Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
File: XYLKb462haVz5dHZH48GEhqwKjc.mft (raw, json)
Hash identifier: gAXh2c6ZeX9KwOzCokiaC5gIWmMu7Q7cIZKg872UcIA=
Subject key identifier: CB:31:AD:65:00:EF:1F:9F:D6:16:DA:37:A1:54:6F:07:C9:83:F2:E8
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial: 0199FB7CB3B94EADF8BF9342EB96EBD4223B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
Manifest number: 1319
Signing time: Sun 19 Oct 2025 08:01:17 +0000
Manifest this update: Sun 19 Oct 2025 08:01:17 +0000
Manifest next update: Mon 20 Oct 2025 08:01:17 +0000
Files and hashes: 1: 5CQ4eO5LX17KXZ4KRK1zO2WmDio.roa (hash: elGO+kkXCWf6xUhLxKQr6fK8y3EJu/aqnItwgZKwIWc=)
2: B7NZ-u78J5mcpsov1XyIGK10cH0.roa (hash: U6kZ6B0tG819VSZmmXYNrc7xdPGbBot/5/JsXAv6Iss=)
3: OoBGTJUsN0YQ8-kRUhL79IvaFTU.roa (hash: KQ8kfmaZw2mJmdCZhrX6qjUaRt+eTM3yBnvc8ppjAws=)
4: XYLKb462haVz5dHZH48GEhqwKjc.crl (hash: NQaZvoDW3fqcvqStnSitBhd+Yk+DDNj1uUdMjfSrB7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b3:b9:4e:ad:f8:bf:93:42:eb:96:eb:d4:22:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Validity
Not Before: Oct 19 08:01:17 2025 GMT
Not After : Oct 20 08:01:17 2025 GMT
Subject: CN=cb31ad6500ef1f9fd616da37a1546f07c983f2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:51:46:2e:36:58:d8:1a:7d:bb:ab:ab:36:4e:
0e:e0:78:33:b6:fa:3c:cb:52:82:4c:90:b0:4b:ec:
cc:ca:75:d1:82:d0:60:a6:6c:e9:1b:cf:6e:10:89:
7a:60:0e:8d:27:39:00:d4:b8:ec:27:a8:1d:0c:94:
85:4f:d3:84:f0:10:97:eb:6a:58:34:08:b6:83:32:
af:4d:e1:a1:9d:d2:f1:09:36:fc:cc:55:18:b3:6e:
d5:c1:30:1d:b5:1e:e1:94:bd:06:04:52:0c:e7:f9:
c3:d8:63:d7:55:8b:50:bf:a1:7d:8c:a1:02:7e:84:
e0:cc:eb:69:c3:99:a5:e8:4f:ff:b2:fb:fb:1b:dc:
ea:8b:5e:7e:4c:08:5a:78:06:07:5b:c9:14:f2:de:
f6:03:51:e5:a0:5a:6f:46:47:9c:2b:57:44:32:2f:
71:ed:24:7a:2d:9f:f1:12:4f:4e:7c:0c:e0:de:38:
dd:cd:8b:0a:0a:a2:6a:0e:9c:ed:5d:9a:ea:ec:a2:
f3:f9:c0:d4:5e:81:11:19:65:bd:0b:44:e0:cc:6a:
3c:a4:fd:83:37:d2:cb:2d:21:7c:ff:84:22:07:b8:
d5:f1:af:b9:3f:95:32:79:be:35:c9:fd:45:cc:90:
ad:ea:1f:d9:59:66:db:df:e4:bf:fc:c8:03:9c:32:
b0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:31:AD:65:00:EF:1F:9F:D6:16:DA:37:A1:54:6F:07:C9:83:F2:E8
X509v3 Authority Key Identifier:
keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ed:55:6e:09:a4:47:a9:30:da:d4:cd:fa:b4:55:01:49:a7:
