Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: pRif5vsTkg79ac2ZMZ2zTDFhL8r9j489kpIKTuXeVeo=
Subject key identifier: 1E:0D:86:FE:DD:4C:E0:3C:C8:BB:FB:6D:79:0D:35:9B:D4:4A:6D:5A
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 019933EDA9CD78DFED387EBDD1541CA65704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 160B
Signing time: Wed 10 Sep 2025 14:00:37 +0000
Manifest this update: Wed 10 Sep 2025 14:00:37 +0000
Manifest next update: Thu 11 Sep 2025 14:00:37 +0000
Files and hashes: 1: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: jshUQ+p6Ir4XRbuCk0GeL63a8a5lB06+IKirVyFRdp0=)
2: uWnagnV7ph6W305lDhQcUtu8iOA.roa (hash: O2rllaolJLmB6wHK4WL6QTUawzuqbXsQObcxgCsZ0L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ed:a9:cd:78:df:ed:38:7e:bd:d1:54:1c:a6:57:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Sep 10 14:00:37 2025 GMT
Not After : Sep 11 14:00:37 2025 GMT
Subject: CN=1e0d86fedd4ce03cc8bbfb6d790d359bd44a6d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:fa:36:6d:ab:c2:09:a7:cd:82:f6:9b:02:
42:bd:d7:6d:a6:74:46:13:c7:df:a6:c7:c1:af:19:
99:69:b8:2f:fd:d0:b1:cc:33:91:fe:cb:fa:2e:97:
bc:00:1b:16:d5:67:bb:12:a1:37:62:a2:8d:13:3b:
2d:c2:bd:3b:50:95:43:a7:48:57:94:db:39:b8:30:
d6:95:85:89:ac:29:6c:21:c4:05:bd:bb:97:90:57:
ae:27:71:9f:2c:be:f5:ee:fa:53:ae:14:cf:fd:bc:
db:24:3a:40:5a:e4:bf:3d:b0:cb:64:11:af:0e:9b:
09:e8:87:eb:2e:b9:9f:7b:6d:49:c9:fc:62:8d:0e:
0e:ee:65:93:0f:fe:15:6c:b1:90:22:f6:86:fc:b6:
2e:38:2c:4c:46:2c:45:8c:c2:bf:c5:cf:c6:82:df:
6a:5f:a1:9c:43:f5:06:47:3c:e3:d0:9d:f6:0a:c2:
57:41:c5:a2:3a:88:48:6d:97:74:0d:5c:11:0d:45:
be:7b:96:1f:96:f7:f9:d1:72:ed:d5:be:5c:31:b8:
de:41:65:c2:5b:c2:5c:10:45:e2:ee:3b:d7:de:be:
7a:6a:94:d3:d0:2f:3d:81:34:57:52:a1:a8:54:7b:
bb:fd:7d:2f:08:ab:bd:cd:b9:26:df:b1:53:2d:3f:
09:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0D:86:FE:DD:4C:E0:3C:C8:BB:FB:6D:79:0D:35:9B:D4:4A:6D:5A
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e3:07:97:0c:af:31:4d:9d:7c:b4:5d:cd:fe:5b:9a:85:e9:
28:2e:6e:a7:42:de:e5:fb:35:4f:11:60:dd:15:b3:a1:a7:ae:
bf:de:3f:fc:f1:d0:da:11:83:83:78:6f:62:5a:0c:f9:6f:91:
f5:01:59:da:a6:18:bb:bf:60:64:b5:de:ab:7e:49:15:55:03:
c0:bd:6b:d4:93:65:a1:f5:8c:d6:e0:4e:18:49:b5:68:4f:5c:
19:55:83:66:1d:d4:5c:7e:77:46:73:b4:b5:ab:67:8f:cf:c8:
9a:30:7c:84:e7:9f:d2:54:7b:1a:ff:a0:4a:41:b8:80:7a:c8:
e0:58:ff:f6:ae:65:3d:e4:c2:d3:62:75:da:41:e0:93:71:08:
2d:97:08:f8:28:fb:ae:14:68:e1:c1:7a:41:d3:85:26:5a:bc:
65:e3:59:f4:f4:92:21:94:8f:08:bf:f1:84:6e:4b:ab:5a:cf:
ce:3b:43:12:7e:2d:81:21:2e:f8:e0:32:6e:ab:f3:e1:a2:c6:
8d:8a:6e:e8:cc:6d:96:d6:8a:12:49:88:9f:d2:34:1d:af:ec:
02:6b:51:ee:81:6e:e3:dd:04:ee:cc:df:af:92:a1:89:a6:7e:
15:13:e0:86:ae:d0:7f:08:2f:ac:9a:f0:7b:93:67:96:61:b0:
af:40:f7:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkz7anNeN/tOH690VQcplcEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZDY5MTBjZjFlMmUyYjFjYTM0NzNjNGI3ZDA5MjAyMGU3
YjdjNjEwHhcNMjUwOTEwMTQwMDM3WhcNMjUwOTExMTQwMDM3WjAzMTEwLwYDVQQD
EygxZTBkODZmZWRkNGNlMDNjYzhiYmZiNmQ3OTBkMzU5YmQ0NGE2ZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBX6Nm2rwgmnzYL2mwJCvddtpnRG
E8ffpsfBrxmZabgv/dCxzDOR/sv6Lpe8ABsW1We7EqE3YqKNEzstwr07UJVDp0hX
lNs5uDDWlYWJrClsIcQFvbuXkFeuJ3GfLL717vpTrhTP/bzbJDpAWuS/PbDLZBGv
DpsJ6IfrLrmfe21JyfxijQ4O7mWTD/4VbLGQIvaG/LYuOCxMRixFjMK/xc/Ggt9q
X6GcQ/UGRzzj0J32CsJXQcWiOohIbZd0DVwRDUW+e5Yflvf50XLt1b5cMbjeQWXC
W8JcEEXi7jvX3r56apTT0C89gTRXUqGoVHu7/X0vCKu9zbkm37FTLT8J6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4Nhv7dTOA8yLv7bXkNNZvUSm1aMB8GA1UdIwQY
MBaAFFzWkQzx4uKxyjRzxLfQkgIOe3xhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE5hUkRQSGk0ckhLTkhQRXQ5Q1NBZzU3ZkdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xZDJiODctMGRlMy00ZjkzLWFkNjQt
MTcyYzYwYjNlMzZkLzEvWE5hUkRQSGk0ckhLTkhQRXQ5Q1NBZzU3ZkdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8xZDJiODctMGRlMy00ZjkzLWFkNjQtMTcyYzYwYjNlMzZk
LzEvWE5hUkRQSGk0ckhLTkhQRXQ5Q1NBZzU3ZkdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+MHlwyv
MU2dfLRdzf5bmoXpKC5up0Le5fs1TxFg3RWzoaeuv94//PHQ2hGDg3hvYloM+W+R
9QFZ2qYYu79gZLXeq35JFVUDwL1r1JNlofWM1uBOGEm1aE9cGVWDZh3UXH53RnO0
tatnj8/ImjB8hOef0lR7Gv+gSkG4gHrI4Fj/9q5lPeTC02J12kHgk3EILZcI+Cj7
rhRo4cF6QdOFJlq8ZeNZ9PSSIZSPCL/xhG5Lq1rPzjtDEn4tgSEu+OAybqvz4aLG
jYpu6MxtltaKEkmIn9I0Ha/sAmtR7oFu490E7szfr5KhiaZ+FRPghq7QfwgvrJrw
e5NnlmGwr0D3zQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 18:48:03 2025 by rpki-client