Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json)
Hash identifier: v3GFZ86kPHCOdy2B8WwbTDaY8sLVqGK98cMzi39vWXM=
Subject key identifier: 0C:94:F1:D7:9C:F5:33:87:83:03:F5:7E:FC:AD:1A:AA:C7:C9:5D:75
Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Certificate serial: 019A4EF473A87C2776D2BD1328746A7962A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:00:34 +0000
Manifest this update: Tue 04 Nov 2025 13:00:34 +0000
Manifest next update: Wed 05 Nov 2025 13:00:34 +0000
Files and hashes: 1: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: 2lWaAsaulLSf6FUM0xhYGXFWSXKC4poRGLpV+I0h0gI=)
2: aOlQW-HjiTaqNC1rxfk_lAkcv5A.roa (hash: ECnqpiibCaw2wJdogaxFoaIJMNjyCvBElHPR6vh8uaI=)
3: r0sx0dKkFtH5IxbLaEsFdTPr2X0.roa (hash: EBn7sEe1WosQ18UNra4vN2152bj1ofOm+tLWvyXPfXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:73:a8:7c:27:76:d2:bd:13:28:74:6a:79:62:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Validity
Not Before: Nov 4 13:00:34 2025 GMT
Not After : Nov 5 13:00:34 2025 GMT
Subject: CN=0c94f1d79cf533878303f57efcad1aaac7c95d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:06:db:ea:23:25:2a:47:1a:f2:eb:aa:a9:
de:25:33:5a:ff:ae:96:af:8a:80:5e:1e:18:a2:de:
83:ef:3a:e1:1f:d1:ca:f1:b8:97:4c:2f:0b:83:2b:
10:94:ab:fe:5c:b9:31:cb:8f:eb:9b:e8:42:fe:99:
0a:58:8b:87:6a:0d:97:d4:23:96:03:a6:98:28:a5:
98:fe:a3:2a:97:16:0c:c7:9f:82:d1:9b:91:24:23:
cb:59:06:6f:48:8f:69:a9:9e:1b:2d:58:ed:60:b5:
c6:58:b7:db:17:eb:57:9b:9c:7f:09:ae:dc:40:d1:
80:bf:2b:49:16:18:b8:e4:87:16:ab:e2:56:31:63:
9d:b3:3a:b9:06:9d:98:71:23:9d:5c:b6:ed:c2:4a:
5f:72:31:e7:de:54:63:4a:9f:18:6f:c2:12:d7:39:
09:8d:19:a0:f9:6b:2b:a5:f5:47:c0:43:d2:6f:ee:
71:0a:75:eb:ea:1d:06:06:af:36:56:f7:f7:33:3d:
75:b1:71:71:fa:e9:b7:44:69:72:b2:c1:ac:76:5a:
2d:f7:81:1c:6b:36:37:9a:08:1d:f2:56:19:33:75:
62:8f:ee:c3:6c:13:3d:6d:90:30:5f:d9:3f:f5:0c:
7d:26:76:fe:d1:b7:9c:98:b3:aa:f8:59:80:d3:a1:
aa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:94:F1:D7:9C:F5:33:87:83:03:F5:7E:FC:AD:1A:AA:C7:C9:5D:75
X509v3 Authority Key Identifier:
keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e0:8c:83:79:57:23:89:f4:fb:ba:13:a2:8c:1e:bf:13:4a:
f3:49:5e:b8:80:52:f5:bc:d8:27:61:16:b4:04:f2:c9:e9:3c:
7e:14:e9:c5:88:e7:ee:d6:a3:8a:ad:e2:4d:7f:c5:a9:d5:2a:
d0:4a:34:06:55:30:76:b0:97:e7:19:7f:98:20:f6:be:e8:d8:
32:d2:bd:5b:f2:c8:bc:e2:ce:ce:13:03:6d:8d:72:33:7a:51:
e0:bf:56:87:eb:2b:c4:52:3d:53:51:a4:b9:5d:74:82:ea:8d:
9f:69:c7:09:e8:87:82:f3:4b:7b:25:a4:12:13:00:78:6f:68:
f8:a0:12:58:a5:60:2e:d4:c2:35:98:8e:eb:9b:bb:7d:fc:af:
f0:e3:02:35:9d:b8:2a:3d:5c:3b:b2:60:c8:21:0d:34:8c:b5:
5a:3c:16:e7:b2:ec:74:48:7d:a2:95:0a:12:bd:d4:da:e4:54:
da:67:55:5b:5d:d2:5c:d9:37:c7:fe:5f:e7:0d:39:d0:e8:b0:
42:64:41:d5:fb:f1:18:4f:00:d7:be:0c:f6:a2:f4:e6:f2:81:
aa:a3:54:8f:53:c2:6a:7c:86:a8:22:25:d6:08:c3:b7:7b:e8:
7e:f0:2e:29:1a:99:81:f3:05:18:f7:65:9b:81:e2:cd:27:63:
fd:f1:cf:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9HOofCd20r0TKHRqeWKhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMDVjYjY3MjA5YmJkMTk4M2Y0MzI3NzE2NTIzZWIxNzc3
ZmQ0ZmEwHhcNMjUxMTA0MTMwMDM0WhcNMjUxMTA1MTMwMDM0WjAzMTEwLwYDVQQD
EygwYzk0ZjFkNzljZjUzMzg3ODMwM2Y1N2VmY2FkMWFhYWM3Yzk1ZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndoG2+ojJSpHGvLrqqneJTNa/66W
r4qAXh4Yot6D7zrhH9HK8biXTC8LgysQlKv+XLkxy4/rm+hC/pkKWIuHag2X1COW
A6aYKKWY/qMqlxYMx5+C0ZuRJCPLWQZvSI9pqZ4bLVjtYLXGWLfbF+tXm5x/Ca7c
QNGAvytJFhi45IcWq+JWMWOdszq5Bp2YcSOdXLbtwkpfcjHn3lRjSp8Yb8IS1zkJ
jRmg+WsrpfVHwEPSb+5xCnXr6h0GBq82Vvf3Mz11sXFx+um3RGlyssGsdlot94Ec
azY3mggd8lYZM3Vij+7DbBM9bZAwX9k/9Qx9Jnb+0becmLOq+FmA06GqNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyU8dec9TOHgwP1fvytGqrHyV11MB8GA1UdIwQY
MBaAFF4Fy2cgm70Zg/QydxZSPrF3f9T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgt
MTcxNTkxOTU2N2M5LzEvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgtMTcxNTkxOTU2N2M5
LzEvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOCMg3lX
I4n0+7oToowevxNK80leuIBS9bzYJ2EWtATyyek8fhTpxYjn7tajiq3iTX/FqdUq
0Eo0BlUwdrCX5xl/mCD2vujYMtK9W/LIvOLOzhMDbY1yM3pR4L9Wh+srxFI9U1Gk
uV10guqNn2nHCeiHgvNLeyWkEhMAeG9o+KASWKVgLtTCNZiO65u7ffyv8OMCNZ24
Kj1cO7JgyCENNIy1WjwW57LsdEh9opUKEr3U2uRU2mdVW13SXNk3x/5f5w050Oiw
QmRB1fvxGE8A174M9qL05vKBqqNUj1PCanyGqCIl1gjDt3vofvAuKRqZgfMFGPdl
m4HizSdj/fHPVw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:28 2025 by rpki-client