Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
File: x1eZ_0M1t7GucYjt-lP9fiE-shY.mft (raw, json)
Hash identifier: GIw/ySOi8TCrwHGFcmlWEiQ//EekK8fe+w5bNVmtzng=
Subject key identifier: 6C:A4:2E:C8:52:0B:BC:AA:5A:7B:74:7B:AA:95:57:0D:3F:EB:77:36
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 0199FCC6A66E9B18F7E321656FDF3DD9F559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
Manifest number: 1665
Signing time: Sun 19 Oct 2025 14:01:41 +0000
Manifest this update: Sun 19 Oct 2025 14:01:41 +0000
Manifest next update: Mon 20 Oct 2025 14:01:41 +0000
Files and hashes: 1: Fv4x63T3ojikq-5UgMnJdELk8sc.roa (hash: aEkLecdA0DcIECx9dg4mdlZcrGEzKCgWB2xD42hEp5g=)
2: TMkhKaPUJB4LI1mMmf3sccZhBEE.roa (hash: SQD8a+jFccoVxuuqM1aTazg815YSaiMZNjfARcco9Jw=)
3: x1eZ_0M1t7GucYjt-lP9fiE-shY.crl (hash: LnboPl768iLDd6lVqznIOUK71xpufn+cPKW/eqR1t8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a6:6e:9b:18:f7:e3:21:65:6f:df:3d:d9:f5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: Oct 19 14:01:41 2025 GMT
Not After : Oct 20 14:01:41 2025 GMT
Subject: CN=6ca42ec8520bbcaa5a7b747baa95570d3feb7736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:05:08:b2:10:54:38:2d:06:4f:23:61:29:
bc:76:88:4c:38:c4:55:75:01:e1:5d:65:6d:65:49:
c8:b9:4b:1e:6d:a0:25:f4:dc:72:7e:93:9a:9b:0f:
7c:25:3c:da:ee:09:ab:ed:28:45:4f:df:91:0c:c8:
79:0f:a1:a5:56:0f:bc:b0:88:19:16:36:8e:94:a5:
4f:2e:c0:99:be:f1:41:6c:6a:80:8a:bd:2d:9c:6c:
9d:33:d5:4f:e9:e2:55:14:bb:a8:a5:d2:8c:37:fe:
8e:c8:d1:33:0b:97:d2:5b:c2:6c:d7:e6:cd:b3:13:
db:f8:a3:4f:62:a6:bc:b1:a7:94:96:c2:8b:2c:ed:
bf:a6:ab:99:df:35:57:3b:50:4b:2e:80:ac:71:64:
b9:16:2d:32:aa:6c:5a:8f:15:ca:17:4d:83:da:0a:
61:90:b8:f2:22:7d:db:c0:88:7f:f1:b6:58:3c:42:
5c:b4:46:42:0e:b6:ca:c0:ae:0b:b1:96:ae:18:bd:
99:21:51:09:ae:01:82:0e:4a:df:f4:0b:1c:e3:57:
95:f0:19:e1:fc:03:d3:27:70:14:0e:ff:c5:2a:bb:
a3:3e:55:1f:99:27:47:1e:ce:54:7c:1e:03:6d:32:
e7:bd:52:90:b2:df:46:67:d1:07:e5:d1:7b:b6:08:
4f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A4:2E:C8:52:0B:BC:AA:5A:7B:74:7B:AA:95:57:0D:3F:EB:77:36
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b3:69:0f:24:1c:aa:7b:13:08:86:9a:17:88:3b:fb:27:b8:
8b:de:57:a3:82:ba:1c:9b:cf:cb:e4:36:92:a3:4e:37:91:3e:
46:6c:34:f2:97:c9:12:95:44:94:52:6b:83:7c:89:71:a3:0b:
