Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
File: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft (raw, json)
Hash identifier: fddZVgLAGN0CYNDvU058iIMaZCdbMlbw23ZWedh+FzQ=
Subject key identifier: 33:06:69:D9:E7:F6:7B:FC:72:C1:CC:15:57:71:36:07:DD:89:26:C0
Authority key identifier: 5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
Certificate issuer: /CN=5ece10f13c46806926a67946cc6a1102aa09031a
Certificate serial: 019A7225C7A204A2FF90D311D089F870342E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:09 +0000
Manifest this update: Tue 11 Nov 2025 09:01:09 +0000
Manifest next update: Wed 12 Nov 2025 09:01:09 +0000
Files and hashes: 1: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl (hash: MfMdEAri1D2d4l3xhMuJJDWw+A+zh3gXp+wNHtHQ3DE=)
2: da7wWDdQpE5i6DJox7FoD-QEnrA.roa (hash: 93ok4fdBSnjw6qTtlazVRgZjQmCRM/yDSLFq6NFZNeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c7:a2:04:a2:ff:90:d3:11:d0:89:f8:70:34:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ece10f13c46806926a67946cc6a1102aa09031a
Validity
Not Before: Nov 11 09:01:09 2025 GMT
Not After : Nov 12 09:01:09 2025 GMT
Subject: CN=330669d9e7f67bfc72c1cc1557713607dd8926c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:10:7e:48:c3:18:71:2c:e8:12:6a:d6:1c:
83:c6:57:1e:e4:5d:00:0a:51:4f:d7:d4:df:c1:97:
75:18:63:09:2d:66:c1:2a:db:a3:8b:c3:27:92:89:
89:15:f3:a9:be:1e:22:8a:7f:34:2c:e3:27:de:4d:
88:e6:0f:9d:46:3e:1c:cd:0d:1a:5f:70:94:3f:44:
7f:df:6a:ec:8a:5b:d9:97:0c:26:64:51:9d:b7:48:
17:72:fc:ef:4f:2a:db:13:06:53:86:db:ca:00:51:
9a:55:fc:55:c9:02:3d:3c:81:49:0f:d1:4a:be:ef:
a8:41:1f:a4:5b:6d:22:84:2e:c2:cd:78:65:4b:a4:
fe:fb:c7:ec:70:26:ca:f4:a4:75:c7:44:d7:79:dd:
2f:1e:20:dd:36:a1:d3:bc:af:ed:7d:d5:7d:f7:a7:
e1:51:2d:a1:1f:e6:99:a8:df:2e:b3:17:b4:24:24:
5e:d6:34:e2:af:32:00:2d:d6:ef:6c:14:9f:5a:90:
33:7e:95:ee:5e:63:6d:21:3e:0f:22:45:27:94:fe:
b9:b1:07:03:05:9b:31:5f:65:2f:f2:d0:ff:5e:b0:
22:ce:37:ad:a3:b2:b8:2e:d7:31:ea:c0:05:a9:6c:
d8:03:9d:f9:79:07:2c:79:a7:c0:26:6e:c0:e0:06:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:06:69:D9:E7:F6:7B:FC:72:C1:CC:15:57:71:36:07:DD:89:26:C0
X509v3 Authority Key Identifier:
keyid:5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:8c:55:dc:50:8c:ea:66:6f:15:40:55:d4:68:24:ad:86:38:
f1:83:11:10:1f:3e:82:99:de:67:2b:52:ee:dd:9c:16:d2:f5:
