Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier: mDAUvoxTanUsk2v9PS3vi98bIctyiGiVYjtPQfKdZTc=
Subject key identifier: D2:F2:C4:43:A7:76:B9:1A:23:F8:42:C0:A3:49:CA:33:AA:87:BC:2D
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 019959B2F5EE7844C69165668C02955ED4C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number: 0425
Signing time: Wed 17 Sep 2025 22:02:04 +0000
Manifest this update: Wed 17 Sep 2025 22:02:04 +0000
Manifest next update: Thu 18 Sep 2025 22:02:04 +0000
Files and hashes: 1: 0eBj-TNfE0NgkAODM9VoPKQnB0E.roa (hash: O8GHZwLzkXmxkB1uIiy9qo5QY14RKmQf2i0WksTve7o=)
2: 3MrTzqXRqi4qw3h6oaqykX6J0kU.roa (hash: +ClOERLFY4P0cwxaW/Im6eS4rQN8CdS+8xi58ep6Alk=)
3: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: CJJxVn7UuhvBPIGHXiJ93ibAxD7yMQVxthNSd57SElc=)
4: gvFUcQAtyqgcAtGHbXP7pjSFHcU.roa (hash: Z0izDMe/hUL6X2HZt86h00GbmMnQFZywc+AJBC3qqJA=)
5: sS98ShuiZY9gamFcZrqcbFzjMbs.roa (hash: BxhyjLfYrjzjXEBjZnGso78ZHOLYRxMopWgqZ0QBVko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 21:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:59:b2:f5:ee:78:44:c6:91:65:66:8c:02:95:5e:d4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Sep 17 22:02:04 2025 GMT
Not After : Sep 18 22:02:04 2025 GMT
Subject: CN=d2f2c443a776b91a23f842c0a349ca33aa87bc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:40:53:ae:97:da:f9:c0:17:9d:a6:34:d9:
2f:67:76:20:ac:fa:4d:d2:68:27:3f:79:a2:13:67:
71:2c:70:f2:f8:0a:a0:31:0d:89:36:7f:ab:9f:15:
80:67:d8:0e:14:54:2d:55:b0:80:cd:d0:4d:da:80:
f2:5a:59:24:95:c9:84:7c:d3:39:04:fb:40:11:a5:
40:d5:ed:96:14:3f:1f:08:e1:ce:c0:87:32:f8:02:
b8:0a:72:3f:a4:37:b5:12:d2:c7:be:d9:b6:1a:ab:
40:7b:a1:a4:44:88:8e:9e:21:f9:1c:f2:c7:f0:a0:
4b:68:33:a7:47:cf:c0:6b:05:3a:47:bd:db:de:5b:
b4:01:18:9e:2d:59:fc:7f:06:37:2f:45:53:b1:dd:
b3:8f:0d:3d:7e:ba:79:70:56:56:4e:fa:b8:a7:c0:
07:7d:68:32:0a:d3:a9:02:81:8f:a1:c1:25:4a:aa:
77:67:4f:25:86:85:2d:bf:2e:ca:7c:e8:d7:a5:89:
f6:53:65:b9:b2:2f:3a:b3:68:25:98:bc:02:37:34:
0b:6b:8a:b7:78:f8:7b:f1:ce:ec:e8:ae:78:f7:79:
09:57:93:bf:e0:62:41:d4:34:e9:09:0c:67:80:e8:
d3:21:31:29:f9:48:c8:8a:c4:75:49:66:8d:1c:f1:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F2:C4:43:A7:76:B9:1A:23:F8:42:C0:A3:49:CA:33:AA:87:BC:2D
