Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
File: XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft (raw, json)
Hash identifier: CLmZnER0tuTA0yKXckQhsnTKqEkEkHcL4f/qcmCoP8w=
Subject key identifier: B0:15:70:76:A9:E6:A8:26:76:50:8F:AF:98:A7:61:AF:40:8C:23:4C
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial: 0199FC8FB6BB203FBAACD1C99DA515C1DA5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
Manifest number: 0EA3
Signing time: Sun 19 Oct 2025 13:01:40 +0000
Manifest this update: Sun 19 Oct 2025 13:01:40 +0000
Manifest next update: Mon 20 Oct 2025 13:01:40 +0000
Files and hashes: 1: AJZHmYeOjA6WzhCmkrG9-Q9R6e0.roa (hash: 2w9YT9FL9nWS9KMiSVT8Wf4Dme3XTUtS7KQ1r9kXdzY=)
2: IrihvyoC5WVtLyMsMa-SiimzVD4.roa (hash: jGXp7eSTl1p8h9SmYiq1Qn2/jPZ9ZUDFjn3K5+ZYCZI=)
3: XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl (hash: VSbQSHokY7FXAVTGvqBDZf+nuaDvbdQnZGkwxfRyMIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b6:bb:20:3f:ba:ac:d1:c9:9d:a5:15:c1:da:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Validity
Not Before: Oct 19 13:01:40 2025 GMT
Not After : Oct 20 13:01:40 2025 GMT
Subject: CN=b0157076a9e6a82676508faf98a761af408c234c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:91:b6:c9:5b:e0:fb:54:db:84:ab:e6:dc:d9:
59:67:b5:cb:2d:54:8f:85:8f:df:e3:ed:a2:c7:c4:
42:04:3a:13:1f:11:c6:cc:d0:d7:90:95:75:ab:dc:
1a:67:e8:49:a4:cb:c3:07:d8:c6:27:03:a4:32:9f:
33:f9:4d:78:0a:db:3e:f9:30:2b:cf:8d:be:e9:89:
5b:db:49:a7:97:3a:b1:a0:02:ef:7c:60:4a:16:8e:
37:1e:cd:0c:6a:4d:71:07:8b:9d:08:25:c8:5a:63:
19:8d:2f:5a:6f:3b:ac:fc:d9:56:e0:29:fd:8d:05:
2c:31:e6:62:e7:4a:f2:a2:44:96:f9:85:90:c5:60:
78:4b:c3:0c:4a:6f:c1:3d:30:8b:4a:cd:5a:a0:14:
1e:26:c9:6a:47:bf:b3:68:92:04:4b:f8:4b:d2:e3:
e6:9b:ad:be:0f:1e:76:1b:5b:bc:0e:b2:75:70:30:
cd:3d:9b:3f:45:1d:20:dc:b1:24:0f:69:b8:63:d6:
eb:74:0f:43:b5:3d:80:3a:37:10:f6:f3:71:f7:c2:
5e:69:90:87:76:de:1d:c0:cc:56:05:7c:d6:34:32:
49:e1:46:eb:65:bd:3e:53:3b:6e:5d:58:7a:1c:f6:
e4:c2:b1:61:d1:f4:86:85:76:8a:51:cc:1b:c7:09:
96:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:15:70:76:A9:E6:A8:26:76:50:8F:AF:98:A7:61:AF:40:8C:23:4C
X509v3 Authority Key Identifier:
keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:3e:88:d7:ea:b2:c2:64:f6:26:0f:16:c2:b6:2a:f4:6f:d6:
