Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
File: Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json)
Hash identifier: vYwBOVVEOYEtoNjDN7gw02fFEDUUXyCrpqgAdd3DGZ4=
Subject key identifier: 86:B0:2C:D4:9D:A9:6D:DA:B8:CA:26:42:65:4F:E6:87:74:2F:3D:94
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial: 0199FE4781B2DF15940F4B939A05F95B1E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
Manifest number: 0EB0
Signing time: Sun 19 Oct 2025 21:02:03 +0000
Manifest this update: Sun 19 Oct 2025 21:02:03 +0000
Manifest next update: Mon 20 Oct 2025 21:02:03 +0000
Files and hashes: 1: SKLs3SUJ6QhNbVJrjYVyYf81aEc.roa (hash: R9s9J4TIgAF+/QEDyhuyAA67g5wViBKHguVZOslEIHs=)
2: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: s7zBDzfJJLq+jPyQAq+eVA8U6cLodFPiJiFGApQq5Qg=)
3: rAM6r2SFYvSQGaseydRgOte_bds.roa (hash: RYGmm+YYhr7YTk+o6zMn3og3hxzFO1fF/P5WPNoHQX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:81:b2:df:15:94:0f:4b:93:9a:05:f9:5b:1e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Validity
Not Before: Oct 19 21:02:03 2025 GMT
Not After : Oct 20 21:02:03 2025 GMT
Subject: CN=86b02cd49da96ddab8ca2642654fe687742f3d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:91:3e:f5:77:f5:a6:15:a3:d2:b3:46:f3:
d6:c8:da:27:f8:fe:2a:e1:4a:11:ff:97:5d:24:20:
a3:52:82:e8:25:5d:4f:b0:9c:fe:36:c9:63:38:85:
47:96:53:27:f4:e0:8e:a4:2b:62:32:d5:18:16:7b:
73:e7:1f:91:eb:7c:4a:77:b2:fe:c3:ac:20:e4:fb:
ac:2b:61:be:f3:3b:76:90:80:58:a5:be:2c:ed:63:
20:99:a1:0e:45:5a:3e:7c:d0:56:05:0b:10:15:b8:
75:e0:a9:48:0d:82:fc:3e:25:c7:3f:a0:47:d5:e8:
46:7c:7d:b0:8c:69:cb:a9:f6:be:f7:bc:8c:05:e9:
9b:15:f6:62:c7:d6:f6:66:16:87:cf:f4:b8:42:10:
db:87:32:38:d6:e9:c1:c4:7c:48:11:3c:4c:ad:74:
e1:f5:86:d4:5f:f9:6e:02:3e:ef:30:87:c9:a4:58:
0c:cc:13:99:5d:38:9a:6f:c2:ed:ed:9a:b2:63:d0:
ea:cb:b2:04:df:54:c7:32:71:25:70:40:12:57:31:
07:90:ff:9b:ae:bf:63:ca:08:18:36:70:da:51:80:
d4:95:b5:1e:07:cf:e6:d4:0e:36:4f:6b:1c:a1:9e:
e5:ad:55:ea:6a:96:92:de:a7:fb:c0:a9:d2:16:37:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B0:2C:D4:9D:A9:6D:DA:B8:CA:26:42:65:4F:E6:87:74:2F:3D:94
X509v3 Authority Key Identifier:
keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:54:67:35:a7:7a:ea:1c:12:90:01:04:6c:da:cf:9e:75:96:
24:19:1f:b2:04:2d:05:bd:dc:75:aa:ad:15:78:59:c8:ea:56:
56:80:de:35:26:ef:f7:d9:25:90:ac:f2:f3:58:ef:61:2b:f9:
d6:7d:e6:52:12:aa:5a:8f:99:e2:86:2c:c2:a6:e4:32:56:48:
10:ee:b4:07:14:2a:9a:e8:65:69:46:64:1b:fc:25:77:8e:bd:
5a:bf:95:06:95:66:32:05:50:8f:16:f2:37:96:97:b8:72:56:
48:d1:a4:17:b3:7e:34:d9:43:db:fa:f0:89:53:79:b2:bb:33:
08:4a:2e:30:4b:00:08:39:03:74:7c:17:d9:13:15:ce:1d:4e:
4a:71:88:55:12:d6:70:ee:21:db:61:01:c1:24:78:23:26:fd:
6b:4f:a2:c2:ec:01:68:c3:95:13:60:f4:9c:ff:24:7d:4f:1e:
24:e2:46:2b:46:ef:d2:38:6c:9c:23:a4:2b:63:f0:85:33:b6:
56:9a:a7:b2:90:35:3e:d1:4e:bc:86:bd:5e:93:3e:da:b4:f9:
62:07:be:49:92:95:f6:4c:53:61:6a:d1:6e:84:3f:8f:72:00:
9d:48:91:62:b8:1f:e1:29:77:a9:f6:21:16:16:47:d9:c3:80:
b7:eb:8f:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+R4Gy3xWUD0uTmgX5Wx5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlN2M3NzM2OTQ1YzI5YTc3YmFjZDViMThiMGZmNTg3NTEx
MTdiYWQwHhcNMjUxMDE5MjEwMjAzWhcNMjUxMDIwMjEwMjAzWjAzMTEwLwYDVQQD
Eyg4NmIwMmNkNDlkYTk2ZGRhYjhjYTI2NDI2NTRmZTY4Nzc0MmYzZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj2RPvV39aYVo9KzRvPWyNon+P4q
4UoR/5ddJCCjUoLoJV1PsJz+NsljOIVHllMn9OCOpCtiMtUYFntz5x+R63xKd7L+
w6wg5PusK2G+8zt2kIBYpb4s7WMgmaEORVo+fNBWBQsQFbh14KlIDYL8PiXHP6BH
1ehGfH2wjGnLqfa+97yMBembFfZix9b2ZhaHz/S4QhDbhzI41unBxHxIETxMrXTh
9YbUX/luAj7vMIfJpFgMzBOZXTiab8Lt7ZqyY9Dqy7IE31THMnElcEASVzEHkP+b
rr9jyggYNnDaUYDUlbUeB8/m1A42T2scoZ7lrVXqapaS3qf7wKnSFjeAjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIawLNSdqW3auMomQmVP5od0Lz2UMB8GA1UdIwQY
MBaAFF58dzaUXCmne6zVsYsP9YdREXutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83YmRkMDctNmU1NS00YTA1LTlkMWIt
ZWVlZGQ5OWI4Y2M0LzEvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS83YmRkMDctNmU1NS00YTA1LTlkMWItZWVlZGQ5OWI4Y2M0
LzEvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFRnNad6
6hwSkAEEbNrPnnWWJBkfsgQtBb3cdaqtFXhZyOpWVoDeNSbv99klkKzy81jvYSv5
1n3mUhKqWo+Z4oYswqbkMlZIEO60BxQqmuhlaUZkG/wld469Wr+VBpVmMgVQjxby
N5aXuHJWSNGkF7N+NNlD2/rwiVN5srszCEouMEsACDkDdHwX2RMVzh1OSnGIVRLW
cO4h22EBwSR4Iyb9a0+iwuwBaMOVE2D0nP8kfU8eJOJGK0bv0jhsnCOkK2PwhTO2
VpqnspA1PtFOvIa9XpM+2rT5Yge+SZKV9kxTYWrRboQ/j3IAnUiRYrgf4Sl3qfYh
FhZH2cOAt+uPnA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:57 2025 by rpki-client