Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
File: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft (raw, json)
Hash identifier: 71jb3FgE2rnT08TDLHfa9Nv4xxopTaigWGyOg0bf1IY=
Subject key identifier: 82:E1:AD:2C:4A:A7:A4:8B:36:70:9F:63:1A:67:6B:44:D5:BA:7F:E6
Authority key identifier: 5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
Certificate issuer: /CN=5ece10f13c46806926a67946cc6a1102aa09031a
Certificate serial: 0199FC58B332AFAD6733C7E195E0D6F55275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:35 +0000
Manifest this update: Sun 19 Oct 2025 12:01:35 +0000
Manifest next update: Mon 20 Oct 2025 12:01:35 +0000
Files and hashes: 1: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl (hash: jD/cJyhngHJLUruuUOzkmCz59jlAkUsEIFgLGmEYlg0=)
2: da7wWDdQpE5i6DJox7FoD-QEnrA.roa (hash: 93ok4fdBSnjw6qTtlazVRgZjQmCRM/yDSLFq6NFZNeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b3:32:af:ad:67:33:c7:e1:95:e0:d6:f5:52:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ece10f13c46806926a67946cc6a1102aa09031a
Validity
Not Before: Oct 19 12:01:35 2025 GMT
Not After : Oct 20 12:01:35 2025 GMT
Subject: CN=82e1ad2c4aa7a48b36709f631a676b44d5ba7fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:6d:a3:a8:f5:d7:fd:5b:ac:00:ab:98:17:
16:de:8f:3b:51:0d:9f:b1:30:e5:e8:77:a1:dd:02:
fe:c0:48:c3:86:42:d1:4d:86:8f:96:9a:38:cd:c3:
35:15:f7:ca:2c:61:5e:29:9f:b5:4d:26:e8:66:d3:
e8:26:7d:36:82:1e:3c:4a:89:8f:73:01:ef:26:42:
2d:72:2b:86:fe:56:4f:cc:58:23:bd:a7:8e:35:83:
78:c1:2c:00:b6:86:b2:91:c4:88:8f:a2:1e:82:b5:
91:14:35:cd:13:05:47:e9:4f:f4:6a:c9:50:b3:b7:
ce:91:b4:3a:c0:94:74:18:e3:f6:43:73:a6:7d:6b:
e8:48:44:fc:ba:df:13:c3:76:4b:eb:a9:5d:91:b0:
ee:0c:e4:3f:47:f5:0d:9f:af:7d:c6:56:9d:d8:8e:
4e:bf:b2:93:e3:5a:3b:df:55:9c:1d:74:4f:ed:29:
f7:a9:0a:a2:4d:f6:75:e1:5f:3c:64:89:78:e1:18:
45:70:4a:44:94:7b:fe:ed:d8:b0:7d:80:bc:14:ad:
10:16:0e:ca:cb:e9:f8:18:00:da:de:ca:e9:c5:ce:
1c:a7:07:f9:79:cf:0b:0e:bc:a2:08:73:82:a3:ff:
bb:1a:e4:4c:d0:99:3a:14:a1:a5:78:cb:40:af:dd:
03:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E1:AD:2C:4A:A7:A4:8B:36:70:9F:63:1A:67:6B:44:D5:BA:7F:E6
X509v3 Authority Key Identifier:
keyid:5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e6:1d:bc:56:71:9a:71:c7:0a:d0:a3:59:c0:8d:dc:e2:47:
46:e8:27:0b:75:a8:d9:8c:d2:bd:6c:5b:65:17:92:90:dd:b1:
5c:a0:ae:39:cc:97:13:53:82:d5:50:e8:b2:f4:2c:5b:65:d1:
28:b8:fd:96:c9:ea:86:78:ff:f0:a8:37:be:de:14:6f:54:7a:
fa:3e:fc:94:79:47:b9:39:d0:9e:a5:90:03:68:e6:65:fb:35:
02:e9:a8:a9:aa:13:fd:ea:bd:18:7e:a9:3e:e7:00:6b:27:7c:
7d:71:2e:82:b6:de:fc:9f:c1:a3:e4:5d:82:b1:07:21:d9:fd:
18:e2:9c:b0:fc:71:47:86:fb:cb:f3:2c:ac:fd:07:9b:00:aa:
d7:1b:b6:ff:9e:b7:31:26:16:f6:93:9a:c2:8a:27:e3:e5:f7:
7f:0a:86:53:b3:81:aa:18:0a:c6:69:80:b9:86:46:4a:33:be:
73:5f:85:c1:be:5f:33:a4:90:57:19:7f:53:70:3b:f4:e3:c4:
49:26:39:20:8a:01:ab:f6:7e:f5:3f:9d:a7:67:88:58:af:8d:
89:64:02:57:a9:69:0d:da:e8:08:48:63:06:37:b8:37:bc:b0:
8a:51:75:92:d6:81:ae:4c:d7:a5:13:ca:75:90:5f:4d:ed:5f:
67:08:2f:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WLMyr61nM8fhleDW9VJ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlY2UxMGYxM2M0NjgwNjkyNmE2Nzk0NmNjNmExMTAyYWEw
OTAzMWEwHhcNMjUxMDE5MTIwMTM1WhcNMjUxMDIwMTIwMTM1WjAzMTEwLwYDVQQD
Eyg4MmUxYWQyYzRhYTdhNDhiMzY3MDlmNjMxYTY3NmI0NGQ1YmE3ZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgJto6j11/1brACrmBcW3o87UQ2f
sTDl6Heh3QL+wEjDhkLRTYaPlpo4zcM1FffKLGFeKZ+1TSboZtPoJn02gh48SomP
cwHvJkItciuG/lZPzFgjvaeONYN4wSwAtoaykcSIj6IegrWRFDXNEwVH6U/0aslQ
s7fOkbQ6wJR0GOP2Q3OmfWvoSET8ut8Tw3ZL66ldkbDuDOQ/R/UNn699xlad2I5O
v7KT41o731WcHXRP7Sn3qQqiTfZ14V88ZIl44RhFcEpElHv+7diwfYC8FK0QFg7K
y+n4GADa3srpxc4cpwf5ec8LDryiCHOCo/+7GuRM0Jk6FKGleMtAr90D6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILhrSxKp6SLNnCfYxpna0TVun/mMB8GA1UdIwQY
MBaAFF7OEPE8RoBpJqZ5RsxqEQKqCQMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHM0UThUeEdnR2ttcG5sR3pHb1JBcW9KQXhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hZTMzMjMtMGE0OS00ZDdhLTg5NTUt
YjZmN2FlZDg1NmMwLzEvWHM0UThUeEdnR2ttcG5sR3pHb1JBcW9KQXhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hZTMzMjMtMGE0OS00ZDdhLTg5NTUtYjZmN2FlZDg1NmMw
LzEvWHM0UThUeEdnR2ttcG5sR3pHb1JBcW9KQXhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuOYdvFZx
mnHHCtCjWcCN3OJHRugnC3Wo2YzSvWxbZReSkN2xXKCuOcyXE1OC1VDosvQsW2XR
KLj9lsnqhnj/8Kg3vt4Ub1R6+j78lHlHuTnQnqWQA2jmZfs1AumoqaoT/eq9GH6p
PucAayd8fXEugrbe/J/Bo+RdgrEHIdn9GOKcsPxxR4b7y/MsrP0HmwCq1xu2/563
MSYW9pOawoon4+X3fwqGU7OBqhgKxmmAuYZGSjO+c1+Fwb5fM6SQVxl/U3A79OPE
SSY5IIoBq/Z+9T+dp2eIWK+NiWQCV6lpDdroCEhjBje4N7ywilF1ktaBrkzXpRPK
dZBfTe1fZwgvSg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:26 2025 by rpki-client