Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
File: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft (raw, json)
Hash identifier: kmhH4CCECB0sI+9RhONu0/HESSGegM8Lkp/KPikadn4=
Subject key identifier: 12:5D:B8:8C:F7:EE:DA:C4:0C:AC:F4:B3:83:66:94:CF:ED:3F:C2:C4
Authority key identifier: 7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
Certificate issuer: /CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Certificate serial: 0199FC588C3376E58B39E96EBC881130C40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
Manifest number: 0310
Signing time: Sun 19 Oct 2025 12:01:25 +0000
Manifest this update: Sun 19 Oct 2025 12:01:25 +0000
Manifest next update: Mon 20 Oct 2025 12:01:25 +0000
Files and hashes: 1: XIAriGwKiXIV89XyokuVSU6ok94.roa (hash: hF3zC1oiW03gwgTs9lo/n7vUmEiv8dfR/NI1cnnwuzk=)
2: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl (hash: 1gTqcQHLrE1oFkMDyJYCsqycMxZWWvyVvlzJ6mYFFsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8c:33:76:e5:8b:39:e9:6e:bc:88:11:30:c4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Validity
Not Before: Oct 19 12:01:25 2025 GMT
Not After : Oct 20 12:01:25 2025 GMT
Subject: CN=125db88cf7eedac40cacf4b3836694cfed3fc2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:e6:81:e8:ba:5c:53:71:23:96:12:f6:98:
da:05:f2:c9:0e:df:ed:94:90:4b:af:97:9d:66:e6:
3a:b3:f1:23:e9:52:ce:c4:f7:f7:e9:49:aa:0f:4a:
8d:cd:d6:18:e4:05:a1:69:f5:f1:55:69:f8:98:13:
77:8b:38:f4:2e:19:75:cc:b2:5b:3b:74:7b:28:a1:
fc:ff:02:7f:ea:e4:4e:45:12:21:ec:3e:05:e9:1d:
3c:3f:3f:70:68:58:18:a6:23:3f:ef:d1:c4:44:94:
fe:93:8e:f9:ad:6b:64:f6:61:bd:7d:d2:29:e0:76:
55:55:3c:0b:1c:5f:23:6d:bd:9d:24:e8:5b:43:2a:
43:a7:75:35:43:3d:3d:f4:8c:8f:82:1c:67:e4:48:
50:60:e5:70:83:a2:8f:40:2e:dc:23:c4:be:be:18:
9c:ff:09:39:49:a8:a2:7e:c0:ac:96:cc:75:69:09:
c7:1f:4c:29:ef:26:17:17:1c:01:55:d4:0b:4c:ba:
7e:da:ab:4f:b0:bb:65:29:6e:49:1c:5e:ff:32:d8:
74:94:0e:40:4f:75:52:e1:57:c0:99:02:ef:5a:b6:
b3:b4:31:bf:e2:32:bf:de:57:cf:5b:6d:ec:4e:d4:
e8:20:74:d0:2e:2e:f8:67:d0:61:b0:5c:52:b2:fc:
72:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5D:B8:8C:F7:EE:DA:C4:0C:AC:F4:B3:83:66:94:CF:ED:3F:C2:C4
X509v3 Authority Key Identifier:
keyid:7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b3:7f:e3:2e:6d:13:7c:fc:b7:15:fa:3d:8f:f5:1d:03:45:
bf:20:4d:93:c7:6f:50:69:59:f2:32:a4:de:1b:49:f8:1f:bf:
ec:36:b9:43:f4:98:da:04:14:eb:37:7d:49:0b:be:dc:28:4d:
71:dc:94:d9:c4:69:27:e7:d5:58:d2:a3:2a:85:e8:38:f6:1e:
21:46:e8:c0:d3:97:b1:b9:78:08:75:ff:d0:a2:38:a6:7b:90:
27:0b:fc:02:70:0a:dd:e8:e8:2e:0a:c2:14:f6:9c:d6:39:c7:
d3:93:ea:60:da:22:59:16:ea:49:a2:95:8b:97:e9:7b:31:8f:
94:a3:49:5c:2f:36:a0:a0:0f:a9:09:b4:a3:ef:5a:aa:eb:45:
f8:3a:d5:c5:ae:b9:46:56:e4:e4:2b:dc:e6:e5:94:8a:f4:77:
26:7c:de:c1:a3:2d:7c:52:ee:49:8d:97:bf:33:46:11:38:ad:
75:a6:61:55:b2:64:d2:f5:36:cc:bf:d7:29:18:d3:9b:d1:08:
52:fc:e6:bb:41:1d:8e:94:ff:f8:2f:64:49:c1:f9:1b:f9:7c:
ba:12:be:14:9e:54:7d:36:2a:ea:26:13:e3:db:29:a2:6c:65:
52:1a:75:db:a8:4e:bd:29:a3:1a:e7:01:0c:ce:89:f9:cf:ce:
4a:05:34:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WIwzduWLOeluvIgRMMQOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmODVlOTkwMzU0Mzk3ZTM2YzBjYTkwM2EwYzYyMGM3NzA5
ZWZkY2QwHhcNMjUxMDE5MTIwMTI1WhcNMjUxMDIwMTIwMTI1WjAzMTEwLwYDVQQD
EygxMjVkYjg4Y2Y3ZWVkYWM0MGNhY2Y0YjM4MzY2OTRjZmVkM2ZjMmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYLmgei6XFNxI5YS9pjaBfLJDt/t
lJBLr5edZuY6s/Ej6VLOxPf36UmqD0qNzdYY5AWhafXxVWn4mBN3izj0Lhl1zLJb
O3R7KKH8/wJ/6uRORRIh7D4F6R08Pz9waFgYpiM/79HERJT+k475rWtk9mG9fdIp
4HZVVTwLHF8jbb2dJOhbQypDp3U1Qz099IyPghxn5EhQYOVwg6KPQC7cI8S+vhic
/wk5SaiifsCslsx1aQnHH0wp7yYXFxwBVdQLTLp+2qtPsLtlKW5JHF7/Mth0lA5A
T3VS4VfAmQLvWraztDG/4jK/3lfPW23sTtToIHTQLi74Z9BhsFxSsvxyIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJduIz37trEDKz0s4NmlM/tP8LEMB8GA1UdIwQY
MBaAFH+F6ZA1Q5fjbAypA6DGIMdwnv3NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80YWUxNzUtNTVkMC00ODRkLThkMTEt
OGM5ZDU4MjNiYWQ5LzEvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80YWUxNzUtNTVkMC00ODRkLThkMTEtOGM5ZDU4MjNiYWQ5
LzEvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebN/4y5t
E3z8txX6PY/1HQNFvyBNk8dvUGlZ8jKk3htJ+B+/7Da5Q/SY2gQU6zd9SQu+3ChN
cdyU2cRpJ+fVWNKjKoXoOPYeIUbowNOXsbl4CHX/0KI4pnuQJwv8AnAK3ejoLgrC
FPac1jnH05PqYNoiWRbqSaKVi5fpezGPlKNJXC82oKAPqQm0o+9aqutF+DrVxa65
Rlbk5Cvc5uWUivR3JnzewaMtfFLuSY2XvzNGETitdaZhVbJk0vU2zL/XKRjTm9EI
Uvzmu0EdjpT/+C9kScH5G/l8uhK+FJ5UfTYq6iYT49spomxlUhp126hOvSmjGucB
DM6J+c/OSgU0kQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:50 2025 by rpki-client