Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
File: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft (raw, json)
Hash identifier: kwYb3nZWSl1YjCIBxvZT/0raiSPDeNXa37JLqzcfZL8=
Subject key identifier: 57:2F:DC:14:AE:6C:54:A6:2E:EE:F3:71:BE:28:98:D2:49:7F:BD:32
Authority key identifier: 45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
Certificate issuer: /CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Certificate serial: 0199FC218248B6A6ED55BBCD4A466F94CA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
Manifest number: 1197
Signing time: Sun 19 Oct 2025 11:01:18 +0000
Manifest this update: Sun 19 Oct 2025 11:01:18 +0000
Manifest next update: Mon 20 Oct 2025 11:01:18 +0000
Files and hashes: 1: GL43VxH_h-aWzE3G-2pFMtY1WM4.roa (hash: GegNsbMfLWk2tMOCfqZsrF9iNh5KkVnxnNq29fJOObI=)
2: RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl (hash: VZYSj3DPpfjYtShRev7ouK0RT9RCIwQ/eR7uHTYhOQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:82:48:b6:a6:ed:55:bb:cd:4a:46:6f:94:ca:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4570d28fc49aa0ae808c383f587f3ea4cfeb049d
Validity
Not Before: Oct 19 11:01:18 2025 GMT
Not After : Oct 20 11:01:18 2025 GMT
Subject: CN=572fdc14ae6c54a62eeef371be2898d2497fbd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d9:bc:a5:4d:f2:82:75:88:90:3d:b2:35:e9:
1f:fd:c3:68:a7:ee:42:38:00:62:f1:6c:29:cf:73:
86:d2:46:1f:5f:68:34:9f:32:8e:25:44:3a:68:02:
a4:2e:8e:2f:ef:8c:22:75:b1:ec:e7:dc:53:ee:9d:
fb:b0:04:a5:b9:ce:5d:01:e1:e6:c9:94:96:43:1e:
7c:bc:c6:0e:cc:e4:90:ac:7b:c0:f3:74:c4:56:11:
bb:71:06:f0:e6:2f:03:18:d0:17:65:ba:a2:ae:3c:
19:bb:ed:e4:ab:e6:92:27:07:c7:c6:8b:75:b7:8e:
5d:a7:33:fe:d4:3f:00:ff:c4:96:38:6f:d3:54:bb:
88:90:84:7e:11:e4:1e:d0:c4:1f:56:86:84:f8:bc:
8f:89:43:02:39:cb:45:c4:c8:0f:19:3c:bb:4d:fd:
36:78:84:6a:ec:8a:05:53:a6:26:d5:8f:87:de:2e:
76:66:86:b1:1a:4c:b5:57:35:cf:f0:58:3f:3f:d8:
7e:7f:4c:a5:6c:b9:d8:51:aa:b1:33:37:30:b5:b1:
2e:80:24:7c:86:c9:7e:8c:7f:a6:03:c5:51:4e:4c:
40:54:83:bd:66:fe:59:49:b3:32:9e:94:38:49:f6:
ca:56:fc:64:d8:8b:98:c5:a1:aa:02:83:29:9d:71:
d9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2F:DC:14:AE:6C:54:A6:2E:EE:F3:71:BE:28:98:D2:49:7F:BD:32
X509v3 Authority Key Identifier:
keyid:45:70:D2:8F:C4:9A:A0:AE:80:8C:38:3F:58:7F:3E:A4:CF:EB:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32a353-6659-480b-abf7-eb073797ac66/1/RXDSj8SaoK6AjDg_WH8-pM_rBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:24:6d:70:4d:b0:3b:97:15:6b:22:9e:95:c0:39:56:d6:84:
29:b8:16:39:47:15:61:5f:98:1b:51:6c:0c:7e:9a:5f:d1:67:
9f:86:19:57:3a:fb:4c:44:75:66:5f:12:6e:17:78:3e:20:15:
e0:ad:6f:a9:48:df:19:fe:55:d3:16:f7:f6:69:7f:cf:a9:2c:
25:0b:f7:20:3e:7c:23:aa:eb:3b:11:7b:0d:41:4a:60:d7:9c:
d1:c1:63:b3:5c:6b:a2:4f:e0:ac:80:51:36:38:3f:01:c9:dd:
c2:bb:9f:41:59:cc:76:89:ea:e1:3d:44:ef:1a:e0:95:a0:43:
f8:cf:d3:7e:16:bc:b7:51:17:e2:43:06:d0:65:c3:b4:f2:26:
01:ff:a9:76:14:e0:f4:06:81:17:e9:12:ff:18:e0:91:39:69:
5b:c8:92:51:fd:59:96:89:20:f1:db:f3:a1:59:bd:bf:65:ff:
eb:0e:9d:d7:d8:65:b1:f7:c1:6f:3a:2c:52:39:33:0f:5e:e1:
7f:a4:d6:3f:69:31:f0:6e:39:da:b3:69:78:da:b1:4b:23:77:
d7:ea:74:71:62:1d:da:73:24:b5:ff:ba:3a:65:dd:cd:79:e9:
3a:c9:dd:16:8d:76:32:c3:35:89:2d:5f:70:7f:32:44:6a:26:
49:de:4b:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IYJItqbtVbvNSkZvlMotMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NzBkMjhmYzQ5YWEwYWU4MDhjMzgzZjU4N2YzZWE0Y2Zl
YjA0OWQwHhcNMjUxMDE5MTEwMTE4WhcNMjUxMDIwMTEwMTE4WjAzMTEwLwYDVQQD
Eyg1NzJmZGMxNGFlNmM1NGE2MmVlZWYzNzFiZTI4OThkMjQ5N2ZiZDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9m8pU3ygnWIkD2yNekf/cNop+5C
OABi8Wwpz3OG0kYfX2g0nzKOJUQ6aAKkLo4v74widbHs59xT7p37sASluc5dAeHm
yZSWQx58vMYOzOSQrHvA83TEVhG7cQbw5i8DGNAXZbqirjwZu+3kq+aSJwfHxot1
t45dpzP+1D8A/8SWOG/TVLuIkIR+EeQe0MQfVoaE+LyPiUMCOctFxMgPGTy7Tf02
eIRq7IoFU6Ym1Y+H3i52ZoaxGky1VzXP8Fg/P9h+f0ylbLnYUaqxMzcwtbEugCR8
hsl+jH+mA8VRTkxAVIO9Zv5ZSbMynpQ4SfbKVvxk2IuYxaGqAoMpnXHZXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcv3BSubFSmLu7zcb4omNJJf70yMB8GA1UdIwQY
MBaAFEVw0o/EmqCugIw4P1h/PqTP6wSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlhEU2o4U2FvSzZBakRnX1dIOC1wTV9yQkowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMmEzNTMtNjY1OS00ODBiLWFiZjct
ZWIwNzM3OTdhYzY2LzEvUlhEU2o4U2FvSzZBakRnX1dIOC1wTV9yQkowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zMmEzNTMtNjY1OS00ODBiLWFiZjctZWIwNzM3OTdhYzY2
LzEvUlhEU2o4U2FvSzZBakRnX1dIOC1wTV9yQkowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiRtcE2w
O5cVayKelcA5VtaEKbgWOUcVYV+YG1FsDH6aX9Fnn4YZVzr7TER1Zl8Sbhd4PiAV
4K1vqUjfGf5V0xb39ml/z6ksJQv3ID58I6rrOxF7DUFKYNec0cFjs1xrok/grIBR
Njg/AcndwrufQVnMdonq4T1E7xrglaBD+M/Tfha8t1EX4kMG0GXDtPImAf+pdhTg
9AaBF+kS/xjgkTlpW8iSUf1Zlokg8dvzoVm9v2X/6w6d19hlsffBbzosUjkzD17h
f6TWP2kx8G452rNpeNqxSyN31+p0cWId2nMktf+6OmXdzXnpOsndFo12MsM1iS1f
cH8yRGomSd5L6A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:28 2025 by rpki-client