Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
File: Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json)
Hash identifier: P8MRKFqmTULcPM5irDh5sQcG9Aw4SctbMA+u/EPKBX4=
Subject key identifier: 1E:B7:CA:8F:79:6C:C4:7C:A0:14:10:45:8D:25:C9:DB:F0:FD:C9:2F
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 019A4EF4CB52E7693781D6FA2A68EC9423AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
Manifest number: 0BFE
Signing time: Tue 04 Nov 2025 13:00:56 +0000
Manifest this update: Tue 04 Nov 2025 13:00:56 +0000
Manifest next update: Wed 05 Nov 2025 13:00:56 +0000
Files and hashes: 1: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: AE4IglsralGFNTbe5XqZsu+4XqNCXBYt1jt6cBDHljc=)
2: fcJb-6V4S8Ggt4XkeQ4z4NeOvBg.roa (hash: Ok0E8qecmwKHIVZlR2uj+ZosbjuqbuM99KMf84z3ECc=)
3: p4_ii_5CQnYwGbo3_8Nwum53Fnk.roa (hash: yPjrncDLc3pAW7ob7SlQAI0rDTeDl6C5CrdsoONunQ0=)
4: uR0GCgMzcLoo7kMNpml9uCS8CMM.roa (hash: QU71NgSIyG52g0tQUOMPeRAsoX9aQ7+oGv7C6ynHtWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:cb:52:e7:69:37:81:d6:fa:2a:68:ec:94:23:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: Nov 4 13:00:56 2025 GMT
Not After : Nov 5 13:00:56 2025 GMT
Subject: CN=1eb7ca8f796cc47ca01410458d25c9dbf0fdc92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:e5:7e:75:36:25:1e:73:e0:00:a5:74:9c:
41:e8:d9:2c:26:bb:f0:06:7d:eb:65:8b:97:db:65:
be:0f:c2:bc:54:82:79:f3:2b:db:c0:95:e7:1c:26:
2c:b2:ff:b0:3e:26:f1:be:ea:49:cf:30:75:ab:84:
17:95:b9:7f:81:a1:b6:6d:a7:43:53:26:9d:3f:0f:
77:2b:ae:b3:80:05:93:9a:ef:2b:c1:98:74:3d:a6:
66:e0:0c:77:10:20:6a:11:c8:0a:ee:40:a0:91:e8:
18:0b:17:b7:6b:4d:5a:96:bd:fd:8c:a9:1e:2a:c9:
f8:4a:8a:3b:eb:be:b8:a6:93:17:fd:4b:f5:4a:43:
ea:84:86:eb:44:60:67:df:ef:bb:a8:91:a5:b3:a6:
c4:9e:0e:92:ab:3a:ca:87:56:2f:5f:8e:fa:82:bb:
3a:d2:5e:67:a6:f2:95:eb:53:82:9f:a6:91:57:aa:
b3:6c:8a:b7:e4:a7:a1:86:95:9f:fb:84:fe:f5:eb:
26:64:91:a8:c5:3e:d8:07:7f:d1:b2:ff:a3:ea:f7:
81:ab:95:b1:5a:fc:9f:b0:1d:46:98:f9:fc:5a:78:
00:40:00:83:c9:36:89:a1:95:01:b8:8d:3a:35:a3:
8b:4a:fe:00:32:58:4b:5a:ab:7d:cc:8d:cb:d4:5a:
5c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B7:CA:8F:79:6C:C4:7C:A0:14:10:45:8D:25:C9:DB:F0:FD:C9:2F
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0d:de:10:d7:bb:2e:2e:56:bd:c8:76:87:05:60:d7:c6:d1:
d6:17:1f:ae:14:9c:eb:7d:37:50:e7:d9:cb:19:c1:b1:34:27:
c5:ce:07:e3:5e:c1:21:d1:ad:bb:f2:13:41:22:43:59:30:ec:
f3:19:aa:c3:0d:bc:56:59:f2:af:20:3f:df:86:26:b9:47:9e:
c7:a4:27:16:8c:6e:e3:6e:1f:63:82:f7:35:14:9f:21:52:5b:
1c:d6:da:26:85:e8:38:95:0f:1a:a8:a2:22:5b:90:11:a1:0a:
66:6b:a7:c1:2b:96:20:6c:9b:fa:5d:a4:6d:3f:cc:b2:09:97:
82:65:66:bf:e2:3d:b0:8c:88:c7:36:47:a3:60:d1:76:7a:02:
4c:14:70:ce:1a:59:2f:2e:0b:ef:0a:a3:46:80:8b:b6:e7:d8:
f4:8c:a1:db:63:f9:85:26:e6:68:c5:be:c6:6d:e6:ee:96:f3:
8b:35:41:5f:40:bd:2b:c0:3e:2d:f0:c1:1f:97:17:51:e1:b4:
0b:40:4a:e1:49:b5:cf:7b:16:88:c8:50:cd:99:9a:2a:cc:4a:
6b:9e:ed:3b:b9:88:99:51:2a:67:52:fc:4e:67:ca:6d:b1:15:
bd:08:4f:53:e2:c5:d7:32:be:85:1d:e4:96:57:aa:6a:17:f9:
5f:d4:85:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9MtS52k3gdb6KmjslCOrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMWYyMTNiOGM3OTJiN2UwMTNmYTUwNDFmNWI4OTk3MWU2
ZjYyZDYwHhcNMjUxMTA0MTMwMDU2WhcNMjUxMTA1MTMwMDU2WjAzMTEwLwYDVQQD
EygxZWI3Y2E4Zjc5NmNjNDdjYTAxNDEwNDU4ZDI1YzlkYmYwZmRjOTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZLlfnU2JR5z4ACldJxB6NksJrvw
Bn3rZYuX22W+D8K8VIJ58yvbwJXnHCYssv+wPibxvupJzzB1q4QXlbl/gaG2badD
UyadPw93K66zgAWTmu8rwZh0PaZm4Ax3ECBqEcgK7kCgkegYCxe3a01alr39jKke
Ksn4Soo76764ppMX/Uv1SkPqhIbrRGBn3++7qJGls6bEng6SqzrKh1YvX476grs6
0l5npvKV61OCn6aRV6qzbIq35KehhpWf+4T+9esmZJGoxT7YB3/Rsv+j6veBq5Wx
WvyfsB1GmPn8WngAQACDyTaJoZUBuI06NaOLSv4AMlhLWqt9zI3L1FpcxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB63yo95bMR8oBQQRY0lydvw/ckvMB8GA1UdIwQY
MBaAFF8fITuMeSt+AT+lBB9biZceb2LWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zMmY4ZDMtNzMyOC00NWYwLWEwMDct
NDAyMjM4NjM4ZWEzLzEvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zMmY4ZDMtNzMyOC00NWYwLWEwMDctNDAyMjM4NjM4ZWEz
LzEvWHg4aE80eDVLMzRCUDZVRUgxdUpseDV2WXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYw3eENe7
Li5Wvch2hwVg18bR1hcfrhSc6303UOfZyxnBsTQnxc4H417BIdGtu/ITQSJDWTDs
8xmqww28VlnyryA/34YmuUeex6QnFoxu424fY4L3NRSfIVJbHNbaJoXoOJUPGqii
IluQEaEKZmunwSuWIGyb+l2kbT/MsgmXgmVmv+I9sIyIxzZHo2DRdnoCTBRwzhpZ
Ly4L7wqjRoCLtufY9Iyh22P5hSbmaMW+xm3m7pbzizVBX0C9K8A+LfDBH5cXUeG0
C0BK4Um1z3sWiMhQzZmaKsxKa57tO7mImVEqZ1L8TmfKbbEVvQhPU+LF1zK+hR3k
lleqahf5X9SF3w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:09 2025 by rpki-client