Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
File: XLtvfRHev55LqLH2nDg7j8PErhI.mft (raw, json)
Hash identifier: tNvyzoNGwSPXSlg4SHO/7QHVUo0Q84HoQcjr3lFFm10=
Subject key identifier: 9D:D2:F5:74:F5:8F:59:71:BD:CB:82:67:8E:E9:14:29:A3:C8:74:B5
Authority key identifier: 5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
Certificate issuer: /CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Certificate serial: 0199FCFD1F535A0CBF5D287CC25A5BD19585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
Manifest number: 0B08
Signing time: Sun 19 Oct 2025 15:01:10 +0000
Manifest this update: Sun 19 Oct 2025 15:01:10 +0000
Manifest next update: Mon 20 Oct 2025 15:01:10 +0000
Files and hashes: 1: GeKBRab06m2Sa_WEDlm2vrbqt80.roa (hash: rshNYrEYAk6Ccd9rs6FmkxFoBRIeaz8vJy7lI8MW13k=)
2: XLtvfRHev55LqLH2nDg7j8PErhI.crl (hash: SmaKv3yt2KS5c0lEbGtNwqSIZnRwNqxTwCocduFqzWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:1f:53:5a:0c:bf:5d:28:7c:c2:5a:5b:d1:95:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Validity
Not Before: Oct 19 15:01:10 2025 GMT
Not After : Oct 20 15:01:10 2025 GMT
Subject: CN=9dd2f574f58f5971bdcb82678ee91429a3c874b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:f4:8b:5e:a0:5c:7b:68:8b:e3:db:31:ad:
18:f7:5a:16:31:32:fe:f1:40:04:bc:42:8e:57:02:
d8:cc:80:f6:79:b4:ae:8c:11:3c:4a:32:25:b2:63:
06:e2:50:43:49:91:72:39:5d:96:07:12:51:f0:3b:
51:8c:49:2c:9e:d0:63:ea:25:a9:44:7a:63:b2:33:
0e:8b:0e:fc:33:8e:db:80:e9:80:76:38:d5:d4:df:
e1:8d:31:be:ac:59:a8:69:ec:81:94:33:3f:5e:25:
ae:08:20:a3:4d:f5:96:4d:6f:ae:6a:9f:c9:43:d9:
15:8b:4f:73:fe:6f:5a:68:3b:48:27:df:15:e6:23:
07:e4:11:36:1d:1b:5e:07:5c:8a:e4:0a:37:3b:96:
32:e6:ad:c4:a2:75:49:64:c6:2b:af:e6:cc:e4:52:
db:1f:8c:b5:ff:f2:25:f7:31:87:92:77:17:57:26:
d2:b9:4c:9f:b5:46:51:94:7c:00:b1:2b:f8:c9:0e:
ed:df:b7:e6:54:1f:a7:8b:26:f1:9f:42:1c:51:f1:
d6:dc:3c:71:af:89:c3:75:ac:72:6d:fb:9a:12:e8:
d9:da:6f:f4:6f:fb:8e:19:09:5b:9d:95:f5:4b:b3:
41:08:17:9c:0f:b5:2b:4e:b9:79:1e:d4:bd:76:0e:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D2:F5:74:F5:8F:59:71:BD:CB:82:67:8E:E9:14:29:A3:C8:74:B5
X509v3 Authority Key Identifier:
keyid:5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e5:1e:ee:48:bc:d6:ad:e7:9d:50:57:9d:eb:73:2b:3c:79:
80:04:9b:8a:c1:b0:78:ab:d1:2f:f2:62:15:d6:b9:7f:b9:7e:
72:63:9f:b9:78:1e:b3:e1:dd:f2:88:d6:3d:99:04:60:bf:97:
be:3e:c4:33:24:2b:a3:70:d5:88:ae:07:cb:62:34:e7:92:08:
98:6c:89:62:e1:7a:c6:df:75:bc:b7:49:40:fe:37:4c:e0:19:
14:fa:56:3f:e8:06:c2:d0:0f:4f:78:09:b2:65:73:5c:88:44:
93:cf:7e:c8:66:f7:8e:1f:c0:06:46:d1:84:2d:84:2b:56:31:
c0:c3:c7:dc:e4:87:02:69:54:dc:bb:7c:0c:b9:b5:45:35:a2:
37:4b:49:a5:f5:ce:e5:1e:85:de:b2:42:b3:ae:6b:8a:1d:4a:
90:c6:2d:27:c6:80:a8:8a:9d:b3:10:fa:45:56:9e:c9:a1:d7:
4a:19:b6:ca:b2:63:51:26:9d:20:51:bc:be:0b:4c:39:a5:5d:
bc:11:ac:76:53:47:ed:00:3b:b4:f7:3d:ff:2e:a2:c9:45:f6:
a2:44:70:0c:07:96:87:f5:47:b4:21:9c:92:c6:53:fc:fa:dd:
2a:e8:e2:2e:e4:ab:82:2a:08:3c:17:56:d0:84:75:ba:2f:e5:
79:f1:a9:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/R9TWgy/XSh8wlpb0ZWFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYmI2ZjdkMTFkZWJmOWU0YmE4YjFmNjljMzgzYjhmYzNj
NGFlMTIwHhcNMjUxMDE5MTUwMTEwWhcNMjUxMDIwMTUwMTEwWjAzMTEwLwYDVQQD
Eyg5ZGQyZjU3NGY1OGY1OTcxYmRjYjgyNjc4ZWU5MTQyOWEzYzg3NGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXH0i16gXHtoi+PbMa0Y91oWMTL+
8UAEvEKOVwLYzID2ebSujBE8SjIlsmMG4lBDSZFyOV2WBxJR8DtRjEksntBj6iWp
RHpjsjMOiw78M47bgOmAdjjV1N/hjTG+rFmoaeyBlDM/XiWuCCCjTfWWTW+uap/J
Q9kVi09z/m9aaDtIJ98V5iMH5BE2HRteB1yK5Ao3O5Yy5q3EonVJZMYrr+bM5FLb
H4y1//Il9zGHkncXVybSuUyftUZRlHwAsSv4yQ7t37fmVB+niybxn0IcUfHW3Dxx
r4nDdaxybfuaEujZ2m/0b/uOGQlbnZX1S7NBCBecD7UrTrl5HtS9dg6fCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3S9XT1j1lxvcuCZ47pFCmjyHS1MB8GA1UdIwQY
MBaAFFy7b30R3r+eS6ix9pw4O4/DxK4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jYTgxMjUtNTQ3Ny00MjIyLWIwNTUt
YmJlYjQ1NTBkOWU2LzEvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jYTgxMjUtNTQ3Ny00MjIyLWIwNTUtYmJlYjQ1NTBkOWU2
LzEvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEeUe7ki8
1q3nnVBXnetzKzx5gASbisGweKvRL/JiFda5f7l+cmOfuXges+Hd8ojWPZkEYL+X
vj7EMyQro3DViK4Hy2I055IImGyJYuF6xt91vLdJQP43TOAZFPpWP+gGwtAPT3gJ
smVzXIhEk89+yGb3jh/ABkbRhC2EK1YxwMPH3OSHAmlU3Lt8DLm1RTWiN0tJpfXO
5R6F3rJCs65rih1KkMYtJ8aAqIqdsxD6RVaeyaHXShm2yrJjUSadIFG8vgtMOaVd
vBGsdlNH7QA7tPc9/y6iyUX2okRwDAeWh/VHtCGcksZT/PrdKujiLuSrgioIPBdW
0IR1ui/lefGp6Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:43 2025 by rpki-client