78:d3:51:a7:83:3c:7b:9a:47:a2:e7:97:d4:b5:7c:13:a5:1e:
18:82:59:d2:0b:cf:8f:a9:8f:af:0b:16:56:50:7e:c0:f7:80:
93:f8:5d:67:40:80:1b:1b:5f:14:f2:c2:45:e6:7f:7f:65:f3:
6b:11:73:0e:27:6a:e4:ae:16:74:1f:fc:39:1c:c4:91:2e:cf:
8a:37:bb:d0:7c:4c:d3:c1:6d:f3:50:23:d7:dc:39:c0:50:7a:
57:61:06:87:f3:c8:0c:00:bd:4a:7b:a9:e8:28:38:a7:31:82:
88:a3:18:74:94:c3:19:7c:38:54:84:e8:58:91:b6:84:c3:cf:
cc:a3:43:0e:59:6e:a0:8d:09:72:e3:06:ec:46:22:eb:4d:bc:
69:7e:cc:91:f4:fa:03:03:83:33:e6:5a:a5:8f:49:6f:dc:cc:
3b:b8:67:de:39:6d:b7:c1:4d:e6:f1:f4:7d:b3:10:61:3a:c7:
92:73:82:67:52:79:3a:64:8f:d0:34:a7:a2:05:3a:9c:d2:b1:
d0:f5:5e:8a:2b:f1:23:21:17:c7:4b:52:d8:66:dc:6a:27:10:
0b:77:dc:d5:99:53:ad:de:ff:a6:02:8f:f2:0d:7e:80:49:79:
52:af:2f:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j7a7ID+6rNHJnaUVwdpfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNzQwMWYzMmNkMjgxNjk5ZmJlNGRjZjNiYjUwMmE2M2Ey
YTYwZGUwHhcNMjUxMDE5MTMwMTQwWhcNMjUxMDIwMTMwMTQwWjAzMTEwLwYDVQQD
EyhiMDE1NzA3NmE5ZTZhODI2NzY1MDhmYWY5OGE3NjFhZjQwOGMyMzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZG2yVvg+1TbhKvm3NlZZ7XLLVSP
hY/f4+2ix8RCBDoTHxHGzNDXkJV1q9waZ+hJpMvDB9jGJwOkMp8z+U14Cts++TAr
z42+6Ylb20mnlzqxoALvfGBKFo43Hs0Mak1xB4udCCXIWmMZjS9abzus/NlW4Cn9
jQUsMeZi50ryokSW+YWQxWB4S8MMSm/BPTCLSs1aoBQeJslqR7+zaJIES/hL0uPm
m62+Dx52G1u8DrJ1cDDNPZs/RR0g3LEkD2m4Y9brdA9DtT2AOjcQ9vNx98JeaZCH
dt4dwMxWBXzWNDJJ4UbrZb0+UztuXVh6HPbkwrFh0fSGhXaKUcwbxwmWwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAVcHap5qgmdlCPr5inYa9AjCNMMB8GA1UdIwQY
MBaAFF50AfMs0oFpn75Nzzu1AqY6KmDeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xODg5OTQtMmQ0MC00YzQ4LWJhODgt
ZjYwNzBhNGFkODNhLzEvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8xODg5OTQtMmQ0MC00YzQ4LWJhODgtZjYwNzBhNGFkODNh
LzEvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApD6I1+qy
wmT2Jg8WwrYq9G/WeNNRp4M8e5pHoueX1LV8E6UeGIJZ0gvPj6mPrwsWVlB+wPeA
k/hdZ0CAGxtfFPLCReZ/f2XzaxFzDidq5K4WdB/8ORzEkS7Pije70HxM08Ft81Aj
19w5wFB6V2EGh/PIDAC9Snup6Cg4pzGCiKMYdJTDGXw4VIToWJG2hMPPzKNDDllu
oI0JcuMG7EYi6028aX7MkfT6AwODM+ZapY9Jb9zMO7hn3jltt8FN5vH0fbMQYTrH
knOCZ1J5OmSP0DSnogU6nNKx0PVeiivxIyEXx0tS2GbcaicQC3fc1ZlTrd7/pgKP
8g1+gEl5Uq8vWg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:43 2025 by rpki-client