
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
File: xTG2PRGmzC0c5p4TEch6waanBzM.mft (raw, json)
Hash identifier: NjZlJ5wK2Bra6fvtURGEO0Chuk+HoKMlvMK0lHWEzug=
Subject key identifier: 66:4F:91:29:76:0A:2F:7F:1C:6C:E5:A8:D3:E0:77:57:C9:75:B0:B6
Authority key identifier: C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33
Certificate issuer: /CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
Certificate serial: 0199FA6A951B92D3B51A5994C9E51F6AAA99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
Manifest number: 0F65
Signing time: Sun 19 Oct 2025 03:01:52 +0000
Manifest this update: Sun 19 Oct 2025 03:01:52 +0000
Manifest next update: Mon 20 Oct 2025 03:01:52 +0000
Files and hashes: 1: 3cKiOm3cqL9AuF9PS6f53tN4Gdg.roa (hash: HiF4cbbVkgMNvvCZGg36cGuMWinu6Z8X1/cmYfYlH0w=)
2: 7dlaDlkKgi4dAirWDUWBZGBGqcU.roa (hash: p1fbv33BP/4U3m5pS2Ws4rI2vfUa3r6QuSWQWQR+Iw4=)
3: xTG2PRGmzC0c5p4TEch6waanBzM.crl (hash: qyVTREPQlqpseXTE/lE/Sutsh8STVJ8mx31z8rEtCWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:95:1b:92:d3:b5:1a:59:94:c9:e5:1f:6a:aa:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
Validity
Not Before: Oct 19 03:01:52 2025 GMT
Not After : Oct 20 03:01:52 2025 GMT
Subject: CN=664f9129760a2f7f1c6ce5a8d3e07757c975b0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:22:e8:11:df:e2:95:c2:76:ab:9f:03:56:
36:d4:c8:49:3c:10:70:34:c5:72:41:5d:38:d4:98:
df:04:71:b4:99:a7:de:53:b3:98:76:9d:d7:61:a7:
28:6c:f0:3f:aa:e9:be:ad:f0:93:43:08:0b:aa:d4:
73:9c:84:c3:05:d1:54:86:3f:0e:e7:89:df:ba:f9:
d2:76:67:2c:58:27:da:47:33:6c:fb:cd:79:81:36:
3d:57:d5:0c:cf:0e:a0:21:98:63:85:fe:0e:6f:9b:
6d:51:f0:76:82:22:35:d9:2b:f8:cf:ce:47:9c:1d:
5e:a4:ff:e2:46:32:d7:06:48:22:b8:ff:8c:d5:5c:
d1:9d:89:5a:c2:87:32:a0:59:bf:05:28:d9:96:8d:
a7:f2:46:57:f2:20:3b:eb:79:66:54:74:50:3e:61:
95:0f:e1:b5:91:69:79:bf:74:da:8b:5c:24:a1:88:
28:06:8f:fb:ff:84:50:82:76:88:3e:54:96:3c:e5:
fe:f9:05:1b:77:a3:5a:d8:84:40:11:be:94:35:45:
36:19:63:77:86:bb:82:41:e9:52:ae:31:eb:d5:68:
02:74:30:3f:08:34:d9:d7:8d:5a:b3:c2:ec:6e:f9:
01:ec:30:ce:ff:0a:2b:05:ab:e3:f5:eb:6b:a6:d7:
5c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4F:91:29:76:0A:2F:7F:1C:6C:E5:A8:D3:E0:77:57:C9:75:B0:B6
X509v3 Authority Key Identifier:
keyid:C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:59:aa:47:7a:51:a7:92:ff:f1:21:f9:32:87:ee:6d:ad:05:
65:c0:a7:55:2a:38:bd:0e:e3:8b:e5:c6:c3:e7:a4:3a:ca:f9:
73:f3:52:46:ee:24:0b:c2:60:9b:ed:a5:54:20:f8:7d:a6:4e:
70:aa:5f:ff:75:d6:37:6c:54:f0:77:c4:ae:03:d5:1a:a6:2b:
e2:8a:1a:e4:24:5b:94:40:6c:b7:1d:58:27:4c:4c:ba:69:06:
21:da:d4:29:7d:0c:c4:db:25:5d:6e:4b:93:8f:5e:9b:92:66:
c4:35:5f:98:d9:e3:4b:73:33:de:5b:cb:b4:cc:cf:1d:d9:60:
7f:26:44:c0:b5:7c:93:a9:7c:e8:17:99:61:22:54:84:80:74:
c8:dd:9e:09:26:65:f0:49:4a:7f:e0:18:42:de:21:fe:6d:5e:
94:ac:e5:3b:ce:e8:79:ad:77:3a:0e:e0:33:20:bd:98:ad:84:
cb:93:d5:be:45:27:96:28:a6:78:93:36:80:04:5f:f2:93:4c:
d1:a4:2d:c8:1a:26:14:56:1e:b9:89:b2:83:9f:c7:3e:bb:a2:
bf:3a:06:c5:6f:87:04:f6:d2:ab:e9:c9:6d:1e:49:4f:73:f9:
9f:77:b9:58:99:58:63:d0:58:8c:62:42:52:e7:01:63:40:02:
2c:14:2f:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6apUbktO1GlmUyeUfaqqZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MzFiNjNkMTFhNmNjMmQxY2U2OWUxMzExYzg3YWMxYTZh
NzA3MzMwHhcNMjUxMDE5MDMwMTUyWhcNMjUxMDIwMDMwMTUyWjAzMTEwLwYDVQQD
Eyg2NjRmOTEyOTc2MGEyZjdmMWM2Y2U1YThkM2UwNzc1N2M5NzViMGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApksi6BHf4pXCdqufA1Y21MhJPBBw
NMVyQV041JjfBHG0mafeU7OYdp3XYacobPA/qum+rfCTQwgLqtRznITDBdFUhj8O
54nfuvnSdmcsWCfaRzNs+815gTY9V9UMzw6gIZhjhf4Ob5ttUfB2giI12Sv4z85H
nB1epP/iRjLXBkgiuP+M1VzRnYlawocyoFm/BSjZlo2n8kZX8iA763lmVHRQPmGV
D+G1kWl5v3Tai1wkoYgoBo/7/4RQgnaIPlSWPOX++QUbd6Na2IRAEb6UNUU2GWN3
hruCQelSrjHr1WgCdDA/CDTZ141as8LsbvkB7DDO/worBavj9etrptdckwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZPkSl2Ci9/HGzlqNPgd1fJdbC2MB8GA1UdIwQY
MBaAFMUxtj0RpswtHOaeExHIesGmpwczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRHMlBSR216QzBjNXA0VEVjaDZ3YWFuQnpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84Njg5OGUtZTZlNi00Yjg4LTg4MTEt
ZGI4Y2FiY2VlMjFlLzEveFRHMlBSR216QzBjNXA0VEVjaDZ3YWFuQnpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84Njg5OGUtZTZlNi00Yjg4LTg4MTEtZGI4Y2FiY2VlMjFl
LzEveFRHMlBSR216QzBjNXA0VEVjaDZ3YWFuQnpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1mqR3pR
p5L/8SH5Mofuba0FZcCnVSo4vQ7ji+XGw+ekOsr5c/NSRu4kC8Jgm+2lVCD4faZO
cKpf/3XWN2xU8HfErgPVGqYr4ooa5CRblEBstx1YJ0xMumkGIdrUKX0MxNslXW5L
k49em5JmxDVfmNnjS3Mz3lvLtMzPHdlgfyZEwLV8k6l86BeZYSJUhIB0yN2eCSZl
8ElKf+AYQt4h/m1elKzlO87oea13Og7gMyC9mK2Ey5PVvkUnliimeJM2gARf8pNM
0aQtyBomFFYeuYmyg5/HPruivzoGxW+HBPbSq+nJbR5JT3P5n3e5WJlYY9BYjGJC
UucBY0ACLBQveA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:11 2025 by rpki-client