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d5:95:19:64:7e:a4:14:f6:2a:70:63:29:ae:65:be:2a:e3:
3d:b1:24:7f:75:d8:c8:e4:13:41:97:d7:4b:20:02:0f:c5:a2:
dc:30:6d:a4:66:64:1f:4d:51:66:d3:3a:db:9b:b4:be:6a:e4:
4a:ca:24:37:8d:7c:74:c1:fc:d0:2d:73:35:eb:8b:ed:da:28:
2f:7e:2b:7e:aa:17:b9:26:78:a6:58:bb:69:ec:ef:61:f3:d8:
aa:e3:0b:e3:8c:85:cc:3e:de:14:c1:7e:e6:c2:a3:fb:63:64:
e4:e9:d6:ad:f0:24:8a:8d:39:9f:d7:dd:75:f9:0b:21:0f:9d:
e4:fa:83:4f:0c:4c:be:76:07:b8:16:c2:37:47:26:80:a5:71:
15:e3:1e:94:8a:23:c4:13:3f:bc:73:1f:68:50:80:aa:49:0f:
2b:60:f7:86:2e:08:3d:86:22:10:fa:3f:46:00:21:d7:f1:1b:
6e:d6:4d:59:56:c3:f5:ff:7b:47:38:f5:c7:e6:7f:2e:67:53:
87:a9:9b:64:57:e1:d5:bb:f4:3b:f0:66:40:f4:5f:0f:1d:eb:
ba:29:37:0d:70:5d:74:db:11:a4:b1:e1:5c:39:91:2d:c7:1e:
a6:b2:75:81:dc:82:93:aa:41:5c:61:99:56:55:ae:44:a0:d4:
c5:1a:85:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlZsvXueETGkWVmjAKVXtTJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYzkwNTE4ZGY3MGIxM2Q3MDZiZmUyMzdhYTVhNzY5MjZh
NTc2ZDEwHhcNMjUwOTE3MjIwMjA0WhcNMjUwOTE4MjIwMjA0WjAzMTEwLwYDVQQD
EyhkMmYyYzQ0M2E3NzZiOTFhMjNmODQyYzBhMzQ5Y2EzM2FhODdiYzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRdAU66X2vnAF52mNNkvZ3YgrPpN
0mgnP3miE2dxLHDy+AqgMQ2JNn+rnxWAZ9gOFFQtVbCAzdBN2oDyWlkklcmEfNM5
BPtAEaVA1e2WFD8fCOHOwIcy+AK4CnI/pDe1EtLHvtm2GqtAe6GkRIiOniH5HPLH
8KBLaDOnR8/AawU6R73b3lu0ARieLVn8fwY3L0VTsd2zjw09frp5cFZWTvq4p8AH
fWgyCtOpAoGPocElSqp3Z08lhoUtvy7KfOjXpYn2U2W5si86s2glmLwCNzQLa4q3
ePh78c7s6K5493kJV5O/4GJB1DTpCQxngOjTITEp+UjIisR1SWaNHPEwOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLyxEOndrkaI/hCwKNJyjOqh7wtMB8GA1UdIwQY
MBaAFF/JBRjfcLE9cGv+I3qlp2kmpXbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEt
YzgzMDJlODJlYTIyLzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEtYzgzMDJlODJlYTIy
LzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9WVGWR+
pBT2KnBjKa5lvirjPbEkf3XYyOQTQZfXSyACD8Wi3DBtpGZkH01RZtM625u0vmrk
SsokN418dMH80C1zNeuL7dooL34rfqoXuSZ4pli7aezvYfPYquML44yFzD7eFMF+
5sKj+2Nk5OnWrfAkio05n9fddfkLIQ+d5PqDTwxMvnYHuBbCN0cmgKVxFeMelIoj
xBM/vHMfaFCAqkkPK2D3hi4IPYYiEPo/RgAh1/EbbtZNWVbD9f97Rzj1x+Z/LmdT
h6mbZFfh1bv0O/BmQPRfDx3ruik3DXBddNsRpLHhXDmRLcceprJ1gdyCk6pBXGGZ
VlWuRKDUxRqFnw==
-----END CERTIFICATE-----
Generated at Thu Sep 18 06:07:19 2025 by rpki-client