Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
File: XqFlPhd6opVUAIBcjHW9DWhYOvw.mft (raw, json)
Hash identifier: 82bcr0iv7074ZaKa5sLdzc2ejkUVljXsQepwP8uYuK4=
Subject key identifier: 4C:AA:2F:9E:62:BB:0E:AE:57:D3:E8:D1:99:99:44:DB:20:6B:00:48
Authority key identifier: 5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
Certificate issuer: /CN=5ea1653e177aa2955400805c8c75bd0d68583afc
Certificate serial: 019A71EEAC181C74F03E9102E3C27B1BDD51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
Manifest number: 0BAF
Signing time: Tue 11 Nov 2025 08:00:58 +0000
Manifest this update: Tue 11 Nov 2025 08:00:58 +0000
Manifest next update: Wed 12 Nov 2025 08:00:58 +0000
Files and hashes: 1: XqFlPhd6opVUAIBcjHW9DWhYOvw.crl (hash: FuEGO1xv5TxrHgjFlgi/L43akyOZv+MC8OO4gaF0Wcs=)
2: pG0gZB0nkw3GnTji0o-IVbuNrD4.roa (hash: viA8g+053tZ6I/BKlBgt30tnVs0+WwkriBcMwHPLKm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ac:18:1c:74:f0:3e:91:02:e3:c2:7b:1b:dd:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea1653e177aa2955400805c8c75bd0d68583afc
Validity
Not Before: Nov 11 08:00:58 2025 GMT
Not After : Nov 12 08:00:58 2025 GMT
Subject: CN=4caa2f9e62bb0eae57d3e8d1999944db206b0048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3d:4f:27:4b:d6:e8:12:97:5f:d5:65:d3:0a:
ea:51:0a:d6:de:11:75:1e:99:b5:af:ee:1e:d5:7e:
6f:37:78:e3:38:28:f2:bd:4a:7f:6c:d9:2e:41:cc:
7a:ed:e6:1f:0d:ac:ab:9b:d9:f4:39:c7:f4:20:4d:
11:e6:77:40:4d:10:37:b9:67:5e:15:e4:c1:8c:f2:
a4:0e:85:62:cf:7b:c9:f1:b0:f9:c4:70:d4:76:fc:
b7:3c:4c:a6:77:9f:59:1b:07:34:32:0e:9e:0e:29:
df:f3:a3:e2:b9:dd:4d:a6:8f:4b:4b:4a:ac:1f:75:
9c:df:34:6c:eb:95:ff:46:79:c5:51:a7:a2:b2:d6:
77:0e:af:c0:cb:fe:d6:a2:99:c3:4b:d7:66:4d:40:
a9:84:d3:e9:dd:d1:55:da:66:7d:7b:2d:40:8e:42:
82:69:d1:0b:4f:3e:20:5a:27:1d:ef:b4:b1:72:0e:
85:73:6a:10:82:83:9e:55:10:08:b9:a3:45:0e:6b:
69:9e:e4:f5:f9:f3:28:ff:f9:11:4f:9b:13:b4:7e:
78:17:3d:91:9f:f4:7a:fa:97:75:d7:30:c7:7a:3d:
e9:9c:04:cf:7c:a9:95:8e:31:e2:bf:d5:73:b1:b0:
3c:36:31:04:2b:05:cf:b6:fd:fa:7d:74:d6:b4:e5:
56:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AA:2F:9E:62:BB:0E:AE:57:D3:E8:D1:99:99:44:DB:20:6B:00:48
X509v3 Authority Key Identifier:
keyid:5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6e:6f:30:10:97:4c:75:bb:a9:6d:36:da:fc:00:e2:b6:56:
0b:7f:49:08:93:e6:8a:40:0e:ba:55:4b:f7:85:81:1a:81:1b:
