Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
File: 0_-XSe4i8Akle4nYNAzGT7QL_JE.mft (raw, json)
Hash identifier: uKMQULLgLFT1HBNNSTSVZ9IXFb8vJNJviTamwbDzECE=
Subject key identifier: DC:5E:3E:00:54:3B:63:66:84:12:C1:CF:03:F0:A8:23:21:BA:10:AB
Authority key identifier: D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
Certificate issuer: /CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Certificate serial: 0199FF5999E0A79F7B585B5DD5F0C441F5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
Manifest number: 02BA
Signing time: Mon 20 Oct 2025 02:01:26 +0000
Manifest this update: Mon 20 Oct 2025 02:01:26 +0000
Manifest next update: Tue 21 Oct 2025 02:01:26 +0000
Files and hashes: 1: 0_-XSe4i8Akle4nYNAzGT7QL_JE.crl (hash: 0WO7DRVHgCUwsJEtfRDOYf8YTGz+U6JJF8f6yaGULCk=)
2: dRZPS3rs-hWzMDlczYkRUwtGaGw.roa (hash: JG/JfRSVwBPsm5cDJaTLP2R3sGhruPS/YToSJOwZOkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:99:e0:a7:9f:7b:58:5b:5d:d5:f0:c4:41:f5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Validity
Not Before: Oct 20 02:01:26 2025 GMT
Not After : Oct 21 02:01:26 2025 GMT
Subject: CN=dc5e3e00543b63668412c1cf03f0a82321ba10ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:80:d4:86:d8:4d:a4:a3:95:94:57:98:7d:f4:
a9:98:b4:e9:e0:6e:69:21:3c:7c:7b:19:e5:14:b7:
07:1f:17:db:f7:a7:e8:24:9f:4c:13:44:25:10:cc:
1e:c4:46:82:e4:bf:3f:26:ca:78:a1:b5:66:f7:1c:
eb:4e:d0:40:45:9b:7f:b7:63:ee:5f:ab:64:58:09:
c9:7c:9d:7d:c7:2c:a4:97:d2:8c:d1:87:c1:81:29:
f3:7c:b4:39:9c:72:fd:c3:7b:a9:d2:7a:12:c1:4c:
66:0b:5e:16:cc:b5:ae:44:03:7a:c7:ab:df:ef:7b:
24:55:26:1e:f8:67:f6:29:ea:59:77:cf:15:5a:6c:
ff:c7:63:00:01:55:fb:46:0d:0f:9a:52:d3:79:5d:
0c:a6:ee:46:13:22:81:4f:2d:61:14:c9:99:6b:5b:
08:86:5a:81:f3:90:4c:5c:3b:3b:af:08:a2:55:39:
fa:90:4a:32:81:a9:58:9b:c8:b4:52:9d:56:b6:b3:
62:0f:44:d2:73:00:c0:f8:53:4d:e9:c7:f8:96:30:
98:57:9d:4b:07:b9:ce:0d:81:77:65:bd:05:19:5f:
bf:37:09:1a:d2:28:45:fe:4b:8d:81:ed:a2:54:5f:
3b:16:81:86:2a:83:32:82:50:bc:43:2e:b3:87:b3:
99:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5E:3E:00:54:3B:63:66:84:12:C1:CF:03:F0:A8:23:21:BA:10:AB
X509v3 Authority Key Identifier:
keyid:D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0c:55:89:b2:d6:bf:f1:18:10:92:1b:59:5a:4f:7a:f7:89:
5c:3f:80:e2:18:3f:fa:88:39:1f:48:f1:11:01:15:be:97:0a:
d1:df:80:fb:7e:e3:be:f9:f9:0d:08:e1:0f:e3:23:c3:e0:26:
b6:21:58:97:87:75:e4:52:d7:e7:55:db:13:6b:96:62:03:50:
d2:f9:44:31:69:88:d1:32:6b:8d:d7:c2:9e:2d:1f:26:31:4f:
04:fe:e9:3a:1c:bc:99:d4:53:f5:e3:57:16:f0:c2:99:1f:2d:
b0:84:78:b4:88:79:f5:3f:c8:f7:c8:16:75:f6:aa:02:3b:49:
7a:af:c7:4c:fd:b8:fc:85:da:b8:a7:5a:67:82:9d:a3:8b:8e:
b0:11:6f:83:e7:5d:69:d3:56:30:c2:db:19:07:b6:b2:17:33:
79:0d:31:99:7c:8d:2d:51:53:90:87:90:2f:35:03:3e:2e:67:
67:6b:94:1f:9c:d9:49:d5:11:f0:e4:e1:d5:d4:b4:f2:a8:a7:
85:2b:fa:61:97:b8:db:22:d7:47:fa:b7:62:77:7d:06:b0:f9:
46:a2:d4:5f:8d:c9:be:3f:cb:31:e3:86:93:3d:68:bd:39:8a:
61:54:21:89:3f:f1:9c:d1:29:8a:ff:4a:9e:1b:95:9f:8f:11:
9f:87:64:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WZngp597WFtd1fDEQfXuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZmY5NzQ5ZWUyMmYwMDkyNTdiODlkODM0MGNjNjRmYjQw
YmZjOTEwHhcNMjUxMDIwMDIwMTI2WhcNMjUxMDIxMDIwMTI2WjAzMTEwLwYDVQQD
EyhkYzVlM2UwMDU0M2I2MzY2ODQxMmMxY2YwM2YwYTgyMzIxYmExMGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IDUhthNpKOVlFeYffSpmLTp4G5p
ITx8exnlFLcHHxfb96foJJ9ME0QlEMwexEaC5L8/Jsp4obVm9xzrTtBARZt/t2Pu
X6tkWAnJfJ19xyykl9KM0YfBgSnzfLQ5nHL9w3up0noSwUxmC14WzLWuRAN6x6vf
73skVSYe+Gf2KepZd88VWmz/x2MAAVX7Rg0PmlLTeV0Mpu5GEyKBTy1hFMmZa1sI
hlqB85BMXDs7rwiiVTn6kEoygalYm8i0Up1WtrNiD0TScwDA+FNN6cf4ljCYV51L
B7nODYF3Zb0FGV+/Nwka0ihF/kuNge2iVF87FoGGKoMyglC8Qy6zh7OZCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxePgBUO2NmhBLBzwPwqCMhuhCrMB8GA1UdIwQY
MBaAFNP/l0nuIvAJJXuJ2DQMxk+0C/yRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81OTU3N2QtMmQ0ZC00MTFkLTg2ZmIt
MDBmYWVjYWM3ZGViLzEvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81OTU3N2QtMmQ0ZC00MTFkLTg2ZmItMDBmYWVjYWM3ZGVi
LzEvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANAxVibLW
v/EYEJIbWVpPeveJXD+A4hg/+og5H0jxEQEVvpcK0d+A+37jvvn5DQjhD+Mjw+Am
tiFYl4d15FLX51XbE2uWYgNQ0vlEMWmI0TJrjdfCni0fJjFPBP7pOhy8mdRT9eNX
FvDCmR8tsIR4tIh59T/I98gWdfaqAjtJeq/HTP24/IXauKdaZ4Kdo4uOsBFvg+dd
adNWMMLbGQe2shczeQ0xmXyNLVFTkIeQLzUDPi5nZ2uUH5zZSdUR8OTh1dS08qin
hSv6YZe42yLXR/q3Ynd9BrD5RqLUX43Jvj/LMeOGkz1ovTmKYVQhiT/xnNEpiv9K
nhuVn48Rn4dkeg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:21:09 2025 by rpki-client