Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
File: XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft (raw, json)
Hash identifier: Qq6XIWLO8aOWX4/+l8j+UWIdh43FXJJ/mf7BnH+6M78=
Subject key identifier: 16:32:DA:7A:58:8B:A8:7C:1E:05:AD:8F:1D:DE:2C:1C:2E:A6:BB:4E
Authority key identifier: 5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
Certificate issuer: /CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Certificate serial: 019A210927B84B6B000AAA3868E833C8C212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
Manifest number: 15BE
Signing time: Sun 26 Oct 2025 15:00:39 +0000
Manifest this update: Sun 26 Oct 2025 15:00:39 +0000
Manifest next update: Mon 27 Oct 2025 15:00:39 +0000
Files and hashes: 1: FMf3Dlx3xe3o0oQ5H7VvQF4482M.roa (hash: Ky+yUEaNAFCmWfk3pIxAZYoORhQc8JCWg+sBVNOj1UU=)
2: W6TXRuSHj7Av0ycVagFuBFyueug.roa (hash: zzCpwhscwcrboKFL/7dxhPDQ5vjcVhPtCOUJlM4/l38=)
3: XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl (hash: cgtRU4qyj/0zeiInqzErvGY8nJd8H/uS3N4NbUIJBzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:27:b8:4b:6b:00:0a:aa:38:68:e8:33:c8:c2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Validity
Not Before: Oct 26 15:00:39 2025 GMT
Not After : Oct 27 15:00:39 2025 GMT
Subject: CN=1632da7a588ba87c1e05ad8f1dde2c1c2ea6bb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:e5:a4:11:7e:44:10:14:1d:25:7f:17:a0:
c8:f4:b5:96:ae:c7:5f:9b:28:e9:da:e8:fb:13:7c:
ad:c9:4d:59:82:02:be:fd:8f:65:b8:ac:b7:61:40:
6f:40:cf:de:23:04:f0:97:f6:66:9f:97:99:51:68:
8f:0a:c6:b2:96:a8:b7:94:60:9b:56:eb:c3:8b:dd:
63:e7:46:99:8a:a2:55:cc:23:d9:98:30:a8:cd:0f:
bf:00:05:3a:e3:56:0c:71:bb:62:bf:3b:ec:8c:cf:
aa:91:16:5a:ec:21:8d:43:74:9e:d1:af:3c:6f:c7:
b3:00:41:51:31:f4:51:c2:54:fb:5b:53:df:63:81:
14:b7:3c:d0:92:02:31:4b:af:3d:39:32:f9:a8:cc:
25:75:1b:f8:1d:8e:be:ae:20:16:44:12:9d:89:59:
fa:a8:6c:ad:88:f6:4c:10:e7:1c:7e:fa:a3:0e:e2:
9f:d6:75:1a:d9:06:b0:4c:85:d4:ac:48:e5:58:2c:
8d:09:50:f7:cb:7e:32:e6:b5:45:e3:26:ba:94:d4:
8b:59:30:40:80:2d:c2:d8:e7:a6:96:dc:6d:d0:ec:
20:77:fa:f8:e5:df:d8:8e:de:30:5d:94:0c:bc:d3:
85:f9:31:5a:1b:a6:88:0f:76:0e:0f:16:6c:e6:61:
94:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:32:DA:7A:58:8B:A8:7C:1E:05:AD:8F:1D:DE:2C:1C:2E:A6:BB:4E
X509v3 Authority Key Identifier:
keyid:5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:bb:34:55:c1:3b:f4:cf:1c:e9:f5:e3:44:f0:80:26:05:bf:
b4:cc:35:6b:3b:8c:49:66:a4:70:fe:17:53:71:b5:29:5f:ca:
fa:5c:e2:e9:5b:6f:4c:27:34:8f:4d:f0:4b:74:de:f4:b9:84:
74:35:af:a9:04:63:b5:bf:4f:34:ff:68:fd:09:3c:82:be:cf:
27:9d:de:92:ac:c8:08:b2:03:c9:b8:8b:1e:39:b7:6f:1e:1b:
81:5b:9b:c9:e7:1e:50:c7:2f:51:42:56:9a:72:29:e0:f1:08:
ab:cd:c4:be:ce:70:df:e2:f2:ef:a4:c8:f1:8a:3e:e4:f7:a4:
c0:aa:4f:5b:c6:fe:ee:d5:98:44:e1:d9:83:bc:5b:61:3c:c7:
72:49:99:32:7b:4f:6e:84:97:57:7a:db:9b:e7:b0:16:87:18:
54:b5:b8:6c:dd:fc:75:11:cf:4c:97:b6:63:f9:47:42:36:0c:
fd:45:73:da:93:38:1e:19:49:88:e9:d8:f4:8a:10:f6:22:04:
41:9e:b6:3f:d7:1d:59:44:12:25:aa:a3:d6:9a:17:0c:a6:7b:
47:d9:16:b4:26:b7:eb:91:92:8c:fd:11:d2:77:58:73:db:b4:
ab:42:ce:3b:79:2c:58:eb:c8:24:5b:e8:1d:d5:89:ba:20:13:
fc:ad:1c:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohCSe4S2sACqo4aOgzyMISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYmE1N2UxNzA3ZTQzYjJmYTk3ZmNlYjA3OGE1ZDQ2MGU1
NmMxYmYwHhcNMjUxMDI2MTUwMDM5WhcNMjUxMDI3MTUwMDM5WjAzMTEwLwYDVQQD
EygxNjMyZGE3YTU4OGJhODdjMWUwNWFkOGYxZGRlMmMxYzJlYTZiYjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXzlpBF+RBAUHSV/F6DI9LWWrsdf
myjp2uj7E3ytyU1ZggK+/Y9luKy3YUBvQM/eIwTwl/Zmn5eZUWiPCsaylqi3lGCb
VuvDi91j50aZiqJVzCPZmDCozQ+/AAU641YMcbtivzvsjM+qkRZa7CGNQ3Se0a88
b8ezAEFRMfRRwlT7W1PfY4EUtzzQkgIxS689OTL5qMwldRv4HY6+riAWRBKdiVn6
qGytiPZMEOccfvqjDuKf1nUa2QawTIXUrEjlWCyNCVD3y34y5rVF4ya6lNSLWTBA
gC3C2Oemltxt0Owgd/r45d/Yjt4wXZQMvNOF+TFaG6aID3YODxZs5mGURwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYy2npYi6h8HgWtjx3eLBwuprtOMB8GA1UdIwQY
MBaAFF66V+FwfkOy+pf86weKXUYOVsG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHJwWDRYQi1RN0w2bF96ckI0cGRSZzVXd2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jYmNhYzYtYWJlYi00YTM4LThjY2Mt
YjU5NzI3MDliYjAyLzEvWHJwWDRYQi1RN0w2bF96ckI0cGRSZzVXd2I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jYmNhYzYtYWJlYi00YTM4LThjY2MtYjU5NzI3MDliYjAy
LzEvWHJwWDRYQi1RN0w2bF96ckI0cGRSZzVXd2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtrs0VcE7
9M8c6fXjRPCAJgW/tMw1azuMSWakcP4XU3G1KV/K+lzi6VtvTCc0j03wS3Te9LmE
dDWvqQRjtb9PNP9o/Qk8gr7PJ53ekqzICLIDybiLHjm3bx4bgVubyeceUMcvUUJW
mnIp4PEIq83Evs5w3+Ly76TI8Yo+5PekwKpPW8b+7tWYROHZg7xbYTzHckmZMntP
boSXV3rbm+ewFocYVLW4bN38dRHPTJe2Y/lHQjYM/UVz2pM4HhlJiOnY9IoQ9iIE
QZ62P9cdWUQSJaqj1poXDKZ7R9kWtCa365GSjP0R0ndYc9u0q0LOO3ksWOvIJFvo
HdWJuiAT/K0cvw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 23:21:05 2025 by rpki-client