Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
File: X2c9L2Ia4xQHABdIu95jisvYYFA.mft (raw, json)
Hash identifier: dbbdXPeoxr5BB14492AzPG8Js9jLOS1CPL2nmqLivhw=
Subject key identifier: 99:A1:89:39:41:B1:8C:20:CB:FF:6C:83:AC:1C:35:D2:9B:39:C6:FF
Authority key identifier: 5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
Certificate issuer: /CN=5f673d2f621ae31407001748bbde638acbd86050
Certificate serial: 0199FDD98452D9776E66A660A44043DE09F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
Manifest number: 0758
Signing time: Sun 19 Oct 2025 19:01:54 +0000
Manifest this update: Sun 19 Oct 2025 19:01:54 +0000
Manifest next update: Mon 20 Oct 2025 19:01:54 +0000
Files and hashes: 1: HqDRIksWN36QXauqYoD2knIGjbc.roa (hash: 05DMa/ontaHtCWdbIzNxIFAgYET2ZoK4nwid3joHlm8=)
2: X2c9L2Ia4xQHABdIu95jisvYYFA.crl (hash: xIphVfDTE1v1HNV7om1pN4TbX+UGCcqHC3Gagzq/8uQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:84:52:d9:77:6e:66:a6:60:a4:40:43:de:09:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f673d2f621ae31407001748bbde638acbd86050
Validity
Not Before: Oct 19 19:01:54 2025 GMT
Not After : Oct 20 19:01:54 2025 GMT
Subject: CN=99a1893941b18c20cbff6c83ac1c35d29b39c6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:9f:da:7a:7f:97:d0:1f:aa:9d:99:f4:3b:
18:09:29:2f:eb:2f:76:8e:0b:86:13:82:4b:8d:83:
80:ec:8f:cf:1e:8a:fc:07:a4:3b:fd:ad:bc:b6:f1:
63:bc:bb:43:b0:b4:26:93:6c:a0:15:b3:8c:34:17:
a5:1e:1b:03:03:c0:c0:e0:ea:68:eb:27:48:e6:af:
4e:87:12:60:dd:4a:f4:32:ef:44:3e:5d:34:8a:99:
11:87:6d:6c:3c:7f:3a:09:f3:dc:4c:45:5e:f3:e6:
be:a9:b1:18:e5:bf:ce:8b:7a:1d:1b:dc:b4:d0:6c:
5b:43:8d:0e:19:7d:eb:79:ed:43:77:64:87:59:15:
38:5f:62:94:02:a3:00:a4:f5:0b:6d:4b:07:10:5d:
86:57:52:40:dc:89:2f:6b:30:e3:3f:ed:d6:e2:41:
11:ac:4f:a1:00:aa:1e:ee:9e:2d:20:53:8c:96:cd:
f0:b4:2a:ec:4a:8a:03:b9:e0:e0:94:f8:88:4d:5a:
92:bb:07:62:96:68:4f:e3:33:34:87:86:de:00:76:
8c:04:d9:71:6d:94:97:ce:74:ca:67:4b:8d:dc:6a:
24:6b:36:4e:40:97:77:8c:b6:c5:f8:5b:aa:f7:1c:
14:3a:d7:5b:8c:e1:9e:94:3e:f6:ed:c0:de:ce:d6:
74:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A1:89:39:41:B1:8C:20:CB:FF:6C:83:AC:1C:35:D2:9B:39:C6:FF
X509v3 Authority Key Identifier:
keyid:5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ac:5f:c1:9a:fb:c9:a5:33:8c:7b:2a:e0:f4:45:cf:e6:0a:
7f:be:cb:95:58:72:c9:4f:d7:d7:7d:7e:55:8b:b8:27:f2:82:
c2:86:94:f9:00:c6:3b:03:69:59:48:7f:c6:b2:73:81:4e:44:
84:38:7a:73:47:95:68:8c:0f:fe:6b:31:31:1d:67:e1:65:b4:
ce:a6:64:df:2a:3b:25:1f:83:05:15:82:3f:c4:8c:a1:99:8d:
79:e9:ba:1e:a7:b5:62:74:60:36:27:3c:4e:6e:ac:64:8f:c0:
c5:32:af:38:e8:68:36:a2:c4:79:92:14:e1:54:e6:61:e0:76:
d8:ad:69:3c:85:af:a0:fc:5e:ac:8c:f9:7e:6e:16:27:cf:23:
e4:82:14:92:9c:e0:74:f6:91:d8:00:99:01:5c:58:7c:2e:96:
ff:68:9c:6a:0f:8f:fe:58:f5:6d:6c:47:1d:14:0b:cf:60:38:
e5:65:4e:89:64:98:53:bc:70:64:24:28:5d:e5:ee:02:6f:10:
f3:2f:dc:72:ba:d5:22:da:f0:da:2c:ac:ab:72:e2:71:f0:a2:
e3:0e:cc:51:d2:f9:25:de:fe:39:f4:4f:56:29:ff:24:28:10:
37:1c:86:92:40:c4:ee:b9:54:7d:72:be:69:97:03:b2:22:82:
60:f5:c8:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92YRS2XduZqZgpEBD3gn1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNjczZDJmNjIxYWUzMTQwNzAwMTc0OGJiZGU2MzhhY2Jk
ODYwNTAwHhcNMjUxMDE5MTkwMTU0WhcNMjUxMDIwMTkwMTU0WjAzMTEwLwYDVQQD
Eyg5OWExODkzOTQxYjE4YzIwY2JmZjZjODNhYzFjMzVkMjliMzljNmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOOf2np/l9Afqp2Z9DsYCSkv6y92
jguGE4JLjYOA7I/PHor8B6Q7/a28tvFjvLtDsLQmk2ygFbOMNBelHhsDA8DA4Opo
6ydI5q9OhxJg3Ur0Mu9EPl00ipkRh21sPH86CfPcTEVe8+a+qbEY5b/Oi3odG9y0
0GxbQ40OGX3ree1Dd2SHWRU4X2KUAqMApPULbUsHEF2GV1JA3IkvazDjP+3W4kER
rE+hAKoe7p4tIFOMls3wtCrsSooDueDglPiITVqSuwdilmhP4zM0h4beAHaMBNlx
bZSXznTKZ0uN3GokazZOQJd3jLbF+Fuq9xwUOtdbjOGelD727cDeztZ0AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmhiTlBsYwgy/9sg6wcNdKbOcb/MB8GA1UdIwQY
MBaAFF9nPS9iGuMUBwAXSLveY4rL2GBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDJjOUwySWE0eFFIQUJkSXU5NWppc3ZZWUZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82NTI3ODAtM2VhMS00MTVlLTgzOWUt
ODQ0NzI5MTM3ZWU1LzEvWDJjOUwySWE0eFFIQUJkSXU5NWppc3ZZWUZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82NTI3ODAtM2VhMS00MTVlLTgzOWUtODQ0NzI5MTM3ZWU1
LzEvWDJjOUwySWE0eFFIQUJkSXU5NWppc3ZZWUZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6xfwZr7
yaUzjHsq4PRFz+YKf77LlVhyyU/X131+VYu4J/KCwoaU+QDGOwNpWUh/xrJzgU5E
hDh6c0eVaIwP/msxMR1n4WW0zqZk3yo7JR+DBRWCP8SMoZmNeem6Hqe1YnRgNic8
Tm6sZI/AxTKvOOhoNqLEeZIU4VTmYeB22K1pPIWvoPxerIz5fm4WJ88j5IIUkpzg
dPaR2ACZAVxYfC6W/2icag+P/lj1bWxHHRQLz2A45WVOiWSYU7xwZCQoXeXuAm8Q
8y/ccrrVItrw2iysq3LicfCi4w7MUdL5Jd7+OfRPVin/JCgQNxyGkkDE7rlUfXK+
aZcDsiKCYPXIkQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:02 2025 by rpki-client