Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: gpvcNESxPg3QT3nHnglh8XjKHKSD+R3qrJo03gMt3Ws=
Subject key identifier: 5B:9F:8E:74:B7:73:C0:0C:F5:65:7B:A2:56:D0:58:59:B2:E4:A4:5C
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 01995A1F64166BA5CB9AC7731150C7538354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 168E
Signing time: Thu 18 Sep 2025 00:00:30 +0000
Manifest this update: Thu 18 Sep 2025 00:00:30 +0000
Manifest next update: Fri 19 Sep 2025 00:00:30 +0000
Files and hashes: 1: AwF9Po4WusYXHbCN28Vi4N0vdXM.roa (hash: BrxeSv8ZT8qhQ9aNAuI1FMulPWTfztWj80JkUewf8Ps=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: MHsNiaKf29uVC1wpuJsjcKOsR/CYo1dCu8sQqQsx+Nw=)
3: jsLjY2Dc2S2O7jwfLML6nOsBS0o.roa (hash: /a3bkiLEbNmaSUeq8MEDshih5vZMuYoOiChrBF9mx2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 21:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5a:1f:64:16:6b:a5:cb:9a:c7:73:11:50:c7:53:83:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: Sep 18 00:00:30 2025 GMT
Not After : Sep 19 00:00:30 2025 GMT
Subject: CN=5b9f8e74b773c00cf5657ba256d05859b2e4a45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:31:bd:9b:ec:b3:11:03:3c:2e:a3:25:15:3f:
70:20:24:7d:79:62:73:a2:8a:60:1b:07:4b:ac:56:
9a:25:db:61:c1:6e:01:62:ed:b7:88:7d:41:be:10:
f4:5b:53:af:17:d5:c0:1d:5d:5f:af:ce:33:e2:07:
7a:98:02:63:49:6f:f9:3e:00:ff:da:ca:ef:e1:33:
55:bc:eb:8f:ad:ed:6a:09:55:6a:e5:7e:e0:b5:b5:
6d:ae:7c:b5:a0:64:e6:0f:21:f2:ea:32:43:4e:e8:
da:06:e6:bc:27:96:95:fa:d2:f6:79:d7:c5:17:38:
76:ca:d7:9b:b8:03:f0:ea:4a:5a:53:71:66:e1:ad:
66:9f:41:3f:97:b0:fb:84:42:6b:87:da:be:86:52:
8d:1f:9e:24:c0:02:6d:0a:8a:0d:23:74:42:a0:72:
4b:3a:e1:f6:b1:e7:e0:f7:c2:97:6e:36:42:6e:46:
b9:0f:18:06:4d:05:d3:04:1a:7d:af:29:63:dc:d3:
a5:f1:47:a5:25:bf:a6:02:f2:45:c1:3b:9a:2e:02:
92:fa:52:64:fb:db:47:9d:38:b1:ad:72:57:6e:9b:
93:e3:42:93:a9:92:90:02:34:1f:bf:79:93:cf:e4:
21:7e:df:99:f2:96:08:58:28:cc:1b:12:e5:ae:a9:
36:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9F:8E:74:B7:73:C0:0C:F5:65:7B:A2:56:D0:58:59:B2:E4:A4:5C
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b8:f9:30:30:a1:17:e8:88:bb:c2:0f:e1:34:40:4d:d6:a4:
9f:4d:50:0b:bb:b7:9c:ec:1f:b6:a2:ce:ca:24:fe:e8:34:2e:
eb:a9:13:4f:eb:1e:3d:b2:3a:4c:c0:cc:51:20:ac:ba:92:d0:
9c:73:e0:df:a6:bb:9d:67:7a:2b:9e:b4:fe:04:65:0f:b2:cc:
23:4e:72:0a:51:a7:5c:d9:6b:e8:7d:b4:da:95:50:08:d8:e6:
38:3e:e6:d6:a6:8d:ed:61:1a:e6:e9:98:b4:c3:80:68:6b:d7:
b3:bd:38:20:87:06:22:af:3d:68:ab:e1:89:78:5c:c2:61:58:
2c:46:56:2d:74:cc:eb:4d:8d:1a:33:0c:5b:0f:7f:e3:23:db:
1b:70:89:ce:04:bc:1d:29:80:c7:39:e4:c6:a4:b9:4f:9f:97:
7b:1c:19:61:2a:64:2c:58:09:0d:7c:46:b3:c1:7b:bf:2f:9e:
a7:07:41:60:12:90:11:2a:b5:74:d4:36:5e:12:f7:2e:e9:4e:
4f:be:37:42:66:7a:88:f7:f1:c7:18:8c:97:be:92:a8:04:33:
1d:a3:c6:fa:6e:8a:bc:28:0b:9d:e0:40:80:88:51:30:95:10:
9d:c3:df:5b:03:28:3e:48:4b:42:ab:4d:26:ab:ef:d0:f0:4b:
0c:31:30:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlaH2QWa6XLmsdzEVDHU4NUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDM5ZTFkZTE4NTE0YmFjMmY1YTIzOTEwZjhjN2Q0Njcy
YTBmZDgwHhcNMjUwOTE4MDAwMDMwWhcNMjUwOTE5MDAwMDMwWjAzMTEwLwYDVQQD
Eyg1YjlmOGU3NGI3NzNjMDBjZjU2NTdiYTI1NmQwNTg1OWIyZTRhNDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizG9m+yzEQM8LqMlFT9wICR9eWJz
oopgGwdLrFaaJdthwW4BYu23iH1BvhD0W1OvF9XAHV1fr84z4gd6mAJjSW/5PgD/
2srv4TNVvOuPre1qCVVq5X7gtbVtrny1oGTmDyHy6jJDTujaBua8J5aV+tL2edfF
Fzh2ytebuAPw6kpaU3Fm4a1mn0E/l7D7hEJrh9q+hlKNH54kwAJtCooNI3RCoHJL
OuH2sefg98KXbjZCbka5DxgGTQXTBBp9rylj3NOl8UelJb+mAvJFwTuaLgKS+lJk
+9tHnTixrXJXbpuT40KTqZKQAjQfv3mTz+Qhft+Z8pYIWCjMGxLlrqk2/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFufjnS3c8AM9WV7olbQWFmy5KRcMB8GA1UdIwQY
MBaAFF3Tnh3hhRS6wvWiORD4x9RnKg/YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMt
OWMyNmIwN2I3MThiLzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMtOWMyNmIwN2I3MThi
LzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbj5MDCh
F+iIu8IP4TRATdakn01QC7u3nOwftqLOyiT+6DQu66kTT+sePbI6TMDMUSCsupLQ
nHPg36a7nWd6K560/gRlD7LMI05yClGnXNlr6H202pVQCNjmOD7m1qaN7WEa5umY
tMOAaGvXs704IIcGIq89aKvhiXhcwmFYLEZWLXTM602NGjMMWw9/4yPbG3CJzgS8
HSmAxznkxqS5T5+XexwZYSpkLFgJDXxGs8F7vy+epwdBYBKQESq1dNQ2XhL3LulO
T743QmZ6iPfxxxiMl76SqAQzHaPG+m6KvCgLneBAgIhRMJUQncPfWwMoPkhLQqtN
Jqvv0PBLDDEwsg==
-----END CERTIFICATE-----
Generated at Thu Sep 18 05:44:22 2025 by rpki-client