Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
File: 55XJYXylpqO_8mP8GDeZL9GsR_I.mft (raw, json)
Hash identifier: isCqkuWlDg6PvF6AXB/K0tmhYR5Je3xkyptbgFLMxpU=
Subject key identifier: 4F:3A:01:68:05:65:3A:9D:D0:3F:74:E6:18:2F:F2:1B:BB:24:55:AD
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 0199FCC6118FD9FBE64519C1B64E91189A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
Manifest number: 13C2
Signing time: Sun 19 Oct 2025 14:01:02 +0000
Manifest this update: Sun 19 Oct 2025 14:01:02 +0000
Manifest next update: Mon 20 Oct 2025 14:01:02 +0000
Files and hashes: 1: 55XJYXylpqO_8mP8GDeZL9GsR_I.crl (hash: ahb2FR3+PzEdZwbrt6+I8MCjnKI4+zUUQOzmWpyNtyc=)
2: fdmY21hE8c4ebVfH7Y8PeaGR1rs.roa (hash: podpEHI3zXhpsNN3dsQSymn1ceGiInhTkIusl9LVsm8=)
3: nx0Nx3RUcjg69TXrkEufTSbs61w.roa (hash: KMtfn4uZNi8ih3qU7QWNp/Rahsd8G3VcGheyTA9UvAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:11:8f:d9:fb:e6:45:19:c1:b6:4e:91:18:9a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: Oct 19 14:01:02 2025 GMT
Not After : Oct 20 14:01:02 2025 GMT
Subject: CN=4f3a016805653a9dd03f74e6182ff21bbb2455ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:02:3c:da:0c:2f:df:be:ac:16:93:3f:8f:e0:
c9:d3:70:8e:4c:ad:f7:b4:4f:c9:bf:26:07:22:c1:
2d:63:b3:6e:23:00:68:c3:0d:a9:32:de:f8:35:34:
ba:67:32:17:3b:0c:e4:43:df:23:c1:41:77:7c:2c:
ad:07:4d:90:f8:f1:9e:4f:52:c9:e0:fd:cd:ff:c8:
9e:19:d6:81:8f:5f:dc:48:26:55:17:5d:dc:c7:16:
0d:1d:fc:5b:aa:f4:9c:12:30:a3:24:aa:c6:0f:da:
31:30:86:03:6b:40:10:fc:21:59:6f:91:66:d9:e1:
91:58:4f:c4:17:2f:0a:b9:cb:9f:92:34:0a:e1:07:
33:00:20:dd:ab:d8:c4:48:99:64:fa:af:e8:37:97:
78:32:e4:54:8e:f3:96:56:d0:fe:0f:10:76:da:8e:
7f:b1:8b:15:0f:3a:0b:f0:06:35:b4:e3:98:0b:02:
a2:a6:fb:c5:d4:4b:68:91:f0:7d:88:5b:a5:69:fa:
69:a3:8e:f6:ed:af:50:a5:56:2f:6c:d2:84:c8:77:
05:b9:db:32:7c:96:3b:98:b9:f3:42:bc:22:5f:fc:
38:35:4e:d8:29:aa:54:8e:a3:f9:69:69:07:16:e6:
db:d6:b7:42:b0:65:36:4d:c3:0f:ca:4e:65:a3:5e:
26:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3A:01:68:05:65:3A:9D:D0:3F:74:E6:18:2F:F2:1B:BB:24:55:AD
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:08:3b:eb:45:3e:4a:3e:2a:32:e4:75:9a:e0:34:df:b1:20:
38:6f:97:54:5b:0d:f2:38:47:38:a2:7a:fe:f8:2c:41:10:00:
a9:5a:14:cf:94:b8:1b:b6:a1:27:97:21:0a:6d:2a:96:cc:ad:
a1:d2:b5:56:ec:ba:4e:40:14:70:e4:d7:da:c8:ec:8b:8c:fb:
ac:8a:8c:90:ee:8c:25:d8:54:06:32:fe:3f:cb:f3:7f:6b:09:
39:ed:11:57:b7:8f:30:52:f6:b2:5a:b1:39:f9:99:82:a1:63:
88:f1:6f:a3:62:b6:1b:66:a4:c5:57:c4:79:9c:ae:91:26:41:
b9:56:47:b0:64:f4:d0:da:a3:12:5f:4a:5c:aa:fa:0c:2b:f3:
f9:63:cc:07:ba:dc:a8:ef:6f:8e:95:a2:9e:c4:87:29:b1:91:
ed:bb:13:c8:1b:26:50:0c:05:98:9c:27:ae:f4:9a:fa:d9:53:
5d:d2:d1:c4:b2:fc:22:1e:41:08:c9:0f:5f:36:12:48:84:44:
10:66:85:22:d1:fa:66:57:a6:6f:22:9e:8d:0e:4e:d9:50:b3:
bb:3d:4e:e7:64:1f:09:52:94:41:1e:b5:eb:70:7d:f2:9d:c7:
fc:bb:f1:14:10:99:a9:3f:bb:32:6c:d3:bb:6c:0e:aa:dd:4b:
6e:ca:66:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xhGP2fvmRRnBtk6RGJoZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OTVjOTYxN2NhNWE2YTNiZmYyNjNmYzE4Mzc5OTJmZDFh
YzQ3ZjIwHhcNMjUxMDE5MTQwMTAyWhcNMjUxMDIwMTQwMTAyWjAzMTEwLwYDVQQD
Eyg0ZjNhMDE2ODA1NjUzYTlkZDAzZjc0ZTYxODJmZjIxYmJiMjQ1NWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQI82gwv376sFpM/j+DJ03COTK33
tE/JvyYHIsEtY7NuIwBoww2pMt74NTS6ZzIXOwzkQ98jwUF3fCytB02Q+PGeT1LJ
4P3N/8ieGdaBj1/cSCZVF13cxxYNHfxbqvScEjCjJKrGD9oxMIYDa0AQ/CFZb5Fm
2eGRWE/EFy8KucufkjQK4QczACDdq9jESJlk+q/oN5d4MuRUjvOWVtD+DxB22o5/
sYsVDzoL8AY1tOOYCwKipvvF1EtokfB9iFulafppo4727a9QpVYvbNKEyHcFudsy
fJY7mLnzQrwiX/w4NU7YKapUjqP5aWkHFubb1rdCsGU2TcMPyk5lo14mPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE86AWgFZTqd0D905hgv8hu7JFWtMB8GA1UdIwQY
MBaAFOeVyWF8paajv/Jj/Bg3mS/RrEfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTVYSllYeWxwcU9fOG1QOEdEZVpMOUdzUl9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85ODZkZGUtNWY2OC00YzIxLWI1NDYt
ZDU0MGRmODg2YmFiLzEvNTVYSllYeWxwcU9fOG1QOEdEZVpMOUdzUl9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC85ODZkZGUtNWY2OC00YzIxLWI1NDYtZDU0MGRmODg2YmFi
LzEvNTVYSllYeWxwcU9fOG1QOEdEZVpMOUdzUl9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1Ag760U+
Sj4qMuR1muA037EgOG+XVFsN8jhHOKJ6/vgsQRAAqVoUz5S4G7ahJ5chCm0qlsyt
odK1Vuy6TkAUcOTX2sjsi4z7rIqMkO6MJdhUBjL+P8vzf2sJOe0RV7ePMFL2slqx
OfmZgqFjiPFvo2K2G2akxVfEeZyukSZBuVZHsGT00NqjEl9KXKr6DCvz+WPMB7rc
qO9vjpWinsSHKbGR7bsTyBsmUAwFmJwnrvSa+tlTXdLRxLL8Ih5BCMkPXzYSSIRE
EGaFItH6ZlembyKejQ5O2VCzuz1O52QfCVKUQR6163B98p3H/LvxFBCZqT+7MmzT
u2wOqt1LbspmOQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:41:57 2025 by rpki-client