Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
File: XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft (raw, json)
Hash identifier: 0MZh0vjjPf4GEXRgiODwkX6Y/l3TMUmdleRWzloAmho=
Subject key identifier: D9:1E:BE:AE:E2:FF:27:23:40:58:F1:0A:84:8A:D2:67:14:DA:6E:BB
Authority key identifier: 5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03
Certificate issuer: /CN=5cd379cedcdc20f0875c4b08b94b41161b3e8c03
Certificate serial: 0199FCC6BB43D37BA6A009A651FA14DA1BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
Manifest number: 0E5F
Signing time: Sun 19 Oct 2025 14:01:46 +0000
Manifest this update: Sun 19 Oct 2025 14:01:46 +0000
Manifest next update: Mon 20 Oct 2025 14:01:46 +0000
Files and hashes: 1: 1-EeSCCOFCUoz0VplGP1Lo0h-9As.roa (hash: ZLnUsrTQcRzljBuufN+eacOU/oxAjJXf2wRzESRepgg=)
2: XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl (hash: FsLONDYRqHbYOd6apxmuLHxQxgwxScdDUnmBwmkqIaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:bb:43:d3:7b:a6:a0:09:a6:51:fa:14:da:1b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd379cedcdc20f0875c4b08b94b41161b3e8c03
Validity
Not Before: Oct 19 14:01:46 2025 GMT
Not After : Oct 20 14:01:46 2025 GMT
Subject: CN=d91ebeaee2ff27234058f10a848ad26714da6ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:aa:5b:20:b4:69:6f:fe:aa:32:f9:94:e0:
ec:57:82:86:56:6e:13:60:f3:f4:48:14:9d:60:34:
1f:73:f1:03:ad:c2:f2:db:e9:1b:f0:35:2f:30:8c:
e8:b2:51:70:fd:91:f3:aa:73:c7:41:51:5d:6f:52:
71:40:e4:3f:17:3d:02:5a:ed:09:c1:61:4c:e6:17:
d3:a9:f5:a7:4a:1d:90:9f:6d:51:79:79:6c:59:f9:
3a:e9:e6:3e:c0:27:67:04:27:fc:e6:57:65:94:f8:
9e:81:5e:9a:97:af:d8:12:0d:dc:b2:7d:ca:cd:3b:
8f:16:80:ee:6f:f6:15:b0:09:d9:21:30:06:fe:c0:
5a:a3:6c:1f:f5:ca:a4:3a:cf:cf:5c:12:2b:d7:5f:
0b:85:9b:24:d3:9f:ad:ff:41:31:d7:15:b3:9e:e0:
aa:02:78:3f:a9:39:8e:a6:36:13:eb:a6:42:58:9c:
5b:f3:0f:8a:61:db:f3:99:ea:7a:5f:4c:fa:4b:94:
9f:f2:c2:59:1a:88:93:d8:65:23:65:e6:fd:c8:ad:
a4:a8:a2:87:25:20:8f:b8:c8:9c:5f:dd:20:ca:ec:
56:2f:24:33:42:6e:99:61:72:65:23:f5:b1:36:e8:
bd:0e:7e:b3:1e:64:f6:72:83:c1:fc:bf:87:d8:fa:
c4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1E:BE:AE:E2:FF:27:23:40:58:F1:0A:84:8A:D2:67:14:DA:6E:BB
X509v3 Authority Key Identifier:
keyid:5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:96:60:93:e7:00:71:85:43:5d:fe:98:2a:91:3d:f5:56:47:
fb:f1:06:b7:1d:af:4b:9c:db:1a:77:46:d3:a6:12:91:68:0b:
fd:1f:19:09:e0:81:6b:78:69:31:5c:ed:c0:4f:32:b2:56:d2:
d2:70:13:a1:5a:82:01:ef:49:41:d6:08:e8:10:44:46:4e:ba:
43:65:f8:1e:29:94:55:eb:d6:69:cf:fd:8b:eb:89:4b:da:24:
eb:c3:2b:9a:94:c4:df:93:ed:c0:ae:91:ff:8d:75:59:6d:d1:
fb:ea:81:6f:95:1a:d0:04:2d:10:23:24:fe:26:ca:94:d3:39:
74:d9:73:b0:1e:dc:89:cc:a7:fc:29:39:a4:f9:9e:8b:74:90:
7a:34:d8:a1:a3:87:d7:75:cd:13:5c:ae:ee:df:c3:f0:7d:18:
9c:10:d1:e2:18:0e:8c:ef:bb:00:4d:75:6f:56:d9:66:bd:c9:
0f:4f:2d:a1:46:a9:c9:51:61:59:26:d4:66:64:49:de:ad:c0:
0d:3b:43:fe:4b:35:1f:50:53:24:a8:90:8b:70:78:c3:71:7c:
a5:21:d2:ad:46:bd:b6:65:59:ff:50:73:0a:04:15:20:d4:73:
f0:fa:9b:c6:6f:d1:f3:3e:8a:56:1b:dc:e6:62:d8:f9:6e:f5:
f1:42:93:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xrtD03umoAmmUfoU2hvTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZDM3OWNlZGNkYzIwZjA4NzVjNGIwOGI5NGI0MTE2MWIz
ZThjMDMwHhcNMjUxMDE5MTQwMTQ2WhcNMjUxMDIwMTQwMTQ2WjAzMTEwLwYDVQQD
EyhkOTFlYmVhZWUyZmYyNzIzNDA1OGYxMGE4NDhhZDI2NzE0ZGE2ZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWqqWyC0aW/+qjL5lODsV4KGVm4T
YPP0SBSdYDQfc/EDrcLy2+kb8DUvMIzoslFw/ZHzqnPHQVFdb1JxQOQ/Fz0CWu0J
wWFM5hfTqfWnSh2Qn21ReXlsWfk66eY+wCdnBCf85ldllPiegV6al6/YEg3csn3K
zTuPFoDub/YVsAnZITAG/sBao2wf9cqkOs/PXBIr118LhZsk05+t/0Ex1xWznuCq
Ang/qTmOpjYT66ZCWJxb8w+KYdvzmep6X0z6S5Sf8sJZGoiT2GUjZeb9yK2kqKKH
JSCPuMicX90gyuxWLyQzQm6ZYXJlI/WxNui9Dn6zHmT2coPB/L+H2PrEpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkevq7i/ycjQFjxCoSK0mcU2m67MB8GA1UdIwQY
MBaAFFzTec7c3CDwh1xLCLlLQRYbPowDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE5ONXp0emNJUENIWEVzSXVVdEJGaHMtakFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mM2NjYTQtZjZiZi00NzM0LWFiYmQt
MDk2NDQ2NGMxNzUxLzEvWE5ONXp0emNJUENIWEVzSXVVdEJGaHMtakFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mM2NjYTQtZjZiZi00NzM0LWFiYmQtMDk2NDQ2NGMxNzUx
LzEvWE5ONXp0emNJUENIWEVzSXVVdEJGaHMtakFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5Zgk+cA
cYVDXf6YKpE99VZH+/EGtx2vS5zbGndG06YSkWgL/R8ZCeCBa3hpMVztwE8yslbS
0nAToVqCAe9JQdYI6BBERk66Q2X4HimUVevWac/9i+uJS9ok68MrmpTE35PtwK6R
/411WW3R++qBb5Ua0AQtECMk/ibKlNM5dNlzsB7cicyn/Ck5pPmei3SQejTYoaOH
13XNE1yu7t/D8H0YnBDR4hgOjO+7AE11b1bZZr3JD08toUapyVFhWSbUZmRJ3q3A
DTtD/ks1H1BTJKiQi3B4w3F8pSHSrUa9tmVZ/1BzCgQVINRz8Pqbxm/R8z6KVhvc
5mLY+W718UKTzw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:35 2025 by rpki-client