Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
File: RXqhx49syrxHtVEho1_zDZmCfuk.mft (raw, json)
Hash identifier: i324zVpf4dr4hXUZz33vZba+zzwOsDmogCwc33TiH1Q=
Subject key identifier: C5:3A:F3:8C:33:B6:52:40:6A:FF:C3:D7:6F:3E:92:B7:9B:95:F2:45
Authority key identifier: 45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
Certificate issuer: /CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Certificate serial: 019A006BFE937E173D0D2DDAF56676105425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
Manifest number: 09B3
Signing time: Mon 20 Oct 2025 07:01:08 +0000
Manifest this update: Mon 20 Oct 2025 07:01:08 +0000
Manifest next update: Tue 21 Oct 2025 07:01:08 +0000
Files and hashes: 1: IoWApYhOxVomHgy4Fx2-jrx61Zo.roa (hash: 2uCskjnfoZqh1VsnqhjGmG830eQNnYhl1PL8LlzJ7CQ=)
2: RXqhx49syrxHtVEho1_zDZmCfuk.crl (hash: o8lT7IxQtFGARoUmrus+RFplEvtTRCrEA1w2UyjqUEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:fe:93:7e:17:3d:0d:2d:da:f5:66:76:10:54:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Validity
Not Before: Oct 20 07:01:08 2025 GMT
Not After : Oct 21 07:01:08 2025 GMT
Subject: CN=c53af38c33b652406affc3d76f3e92b79b95f245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:15:fe:35:df:ad:8f:53:fc:a2:fe:03:07:
28:f6:4f:99:c6:77:e7:20:3b:5b:af:f6:a0:97:fa:
2a:d5:bb:b2:98:4c:fa:6c:80:ff:2d:2c:b6:3e:5e:
62:64:97:75:7b:b9:02:ae:44:6d:dc:13:d5:f5:d5:
a8:27:81:0a:92:aa:9c:b0:3b:30:25:14:b6:7c:63:
35:32:d6:35:56:bf:74:b7:6f:9e:d9:c8:e2:d4:2b:
8d:56:b3:4b:cb:34:ff:88:2f:b9:85:b6:8f:f5:2c:
f1:66:02:cb:ef:ed:ab:43:c9:5c:64:91:88:6a:64:
e7:c4:34:14:aa:df:68:7e:29:3a:ff:d1:1e:03:16:
b2:e4:de:57:79:7a:94:57:cb:33:d5:7d:6e:20:ad:
fa:8a:8d:cc:f6:14:cd:1e:8c:af:10:aa:8c:8b:9a:
69:8e:2f:3b:f7:f2:39:6e:de:49:66:14:03:97:a7:
87:73:03:f4:29:33:15:36:0f:01:b4:de:63:7d:a6:
ee:a7:a5:ec:99:df:9f:39:9a:54:91:60:13:a3:3c:
a4:ae:f4:9d:a7:ce:ee:11:f6:b1:86:12:cb:ab:f1:
2c:43:97:e0:b8:0a:38:cc:7a:4e:98:b1:f5:e9:5a:
74:48:5c:89:72:21:a5:eb:4f:d1:89:ee:34:8b:ff:
c2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3A:F3:8C:33:B6:52:40:6A:FF:C3:D7:6F:3E:92:B7:9B:95:F2:45
X509v3 Authority Key Identifier:
keyid:45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:18:1a:93:49:83:09:f0:63:4a:f3:d1:91:6e:da:7f:cd:31:
9c:1c:aa:be:41:8c:e9:56:d5:2d:42:3f:1a:36:b2:f7:a8:38:
ba:33:bb:73:d9:91:87:c8:93:1e:19:8b:1f:da:29:64:02:fc:
c3:8d:3b:ae:13:de:f1:3d:1c:2a:fe:1a:cb:ea:d0:b9:2e:2d:
44:bf:ca:d9:78:77:99:6e:29:a8:ca:da:75:92:8b:fa:3f:d8:
7a:e0:1d:e9:7e:9a:f4:cf:ce:5e:65:7b:ca:bb:11:56:f1:ae:
6a:68:0f:b1:13:05:fb:e8:77:b9:c9:6f:73:f3:a0:35:26:32:
be:d3:d2:84:9e:ab:eb:00:4f:51:8a:98:0d:f7:f3:77:18:56:
0d:64:ab:a8:4d:d7:f1:ee:4b:2b:d5:be:41:dd:c3:18:88:8d:
bc:f6:33:5a:10:4a:20:4a:46:f5:70:c5:ab:e1:07:b5:10:73:
4d:2a:97:05:22:ee:74:fb:7a:ba:45:dd:7b:84:ad:8b:71:9d:
a5:d2:aa:39:1a:1c:9e:36:de:08:89:20:26:d8:54:c0:cd:d8:
9f:da:04:02:ed:67:12:53:f9:14:12:e2:ed:90:5b:4a:d8:c4:
1a:80:cb:28:df:f2:55:87:93:a6:ed:26:a4:a9:3c:a5:bb:63:
99:5c:d7:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAa/6Tfhc9DS3a9WZ2EFQlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1N2FhMWM3OGY2Y2NhYmM0N2I1NTEyMWEzNWZmMzBkOTk4
MjdlZTkwHhcNMjUxMDIwMDcwMTA4WhcNMjUxMDIxMDcwMTA4WjAzMTEwLwYDVQQD
EyhjNTNhZjM4YzMzYjY1MjQwNmFmZmMzZDc2ZjNlOTJiNzliOTVmMjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEIV/jXfrY9T/KL+Awco9k+Zxnfn
IDtbr/agl/oq1buymEz6bID/LSy2Pl5iZJd1e7kCrkRt3BPV9dWoJ4EKkqqcsDsw
JRS2fGM1MtY1Vr90t2+e2cji1CuNVrNLyzT/iC+5hbaP9SzxZgLL7+2rQ8lcZJGI
amTnxDQUqt9ofik6/9EeAxay5N5XeXqUV8sz1X1uIK36io3M9hTNHoyvEKqMi5pp
ji879/I5bt5JZhQDl6eHcwP0KTMVNg8BtN5jfabup6Xsmd+fOZpUkWATozykrvSd
p87uEfaxhhLLq/EsQ5fguAo4zHpOmLH16Vp0SFyJciGl60/Rie40i//CzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMU684wztlJAav/D128+kreblfJFMB8GA1UdIwQY
MBaAFEV6ocePbMq8R7VRIaNf8w2Zgn7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlhxaHg0OXN5cnhIdFZFaG8xX3pEWm1DZnVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9jNTQyN2ItNTk5MC00MmFjLWJjNTQt
Yzc0MGUyZmUzMGQzLzEvUlhxaHg0OXN5cnhIdFZFaG8xX3pEWm1DZnVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9jNTQyN2ItNTk5MC00MmFjLWJjNTQtYzc0MGUyZmUzMGQz
LzEvUlhxaHg0OXN5cnhIdFZFaG8xX3pEWm1DZnVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRgak0mD
CfBjSvPRkW7af80xnByqvkGM6VbVLUI/Gjay96g4ujO7c9mRh8iTHhmLH9opZAL8
w407rhPe8T0cKv4ay+rQuS4tRL/K2Xh3mW4pqMradZKL+j/YeuAd6X6a9M/OXmV7
yrsRVvGuamgPsRMF++h3uclvc/OgNSYyvtPShJ6r6wBPUYqYDffzdxhWDWSrqE3X
8e5LK9W+Qd3DGIiNvPYzWhBKIEpG9XDFq+EHtRBzTSqXBSLudPt6ukXde4Sti3Gd
pdKqORocnjbeCIkgJthUwM3Yn9oEAu1nElP5FBLi7ZBbStjEGoDLKN/yVYeTpu0m
pKk8pbtjmVzXfg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:00:59 2025 by rpki-client