4c:48:de:d7:73:60:4f:e4:8f:6c:dc:f1:a5:f7:46:db:fe:42:
86:bf:f6:4d:4b:1a:1f:dc:40:1f:43:bd:69:be:c5:13:65:94:
19:c6:13:fa:b9:52:31:ca:03:77:0d:60:c6:7b:81:f7:dd:82:
50:f1:81:c8:b0:cd:f6:1b:39:7a:5e:31:95:74:22:c6:e6:56:
da:12:9c:c5:5b:26:ac:cb:91:a7:87:f2:6e:4b:99:20:98:38:
8b:a1:40:0e:97:e5:19:c3:27:48:ae:f9:d5:9e:a6:4f:cb:94:
46:61:e4:78:87:76:e7:bf:ff:f9:a3:f4:ff:5c:60:42:b0:d5:
b2:bd:f5:01:ca:a0:a7:a4:e8:2e:62:a8:66:66:e8:6e:f9:47:
9b:ee:44:da:f2:3f:a5:53:be:d1:8b:66:85:da:ca:9c:1d:c5:
dd:12:c9:91:83:79:94:ca:f6:94:0c:c4:33:f9:d3:63:d4:d0:
40:f7:13:29:7b:8d:80:5f:36:01:8c:2e:72:69:54:88:44:d6:
c6:b8:4c:e0:a6:f0:6d:2f:c5:3a:d0:47:39:0f:01:51:c6:7f:
5b:be:32:a0:8f:6d:8b:3f:9a:72:8e:bc:76:0e:98:d0:c6:3d:
3f:d8:ed:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fLO5Tq34v5NC65br1CI7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkODJjYTZmOGViNjg1YTU3M2U1ZDFkOTFmOGYwNjEyMWFi
MDJhMzcwHhcNMjUxMDE5MDgwMTE3WhcNMjUxMDIwMDgwMTE3WjAzMTEwLwYDVQQD
EyhjYjMxYWQ2NTAwZWYxZjlmZDYxNmRhMzdhMTU0NmYwN2M5ODNmMmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFFGLjZY2Bp9u6urNk4O4Hgztvo8
y1KCTJCwS+zMynXRgtBgpmzpG89uEIl6YA6NJzkA1LjsJ6gdDJSFT9OE8BCX62pY
NAi2gzKvTeGhndLxCTb8zFUYs27VwTAdtR7hlL0GBFIM5/nD2GPXVYtQv6F9jKEC
foTgzOtpw5ml6E//svv7G9zqi15+TAhaeAYHW8kU8t72A1HloFpvRkecK1dEMi9x
7SR6LZ/xEk9OfAzg3jjdzYsKCqJqDpztXZrq7KLz+cDUXoERGWW9C0TgzGo8pP2D
N9LLLSF8/4QiB7jV8a+5P5Uyeb41yf1FzJCt6h/ZWWbb3+S//MgDnDKwRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsxrWUA7x+f1hbaN6FUbwfJg/LoMB8GA1UdIwQY
MBaAFF2Cym+OtoWlc+XR2R+PBhIasCo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNTRiYzAtZjc4MS00OGIwLTlmNmQt
YjVmMGQyMTA1M2Y4LzEvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kNTRiYzAtZjc4MS00OGIwLTlmNmQtYjVmMGQyMTA1M2Y4
LzEvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZu1Vbgmk
R6kw2tTN+rRVAUmnTEje13NgT+SPbNzxpfdG2/5Chr/2TUsaH9xAH0O9ab7FE2WU
GcYT+rlSMcoDdw1gxnuB992CUPGByLDN9hs5el4xlXQixuZW2hKcxVsmrMuRp4fy
bkuZIJg4i6FADpflGcMnSK751Z6mT8uURmHkeId257//+aP0/1xgQrDVsr31Acqg
p6ToLmKoZmbobvlHm+5E2vI/pVO+0YtmhdrKnB3F3RLJkYN5lMr2lAzEM/nTY9TQ
QPcTKXuNgF82AYwucmlUiETWxrhM4KbwbS/FOtBHOQ8BUcZ/W74yoI9tiz+aco68
dg6Y0MY9P9jtAg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:41 2025 by rpki-client