Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
File: xcgmUInL3eamxXnNd2tfgMD4rdQ.mft (raw, json)
Hash identifier: ToE3s7iDizJLvQJkpyF9cEJSDp4KzT+8G0q+A58ZoRg=
Subject key identifier: 4D:4C:F4:12:A1:60:9A:73:9D:C4:38:22:28:45:82:76:95:A0:0F:B1
Authority key identifier: C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4
Certificate issuer: /CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4
Certificate serial: 019A0C0217D609A950CC8A9529E4BB3E736D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
Manifest number: 0202
Signing time: Wed 22 Oct 2025 13:00:55 +0000
Manifest this update: Wed 22 Oct 2025 13:00:55 +0000
Manifest next update: Thu 23 Oct 2025 13:00:55 +0000
Files and hashes: 1: HnXYP_nGkSYGI2gsUnR5joaBv0k.roa (hash: QHASI9erDv03GyXaVaSPKxwrTHTkAuv0FPn5tlS8GC8=)
2: xcgmUInL3eamxXnNd2tfgMD4rdQ.crl (hash: +zVGXmo0km8uv0Y62hfbyrS3EOfPG/UpfU3BB84dS0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:02:17:d6:09:a9:50:cc:8a:95:29:e4:bb:3e:73:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4
Validity
Not Before: Oct 22 13:00:55 2025 GMT
Not After : Oct 23 13:00:55 2025 GMT
Subject: CN=4d4cf412a1609a739dc438222845827695a00fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d6:96:74:6a:ac:3e:ba:be:95:3f:a5:ab:07:
52:33:84:11:bb:66:d2:ed:a6:54:a2:73:f9:04:b7:
b8:58:f2:1b:73:b7:2b:5b:1b:43:e6:a0:0d:4e:c6:
7e:5c:08:12:60:10:89:c4:ab:0d:6c:c5:d0:8f:dd:
74:fa:cc:e5:74:b0:ac:de:34:70:46:d1:36:94:9b:
c8:00:07:fa:df:24:0d:a5:8d:8c:66:73:04:ea:e3:
37:75:57:0d:71:0b:bf:dc:e0:75:80:6b:c5:dd:8a:
d3:fa:0b:73:13:02:2b:89:ba:26:b5:89:ba:2e:32:
a8:3d:53:d4:5b:09:4c:58:2f:b1:a9:97:28:6f:12:
a6:4c:f3:96:7d:a4:43:f1:d6:29:60:2a:9d:0c:cc:
77:1b:1f:28:1e:d3:d1:52:70:ef:f7:c2:9a:44:1e:
2a:02:88:0a:b8:07:b3:09:ed:2d:e6:41:88:de:fb:
62:01:db:0d:1d:7f:7c:db:c6:aa:c4:5d:4d:9b:44:
95:f4:54:79:f8:ce:c1:57:ff:40:c2:60:b4:1c:be:
0d:80:fc:8a:0a:0c:59:32:7d:cd:9d:79:5a:b5:a8:
de:df:ba:47:e2:bf:d0:4b:2a:1f:f8:fa:a6:db:32:
0b:50:fc:e8:d0:ef:f7:b6:34:1c:7b:33:26:08:1d:
f0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4C:F4:12:A1:60:9A:73:9D:C4:38:22:28:45:82:76:95:A0:0F:B1
X509v3 Authority Key Identifier:
keyid:C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:11:42:c9:6f:0d:19:c8:ab:e0:44:0d:46:53:07:68:a0:91:
e2:bb:c4:ad:2f:b7:71:b4:c4:f5:76:02:8e:b5:e1:3d:30:14:
