Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
File: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft (raw, json)
Hash identifier: 3G2sRSK9cfNYdKo22INUPaDjyoALmvIMbS92iL7zlrw=
Subject key identifier: B2:AF:0D:25:3E:7E:49:49:59:76:B2:ED:5A:FA:9E:31:00:14:6A:BC
Authority key identifier: C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
Certificate issuer: /CN=c76c3644741336b01b638563314f40d10c69d30d
Certificate serial: 0199FEB51ECB55818DD953084F2D76F340BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
Manifest number: 0AF1
Signing time: Sun 19 Oct 2025 23:01:46 +0000
Manifest this update: Sun 19 Oct 2025 23:01:46 +0000
Manifest next update: Mon 20 Oct 2025 23:01:46 +0000
Files and hashes: 1: VL_sUVNGEMQYYwl9Xv-gftIOtVk.roa (hash: Nb6N1oOcP6n4dJnS6N2r/DJY5HC1wzR3gXjz4D8FCrM=)
2: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl (hash: Cn+w6/TgGeTOblAgGg1+xe+zsNgKAECq/+thgsaOgtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:1e:cb:55:81:8d:d9:53:08:4f:2d:76:f3:40:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76c3644741336b01b638563314f40d10c69d30d
Validity
Not Before: Oct 19 23:01:46 2025 GMT
Not After : Oct 20 23:01:46 2025 GMT
Subject: CN=b2af0d253e7e49495976b2ed5afa9e3100146abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bb:1e:d4:b3:38:5c:e7:28:60:9b:1d:3f:89:
d9:ac:04:7b:37:12:07:53:cd:80:73:c5:28:0c:fa:
a7:4a:09:12:94:65:c4:67:6a:d4:9c:bb:09:d9:39:
df:de:fd:ca:f6:bf:87:e9:e7:b5:af:6f:cb:a8:2d:
7b:1e:c4:77:70:f3:ac:55:c6:1b:67:43:1f:cd:0c:
0c:4a:93:e3:1d:e7:dd:55:32:9f:62:78:36:1e:0e:
8a:04:05:12:8b:6c:f1:d3:8a:13:83:cc:58:84:67:
88:f6:0e:9d:bb:2a:e0:1c:f4:c3:7c:6e:e6:4e:39:
d0:ca:33:c2:69:70:61:5f:10:12:2e:f0:34:4a:fc:
43:4c:ac:f3:17:6f:6b:40:69:df:5b:c1:18:5c:ee:
7e:d8:74:f2:90:b5:fa:6a:d3:2e:c5:5b:f2:f5:17:
e1:f2:17:cc:f6:c0:5b:c8:61:cc:6c:0f:8a:45:c9:
4f:00:3e:cf:64:24:59:3d:f5:1c:37:b7:25:5e:58:
4d:4f:74:8e:ad:75:f5:2a:03:3c:37:40:6c:95:e6:
16:49:b0:48:6e:66:74:5b:74:02:b6:83:ee:5e:46:
66:2c:98:26:55:23:69:73:74:04:2d:32:38:a3:93:
f2:f3:27:1d:d7:ad:00:b1:b8:1e:5b:9c:e4:ad:c8:
72:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AF:0D:25:3E:7E:49:49:59:76:B2:ED:5A:FA:9E:31:00:14:6A:BC
X509v3 Authority Key Identifier:
keyid:C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:20:98:dc:94:95:58:4f:9c:b7:d5:e8:e2:0d:22:20:c0:61:
c3:44:58:2f:1f:28:57:e3:ce:a5:58:bd:5d:b3:fb:57:ba:a9:
6b:b6:72:9a:7a:57:29:5b:c4:7d:65:94:90:c6:3b:c1:35:3b:
67:06:47:9a:33:b2:44:bd:fe:48:65:a4:5b:f4:d4:f6:87:7b:
3d:fa:3d:ef:d8:a4:9e:95:84:4a:b6:f7:61:c0:25:b1:a8:b3:
98:8c:39:e5:cd:de:31:19:01:34:0e:71:60:2e:44:f9:10:ba:
73:e2:80:dd:ac:2b:6c:4d:36:fb:2b:b4:ed:c5:78:9e:76:38:
3e:f2:cf:59:9e:4c:13:78:ac:eb:2e:0d:c8:34:94:02:c1:3b:
15:4e:71:81:db:1c:6b:da:2a:b8:7f:66:fc:67:59:c1:7f:01:
99:80:d3:d2:a8:03:af:1b:27:7c:b5:bd:aa:5d:f7:67:e9:ab:
77:cf:34:9a:8a:38:c6:21:3b:ad:97:83:11:2f:bd:66:bb:71:
bd:b6:53:78:ec:2f:1d:c7:8e:ef:8a:c9:be:b4:62:9d:84:bb:
1d:38:ca:52:60:89:26:b9:39:85:5a:4f:85:a4:76:81:05:fc:
1c:ef:65:43:87:7c:4d:20:10:67:8b:ca:26:0f:fa:bd:c2:2d:
7f:32:01:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tR7LVYGN2VMITy1280C8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NmMzNjQ0NzQxMzM2YjAxYjYzODU2MzMxNGY0MGQxMGM2
OWQzMGQwHhcNMjUxMDE5MjMwMTQ2WhcNMjUxMDIwMjMwMTQ2WjAzMTEwLwYDVQQD
EyhiMmFmMGQyNTNlN2U0OTQ5NTk3NmIyZWQ1YWZhOWUzMTAwMTQ2YWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbse1LM4XOcoYJsdP4nZrAR7NxIH
U82Ac8UoDPqnSgkSlGXEZ2rUnLsJ2Tnf3v3K9r+H6ee1r2/LqC17HsR3cPOsVcYb
Z0MfzQwMSpPjHefdVTKfYng2Hg6KBAUSi2zx04oTg8xYhGeI9g6duyrgHPTDfG7m
TjnQyjPCaXBhXxASLvA0SvxDTKzzF29rQGnfW8EYXO5+2HTykLX6atMuxVvy9Rfh
8hfM9sBbyGHMbA+KRclPAD7PZCRZPfUcN7clXlhNT3SOrXX1KgM8N0BsleYWSbBI
bmZ0W3QCtoPuXkZmLJgmVSNpc3QELTI4o5Py8ycd160AsbgeW5zkrchyQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKvDSU+fklJWXay7Vr6njEAFGq8MB8GA1UdIwQY
MBaAFMdsNkR0EzawG2OFYzFPQNEMadMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ZGY3YzYtZGVjZC00YmJjLWJhYmMt
MjM2OTdmNzUyZjJlLzEveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83ZGY3YzYtZGVjZC00YmJjLWJhYmMtMjM2OTdmNzUyZjJl
LzEveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSCY3JSV
WE+ct9Xo4g0iIMBhw0RYLx8oV+POpVi9XbP7V7qpa7ZymnpXKVvEfWWUkMY7wTU7
ZwZHmjOyRL3+SGWkW/TU9od7Pfo979iknpWESrb3YcAlsaizmIw55c3eMRkBNA5x
YC5E+RC6c+KA3awrbE02+yu07cV4nnY4PvLPWZ5ME3is6y4NyDSUAsE7FU5xgdsc
a9oquH9m/GdZwX8BmYDT0qgDrxsnfLW9ql33Z+mrd880moo4xiE7rZeDES+9Zrtx
vbZTeOwvHceO74rJvrRinYS7HTjKUmCJJrk5hVpPhaR2gQX8HO9lQ4d8TSAQZ4vK
Jg/6vcItfzIBQA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:13:49 2025 by rpki-client