 GMT
Not After : Oct 27 02:00:45 2025 GMT
Subject: CN=51576d6b169e9ef33caf413cc5673585b5e6c6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fd:26:f8:ed:d6:c3:fd:3e:4c:7a:00:dc:f9:
6a:ae:b0:c0:4c:3b:7d:5a:e1:f4:28:10:fc:64:14:
0a:39:fc:48:5f:b2:73:4a:14:93:55:7b:c6:04:bd:
66:46:6d:a2:3e:70:4b:0b:49:a5:6d:91:53:de:d9:
9b:8b:d7:cf:e7:2b:60:0f:d0:32:6b:bb:18:97:bf:
c0:b9:60:90:3f:7e:b7:d4:f9:ed:fa:b1:8c:77:46:
42:66:e2:b8:41:a9:f0:aa:14:85:08:d4:98:2c:43:
0e:92:0f:81:2a:0f:f4:85:11:e6:d8:a5:cd:fb:d0:
a7:dd:b5:0a:7d:24:69:a8:aa:26:00:57:18:f9:01:
f5:91:ea:73:83:49:bc:1a:ee:38:bd:b5:44:a8:d0:
be:bb:db:2e:d4:ea:19:ea:97:f4:3b:58:f9:0d:b2:
84:d9:6e:68:25:35:cd:f4:a0:0d:65:97:3d:3a:59:
34:a5:78:6d:40:69:aa:73:74:92:04:10:04:3d:f0:
0a:f6:99:02:b2:53:83:3e:ac:62:cd:10:1b:90:96:
02:3f:26:34:a1:c6:4b:44:3c:f0:ce:7e:73:2d:e5:
ef:2e:9e:bf:2b:54:a1:6d:6e:3c:f5:db:21:24:93:
66:76:de:17:58:72:24:65:08:18:08:be:eb:86:51:
52:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:57:6D:6B:16:9E:9E:F3:3C:AF:41:3C:C5:67:35:85:B5:E6:C6:CB
X509v3 Authority Key Identifier:
keyid:77:92:C3:FC:69:15:4A:C7:D5:15:BC:AC:9D:AA:07:E7:8B:C2:29:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5LD_GkVSsfVFbysnaoH54vCKcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/52b48d-28a8-48f5-a4df-4db40a36563e/1/d5LD_GkVSsfVFbysnaoH54vCKcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c1:f9:c8:72:a3:19:8b:86:d2:a8:ee:32:4a:cb:2f:55:e8:
7f:9b:5c:e7:a4:7e:cc:da:f4:18:bf:6e:79:71:a4:23:cf:29:
d4:2e:d6:72:5a:f9:13:78:7b:ac:bd:cd:a1:13:7c:83:9c:d6:
ea:b7:5d:8d:04:98:62:1f:5a:04:ff:61:a5:d0:17:e5:1d:6e:
08:61:c8:57:7f:3a:8c:47:b3:f4:8d:3b:38:f6:95:82:4a:6b:
87:46:41:80:f1:9f:36:f4:e8:1b:61:b5:22:43:bf:b0:e5:d7:
16:cd:95:f3:8e:1c:d5:b2:c9:a4:75:78:91:3f:5a:b7:23:87:
6f:82:9a:1f:4e:7b:2e:d8:7e:b8:6f:8b:07:1b:b4:cc:ba:78:
eb:ed:dc:70:08:1d:fb:69:29:9e:9c:3c:04:d1:db:bc:f7:63:
28:b2:fe:0f:99:84:62:26:52:14:96:e3:01:c8:1d:2a:4d:29:
2c:de:16:27:60:4f:05:cc:30:79:e3:5d:d3:45:24:60:ed:70:
f8:e6:0e:b3:83:fa:8c:16:b7:c3:37:8f:1b:04:9c:28:e7:90:
15:30:63:4c:bf:65:73:be:e6:c6:d8:35:eb:6a:5e:13:24:62:
3a:f9:5a:92:2d:06:38:28:ca:d4:33:eb:af:4f:e4:f8:9c:56:
12:c3:83:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoePyGy83bhcrRSD7McHgzXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OTJjM2ZjNjkxNTRhYzdkNTE1YmNhYzlkYWEwN2U3OGJj
MjI5Y2MwHhcNMjUxMDI2MDIwMDQ1WhcNMjUxMDI3MDIwMDQ1WjAzMTEwLwYDVQQD
Eyg1MTU3NmQ2YjE2OWU5ZWYzM2NhZjQxM2NjNTY3MzU4NWI1ZTZjNmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3v0m+O3Ww/0+THoA3PlqrrDATDt9
WuH0KBD8ZBQKOfxIX7JzShSTVXvGBL1mRm2iPnBLC0mlbZFT3tmbi9fP5ytgD9Ay
a7sYl7/AuWCQP3631Pnt+rGMd0ZCZuK4QanwqhSFCNSYLEMOkg+BKg/0hRHm2KXN
+9Cn3bUKfSRpqKomAFcY+QH1kepzg0m8Gu44vbVEqNC+u9su1OoZ6pf0O1j5DbKE
2W5oJTXN9KANZZc9Olk0pXhtQGmqc3SSBBAEPfAK9pkCslODPqxizRAbkJYCPyY0
ocZLRDzwzn5zLeXvLp6/K1ShbW489dshJJNmdt4XWHIkZQgYCL7rhlFSEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFXbWsWnp7zPK9BPMVnNYW15sbLMB8GA1UdIwQY
MBaAFHeSw/xpFUrH1RW8rJ2qB+eLwinMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC81MmI0OGQtMjhhOC00OGY1LWE0ZGYt
NGRiNDBhMzY1NjNlLzEvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC81MmI0OGQtMjhhOC00OGY1LWE0ZGYtNGRiNDBhMzY1NjNl
LzEvZDVMRF9Ha1ZTc2ZWRmJ5c25hb0g1NHZDS2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqcH5yHKj
GYuG0qjuMkrLL1Xof5tc56R+zNr0GL9ueXGkI88p1C7Wclr5E3h7rL3NoRN8g5zW
6rddjQSYYh9aBP9hpdAX5R1uCGHIV386jEez9I07OPaVgkprh0ZBgPGfNvToG2G1
IkO/sOXXFs2V844c1bLJpHV4kT9atyOHb4KaH057Lth+uG+LBxu0zLp46+3ccAgd
+2kpnpw8BNHbvPdjKLL+D5mEYiZSFJbjAcgdKk0pLN4WJ2BPBcwweeNd00UkYO1w
+OYOs4P6jBa3wzePGwScKOeQFTBjTL9lc77mxtg162peEyRiOvlaki0GOCjK1DPr
r0/k+JxWEsODww==
-----END CERTIFICATE-----
Generated at Sun Oct 26 06:30:43 2025 by rpki-client