Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: oxPBWbkVISReRcZ6C4Wiymc4XjemaGwfLhbI/Z48AUw=
Subject key identifier: FE:75:39:14:B5:96:8D:95:CE:C1:2E:F6:27:1D:5A:EE:23:3B:5F:E0
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 0199FC58740FFDCBF67A4BD83C2483D21C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:19 +0000
Manifest this update: Sun 19 Oct 2025 12:01:19 +0000
Manifest next update: Mon 20 Oct 2025 12:01:19 +0000
Files and hashes: 1: AwF9Po4WusYXHbCN28Vi4N0vdXM.roa (hash: BrxeSv8ZT8qhQ9aNAuI1FMulPWTfztWj80JkUewf8Ps=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: 0Vi5qJEH1IhMd2GK5KltG6neaEO/sl+7EOm2agBrWuA=)
3: jsLjY2Dc2S2O7jwfLML6nOsBS0o.roa (hash: /a3bkiLEbNmaSUeq8MEDshih5vZMuYoOiChrBF9mx2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:74:0f:fd:cb:f6:7a:4b:d8:3c:24:83:d2:1c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: Oct 19 12:01:19 2025 GMT
Not After : Oct 20 12:01:19 2025 GMT
Subject: CN=fe753914b5968d95cec12ef6271d5aee233b5fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:da:4d:11:eb:88:fa:1f:05:3d:98:0a:94:00:
34:d6:37:64:63:f7:36:31:db:40:5c:3f:ef:90:f7:
58:1e:b9:50:35:40:65:da:f2:8a:1c:3f:c5:d4:9f:
8f:10:80:d0:e0:98:98:fe:9f:8b:0d:ce:e9:3d:17:
e2:5d:27:16:24:03:39:36:be:bd:73:de:50:21:a4:
95:b3:d1:8d:67:9d:48:8c:30:cf:97:1d:94:03:2d:
f7:98:2a:e6:ac:25:2b:d8:de:32:a1:52:c0:e7:89:
76:c8:e9:85:f2:40:32:80:03:91:4a:78:ac:7c:6a:
cb:7b:82:35:32:5d:96:4c:2b:e2:78:61:21:91:7d:
d0:ab:ee:ef:f6:4a:dd:60:7b:1d:3d:55:6d:21:6d:
63:1e:f1:26:42:b8:9a:0e:0f:fb:ed:52:af:58:92:
b6:58:a3:6f:9e:41:25:1d:02:8e:1c:c9:1b:8d:9d:
b6:3f:59:94:7b:c7:53:fc:e3:6a:0e:28:2d:31:f0:
28:f4:66:da:6d:08:dc:f1:86:a0:1c:ed:37:db:0a:
2e:f2:65:08:17:5e:b9:93:1f:55:ab:b9:ce:ba:17:
0e:55:69:66:08:0c:41:6c:71:8e:6f:ca:6a:42:fc:
f5:79:30:9e:58:83:55:9a:cc:28:57:1b:e9:36:cf:
39:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:75:39:14:B5:96:8D:95:CE:C1:2E:F6:27:1D:5A:EE:23:3B:5F:E0
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6b:73:d5:4a:62:81:35:d2:62:5e:a8:84:ac:df:5b:dd:d3:
d5:36:d6:e0:2e:74:42:d6:8f:9b:65:c6:e0:d1:f9:f8:3d:eb:
70:9e:95:23:6a:46:7b:48:fe:e7:cc:42:7e:d1:4f:97:51:77:
42:31:51:5b:3e:56:87:b2:64:5b:00:62:21:5e:a0:0e:4e:17:
e2:80:9e:5d:25:93:44:20:87:23:26:a2:1e:e9:71:1e:65:6b:
3e:79:26:e5:e2:1d:0a:7e:17:99:9f:40:3f:b2:37:50:56:25:
c3:6d:8e:0e:60:6d:b9:75:58:9b:8b:95:bd:15:d6:2e:b9:fe:
3a:b3:e1:f0:7b:df:1e:45:37:da:57:22:bf:75:a1:35:90:73:
3a:69:45:bd:6d:ac:d0:ea:87:6d:14:a6:7c:c0:95:6c:93:37:
ff:55:92:9c:cb:83:4a:33:c7:cc:9e:39:7d:65:f1:a5:db:fd:
36:82:bc:8e:7a:84:3b:40:10:fb:fd:5c:a4:fc:8e:f1:16:6b:
4e:d9:cd:cd:0d:12:a9:b1:85:14:78:d4:7c:bc:11:9b:b8:cf:
ea:fc:0f:a2:72:d6:43:0f:13:b1:af:91:52:63:fd:73:9d:42:
67:ce:e7:37:7f:cb:18:54:30:3a:67:5d:22:9b:df:d0:d8:bf:
a4:3c:91:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WHQP/cv2ekvYPCSD0hwbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDM5ZTFkZTE4NTE0YmFjMmY1YTIzOTEwZjhjN2Q0Njcy
YTBmZDgwHhcNMjUxMDE5MTIwMTE5WhcNMjUxMDIwMTIwMTE5WjAzMTEwLwYDVQQD
EyhmZTc1MzkxNGI1OTY4ZDk1Y2VjMTJlZjYyNzFkNWFlZTIzM2I1ZmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49pNEeuI+h8FPZgKlAA01jdkY/c2
MdtAXD/vkPdYHrlQNUBl2vKKHD/F1J+PEIDQ4JiY/p+LDc7pPRfiXScWJAM5Nr69
c95QIaSVs9GNZ51IjDDPlx2UAy33mCrmrCUr2N4yoVLA54l2yOmF8kAygAORSnis
fGrLe4I1Ml2WTCvieGEhkX3Qq+7v9krdYHsdPVVtIW1jHvEmQriaDg/77VKvWJK2
WKNvnkElHQKOHMkbjZ22P1mUe8dT/ONqDigtMfAo9GbabQjc8YagHO032wou8mUI
F165kx9Vq7nOuhcOVWlmCAxBbHGOb8pqQvz1eTCeWINVmswoVxvpNs85vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP51ORS1lo2VzsEu9icdWu4jO1/gMB8GA1UdIwQY
MBaAFF3Tnh3hhRS6wvWiORD4x9RnKg/YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMt
OWMyNmIwN2I3MThiLzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMtOWMyNmIwN2I3MThi
LzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJGtz1Upi
gTXSYl6ohKzfW93T1TbW4C50QtaPm2XG4NH5+D3rcJ6VI2pGe0j+58xCftFPl1F3
QjFRWz5Wh7JkWwBiIV6gDk4X4oCeXSWTRCCHIyaiHulxHmVrPnkm5eIdCn4XmZ9A
P7I3UFYlw22ODmBtuXVYm4uVvRXWLrn+OrPh8HvfHkU32lciv3WhNZBzOmlFvW2s
0OqHbRSmfMCVbJM3/1WSnMuDSjPHzJ45fWXxpdv9NoK8jnqEO0AQ+/1cpPyO8RZr
TtnNzQ0SqbGFFHjUfLwRm7jP6vwPonLWQw8Tsa+RUmP9c51CZ87nN3/LGFQwOmdd
Ipvf0Ni/pDyRHA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:50 2025 by rpki-client