Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
File: mXpkd92XDJSyoXtSUCmC1Px1skQ.mft (raw, json)
Hash identifier: 8LyoO3+jPG/f/3Md3QShyg6Ug1DxjQQQ4F7cApcHwng=
Subject key identifier: CF:AF:7D:CB:B9:C2:3A:9E:93:E3:CB:20:E6:62:4E:DD:71:D4:2D:94
Authority key identifier: 99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
Certificate issuer: /CN=997a6477dd970c94b2a17b52502982d4fc75b244
Certificate serial: 019A4D3CCC343DD92F589A122152FAF660C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
Manifest number: 0638
Signing time: Tue 04 Nov 2025 05:00:21 +0000
Manifest this update: Tue 04 Nov 2025 05:00:21 +0000
Manifest next update: Wed 05 Nov 2025 05:00:21 +0000
Files and hashes: 1: N5euriRPkrPM5tpe3YMpJKwtnXs.roa (hash: Aif5H8pBLwxI+pfqg48v8EjEzgULti0iCYfChkXvfLI=)
2: mXpkd92XDJSyoXtSUCmC1Px1skQ.crl (hash: Vw+zPVQKEzwQ0jilvDvv9pMS0iGca1KGOmKkp3I/U64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:cc:34:3d:d9:2f:58:9a:12:21:52:fa:f6:60:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997a6477dd970c94b2a17b52502982d4fc75b244
Validity
Not Before: Nov 4 05:00:21 2025 GMT
Not After : Nov 5 05:00:21 2025 GMT
Subject: CN=cfaf7dcbb9c23a9e93e3cb20e6624edd71d42d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:aa:ed:e5:61:bd:39:c7:7b:af:b6:53:9d:
0d:5f:e9:48:f0:8a:76:c8:04:4c:d7:39:ec:da:83:
f5:dc:f1:3d:10:06:9b:fd:c9:97:dd:7c:ab:9d:18:
eb:c3:25:f0:79:16:9f:08:1d:c8:10:a3:48:8f:91:
df:2f:16:53:ba:00:71:92:f9:02:4e:3b:66:07:b2:
4b:25:0d:72:d1:1a:5f:64:44:59:f4:4e:f4:60:5f:
0a:20:af:f8:38:21:8a:bb:33:1e:79:d2:15:92:09:
5f:de:df:a9:bc:6f:12:7b:d1:cb:df:ff:8f:70:86:
6f:b1:1c:bc:7d:02:15:da:dd:4b:3d:27:9b:55:a2:
f8:a1:38:aa:1d:32:c7:54:53:c2:12:1b:0a:94:2d:
61:a7:cc:7c:22:3b:9d:cb:f5:5b:87:d6:d0:7c:6a:
b4:f4:21:43:13:15:02:68:c9:ba:f0:b8:62:63:a4:
78:40:c5:4f:ad:3b:3c:e3:ae:45:23:e5:d7:81:6e:
63:f9:ae:c5:45:a4:40:6f:9a:0a:d6:ad:37:4a:04:
3e:63:d3:7a:f0:fe:4b:e8:c4:99:72:27:76:c7:df:
2f:92:e2:d2:d8:0d:d5:5d:93:ea:97:89:72:8c:73:
0e:2d:81:48:ab:45:cb:06:6b:fe:bb:11:30:1e:b7:
cc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AF:7D:CB:B9:C2:3A:9E:93:E3:CB:20:E6:62:4E:DD:71:D4:2D:94
X509v3 Authority Key Identifier:
keyid:99:7A:64:77:DD:97:0C:94:B2:A1:7B:52:50:29:82:D4:FC:75:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXpkd92XDJSyoXtSUCmC1Px1skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/481466-0e38-4e3b-9bf3-285745647f5f/1/mXpkd92XDJSyoXtSUCmC1Px1skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:68:69:97:e6:1a:2c:2b:ad:8a:41:5c:4f:d8:d1:c7:c7:a0:
