Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
File: 0Xrp3J9DomnrCszzSI6GH0_w6J4.mft (raw, json)
Hash identifier: rbgd1BDM2H6r77WfUjbX3HGHq8+Za+Ia8cecry7HO64=
Subject key identifier: A5:01:8B:E1:3A:3B:92:30:C8:52:16:0A:4F:AD:DD:44:36:42:9A:BA
Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
Certificate issuer: /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Certificate serial: 0199FD349387D91A2EEC9638C1C6B675D007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
Manifest number: 0667
Signing time: Sun 19 Oct 2025 16:01:45 +0000
Manifest this update: Sun 19 Oct 2025 16:01:45 +0000
Manifest next update: Mon 20 Oct 2025 16:01:45 +0000
Files and hashes: 1: 0Xrp3J9DomnrCszzSI6GH0_w6J4.crl (hash: tGeTjuHG4ChNn5gPcUkY3xLTRCfYUg1bS51IrY62poc=)
2: 3e96O0zql-DJprCN832OErRtWhY.roa (hash: YxeaSNUi71632qJZwGZv8Hu3idvAcvJX148wv4xYwpc=)
3: 6W_cfm-J8Jm0OpvUv8VEPziXvqU.roa (hash: ntUZRyHP+6WOiJkOEZN4Fuk1A/G3+Q9sIm3AVgN1jow=)
4: 7iPtEMlcS-95zv2l-9LcExzrIMU.roa (hash: wBjPWZtqDlytdLWUUgzq4RIZY24YAMcvhX1x0tSKKDI=)
5: w4HlqPi1OFmgM8LH-X3G7-isDzc.roa (hash: L9SAWLXqlEKX0McJ5PDoHev7KlGzu28LLCwZ81A7uqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:93:87:d9:1a:2e:ec:96:38:c1:c6:b6:75:d0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Validity
Not Before: Oct 19 16:01:45 2025 GMT
Not After : Oct 20 16:01:45 2025 GMT
Subject: CN=a5018be13a3b9230c852160a4faddd4436429aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:64:a0:fa:1c:7b:c9:70:79:b3:3f:b6:ea:
6e:59:df:31:7d:42:7a:53:9d:12:d2:6a:79:cd:56:
4f:b0:33:8f:ec:40:ed:e5:d7:c4:bb:3c:8f:12:05:
13:7d:e8:62:df:61:8b:2c:c8:00:d2:a0:b2:4b:52:
bb:4e:c4:dc:ee:f5:39:07:f3:4e:c0:b3:d1:86:be:
69:41:af:92:65:53:17:80:ee:7d:53:80:50:2e:d5:
34:3f:37:1a:ca:6a:f7:75:a1:56:c7:85:77:1b:fc:
1d:dc:94:14:16:ca:29:ea:3a:9f:13:12:93:0f:0b:
6c:24:d9:6b:a5:6e:0c:03:36:78:71:79:ac:9d:de:
94:ad:0f:8b:ba:63:05:18:d0:16:cb:b4:45:c4:55:
3c:79:5b:68:1d:56:84:82:76:35:1c:f8:78:ac:50:
b4:32:68:ab:b2:5a:4a:1c:b3:1d:15:07:15:6a:47:
b9:48:2b:9f:33:53:56:96:45:c8:87:e0:8d:29:a2:
15:09:fa:b0:da:35:62:17:00:3f:35:cb:46:3e:a5:
60:4e:9a:c6:8c:7c:11:0e:ec:5e:d6:4a:b3:50:af:
32:74:1c:48:d7:22:1d:e0:d6:ed:9b:ee:d4:f2:1e:
85:3b:6a:5c:f2:3f:df:a5:67:fa:28:8b:8d:d6:58:
3c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:01:8B:E1:3A:3B:92:30:C8:52:16:0A:4F:AD:DD:44:36:42:9A:BA
X509v3 Authority Key Identifier:
keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0d:66:f1:5c:0d:65:2c:a2:2d:70:15:41:db:64:57:63:7d:
3c:4f:ef:79:e7:94:49:95:16:7d:ba:f0:b0:4c:27:9b:0c:27:
04:6b:d1:12:1d:d8:4d:90:71:28:c4:d1:14:91:ee:e8:c2:8e:
85:56:cb:92:ed:79:83:a4:d7:88:fc:32:a7:0c:fb:fa:68:68:
94:ba:11:42:d4:46:92:c9:ee:d9:9d:da:0c:c8:2d:eb:29:ca:
23:29:fc:79:5d:51:0b:a4:ce:ee:44:a0:b8:a6:7a:d2:66:d1:
3a:49:81:fe:0e:f4:7b:26:f4:a9:c8:1c:56:b9:1c:68:3f:5f:
6f:bc:dd:6e:8b:2b:37:86:6f:b7:f8:f8:09:29:17:89:39:f7:
30:de:9f:fc:dd:e5:58:e1:a7:d0:3d:df:19:f8:d1:ff:d8:22:
11:3e:3c:40:08:d8:cc:c9:3e:7b:18:2d:b7:b7:a0:18:0d:86:
ed:68:1d:8f:50:ba:99:4c:a6:2d:2f:cf:24:94:48:81:f2:8e:
da:f7:40:97:a7:db:57:96:51:cf:8b:e6:bd:f8:0b:44:61:9f:
0c:3d:a2:93:69:66:fe:3b:de:68:fd:34:59:bf:39:cd:95:3d:
70:a4:2e:d9:24:87:d5:35:1e:47:85:56:b2:67:22:93:6f:70:
66:05:05:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NJOH2Rou7JY4wca2ddAHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxN2FlOWRjOWY0M2EyNjllYjBhY2NmMzQ4OGU4NjFmNGZm
MGU4OWUwHhcNMjUxMDE5MTYwMTQ1WhcNMjUxMDIwMTYwMTQ1WjAzMTEwLwYDVQQD
EyhhNTAxOGJlMTNhM2I5MjMwYzg1MjE2MGE0ZmFkZGQ0NDM2NDI5YWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCZkoPoce8lwebM/tupuWd8xfUJ6
U50S0mp5zVZPsDOP7EDt5dfEuzyPEgUTfehi32GLLMgA0qCyS1K7TsTc7vU5B/NO
wLPRhr5pQa+SZVMXgO59U4BQLtU0Pzcaymr3daFWx4V3G/wd3JQUFsop6jqfExKT
DwtsJNlrpW4MAzZ4cXmsnd6UrQ+LumMFGNAWy7RFxFU8eVtoHVaEgnY1HPh4rFC0
MmirslpKHLMdFQcVake5SCufM1NWlkXIh+CNKaIVCfqw2jViFwA/NctGPqVgTprG
jHwRDuxe1kqzUK8ydBxI1yId4Nbtm+7U8h6FO2pc8j/fpWf6KIuN1lg85QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUBi+E6O5IwyFIWCk+t3UQ2Qpq6MB8GA1UdIwQY
MBaAFNF66dyfQ6Jp6wrM80iOhh9P8OieMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFhycDNKOURvbW5yQ3N6elNJNkdIMF93Nko0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zYzhkY2UtODM1Ni00NDIyLWJlODUt
ZmRhNGU4YTViNDZlLzEvMFhycDNKOURvbW5yQ3N6elNJNkdIMF93Nko0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8zYzhkY2UtODM1Ni00NDIyLWJlODUtZmRhNGU4YTViNDZl
LzEvMFhycDNKOURvbW5yQ3N6elNJNkdIMF93Nko0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACA1m8VwN
ZSyiLXAVQdtkV2N9PE/veeeUSZUWfbrwsEwnmwwnBGvREh3YTZBxKMTRFJHu6MKO
hVbLku15g6TXiPwypwz7+mholLoRQtRGksnu2Z3aDMgt6ynKIyn8eV1RC6TO7kSg
uKZ60mbROkmB/g70eyb0qcgcVrkcaD9fb7zdbosrN4Zvt/j4CSkXiTn3MN6f/N3l
WOGn0D3fGfjR/9giET48QAjYzMk+exgtt7egGA2G7Wgdj1C6mUymLS/PJJRIgfKO
2vdAl6fbV5ZRz4vmvfgLRGGfDD2ik2lm/jveaP00Wb85zZU9cKQu2SSH1TUeR4VW
smcik29wZgUFMA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:02 2025 by rpki-client