Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: sgZbJU+ttP6tGCkiDf8sKB5TnhLee7Twq+kMG/XrHtc=
Subject key identifier: DB:C1:CE:AA:28:6D:05:7D:FF:62:F7:26:2B:44:36:91:F6:93:DD:EB
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 019A1F1A889386131680AED4B8B28D9B04CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 0A16
Signing time: Sun 26 Oct 2025 06:00:23 +0000
Manifest this update: Sun 26 Oct 2025 06:00:23 +0000
Manifest next update: Mon 27 Oct 2025 06:00:23 +0000
Files and hashes: 1: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: YXzW0AD7hP/PZhmI1iRHlJsVt6YU2H8czTKW5Pr59iE=)
2: fYKamMDotNpG3aOBQiK2OsMYSYg.roa (hash: uPulFIQs0lwohOsO0wsrbiYG/acFSaW8YdBiwrRbEhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1a:88:93:86:13:16:80:ae:d4:b8:b2:8d:9b:04:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: Oct 26 06:00:23 2025 GMT
Not After : Oct 27 06:00:23 2025 GMT
Subject: CN=dbc1ceaa286d057dff62f7262b443691f693ddeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:fd:19:0c:67:67:51:dc:56:4c:b6:b7:ff:
ce:87:f7:03:70:4d:72:71:94:7e:3f:b3:8a:8b:a1:
ce:c1:b0:34:cd:d1:f9:7a:42:9d:fe:e2:7e:96:32:
c6:99:b2:5e:77:37:a7:09:23:13:dc:fa:92:5e:b4:
e9:87:26:5c:93:bc:c1:ec:3f:01:7e:ee:87:69:4e:
54:74:e3:d9:a7:05:11:3f:a4:a8:bf:4f:35:3d:04:
64:3f:de:f4:78:35:e2:80:52:9d:f5:dc:5c:62:69:
0a:8c:c9:8f:98:a1:61:51:74:81:df:76:34:01:74:
e2:17:58:0b:a2:9a:89:e3:dc:24:b5:67:04:bd:c9:
80:cc:31:8b:b1:a4:62:ca:a8:a4:6b:7e:3d:7e:f7:
80:6d:d7:4c:31:e1:75:71:d0:92:6a:0f:a1:e9:e6:
0b:9a:b2:75:69:d4:4d:ef:0e:69:00:18:7b:b1:cb:
e8:56:a3:27:47:6f:5f:1c:1e:ee:08:18:94:41:0f:
7a:50:e1:a2:c3:26:be:ec:e0:d9:46:50:bc:cf:b9:
34:bd:85:8f:a4:97:20:a7:b9:ed:e3:2e:7d:fe:46:
cd:70:25:1c:91:df:09:c4:37:51:54:04:6c:01:49:
89:f1:0b:61:e1:7c:9d:dd:14:c1:03:64:d5:1e:dc:
8b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C1:CE:AA:28:6D:05:7D:FF:62:F7:26:2B:44:36:91:F6:93:DD:EB
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e5:19:2a:4e:ed:eb:b1:ce:15:17:ab:c6:09:5d:0f:e4:0f:
cb:db:aa:12:6c:34:57:d6:82:7f:0c:60:b4:fa:f3:8e:fb:5c:
1f:55:b3:27:53:2c:4d:65:3d:65:53:0b:48:3f:c1:51:7c:76:
b8:7d:61:5c:7a:bf:20:4d:d8:96:0d:9e:4d:a0:ad:89:67:ce:
24:dd:41:59:6d:32:84:ee:f0:92:84:cb:d2:1d:e2:f7:73:97:
00:3e:07:60:df:f7:a3:5e:5f:f9:cc:6c:c4:80:26:38:92:e3:
ef:af:b5:89:a4:d8:d2:e5:ce:9e:9e:d3:14:66:55:27:e4:0e:
e0:b0:39:83:dd:19:86:fe:96:15:a6:8a:4c:88:9e:93:f3:1e:
99:e4:1b:d9:5e:ff:54:34:5f:ef:db:05:59:73:56:34:36:50:
da:f4:6b:b4:00:dd:11:46:a2:9b:8d:43:80:8c:fc:64:62:08:
98:43:ab:7c:d1:d4:8c:7d:6e:97:81:30:1b:f6:ed:fb:03:05:
fe:cd:4b:69:b8:bf:97:f7:6b:34:27:d5:9a:c7:24:7c:47:11:
38:33:a0:6d:7e:7a:28:d0:9e:4d:72:83:b4:06:f9:dd:0c:2e:
78:df:cf:8a:d8:d8:33:59:ad:5d:ca:d3:9c:72:d4:c8:1f:04:
bd:59:34:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofGoiThhMWgK7UuLKNmwTOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNGQ2MzExNjZlOGVlZGU3ODcyZWFkOGFiOWE4MWFkYzg3
N2Q0ZDEwHhcNMjUxMDI2MDYwMDIzWhcNMjUxMDI3MDYwMDIzWjAzMTEwLwYDVQQD
EyhkYmMxY2VhYTI4NmQwNTdkZmY2MmY3MjYyYjQ0MzY5MWY2OTNkZGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiP9GQxnZ1HcVky2t//Oh/cDcE1y
cZR+P7OKi6HOwbA0zdH5ekKd/uJ+ljLGmbJedzenCSMT3PqSXrTphyZck7zB7D8B
fu6HaU5UdOPZpwURP6Sov081PQRkP970eDXigFKd9dxcYmkKjMmPmKFhUXSB33Y0
AXTiF1gLopqJ49wktWcEvcmAzDGLsaRiyqika349fveAbddMMeF1cdCSag+h6eYL
mrJ1adRN7w5pABh7scvoVqMnR29fHB7uCBiUQQ96UOGiwya+7ODZRlC8z7k0vYWP
pJcgp7nt4y59/kbNcCUckd8JxDdRVARsAUmJ8Qth4Xyd3RTBA2TVHtyLqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvBzqoobQV9/2L3JitENpH2k93rMB8GA1UdIwQY
MBaAFF1NYxFm6O7eeHLq2Kuaga3Id9TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTct
ZmEzNmZjM2I3Mzc2LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTctZmEzNmZjM2I3Mzc2
LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOUZKk7t
67HOFRerxgldD+QPy9uqEmw0V9aCfwxgtPrzjvtcH1WzJ1MsTWU9ZVMLSD/BUXx2
uH1hXHq/IE3Ylg2eTaCtiWfOJN1BWW0yhO7wkoTL0h3i93OXAD4HYN/3o15f+cxs
xIAmOJLj76+1iaTY0uXOnp7TFGZVJ+QO4LA5g90Zhv6WFaaKTIiek/MemeQb2V7/
VDRf79sFWXNWNDZQ2vRrtADdEUaim41DgIz8ZGIImEOrfNHUjH1ul4EwG/bt+wMF
/s1Labi/l/drNCfVmsckfEcRODOgbX56KNCeTXKDtAb53QwueN/PitjYM1mtXcrT
nHLUyB8EvVk0Jg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 09:26:47 2025 by rpki-client