Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.mft
File: XEzh8ZMxT2k5vxw_nawjafYpWFo.mft (raw, json)
Hash identifier: GzZoGf+gWNhvEXD77vkQuvp3/Gq+IHnQl1FbBWbDVAo=
Subject key identifier: EA:34:23:86:23:5C:DA:B5:87:27:4D:EF:94:2A:51:C5:BF:EE:D8:00
Authority key identifier: 5C:4C:E1:F1:93:31:4F:69:39:BF:1C:3F:9D:AC:23:69:F6:29:58:5A
Certificate issuer: /CN=5c4ce1f193314f6939bf1c3f9dac2369f629585a
Certificate serial: 019A221BF23DB63B97524613269A1FED704E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEzh8ZMxT2k5vxw_nawjafYpWFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 20:00:47 +0000
Manifest this update: Sun 26 Oct 2025 20:00:47 +0000
Manifest next update: Mon 27 Oct 2025 20:00:47 +0000
Files and hashes: 1: NeVlE-PzPHn5ppNlSgj87PhylgM.roa (hash: +i1WA9cuFFrQg1WFh0BGIYlKWMIvdmOqwrDe9C8B0aM=)
2: XEzh8ZMxT2k5vxw_nawjafYpWFo.crl (hash: bDAfYCWSm4LRkZveYtBLSPefS438hbZNOSfBJs81Lg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEzh8ZMxT2k5vxw_nawjafYpWFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:f2:3d:b6:3b:97:52:46:13:26:9a:1f:ed:70:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4ce1f193314f6939bf1c3f9dac2369f629585a
Validity
Not Before: Oct 26 20:00:47 2025 GMT
Not After : Oct 27 20:00:47 2025 GMT
Subject: CN=ea342386235cdab587274def942a51c5bfeed800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:e5:a6:05:ee:5f:94:e2:b4:0f:ba:f6:77:
e3:14:c4:c3:58:39:ff:1a:8f:ca:d7:34:b9:8b:ce:
74:91:ac:57:be:09:ee:28:61:29:8b:e6:49:68:2e:
95:ce:57:05:55:90:33:c8:b3:9e:b7:88:1d:0b:dd:
b6:0e:b5:f1:73:e0:a4:51:23:c5:56:88:74:a5:f2:
9c:06:1b:56:cb:19:46:94:90:b1:60:52:46:52:25:
22:11:76:22:0a:e7:8c:06:cd:9a:34:e3:28:eb:8d:
f9:6c:1a:d8:4e:1f:0d:8b:f0:16:7b:a4:02:c0:c9:
e8:f5:55:0c:1a:7e:66:da:d4:76:84:ea:5f:55:70:
6f:87:69:e6:a0:74:86:05:4e:1f:9c:82:ec:41:6a:
55:c7:ca:12:2f:3a:19:a4:ab:16:00:ac:7c:33:66:
d6:ca:4a:67:6c:89:85:29:83:e3:a7:a3:45:03:e7:
38:07:72:65:c8:2c:6c:fe:21:51:77:2e:63:1b:4c:
7d:04:90:7a:8c:a7:26:e9:68:4d:75:18:94:23:b7:
a7:cb:b7:b4:bf:11:a7:cd:8a:5c:16:55:66:45:3a:
c8:8f:49:dd:21:4c:28:03:dd:93:07:76:18:99:e1:
f9:89:64:67:00:28:4f:a8:b8:5f:4c:dd:d8:68:17:
0f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:34:23:86:23:5C:DA:B5:87:27:4D:EF:94:2A:51:C5:BF:EE:D8:00
X509v3 Authority Key Identifier:
keyid:5C:4C:E1:F1:93:31:4F:69:39:BF:1C:3F:9D:AC:23:69:F6:29:58:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEzh8ZMxT2k5vxw_nawjafYpWFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:47:3b:1c:a8:28:d5:8d:64:64:66:40:c3:61:b2:80:ed:3b:
8c:c6:ba:9f:d6:eb:12:a2:7a:b9:2e:80:78:e4:7b:62:f3:75:
17:50:97:85:e5:1f:8f:76:a3:28:5f:2f:2c:2c:da:36:be:f5:
23:73:0b:b7:f2:3b:f4:94:c2:94:ea:7c:bf:83:7a:b7:4a:7f:
10:f2:c5:0e:df:27:12:71:62:4a:01:54:b2:14:2d:c7:51:04:
f0:54:63:2a:86:92:92:1c:fe:3d:e0:3d:54:22:f0:4b:39:e9:
dc:da:b7:0e:36:46:77:b5:f0:78:d1:79:34:a8:c7:ee:d4:9c:
6e:31:93:58:7d:91:6e:a5:25:bf:53:fb:ce:8b:57:77:76:87:
d4:6e:a4:15:57:a2:7f:b4:03:5c:04:c5:08:7e:77:26:70:74:
c2:a3:3b:5d:00:ba:c9:35:b8:be:f3:1e:fb:50:a4:1a:76:a3:
73:43:38:5e:29:f0:00:0c:75:a9:ac:99:cb:81:28:5f:4a:be:
88:73:ee:f8:d9:24:33:15:46:51:98:e7:c0:1f:15:6d:2c:23:
58:e5:d0:99:c2:eb:8d:a5:9a:5b:6d:55:09:e7:ce:06:f3:3c:
3d:44:28:16:c1:d9:34:8d:08:67:2a:0e:07:cc:0c:a3:bc:6e:
ac:87:40:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiG/I9tjuXUkYTJpof7XBOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNGNlMWYxOTMzMTRmNjkzOWJmMWMzZjlkYWMyMzY5ZjYy
OTU4NWEwHhcNMjUxMDI2MjAwMDQ3WhcNMjUxMDI3MjAwMDQ3WjAzMTEwLwYDVQQD
EyhlYTM0MjM4NjIzNWNkYWI1ODcyNzRkZWY5NDJhNTFjNWJmZWVkODAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZblpgXuX5TitA+69nfjFMTDWDn/
Go/K1zS5i850kaxXvgnuKGEpi+ZJaC6VzlcFVZAzyLOet4gdC922DrXxc+CkUSPF
Voh0pfKcBhtWyxlGlJCxYFJGUiUiEXYiCueMBs2aNOMo6435bBrYTh8Ni/AWe6QC
wMno9VUMGn5m2tR2hOpfVXBvh2nmoHSGBU4fnILsQWpVx8oSLzoZpKsWAKx8M2bW
ykpnbImFKYPjp6NFA+c4B3JlyCxs/iFRdy5jG0x9BJB6jKcm6WhNdRiUI7eny7e0
vxGnzYpcFlVmRTrIj0ndIUwoA92TB3YYmeH5iWRnAChPqLhfTN3YaBcPdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOo0I4YjXNq1hydN75QqUcW/7tgAMB8GA1UdIwQY
MBaAFFxM4fGTMU9pOb8cP52sI2n2KVhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEV6aDhaTXhUMms1dnh3X25hd2phZllwV0ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kYmY1MDItOWYzMS00ZDcwLTg3ZDQt
ZTA2NmQwMjJlOTI3LzEvWEV6aDhaTXhUMms1dnh3X25hd2phZllwV0ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9kYmY1MDItOWYzMS00ZDcwLTg3ZDQtZTA2NmQwMjJlOTI3
LzEvWEV6aDhaTXhUMms1dnh3X25hd2phZllwV0ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACEc7HKgo
1Y1kZGZAw2GygO07jMa6n9brEqJ6uS6AeOR7YvN1F1CXheUfj3ajKF8vLCzaNr71
I3MLt/I79JTClOp8v4N6t0p/EPLFDt8nEnFiSgFUshQtx1EE8FRjKoaSkhz+PeA9
VCLwSznp3Nq3DjZGd7XweNF5NKjH7tScbjGTWH2RbqUlv1P7zotXd3aH1G6kFVei
f7QDXATFCH53JnB0wqM7XQC6yTW4vvMe+1CkGnajc0M4XinwAAx1qayZy4EoX0q+
iHPu+NkkMxVGUZjnwB8VbSwjWOXQmcLrjaWaW21VCefOBvM8PUQoFsHZNI0IZyoO
B8wMo7xurIdAyg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 00:32:02 2025 by rpki-client