Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
File: xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft (raw, json)
Hash identifier: Hi8LJx/quu3GyvplRX2I/EZ2cIN2HH1NueygTqJk+oM=
Subject key identifier: 10:B0:45:BA:2C:BB:3C:3E:5A:8C:ED:33:99:37:9F:E5:33:ED:E8:98
Authority key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
Certificate issuer: /CN=c53435f4be2c543bf3483e377f80314d28230184
Certificate serial: 019A7293B0D09C5F7C2D001F88CA5B677D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:01:12 +0000
Manifest this update: Tue 11 Nov 2025 11:01:12 +0000
Manifest next update: Wed 12 Nov 2025 11:01:12 +0000
Files and hashes: 1: XYWpdPzGoBgF4NiJcBSnmKFlFlA.roa (hash: gRwlESvwtxXSn0EGN2mej0K6SBjpUL0fcU4oPomp9Tg=)
2: xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl (hash: cLX9RjxaL5WWazdFQjMnirpmefEmDsvs3cNFVpIxr48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b0:d0:9c:5f:7c:2d:00:1f:88:ca:5b:67:7d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53435f4be2c543bf3483e377f80314d28230184
Validity
Not Before: Nov 11 11:01:12 2025 GMT
Not After : Nov 12 11:01:12 2025 GMT
Subject: CN=10b045ba2cbb3c3e5a8ced3399379fe533ede898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0f:25:3d:79:18:5d:08:06:d6:ae:78:1b:ce:
5d:19:1c:00:c1:c4:f3:49:7d:d0:e7:08:7a:22:a6:
95:56:53:56:a7:93:0e:fd:17:31:75:f6:9d:bf:b8:
b6:32:18:92:fd:4f:7b:79:60:78:e3:66:89:e0:34:
91:14:3a:96:3d:f2:38:75:17:8b:16:62:49:91:a5:
db:d8:12:92:b9:f3:dd:94:e2:1e:c3:0b:1e:61:25:
5b:b7:48:29:1a:5b:3d:16:f7:00:5e:8c:a1:7b:a6:
c3:6a:eb:0e:14:e6:90:be:c7:90:27:90:4d:8f:ab:
25:d3:69:c4:2b:6b:41:e0:6f:93:c9:db:53:82:b8:
69:0c:b3:ed:31:f1:4a:f9:95:1f:72:59:47:b8:52:
e3:ba:c6:98:97:ca:37:5e:ea:5e:82:55:ad:55:d1:
c5:0b:eb:a7:77:6f:f2:b2:57:9f:f3:90:41:9d:13:
59:3e:5a:2f:af:6f:f7:31:bd:60:8a:50:c6:90:98:
b6:40:71:56:67:4e:a7:53:af:ec:3f:c7:f5:e0:20:
a7:56:9b:24:d0:1e:de:09:a4:cb:0f:54:f8:95:92:
25:11:2d:4c:ec:80:8f:bd:ec:25:f3:2d:dd:9a:57:
13:f1:ff:0f:06:86:39:0e:69:cf:c0:7b:3a:64:d3:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B0:45:BA:2C:BB:3C:3E:5A:8C:ED:33:99:37:9F:E5:33:ED:E8:98
X509v3 Authority Key Identifier:
keyid:C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c6:27:58:62:d2:b5:65:59:2f:52:0c:e5:4f:86:e3:b7:5c:
b7:52:b8:df:80:0a:da:ad:32:54:46:b1:dd:04:af:d0:50:41:
c6:30:ff:84:e5:45:54:d4:6e:9b:bf:92:ce:ce:96:9e:c5:43:
15:c0:fd:75:33:72:55:04:a8:3b:61:4a:59:4a:d1:b0:5a:1a:
51:9f:14:b1:d8:d6:77:09:65:de:6d:c7:a6:32:af:0f:4f:9c:
3b:f3:58:54:ee:e0:91:4f:57:bc:ed:04:bd:c2:c6:1b:bc:15:
e9:84:2e:58:41:b7:d3:84:bd:a7:86:ec:0e:66:dc:97:b8:7b:
ff:1a:16:86:99:60:97:cc:80:64:4e:fe:7c:6a:6e:81:ec:fb:
ce:8e:85:48:06:45:a8:67:ae:32:d9:d5:1a:c5:8d:0d:d8:bb:
05:e8:72:e5:8d:0b:8f:0a:84:3b:de:45:db:be:47:69:88:45:
72:dc:f4:4b:cb:59:c2:24:43:f0:3b:ff:1c:f9:ee:da:39:04:
26:b6:1f:ce:25:e2:38:34:d4:96:2e:e6:e3:3a:8e:6e:a1:89:
73:b4:53:9a:ca:94:4a:da:e3:ff:83:44:32:8c:59:e8:8b:1b:
a9:38:97:67:57:75:1e:6b:2d:ee:1e:b5:7a:38:75:d2:e8:28:
7d:e4:7f:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk7DQnF98LQAfiMpbZ30ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MzQzNWY0YmUyYzU0M2JmMzQ4M2UzNzdmODAzMTRkMjgy
MzAxODQwHhcNMjUxMTExMTEwMTEyWhcNMjUxMTEyMTEwMTEyWjAzMTEwLwYDVQQD
EygxMGIwNDViYTJjYmIzYzNlNWE4Y2VkMzM5OTM3OWZlNTMzZWRlODk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w8lPXkYXQgG1q54G85dGRwAwcTz
SX3Q5wh6IqaVVlNWp5MO/Rcxdfadv7i2MhiS/U97eWB442aJ4DSRFDqWPfI4dReL
FmJJkaXb2BKSufPdlOIewwseYSVbt0gpGls9FvcAXoyhe6bDausOFOaQvseQJ5BN
j6sl02nEK2tB4G+TydtTgrhpDLPtMfFK+ZUfcllHuFLjusaYl8o3XupeglWtVdHF
C+und2/yslef85BBnRNZPlovr2/3Mb1gilDGkJi2QHFWZ06nU6/sP8f14CCnVpsk
0B7eCaTLD1T4lZIlES1M7ICPvewl8y3dmlcT8f8PBoY5DmnPwHs6ZNP+7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCwRbosuzw+WoztM5k3n+Uz7eiYMB8GA1UdIwQY
MBaAFMU0NfS+LFQ780g+N3+AMU0oIwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80M2Y2MDctYTdmNC00OTg1LWI2ZWIt
OWY0ZmU0Y2QwMjQ2LzEveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS80M2Y2MDctYTdmNC00OTg1LWI2ZWItOWY0ZmU0Y2QwMjQ2
LzEveFRRMTlMNHNWRHZ6U0Q0M2Y0QXhUU2dqQVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQcYnWGLS
tWVZL1IM5U+G47dct1K434AK2q0yVEax3QSv0FBBxjD/hOVFVNRum7+Szs6WnsVD
FcD9dTNyVQSoO2FKWUrRsFoaUZ8UsdjWdwll3m3HpjKvD0+cO/NYVO7gkU9XvO0E
vcLGG7wV6YQuWEG304S9p4bsDmbcl7h7/xoWhplgl8yAZE7+fGpugez7zo6FSAZF
qGeuMtnVGsWNDdi7Behy5Y0LjwqEO95F275HaYhFctz0S8tZwiRD8Dv/HPnu2jkE
JrYfziXiODTUli7m4zqObqGJc7RTmsqUStrj/4NEMoxZ6IsbqTiXZ1d1Hmst7h61
ejh10ugofeR/rg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:40 2025 by rpki-client