Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
File: xaL0JAfyHJ12kPsw_YzbK_320DA.mft (raw, json)
Hash identifier: 0T8KlvYIqXIMELf304qkNThZ0Gub2kMpVX5/ZA8tk6Y=
Subject key identifier: 50:6B:93:00:51:19:0C:97:5F:DF:D4:F6:54:AC:78:DB:35:D8:C3:3F
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 0199FDD8D5093B27551B115E05B813B17485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
Manifest number: 16FA
Signing time: Sun 19 Oct 2025 19:01:09 +0000
Manifest this update: Sun 19 Oct 2025 19:01:09 +0000
Manifest next update: Mon 20 Oct 2025 19:01:09 +0000
Files and hashes: 1: FVhHxIVfuNm-pwvjTgX_cs_Hfcs.roa (hash: mY8drD0B5z14cvplqrvZqDtdowa1l5LQ8YBe8N40mz4=)
2: xaL0JAfyHJ12kPsw_YzbK_320DA.crl (hash: J88p28Uuh1sZ3DbC5jk7SNCUIh5uxWYyDPR/TXXyXjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d5:09:3b:27:55:1b:11:5e:05:b8:13:b1:74:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: Oct 19 19:01:09 2025 GMT
Not After : Oct 20 19:01:09 2025 GMT
Subject: CN=506b930051190c975fdfd4f654ac78db35d8c33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:1b:5d:3e:b4:f2:e0:fa:85:ac:22:11:11:
91:9d:49:62:7b:b1:66:5f:c6:33:30:dc:c8:4c:56:
84:e0:71:ba:86:a3:dd:30:71:0d:40:3b:14:26:1e:
55:80:2e:5d:58:16:21:41:23:8b:8e:9b:04:4c:c2:
8f:3f:72:e0:4f:1e:f8:fe:eb:d6:38:9c:bd:aa:2c:
c4:8f:7f:92:82:e2:77:ef:21:de:e0:42:c1:f8:33:
02:18:0b:0e:4f:de:f9:9d:da:c9:ed:5f:61:b2:d6:
57:84:4b:3d:f1:8a:38:b8:a8:fa:50:44:3e:26:77:
cb:c9:8d:31:97:22:fa:82:b7:8b:ad:bf:32:55:11:
3d:24:1b:01:87:42:49:72:23:8e:c5:e4:8f:40:64:
c6:42:33:14:c7:7b:69:3f:e8:a4:09:d8:b5:15:cd:
98:0e:76:2b:8b:f9:09:18:3b:cf:f1:cf:80:3e:0a:
49:09:f4:fa:d5:0d:f6:cc:f9:90:1c:69:26:72:bf:
53:97:19:d7:97:fc:53:d4:9c:b4:d3:5a:a5:19:ac:
6c:e9:29:f2:77:38:9c:33:55:c5:c3:96:92:45:ef:
08:03:d5:89:38:71:82:f2:79:0a:fd:97:08:be:d5:
77:44:83:7c:69:b0:0f:c0:a3:e7:5f:6d:1b:fc:1c:
e1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6B:93:00:51:19:0C:97:5F:DF:D4:F6:54:AC:78:DB:35:D8:C3:3F
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8f:2c:8c:17:a6:0d:0f:21:32:bd:ff:06:db:b5:ca:50:03:
79:cd:c2:b2:6e:bf:8f:67:9a:0c:3f:c0:39:2b:94:bc:81:f7:
3f:66:be:81:e0:64:25:31:f5:a4:49:09:f6:57:10:f0:60:90:
e3:9e:68:8b:7b:6c:ec:d2:f9:f5:19:1b:a3:e6:11:86:10:42:
48:4a:76:87:46:5f:44:47:7f:6d:be:72:af:d0:e6:07:7a:a2:
a6:9e:4f:96:ed:f3:4f:eb:10:8c:87:2f:0d:2c:3c:c2:fa:fc:
35:d0:03:14:f7:e5:3b:01:24:74:b3:bd:8d:18:e8:d3:e7:b0:
8b:da:57:59:47:60:c8:49:dc:cd:8a:82:08:7d:d9:1c:30:5e:
11:b6:27:6c:b1:a1:a8:6b:fb:39:05:06:3d:92:af:27:d0:5a:
fd:c6:e5:91:6c:77:6c:71:eb:9d:c1:d6:d4:dc:28:69:52:a8:
7e:60:b5:d7:e0:5f:5a:bb:68:8c:4b:d7:3b:a1:aa:d1:35:a5:
ac:72:b8:fd:bd:ec:e5:10:eb:b8:4b:e9:07:39:66:b2:88:a0:
6b:1f:aa:f7:2d:89:32:68:c1:bb:e4:f5:8e:c8:36:50:df:ec:
5e:fe:3c:90:ec:2a:f7:db:9d:28:85:85:00:cc:a1:33:ff:cb:
9c:7e:25:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92NUJOydVGxFeBbgTsXSFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTJmNDI0MDdmMjFjOWQ3NjkwZmIzMGZkOGNkYjJiZmRm
NmQwMzAwHhcNMjUxMDE5MTkwMTA5WhcNMjUxMDIwMTkwMTA5WjAzMTEwLwYDVQQD
Eyg1MDZiOTMwMDUxMTkwYzk3NWZkZmQ0ZjY1NGFjNzhkYjM1ZDhjMzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6EbXT608uD6hawiERGRnUlie7Fm
X8YzMNzITFaE4HG6hqPdMHENQDsUJh5VgC5dWBYhQSOLjpsETMKPP3LgTx74/uvW
OJy9qizEj3+SguJ37yHe4ELB+DMCGAsOT975ndrJ7V9hstZXhEs98Yo4uKj6UEQ+
JnfLyY0xlyL6greLrb8yVRE9JBsBh0JJciOOxeSPQGTGQjMUx3tpP+ikCdi1Fc2Y
DnYri/kJGDvP8c+APgpJCfT61Q32zPmQHGkmcr9TlxnXl/xT1Jy001qlGaxs6Sny
dzicM1XFw5aSRe8IA9WJOHGC8nkK/ZcIvtV3RIN8abAPwKPnX20b/Bzh4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBrkwBRGQyXX9/U9lSseNs12MM/MB8GA1UdIwQY
MBaAFMWi9CQH8hyddpD7MP2M2yv99tAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFMMEpBZnlISjEya1Bzd19ZemJLXzMyMERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xYTE4ZTEtNjdjOC00OTJlLThmYmEt
ZmI1YzYyZTQyZjZiLzEveGFMMEpBZnlISjEya1Bzd19ZemJLXzMyMERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8xYTE4ZTEtNjdjOC00OTJlLThmYmEtZmI1YzYyZTQyZjZi
LzEveGFMMEpBZnlISjEya1Bzd19ZemJLXzMyMERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABo8sjBem
DQ8hMr3/Btu1ylADec3Csm6/j2eaDD/AOSuUvIH3P2a+geBkJTH1pEkJ9lcQ8GCQ
455oi3ts7NL59Rkbo+YRhhBCSEp2h0ZfREd/bb5yr9DmB3qipp5Plu3zT+sQjIcv
DSw8wvr8NdADFPflOwEkdLO9jRjo0+ewi9pXWUdgyEnczYqCCH3ZHDBeEbYnbLGh
qGv7OQUGPZKvJ9Ba/cblkWx3bHHrncHW1NwoaVKofmC11+BfWrtojEvXO6Gq0TWl
rHK4/b3s5RDruEvpBzlmsoigax+q9y2JMmjBu+T1jsg2UN/sXv48kOwq99udKIWF
AMyhM//LnH4lmg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:59:56 2025 by rpki-client