ed:d2:de:a1:39:1b:05:4e:1d:fd:52:1a:cc:61:b7:2a:5f:09:
2c:cc:11:05:1a:ac:ad:9a:30:30:43:7a:61:e0:3f:1a:d4:2d:
1a:5e:06:57:80:31:45:81:f2:48:ce:30:f2:b1:0c:17:f4:3e:
8b:84:a0:d4:d4:59:c3:64:83:ad:5d:82:b5:24:9f:30:c3:a4:
22:fe:b3:b3:3d:7d:ac:18:cb:e3:d0:11:c8:f1:5b:19:83:ba:
46:bc:af:b4:07:46:52:d6:7e:80:72:7a:d2:cf:7b:4b:57:be:
bc:19:ee:3d:a1:2b:69:08:01:57:91:ee:64:03:a7:67:a9:0f:
08:2b:84:90:18:14:9f:6f:6a:d3:a4:16:d4:1b:d2:55:34:fc:
c8:77:52:d6:15:d0:fe:50:de:88:4a:39:aa:54:e5:1f:44:fe:
a0:da:05:83:1e:5c:69:d1:ed:25:85:ac:e4:ad:e4:1b:fd:c0:
7d:66:46:ad:58:8b:2c:2a:a1:52:98:b8:b7:e7:a1:86:39:1e:
b2:13:a5:7d:9a:ee:65:de:29:1d:ee:81:8d:56:4d:b2:e0:28:
45:3c:47:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7qwYHHTwPpEC48J7G91RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYTE2NTNlMTc3YWEyOTU1NDAwODA1YzhjNzViZDBkNjg1
ODNhZmMwHhcNMjUxMTExMDgwMDU4WhcNMjUxMTEyMDgwMDU4WjAzMTEwLwYDVQQD
Eyg0Y2FhMmY5ZTYyYmIwZWFlNTdkM2U4ZDE5OTk5NDRkYjIwNmIwMDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z1PJ0vW6BKXX9Vl0wrqUQrW3hF1
Hpm1r+4e1X5vN3jjOCjyvUp/bNkuQcx67eYfDayrm9n0Ocf0IE0R5ndATRA3uWde
FeTBjPKkDoViz3vJ8bD5xHDUdvy3PEymd59ZGwc0Mg6eDinf86Piud1Npo9LS0qs
H3Wc3zRs65X/RnnFUaeistZ3Dq/Ay/7WopnDS9dmTUCphNPp3dFV2mZ9ey1AjkKC
adELTz4gWicd77Sxcg6Fc2oQgoOeVRAIuaNFDmtpnuT1+fMo//kRT5sTtH54Fz2R
n/R6+pd11zDHej3pnATPfKmVjjHiv9VzsbA8NjEEKwXPtv36fXTWtOVWOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyqL55iuw6uV9Po0ZmZRNsgawBIMB8GA1UdIwQY
MBaAFF6hZT4XeqKVVACAXIx1vQ1oWDr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHFGbFBoZDZvcFZVQUlCY2pIVzlEV2hZT3Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hNGFmMTUtN2ZkZC00NWE0LWExNzIt
MWRmOGZhMjBmYTllLzEvWHFGbFBoZDZvcFZVQUlCY2pIVzlEV2hZT3Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9hNGFmMTUtN2ZkZC00NWE0LWExNzItMWRmOGZhMjBmYTll
LzEvWHFGbFBoZDZvcFZVQUlCY2pIVzlEV2hZT3Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP25vMBCX
THW7qW022vwA4rZWC39JCJPmikAOulVL94WBGoEb7dLeoTkbBU4d/VIazGG3Kl8J
LMwRBRqsrZowMEN6YeA/GtQtGl4GV4AxRYHySM4w8rEMF/Q+i4Sg1NRZw2SDrV2C
tSSfMMOkIv6zsz19rBjL49ARyPFbGYO6RryvtAdGUtZ+gHJ60s97S1e+vBnuPaEr
aQgBV5HuZAOnZ6kPCCuEkBgUn29q06QW1BvSVTT8yHdS1hXQ/lDeiEo5qlTlH0T+
oNoFgx5cadHtJYWs5K3kG/3AfWZGrViLLCqhUpi4t+ehhjkeshOlfZruZd4pHe6B
jVZNsuAoRTxHzg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:20 2025 by rpki-client