Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
File: XuAEvvpVPds1Vk-3disF6yIuz5M.mft (raw, json)
Hash identifier: okcX74DfafbbBvBCe4SNnAxY7/BG4h/JmYfurRr3JdU=
Subject key identifier: 55:5F:4E:7A:F1:43:5F:8D:42:C0:22:05:94:1C:11:79:08:0D:94:6E
Authority key identifier: 5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
Certificate issuer: /CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Certificate serial: 0199624706502682EC960607365EDEF4C8F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
Manifest number: 0EF9
Signing time: Fri 19 Sep 2025 14:00:45 +0000
Manifest this update: Fri 19 Sep 2025 14:00:45 +0000
Manifest next update: Sat 20 Sep 2025 14:00:45 +0000
Files and hashes: 1: 5tqPEp3EliYZS2xI-t2SOYASA6Q.roa (hash: rrWZ9V7KWJ4Q+nTEuZg3LRcJ0iLHgZLsCePpW9vxZts=)
2: CFHgd4L73NmnKwbNZX4Ea5xUqNI.roa (hash: 1vwfxPtMAo6Ane/X/c4BMzTm00LQJy+F2i0HA+2GRDU=)
3: FNknYOM-2Xofk1XbcOJNM1rObAg.roa (hash: FASTd9f7x4x3qa5aRCBcwSFhMWBiMZ3cOy9OdE4lRwc=)
4: XuAEvvpVPds1Vk-3disF6yIuz5M.crl (hash: Yjv+uZWczfBccwkt6aq0KuBQON7WhGciVwIrgcVBTBA=)
5: eQGWfTu9bqp5iwzvWwAuNDQ4N3I.roa (hash: hzDVmxrumNi1ZIRQoc0ZsLrFlPxpdn6MZXTqnc7Rq58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:47:06:50:26:82:ec:96:06:07:36:5e:de:f4:c8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Validity
Not Before: Sep 19 14:00:45 2025 GMT
Not After : Sep 20 14:00:45 2025 GMT
Subject: CN=555f4e7af1435f8d42c02205941c1179080d946e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:20:ff:db:62:42:f5:6f:15:a3:c5:2c:99:ea:
03:3a:f2:ee:5e:34:d7:f4:2a:1a:4d:31:57:79:fe:
8b:00:e1:b5:a1:4a:7e:2c:ed:90:79:ff:c3:83:e1:
09:b6:41:21:04:b3:59:e5:fb:52:cf:8a:ab:50:3c:
45:a0:a4:fe:ef:9c:fb:26:4c:c7:55:6e:f4:1a:3f:
3a:29:1d:34:7a:55:7f:34:84:72:bb:3a:1d:09:1f:
01:60:43:b2:20:a0:25:b1:99:62:e8:52:51:3b:6a:
15:39:43:f5:cc:09:69:98:00:d3:49:1f:80:f2:73:
c2:a4:57:72:34:ed:de:c0:e9:89:d0:fa:f8:0d:c7:
01:da:51:85:f8:19:26:08:8b:fc:42:71:59:5b:e3:
78:73:56:da:82:b5:7d:ab:18:7c:c9:a1:de:7e:be:
e2:d8:04:3c:f1:04:a1:18:34:cb:48:e8:40:c9:78:
a4:52:a5:3c:81:b1:f7:ec:51:c8:4b:41:88:f2:c8:
96:d3:b5:94:69:67:b0:65:7f:c2:01:82:0a:cf:93:
0e:ec:5f:3b:37:29:09:e5:2f:fd:bc:69:82:a7:d6:
a7:92:18:c7:b4:f4:a4:a9:8d:2a:be:cb:78:f3:b1:
9b:ed:c5:da:0e:d4:3e:d4:9b:51:ab:67:a4:ca:be:
56:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5F:4E:7A:F1:43:5F:8D:42:C0:22:05:94:1C:11:79:08:0D:94:6E
X509v3 Authority Key Identifier:
keyid:5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6a:f1:ec:e7:e5:c9:5d:20:8e:f6:02:46:a0:f7:09:0c:7d:
7e:f0:8b:9d:a8:aa:07:e7:be:98:8d:99:23:59:52:be:bf:6f:
b3:28:04:99:fe:52:93:1c:43:c3:46:d6:2b:83:e0:7d:fd:78:
e3:2c:32:fa:5c:ee:db:f5:2b:a9:eb:fe:a9:9c:37:6a:4f:b4:
e2:cc:5f:28:6f:17:d1:4c:13:61:31:5e:56:de:18:66:47:b0:
08:67:88:bc:d0:2c:84:e8:b4:31:ea:d7:ec:d6:8c:f7:bf:35:
84:12:7d:c4:98:04:b0:07:16:e2:b9:ff:b8:b3:4f:f2:61:c5:
df:f5:11:dc:ae:a7:b1:9b:d2:48:4a:da:27:a4:a6:b0:87:69:
cf:b9:ec:23:90:0f:0f:91:69:40:5d:2d:8c:36:e2:49:ff:50:
4d:80:75:f5:5d:f0:63:5f:21:45:dd:7e:75:e3:ab:24:28:77:
4f:4f:fb:28:35:ad:55:ac:1d:88:af:05:7c:e0:c6:56:0d:a4:
56:5c:5e:9c:df:6f:bc:e2:61:cb:93:f4:73:ff:50:88:52:72:
e3:52:e2:30:e7:5a:90:03:fe:71:07:b9:7f:a6:cc:8c:c0:02:
79:23:6b:f9:1e:4c:69:4e:35:a1:8c:04:b4:69:b5:2a:fb:b0:
24:a5:d7:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZliRwZQJoLslgYHNl7e9Mj4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTAwNGJlZmE1NTNkZGIzNTU2NGZiNzc2MmIwNWViMjIy
ZWNmOTMwHhcNMjUwOTE5MTQwMDQ1WhcNMjUwOTIwMTQwMDQ1WjAzMTEwLwYDVQQD
Eyg1NTVmNGU3YWYxNDM1ZjhkNDJjMDIyMDU5NDFjMTE3OTA4MGQ5NDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCD/22JC9W8Vo8UsmeoDOvLuXjTX
9CoaTTFXef6LAOG1oUp+LO2Qef/Dg+EJtkEhBLNZ5ftSz4qrUDxFoKT+75z7JkzH
VW70Gj86KR00elV/NIRyuzodCR8BYEOyIKAlsZli6FJRO2oVOUP1zAlpmADTSR+A
8nPCpFdyNO3ewOmJ0Pr4DccB2lGF+BkmCIv8QnFZW+N4c1bagrV9qxh8yaHefr7i
2AQ88QShGDTLSOhAyXikUqU8gbH37FHIS0GI8siW07WUaWewZX/CAYIKz5MO7F87
NykJ5S/9vGmCp9ankhjHtPSkqY0qvst487Gb7cXaDtQ+1JtRq2ekyr5WmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVfTnrxQ1+NQsAiBZQcEXkIDZRuMB8GA1UdIwQY
MBaAFF7gBL76VT3bNVZPt3YrBesiLs+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVBRXZ2cFZQZHMxVmstM2Rpc0Y2eUl1ejVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zYzM1ZWEtN2M5YS00OGUyLWIzYjIt
ZTIyOGFhYjQ1MDE0LzEvWHVBRXZ2cFZQZHMxVmstM2Rpc0Y2eUl1ejVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zYzM1ZWEtN2M5YS00OGUyLWIzYjItZTIyOGFhYjQ1MDE0
LzEvWHVBRXZ2cFZQZHMxVmstM2Rpc0Y2eUl1ejVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWrx7Ofl
yV0gjvYCRqD3CQx9fvCLnaiqB+e+mI2ZI1lSvr9vsygEmf5SkxxDw0bWK4Pgff14
4ywy+lzu2/Urqev+qZw3ak+04sxfKG8X0UwTYTFeVt4YZkewCGeIvNAshOi0MerX
7NaM9781hBJ9xJgEsAcW4rn/uLNP8mHF3/UR3K6nsZvSSEraJ6SmsIdpz7nsI5AP
D5FpQF0tjDbiSf9QTYB19V3wY18hRd1+deOrJCh3T0/7KDWtVawdiK8FfODGVg2k
VlxenN9vvOJhy5P0c/9QiFJy41LiMOdakAP+cQe5f6bMjMACeSNr+R5MaU41oYwE
tGm1KvuwJKXXvA==
-----END CERTIFICATE-----
Generated at Fri Sep 19 18:06:43 2025 by rpki-client