f6:94:20:1d:b8:ea:5f:fe:ee:81:6e:91:53:ff:9f:2a:17:73:
b1:f4:a1:b6:15:83:f5:39:52:79:b0:5a:a1:6e:f6:ad:99:3e:
7f:0a:cc:ad:7d:dd:7d:5e:fd:33:f0:42:84:ca:2e:96:35:27:
0d:7e:bb:cc:5b:79:c9:0e:04:46:c6:12:e8:c1:c1:c2:d8:21:
84:39:9a:79:53:84:7b:be:90:a0:24:22:47:b2:4d:48:76:e6:
c7:f1:48:3a:70:8e:cb:c0:9c:a5:72:c8:a7:9a:5e:8d:59:da:
93:47:46:90:f5:55:58:f8:04:3e:74:32:91:6c:0b:15:5b:22:
3d:ea:f5:cf:64:f1:97:07:51:fa:ca:94:aa:d3:42:e4:8b:43:
1b:b7:ce:1d:f9:69:6a:86:00:3b:5f:3f:a3:5d:fb:42:80:d4:
9b:e2:95:2d:cd:77:7a:0a:5a:b7:41:0d:b2:0f:84:67:3b:60:
49:e5:87:b3:8d:23:89:1f:2c:b8:d2:f2:10:4a:e6:ac:2d:23:
62:88:9d:43:c9:15:64:77:d0:01:b9:6f:7e:21:9a:45:90:fe:
67:0b:cb:ea:8e:81:00:56:78:c2:ae:f3:03:dd:3d:82:4c:3b:
ba:8a:bd:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPMw0PdkvWJoSIVL69mDEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5N2E2NDc3ZGQ5NzBjOTRiMmExN2I1MjUwMjk4MmQ0ZmM3
NWIyNDQwHhcNMjUxMTA0MDUwMDIxWhcNMjUxMTA1MDUwMDIxWjAzMTEwLwYDVQQD
EyhjZmFmN2RjYmI5YzIzYTllOTNlM2NiMjBlNjYyNGVkZDcxZDQyZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg2q7eVhvTnHe6+2U50NX+lI8Ip2
yARM1zns2oP13PE9EAab/cmX3XyrnRjrwyXweRafCB3IEKNIj5HfLxZTugBxkvkC
TjtmB7JLJQ1y0RpfZERZ9E70YF8KIK/4OCGKuzMeedIVkglf3t+pvG8Se9HL3/+P
cIZvsRy8fQIV2t1LPSebVaL4oTiqHTLHVFPCEhsKlC1hp8x8Ijudy/Vbh9bQfGq0
9CFDExUCaMm68LhiY6R4QMVPrTs8465FI+XXgW5j+a7FRaRAb5oK1q03SgQ+Y9N6
8P5L6MSZcid2x98vkuLS2A3VXZPql4lyjHMOLYFIq0XLBmv+uxEwHrfMXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+vfcu5wjqek+PLIOZiTt1x1C2UMB8GA1UdIwQY
MBaAFJl6ZHfdlwyUsqF7UlApgtT8dbJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVhwa2Q5MlhESlN5b1h0U1VDbUMxUHgxc2tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS80ODE0NjYtMGUzOC00ZTNiLTliZjMt
Mjg1NzQ1NjQ3ZjVmLzEvbVhwa2Q5MlhESlN5b1h0U1VDbUMxUHgxc2tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS80ODE0NjYtMGUzOC00ZTNiLTliZjMtMjg1NzQ1NjQ3ZjVm
LzEvbVhwa2Q5MlhESlN5b1h0U1VDbUMxUHgxc2tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGhpl+Ya
LCutikFcT9jRx8eg9pQgHbjqX/7ugW6RU/+fKhdzsfShthWD9TlSebBaoW72rZk+
fwrMrX3dfV79M/BChMouljUnDX67zFt5yQ4ERsYS6MHBwtghhDmaeVOEe76QoCQi
R7JNSHbmx/FIOnCOy8CcpXLIp5pejVnak0dGkPVVWPgEPnQykWwLFVsiPer1z2Tx
lwdR+sqUqtNC5ItDG7fOHflpaoYAO18/o137QoDUm+KVLc13egpat0ENsg+EZztg
SeWHs40jiR8suNLyEErmrC0jYoidQ8kVZHfQAblvfiGaRZD+ZwvL6o6BAFZ4wq7z
A909gkw7uoq9pg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:18 2025 by rpki-client