
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
File: XM3soXHkIseck4wnMqkNSKjFPAY.mft (raw, json)
Hash identifier: +H3/s4tLgQPiwONZ7EgehWeEuCky7UUTLuDmb0yB2P0=
Subject key identifier: EE:BE:D1:F3:6F:59:F0:2B:6A:C2:B5:E5:1E:1F:CC:FB:0E:AA:48:A4
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial: 0199FE7E183E3A6BCAFB53C2AE696BE60F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
Manifest number: 16F1
Signing time: Sun 19 Oct 2025 22:01:40 +0000
Manifest this update: Sun 19 Oct 2025 22:01:40 +0000
Manifest next update: Mon 20 Oct 2025 22:01:40 +0000
Files and hashes: 1: 1ZFRCjoLi_l_VlnDb8o8tJWIa2E.roa (hash: vVgcWoftvDNuMTcgCwdMnGyQwGXGLdFZoBkxUeU+jcg=)
2: LxxlY-veNdEFSuClmgliyHMOZOA.roa (hash: eyCm9s0PQeZ1TTpko+C38z1BbPAWbfE1nA0PWObj7+Q=)
3: NqBM7SejbvGbff9d0C8tNNMd9cE.roa (hash: NsdFpCr4tDnCXl/0XE2a5AdGU138fFNht03h3yMplDQ=)
4: Td-MjJ9z3BFMN-CR2k1YuGa_k_c.roa (hash: 0YQPkgNx9PD50yI1FD2kcNedXzzoW6sYrN+X7fEAhd4=)
5: XM3soXHkIseck4wnMqkNSKjFPAY.crl (hash: 0FodneX2JzZlkTRrRR6q0+GZ0t8KYnnTomlVZMDLSwc=)
6: aa3wYkdpjQEDieV4Tr1D1UlS-yQ.roa (hash: OvNz6w0TsSCTT94cQ7JVYM2YwdlsjARoid2lWLlXj5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:18:3e:3a:6b:ca:fb:53:c2:ae:69:6b:e6:0f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Validity
Not Before: Oct 19 22:01:40 2025 GMT
Not After : Oct 20 22:01:40 2025 GMT
Subject: CN=eebed1f36f59f02b6ac2b5e51e1fccfb0eaa48a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:51:19:bd:ff:b4:2c:0c:8b:65:c6:b3:fb:28:
a7:ac:58:79:80:b3:ed:98:fc:e1:ee:4c:13:d1:69:
b6:7f:a6:92:69:b5:de:3c:ea:63:10:42:5e:d8:4e:
83:15:a4:8c:a8:0f:07:41:1e:0f:2e:7a:b0:d9:91:
a5:75:97:fe:7a:a3:ef:4f:a1:06:6a:a3:5b:17:5f:
ad:3d:13:79:16:5c:d0:57:51:14:69:53:2d:f9:70:
0b:45:9b:10:c4:d8:c5:b6:90:2f:71:b5:7c:7a:53:
50:38:54:da:67:43:23:ae:2f:56:31:f6:2b:87:6f:
cb:17:56:8d:16:8a:92:d4:64:55:f7:9c:51:11:67:
c0:c6:83:6e:cf:15:f4:5a:cb:57:ac:0f:ce:24:7a:
96:18:5d:70:7c:d9:9d:ca:a2:50:7a:65:c1:68:49:
56:04:c0:be:4d:64:bc:29:f9:84:90:d3:66:37:11:
3c:84:94:d2:ae:08:c2:13:0a:76:c8:b8:c3:2e:fd:
bb:f9:0c:6d:f6:f7:09:e9:c3:39:4f:85:91:61:b2:
3b:27:bb:c6:6c:ff:84:cf:4d:69:98:a5:79:8e:d6:
9e:94:62:2b:08:15:a4:e4:2b:c8:e0:3f:e8:94:58:
47:b2:8e:e0:30:c4:49:bd:9d:78:e9:2a:6f:52:b9:
df:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BE:D1:F3:6F:59:F0:2B:6A:C2:B5:E5:1E:1F:CC:FB:0E:AA:48:A4
X509v3 Authority Key Identifier:
keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:59:ff:9c:01:50:7f:cf:25:31:76:78:c7:f3:9c:c5:57:37:
98:45:9d:2b:02:8f:c7:2c:cc:b7:ae:9f:83:00:ea:03:78:53:
a6:f6:3e:41:55:31:4a:88:86:f3:ef:c2:9e:95:dd:79:46:10:
fc:5d:43:65:bd:06:82:ee:28:10:6c:17:92:4a:c6:dd:87:14:
79:93:8c:75:c9:8c:27:94:1e:22:61:6f:65:0f:0b:bc:10:e3:
04:fb:da:70:2e:8e:a8:0e:fc:a4:80:3d:52:bf:f2:83:31:ae:
00:ea:bf:16:2f:d5:09:b6:56:09:e3:04:f6:9b:e5:ab:99:0e:
70:bf:bb:30:b7:e0:8b:d8:95:cb:d2:d0:b2:9a:ce:7d:07:7d:
33:7e:0f:97:6a:f5:f3:1e:7d:1c:88:13:48:84:86:af:ad:64:
a1:58:10:39:de:04:b2:f6:f7:f8:37:fd:48:ec:e6:e6:a5:70:
49:bf:1f:0f:7e:e9:c2:4c:81:a7:df:3f:7f:61:ec:fa:31:11:
b9:3b:a0:ba:98:a7:53:90:b6:b2:21:63:db:9b:65:f7:d0:81:
a6:a6:d7:15:30:95:aa:f8:a6:f8:d8:df:d6:9f:a1:89:75:f4:
cb:9f:fd:01:68:a9:8f:fe:80:37:7c:0c:c7:6c:24:96:6f:e6:
b2:d4:79:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fhg+OmvK+1PCrmlr5g8WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjY2RlY2ExNzFlNDIyYzc5YzkzOGMyNzMyYTkwZDQ4YThj
NTNjMDYwHhcNMjUxMDE5MjIwMTQwWhcNMjUxMDIwMjIwMTQwWjAzMTEwLwYDVQQD
EyhlZWJlZDFmMzZmNTlmMDJiNmFjMmI1ZTUxZTFmY2NmYjBlYWE0OGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31EZvf+0LAyLZcaz+yinrFh5gLPt
mPzh7kwT0Wm2f6aSabXePOpjEEJe2E6DFaSMqA8HQR4PLnqw2ZGldZf+eqPvT6EG
aqNbF1+tPRN5FlzQV1EUaVMt+XALRZsQxNjFtpAvcbV8elNQOFTaZ0Mjri9WMfYr
h2/LF1aNFoqS1GRV95xREWfAxoNuzxX0WstXrA/OJHqWGF1wfNmdyqJQemXBaElW
BMC+TWS8KfmEkNNmNxE8hJTSrgjCEwp2yLjDLv27+Qxt9vcJ6cM5T4WRYbI7J7vG
bP+Ez01pmKV5jtaelGIrCBWk5CvI4D/olFhHso7gMMRJvZ146SpvUrnfawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6+0fNvWfArasK15R4fzPsOqkikMB8GA1UdIwQY
MBaAFFzN7KFx5CLHnJOMJzKpDUioxTwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUt
YTg4MWVjODIyOGI1LzEvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9iOGY1ZTYtYzk1MS00ZGRiLWI0ZjUtYTg4MWVjODIyOGI1
LzEvWE0zc29YSGtJc2VjazR3bk1xa05TS2pGUEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApFn/nAFQ
f88lMXZ4x/OcxVc3mEWdKwKPxyzMt66fgwDqA3hTpvY+QVUxSoiG8+/CnpXdeUYQ
/F1DZb0Ggu4oEGwXkkrG3YcUeZOMdcmMJ5QeImFvZQ8LvBDjBPvacC6OqA78pIA9
Ur/ygzGuAOq/Fi/VCbZWCeME9pvlq5kOcL+7MLfgi9iVy9LQsprOfQd9M34Pl2r1
8x59HIgTSISGr61koVgQOd4Esvb3+Df9SOzm5qVwSb8fD37pwkyBp98/f2Hs+jER
uTugupinU5C2siFj25tl99CBpqbXFTCVqvim+Njf1p+hiXX0y5/9AWipj/6AN3wM
x2wklm/mstR5PQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:50:09 2025 by rpki-client