e7:39:6f:04:cd:fc:3f:9a:1d:be:88:30:1d:e0:53:5a:62:08:
7c:23:bd:21:58:09:1d:d7:8f:26:5e:22:5d:38:c2:8d:cb:4e:
af:f3:85:45:a0:49:f9:ed:41:dc:4f:92:8b:da:b9:a2:2e:1b:
4e:8a:8d:02:4f:a7:ae:1e:8c:cc:74:90:02:39:dc:d4:48:e1:
5e:7a:39:3c:0d:8e:12:9c:7b:50:14:b8:72:c1:28:e1:8b:7a:
a6:21:c8:85:b8:a0:95:65:79:0d:94:fa:99:d0:5b:59:95:14:
7f:30:b7:bb:32:40:08:34:51:d5:82:87:a8:a0:f8:d2:d0:2c:
18:1f:9b:bd:69:85:9d:82:48:57:60:0d:82:e7:74:7f:ad:e5:
cf:26:78:74:13:a4:69:d7:06:fc:27:0a:9d:c5:ca:5a:dd:b8:
2f:99:0c:80:28:58:f9:e1:48:48:2b:b4:50:9e:5a:e3:84:3f:
bc:15:e3:ad:b6:05:f3:76:11:bf:37:ba:e3:d8:cc:e9:88:87:
3a:2d:9f:48:f6:c9:16:bf:9b:a3:a9:1c:f0:34:b2:85:26:6d:
cf:cf:ab:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoMAhfWCalQzIqVKeS7PnNtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YzgyNjUwODljYmRkZTZhNmM1NzljZDc3NmI1ZjgwYzBm
OGFkZDQwHhcNMjUxMDIyMTMwMDU1WhcNMjUxMDIzMTMwMDU1WjAzMTEwLwYDVQQD
Eyg0ZDRjZjQxMmExNjA5YTczOWRjNDM4MjIyODQ1ODI3Njk1YTAwZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydaWdGqsPrq+lT+lqwdSM4QRu2bS
7aZUonP5BLe4WPIbc7crWxtD5qANTsZ+XAgSYBCJxKsNbMXQj910+szldLCs3jRw
RtE2lJvIAAf63yQNpY2MZnME6uM3dVcNcQu/3OB1gGvF3YrT+gtzEwIribomtYm6
LjKoPVPUWwlMWC+xqZcobxKmTPOWfaRD8dYpYCqdDMx3Gx8oHtPRUnDv98KaRB4q
AogKuAezCe0t5kGI3vtiAdsNHX9828aqxF1Nm0SV9FR5+M7BV/9AwmC0HL4NgPyK
CgxZMn3NnXlataje37pH4r/QSyof+Pqm2zILUPzo0O/3tjQcezMmCB3w0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1M9BKhYJpzncQ4IihFgnaVoA+xMB8GA1UdIwQY
MBaAFMXIJlCJy93mpsV5zXdrX4DA+K3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGNnbVVJbkwzZWFteFhuTmQydGZnTUQ0cmRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80OGM3ZWMtMGM3NS00MWM0LTg1YWEt
NDM4ODIwZmJhMjU0LzEveGNnbVVJbkwzZWFteFhuTmQydGZnTUQ0cmRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80OGM3ZWMtMGM3NS00MWM0LTg1YWEtNDM4ODIwZmJhMjU0
LzEveGNnbVVJbkwzZWFteFhuTmQydGZnTUQ0cmRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxFCyW8N
Gcir4EQNRlMHaKCR4rvErS+3cbTE9XYCjrXhPTAU5zlvBM38P5odvogwHeBTWmII
fCO9IVgJHdePJl4iXTjCjctOr/OFRaBJ+e1B3E+Si9q5oi4bToqNAk+nrh6MzHSQ
Ajnc1EjhXno5PA2OEpx7UBS4csEo4Yt6piHIhbiglWV5DZT6mdBbWZUUfzC3uzJA
CDRR1YKHqKD40tAsGB+bvWmFnYJIV2ANgud0f63lzyZ4dBOkadcG/CcKncXKWt24
L5kMgChY+eFISCu0UJ5a44Q/vBXjrbYF83YRvze649jM6YiHOi2fSPbJFr+bo6kc
8DSyhSZtz8+r6A==
-----END CERTIFICATE-----
Generated at Wed Oct 22 20:12:30 2025 by rpki-client