Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: l/emZYqqFi1jGIb8QipbgKbt5VlLk3MQJfxAlCOOkVQ=
Subject key identifier: A7:D2:92:DF:98:54:81:66:3F:20:56:4F:07:9D:38:23:C4:4B:D5:8B
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 019A29D53D0D821DCE46C039BEEB62D73967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 16FD
Signing time: Tue 28 Oct 2025 08:00:31 +0000
Manifest this update: Tue 28 Oct 2025 08:00:31 +0000
Manifest next update: Wed 29 Oct 2025 08:00:31 +0000
Files and hashes: 1: UHa0PUrVvlqJmfxBpJVCi2m-y4g.roa (hash: k2wV1z1hH+x/xLCT2XUUrUL5LqUbzcz6dyzMF+S+UWA=)
2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: DgWKettWv9eF4VDGlC8LRJ3UCwDn0OJsy9Frqhh+830=)
3: aPapdOg3chczRLaEQQ4twwrxodQ.roa (hash: cmj3AvJXpniFJk9oaDy233oV4hbFHwTxw3NrIU6hf2E=)
4: sQHnIxiTXdDvzwTuqD8p9cUZpbk.roa (hash: biOURbaVfbs816gF/jx/GDITj2SuRtw3EAQo7PheBYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:d5:3d:0d:82:1d:ce:46:c0:39:be:eb:62:d7:39:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Oct 28 08:00:31 2025 GMT
Not After : Oct 29 08:00:31 2025 GMT
Subject: CN=a7d292df985481663f20564f079d3823c44bd58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cb:13:2c:19:8d:39:0b:2d:f7:8f:83:9f:c0:
e2:75:36:60:20:7f:3d:1e:58:a0:a3:b1:76:65:13:
49:ac:bc:aa:b6:48:38:db:c5:c8:be:0f:13:cf:46:
c0:0d:40:0b:14:51:92:ac:ad:f2:19:3f:07:8b:2a:
ff:98:a3:ba:94:eb:7d:ef:4d:4b:7b:03:33:cf:b5:
a7:f5:5e:c6:e5:9b:ce:11:31:cc:0a:dc:f2:e6:ee:
2d:10:94:c3:94:98:29:b0:d6:11:49:fc:c3:51:6d:
ec:dd:1d:57:00:7b:bd:24:7c:89:2b:20:33:42:ba:
cc:3b:d0:6d:8b:53:0b:dd:bf:4d:da:42:95:14:13:
46:ec:9a:cd:ae:8d:61:ab:ed:04:87:36:08:29:da:
dc:d8:92:8a:b9:c6:c7:1e:f7:64:20:3c:0d:88:a4:
17:fc:8d:11:26:1b:60:27:93:ae:23:35:84:73:62:
eb:62:e5:66:d1:46:bc:a0:c4:14:fd:3b:d2:cf:fa:
81:9b:5a:ec:e7:5f:7d:61:2c:f7:41:92:71:83:fa:
74:80:a7:4a:6f:cf:9a:d9:2f:1c:dd:26:12:73:ba:
58:fe:5b:8d:87:17:ec:83:51:02:6d:5d:88:3d:38:
2e:f6:e5:f7:16:cb:49:79:de:1f:8b:91:cb:e0:ea:
7d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D2:92:DF:98:54:81:66:3F:20:56:4F:07:9D:38:23:C4:4B:D5:8B
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:36:31:23:25:10:b6:e9:da:7a:dd:a0:49:4c:2f:31:0a:15:
3d:a2:5a:13:fe:9e:14:12:53:80:3b:18:39:21:77:9c:da:c0:
2a:6a:ab:40:9c:84:dd:0a:ea:96:43:02:8f:49:18:1c:33:98:
dd:00:dd:8a:5a:5a:a7:b1:85:e6:18:8c:ca:1c:9d:7c:bf:a1:
b9:39:0a:7e:0b:87:a2:86:3d:b4:e6:ea:a5:1d:97:c6:12:19:
c5:44:d7:48:b2:dd:5e:7d:91:0d:39:04:06:c8:0c:00:f3:1e:
24:13:95:f4:66:30:5a:8c:2e:74:0e:23:58:52:05:7b:15:6f:
10:66:8c:3a:d2:2e:a6:30:9a:27:51:81:55:83:6e:48:75:ce:
ca:56:4a:12:04:05:22:d9:e4:cb:e8:01:4e:79:6a:42:db:c2:
fb:71:a0:cb:d8:7a:8a:d7:6a:72:2a:7e:65:d9:61:1a:41:09:
11:a2:4e:f9:07:84:8a:c9:14:89:95:2b:c7:61:61:c0:37:10:
cb:cd:b5:ab:47:87:56:e9:c7:dc:f3:98:9d:cf:85:91:20:de:
de:76:e6:f2:60:3e:b6:0c:32:04:10:3b:2e:70:2c:5f:26:f5:
b2:37:21:7c:fb:84:2a:6b:70:0a:ee:91:ae:b7:5a:58:ca:b0:
cd:2c:50:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZop1T0Ngh3ORsA5vuti1zlnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZmUzODgxZjNjNDQ3NzRmNTFjYzc1ZWU3ZTZmOTFjNTU2
NWE2MDYwHhcNMjUxMDI4MDgwMDMxWhcNMjUxMDI5MDgwMDMxWjAzMTEwLwYDVQQD
EyhhN2QyOTJkZjk4NTQ4MTY2M2YyMDU2NGYwNzlkMzgyM2M0NGJkNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8sTLBmNOQst94+Dn8DidTZgIH89
Hligo7F2ZRNJrLyqtkg428XIvg8Tz0bADUALFFGSrK3yGT8Hiyr/mKO6lOt9701L
ewMzz7Wn9V7G5ZvOETHMCtzy5u4tEJTDlJgpsNYRSfzDUW3s3R1XAHu9JHyJKyAz
QrrMO9Bti1ML3b9N2kKVFBNG7JrNro1hq+0EhzYIKdrc2JKKucbHHvdkIDwNiKQX
/I0RJhtgJ5OuIzWEc2LrYuVm0Ua8oMQU/TvSz/qBm1rs5199YSz3QZJxg/p0gKdK
b8+a2S8c3SYSc7pY/luNhxfsg1ECbV2IPTgu9uX3FstJed4fi5HL4Op9EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfSkt+YVIFmPyBWTwedOCPES9WLMB8GA1UdIwQY
MBaAFFz+OIHzxEd09RzHXufm+RxVZaYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81MjYwZDAtMTg1NS00ZjMwLWI4ZWYt
N2M5OTgwNzlhNmE5LzEvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS81MjYwZDAtMTg1NS00ZjMwLWI4ZWYtN2M5OTgwNzlhNmE5
LzEvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDYxIyUQ
tunaet2gSUwvMQoVPaJaE/6eFBJTgDsYOSF3nNrAKmqrQJyE3QrqlkMCj0kYHDOY
3QDdilpap7GF5hiMyhydfL+huTkKfguHooY9tObqpR2XxhIZxUTXSLLdXn2RDTkE
BsgMAPMeJBOV9GYwWowudA4jWFIFexVvEGaMOtIupjCaJ1GBVYNuSHXOylZKEgQF
Itnky+gBTnlqQtvC+3Ggy9h6itdqcip+ZdlhGkEJEaJO+QeEiskUiZUrx2FhwDcQ
y821q0eHVunH3POYnc+FkSDe3nbm8mA+tgwyBBA7LnAsXyb1sjchfPuEKmtwCu6R
rrdaWMqwzSxQEQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 14:37:52 2025 by rpki-client