4b:f0:30:3b:68:8d:34:63:85:3e:ca:0e:2c:94:57:a1:1b:bb:
88:c8:4b:eb:f2:d2:40:5f:b9:f7:8d:02:a1:24:e5:4c:e5:a5:
8b:3a:7d:b6:66:1f:5d:30:90:81:91:9f:50:dc:9c:35:d1:0d:
e5:68:b4:87:d7:a0:d8:91:47:25:9e:e2:44:15:33:96:10:33:
05:1f:fc:42:82:97:e3:b4:36:c1:7a:d1:68:15:a3:1f:8c:2c:
f9:ef:06:93:a8:70:7a:c4:6c:ab:df:91:d2:ab:fa:2b:5a:66:
07:ac:0b:15:50:3c:6d:bb:2c:a9:b4:63:2e:b4:1e:f7:ff:3b:
ba:3a:9a:8b:0b:19:12:3a:a7:ae:38:e1:5c:8a:cd:42:0a:a3:
8d:80:98:fb:84:84:9c:b6:a6:08:6b:a7:22:83:f1:46:0d:3b:
30:89:79:d7:5b:91:47:d1:a3:5b:37:26:d2:2a:4a:13:62:02:
50:b8:92:d7:9b:a5:52:a1:00:fc:13:16:4e:20:7d:55:18:71:
17:94:9b:9f:85:18:2d:4a:30:cd:68:cc:e0:eb:d5:ad:78:ae:
ee:68:7c:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJceiBKL/kNMR0In4cDQuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlY2UxMGYxM2M0NjgwNjkyNmE2Nzk0NmNjNmExMTAyYWEw
OTAzMWEwHhcNMjUxMTExMDkwMTA5WhcNMjUxMTEyMDkwMTA5WjAzMTEwLwYDVQQD
EygzMzA2NjlkOWU3ZjY3YmZjNzJjMWNjMTU1NzcxMzYwN2RkODkyNmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVsQfkjDGHEs6BJq1hyDxlce5F0A
ClFP19TfwZd1GGMJLWbBKtuji8MnkomJFfOpvh4iin80LOMn3k2I5g+dRj4czQ0a
X3CUP0R/32rsilvZlwwmZFGdt0gXcvzvTyrbEwZThtvKAFGaVfxVyQI9PIFJD9FK
vu+oQR+kW20ihC7CzXhlS6T++8fscCbK9KR1x0TXed0vHiDdNqHTvK/tfdV996fh
US2hH+aZqN8usxe0JCRe1jTirzIALdbvbBSfWpAzfpXuXmNtIT4PIkUnlP65sQcD
BZsxX2Uv8tD/XrAizjeto7K4Ltcx6sAFqWzYA535eQcseafAJm7A4AYacQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMGadnn9nv8csHMFVdxNgfdiSbAMB8GA1UdIwQY
MBaAFF7OEPE8RoBpJqZ5RsxqEQKqCQMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHM0UThUeEdnR2ttcG5sR3pHb1JBcW9KQXhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hZTMzMjMtMGE0OS00ZDdhLTg5NTUt
YjZmN2FlZDg1NmMwLzEvWHM0UThUeEdnR2ttcG5sR3pHb1JBcW9KQXhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hZTMzMjMtMGE0OS00ZDdhLTg5NTUtYjZmN2FlZDg1NmMw
LzEvWHM0UThUeEdnR2ttcG5sR3pHb1JBcW9KQXhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxoxV3FCM
6mZvFUBV1GgkrYY48YMREB8+gpneZytS7t2cFtL1S/AwO2iNNGOFPsoOLJRXoRu7
iMhL6/LSQF+5940CoSTlTOWlizp9tmYfXTCQgZGfUNycNdEN5Wi0h9eg2JFHJZ7i
RBUzlhAzBR/8QoKX47Q2wXrRaBWjH4ws+e8Gk6hwesRsq9+R0qv6K1pmB6wLFVA8
bbssqbRjLrQe9/87ujqaiwsZEjqnrjjhXIrNQgqjjYCY+4SEnLamCGunIoPxRg07
MIl511uRR9GjWzcm0ipKE2ICULiS15ulUqEA/BMWTiB9VRhxF5Sbn4UYLUowzWjM
4OvVrXiu7mh88w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:35 2025 by rpki-client