99:0b:56:46:f0:38:92:ac:f3:0d:c3:98:57:73:a6:8f:a4:bf:
81:04:a0:47:14:b2:c9:7a:b6:1d:d7:16:9c:ef:06:7a:7d:29:
b3:05:a9:f7:ea:ff:76:1d:65:8f:d2:db:d2:3d:dc:cc:6b:ef:
fb:95:a5:33:79:f3:6d:c3:73:39:bc:8a:4f:5b:08:19:cb:3f:
f8:39:78:75:21:06:a3:c1:51:e7:3f:71:ac:83:c9:bf:20:5f:
87:c7:c4:7b:89:25:c6:f9:fb:9b:d9:4c:27:09:f5:b5:9c:0f:
b6:ee:b3:a0:2f:22:af:d1:e2:c0:2a:03:ed:99:99:df:f3:7e:
94:47:e5:51:5e:2c:5c:d4:c5:f2:93:3d:e5:a2:9e:b2:96:0a:
24:4d:49:cc:f6:af:a5:59:04:3c:39:e1:b9:8d:01:c3:06:0d:
40:97:41:f8:3c:39:a0:c6:7a:b1:0f:6c:95:6a:a9:c2:32:28:
dc:94:63:2c:61:28:ba:ce:17:22:56:8d:57:e4:d7:9e:c1:52:
d2:ab:2d:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xqZumxj34yFlb9892fVZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NTc5OWZmNDMzNWI3YjFhZTcxODhlZGZhNTNmZDdlMjEz
ZWIyMTYwHhcNMjUxMDE5MTQwMTQxWhcNMjUxMDIwMTQwMTQxWjAzMTEwLwYDVQQD
Eyg2Y2E0MmVjODUyMGJiY2FhNWE3Yjc0N2JhYTk1NTcwZDNmZWI3NzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVkFCLIQVDgtBk8jYSm8dohMOMRV
dQHhXWVtZUnIuUsebaAl9NxyfpOamw98JTza7gmr7ShFT9+RDMh5D6GlVg+8sIgZ
FjaOlKVPLsCZvvFBbGqAir0tnGydM9VP6eJVFLuopdKMN/6OyNEzC5fSW8Js1+bN
sxPb+KNPYqa8saeUlsKLLO2/pquZ3zVXO1BLLoCscWS5Fi0yqmxajxXKF02D2gph
kLjyIn3bwIh/8bZYPEJctEZCDrbKwK4LsZauGL2ZIVEJrgGCDkrf9Asc41eV8Bnh
/APTJ3AUDv/FKrujPlUfmSdHHs5UfB4DbTLnvVKQst9GZ9EH5dF7tghPmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGykLshSC7yqWnt0e6qVVw0/63c2MB8GA1UdIwQY
MBaAFMdXmf9DNbexrnGI7fpT/X4hPrIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDFlWl8wTTF0N0d1Y1lqdC1sUDlmaUUtc2hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xZTRjMDMtZjYxOS00N2EzLTgxYmQt
MzZlZjdhZWViZTNiLzEveDFlWl8wTTF0N0d1Y1lqdC1sUDlmaUUtc2hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xZTRjMDMtZjYxOS00N2EzLTgxYmQtMzZlZjdhZWViZTNi
LzEveDFlWl8wTTF0N0d1Y1lqdC1sUDlmaUUtc2hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLNpDyQc
qnsTCIaaF4g7+ye4i95Xo4K6HJvPy+Q2kqNON5E+Rmw08pfJEpVElFJrg3yJcaML
mQtWRvA4kqzzDcOYV3Omj6S/gQSgRxSyyXq2HdcWnO8Gen0pswWp9+r/dh1lj9Lb
0j3czGvv+5WlM3nzbcNzObyKT1sIGcs/+Dl4dSEGo8FR5z9xrIPJvyBfh8fEe4kl
xvn7m9lMJwn1tZwPtu6zoC8ir9HiwCoD7ZmZ3/N+lEflUV4sXNTF8pM95aKespYK
JE1JzPavpVkEPDnhuY0BwwYNQJdB+Dw5oMZ6sQ9slWqpwjIo3JRjLGEous4XIlaN
V+TXnsFS0qstYw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:41 2025 by rpki-client