Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: QlDXKVMAAjP/Erjcc3MAGLR696zfuJkCw1EIOV34gFI=
Subject key identifier: C8:BD:14:4D:85:89:23:D7:A4:C4:77:B7:E9:9C:18:5F:12:E1:CD:EF
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 0199FB7C9C876CE3E6F65A25140A38B86733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 0502
Signing time: Sun 19 Oct 2025 08:01:11 +0000
Manifest this update: Sun 19 Oct 2025 08:01:11 +0000
Manifest next update: Mon 20 Oct 2025 08:01:11 +0000
Files and hashes: 1: 5CWyh9PK5o0CRshOuZZrSEZUYvo.roa (hash: fLRtRssfXw0tGSXMJxuEbYJSjSGokpVQlmfs5gVL6NQ=)
2: UVYnKt_30APPOeuH0s5UjzlGPFA.roa (hash: Ew+BOeWWwETAT/J2F3S8Uy7N2dyPufBElP43bD+0M6A=)
3: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: B5CHamZZqTbfndVlneQ0mJAv9+1AA3gWpELjRgHxNFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9c:87:6c:e3:e6:f6:5a:25:14:0a:38:b8:67:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Oct 19 08:01:11 2025 GMT
Not After : Oct 20 08:01:11 2025 GMT
Subject: CN=c8bd144d858923d7a4c477b7e99c185f12e1cdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:30:b8:a1:94:1e:b9:ae:14:0c:81:a8:e6:
8e:1c:fa:70:82:20:65:87:6f:0b:e7:2c:69:42:b8:
ca:ee:20:ed:a6:f8:fc:a6:32:1e:6c:03:f7:0f:af:
ef:97:5b:77:6c:53:be:da:fb:f3:91:d8:11:3f:6d:
97:48:bc:23:ae:37:92:06:e6:23:0f:4f:09:bb:d8:
75:53:f2:78:95:11:1a:ee:a9:7f:a7:17:0d:d1:ac:
e8:00:81:ba:5a:14:d0:80:e2:bf:cf:13:1a:2e:e7:
08:1c:af:88:84:ff:2f:c1:5b:a6:db:8b:65:24:ab:
8a:1c:b5:18:58:76:00:f4:62:9c:09:57:5c:a1:bb:
86:85:5e:0a:14:bd:52:cd:83:24:b2:92:f3:12:7f:
c0:45:24:04:ba:c1:ee:2b:2e:3d:37:c6:a0:84:1e:
4b:94:a9:88:7a:8c:03:84:43:6a:d3:e4:92:ad:2f:
b0:93:41:59:79:71:f3:2a:1a:0b:c7:ff:2f:18:eb:
50:1d:31:48:23:b2:c7:e8:95:b6:98:ba:24:fd:97:
27:81:fd:90:09:78:14:92:e6:1f:c0:01:da:10:7f:
62:12:57:3b:3c:8e:15:21:76:44:23:03:1c:d8:24:
9a:05:e3:c1:38:fb:2c:64:73:8f:72:39:57:2b:17:
33:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BD:14:4D:85:89:23:D7:A4:C4:77:B7:E9:9C:18:5F:12:E1:CD:EF
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:97:cc:8a:59:1b:01:ad:65:95:90:03:72:46:cf:32:dd:4d:
35:50:ba:c8:8d:d8:21:d9:2f:b2:58:3a:6c:89:79:2c:90:f4:
84:9f:b5:45:9e:e0:2b:25:13:e4:d6:22:af:c9:d0:a3:5c:f4:
9d:fa:11:ec:90:6f:1b:43:ea:a9:c3:79:12:a7:58:1e:cb:cf:
c8:02:26:98:8c:c6:dc:53:9a:b8:98:ce:6a:da:1a:f2:2d:71:
97:81:b8:98:81:60:e7:5a:5d:4e:80:01:7e:61:b4:cd:cd:87:
d5:50:c9:d9:f1:2e:46:c1:48:80:06:2d:69:3d:a0:34:a7:41:
96:95:08:55:7f:c3:70:af:3e:eb:8e:44:a9:11:90:f8:49:bf:
42:b0:37:2a:1b:dd:7e:c5:78:ae:72:e0:49:6b:06:f0:99:e2:
bd:7f:0b:61:61:33:bb:65:4a:26:98:05:26:42:8f:14:88:c6:
11:26:13:8b:70:3c:c7:e5:28:9f:07:3b:04:52:9d:09:5e:47:
18:77:d0:90:84:a1:89:4a:46:bb:ff:42:3c:49:fb:da:69:0b:
63:cf:e0:b4:b0:b2:04:cd:01:20:56:d3:4e:27:66:d3:93:72:
29:35:db:f8:5d:39:8d:a7:79:c4:45:d1:56:4a:b3:7a:68:d0:
74:76:58:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fJyHbOPm9lolFAo4uGczMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDEzOTg5NzZiMmY0ODc3MjViYzEzZDdmYWViZWQzZTE2
ZDgyYzkwHhcNMjUxMDE5MDgwMTExWhcNMjUxMDIwMDgwMTExWjAzMTEwLwYDVQQD
EyhjOGJkMTQ0ZDg1ODkyM2Q3YTRjNDc3YjdlOTljMTg1ZjEyZTFjZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro8wuKGUHrmuFAyBqOaOHPpwgiBl
h28L5yxpQrjK7iDtpvj8pjIebAP3D6/vl1t3bFO+2vvzkdgRP22XSLwjrjeSBuYj
D08Ju9h1U/J4lREa7ql/pxcN0azoAIG6WhTQgOK/zxMaLucIHK+IhP8vwVum24tl
JKuKHLUYWHYA9GKcCVdcobuGhV4KFL1SzYMkspLzEn/ARSQEusHuKy49N8aghB5L
lKmIeowDhENq0+SSrS+wk0FZeXHzKhoLx/8vGOtQHTFII7LH6JW2mLok/Zcngf2Q
CXgUkuYfwAHaEH9iElc7PI4VIXZEIwMc2CSaBePBOPssZHOPcjlXKxczKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMi9FE2FiSPXpMR3t+mcGF8S4c3vMB8GA1UdIwQY
MBaAFF3ROYl2svSHclvBPX+uvtPhbYLJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRFNWlYYXk5SWR5VzhFOWY2Ni0wLUZ0Z3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zZTgxMDAtOTg4ZC00ODNlLWJjODYt
NjAwODEwNjM0ODc4LzEvWGRFNWlYYXk5SWR5VzhFOWY2Ni0wLUZ0Z3NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zZTgxMDAtOTg4ZC00ODNlLWJjODYtNjAwODEwNjM0ODc4
LzEvWGRFNWlYYXk5SWR5VzhFOWY2Ni0wLUZ0Z3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJfMilkb
Aa1llZADckbPMt1NNVC6yI3YIdkvslg6bIl5LJD0hJ+1RZ7gKyUT5NYir8nQo1z0
nfoR7JBvG0PqqcN5EqdYHsvPyAImmIzG3FOauJjOatoa8i1xl4G4mIFg51pdToAB
fmG0zc2H1VDJ2fEuRsFIgAYtaT2gNKdBlpUIVX/DcK8+645EqRGQ+Em/QrA3Khvd
fsV4rnLgSWsG8JnivX8LYWEzu2VKJpgFJkKPFIjGESYTi3A8x+Uonwc7BFKdCV5H
GHfQkIShiUpGu/9CPEn72mkLY8/gtLCyBM0BIFbTTidm05NyKTXb+F05jad5xEXR
VkqzemjQdHZYFQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:28 2025 by rpki-client