Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
File: XK56oVlNiZKbERo3Hw_ybyAvWOI.mft (raw, json)
Hash identifier: 6GsU0lBrqHeDOFAmN1EqK8UHWEpZS6pm5LxpgLRCuLU=
Subject key identifier: 50:B0:4D:CE:0A:E2:01:D7:D4:CF:5A:C7:09:1D:F8:A2:BC:F5:FF:CF
Authority key identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
Certificate issuer: /CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Certificate serial: 019A53085274EC2E9A427123FAF478C154FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
Manifest number: 1600
Signing time: Wed 05 Nov 2025 08:00:45 +0000
Manifest this update: Wed 05 Nov 2025 08:00:45 +0000
Manifest next update: Thu 06 Nov 2025 08:00:45 +0000
Files and hashes: 1: HdC41_gg5ZlJREFwcD8B_s_Bra8.roa (hash: GXMzejpdmlRhTsyiOMLzEkSoVbxi2Wz+Z222Mkk/eAI=)
2: XK56oVlNiZKbERo3Hw_ybyAvWOI.crl (hash: WA+uo9ksilZd/zVzAhpmPXrEpmP5u8KQJ4jHaQMA0fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:52:74:ec:2e:9a:42:71:23:fa:f4:78:c1:54:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Validity
Not Before: Nov 5 08:00:45 2025 GMT
Not After : Nov 6 08:00:45 2025 GMT
Subject: CN=50b04dce0ae201d7d4cf5ac7091df8a2bcf5ffcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8a:04:d0:e7:51:30:2c:01:7c:cb:60:fe:11:
da:d4:04:a6:7e:95:7f:64:94:9d:dd:86:d9:4e:05:
54:1b:24:46:90:5e:4d:0a:c8:7e:4c:0f:96:4a:3c:
d5:be:a0:1b:de:45:c0:61:59:6d:8b:dd:46:1b:37:
12:62:0e:60:24:da:e7:55:43:55:a3:75:8c:95:dd:
4d:19:78:88:b7:34:96:8b:e1:e2:b1:0f:69:13:fc:
6d:bf:f9:67:1b:83:1a:9b:db:74:1e:52:97:f2:ef:
bd:e8:fa:e0:3d:7e:59:07:bd:95:09:41:4a:6c:2b:
40:c7:48:e1:14:8e:1a:44:df:76:bb:70:ac:a8:bf:
2b:05:76:93:c5:3e:a8:85:04:01:9c:eb:70:47:06:
49:02:d9:5c:32:b8:ef:c8:36:3e:fc:3f:58:e3:d0:
bf:f5:67:55:b8:1a:b3:69:ad:5b:c6:44:90:9a:08:
83:ae:57:05:6a:30:f9:7c:93:0c:69:ef:48:04:5a:
d9:38:ea:80:13:6a:b4:c6:6e:39:bc:09:fd:97:a6:
70:6c:df:34:83:62:89:68:36:1a:ed:67:f5:6c:4f:
e8:2c:a8:bd:81:24:05:f2:5e:d1:9a:2d:f2:a8:c5:
c1:fa:49:04:74:c9:ef:48:78:78:eb:df:78:64:4a:
be:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B0:4D:CE:0A:E2:01:D7:D4:CF:5A:C7:09:1D:F8:A2:BC:F5:FF:CF
X509v3 Authority Key Identifier:
keyid:5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d1:09:ed:58:10:e6:e5:6d:43:35:ea:91:0e:be:68:70:ae:
b8:9d:04:c1:0b:1d:27:25:f3:9d:cc:0d:18:33:36:65:3e:64:
51:3e:79:20:91:6d:e6:ab:02:e0:6a:0f:0e:e8:3d:10:3c:aa:
13:2d:f6:b8:13:b3:0c:4c:18:b5:98:e3:3b:7c:49:4c:50:6d:
ba:af:2f:87:5a:20:bc:a2:aa:94:39:51:a6:29:db:cb:ab:85:
ed:ac:ac:a9:6a:e8:3a:38:4c:a3:fc:a2:f4:f4:ec:3c:bc:0a:
48:21:8b:de:04:03:65:26:62:a5:b8:e2:18:65:ba:aa:ac:0a:
ea:9b:23:0b:b6:f9:c2:91:e5:d1:59:2f:7e:14:2d:c4:b8:51:
94:9c:d6:46:b7:33:cc:3f:46:24:84:c7:e9:7b:06:e1:b3:fa:
0a:54:3d:88:d7:60:60:54:5e:32:2c:e6:68:67:49:83:ff:21:
af:83:61:5b:8d:d9:1a:db:fc:4a:4a:46:f1:0b:ed:22:d5:c0:
ef:74:fb:db:5f:b0:54:3b:ef:c8:bb:a4:cc:32:d3:b0:12:c1:
44:b9:d3:ed:50:53:8c:ae:db:cb:cb:83:7d:cd:cd:be:3a:98:
49:70:1b:42:24:e6:17:3f:6d:18:68:40:67:d4:59:a6:46:60:
31:86:f0:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTCFJ07C6aQnEj+vR4wVT/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYWU3YWExNTk0ZDg5OTI5YjExMWEzNzFmMGZmMjZmMjAy
ZjU4ZTIwHhcNMjUxMTA1MDgwMDQ1WhcNMjUxMTA2MDgwMDQ1WjAzMTEwLwYDVQQD
Eyg1MGIwNGRjZTBhZTIwMWQ3ZDRjZjVhYzcwOTFkZjhhMmJjZjVmZmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxooE0OdRMCwBfMtg/hHa1ASmfpV/
ZJSd3YbZTgVUGyRGkF5NCsh+TA+WSjzVvqAb3kXAYVlti91GGzcSYg5gJNrnVUNV
o3WMld1NGXiItzSWi+HisQ9pE/xtv/lnG4Mam9t0HlKX8u+96PrgPX5ZB72VCUFK
bCtAx0jhFI4aRN92u3CsqL8rBXaTxT6ohQQBnOtwRwZJAtlcMrjvyDY+/D9Y49C/
9WdVuBqzaa1bxkSQmgiDrlcFajD5fJMMae9IBFrZOOqAE2q0xm45vAn9l6ZwbN80
g2KJaDYa7Wf1bE/oLKi9gSQF8l7Rmi3yqMXB+kkEdMnvSHh46994ZEq+DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCwTc4K4gHX1M9axwkd+KK89f/PMB8GA1UdIwQY
MBaAFFyueqFZTYmSmxEaNx8P8m8gL1jiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81ZTZiYWUtOTYyZi00MDU3LThlYzUt
Mjc5ZjU5NGIzYTJmLzEvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81ZTZiYWUtOTYyZi00MDU3LThlYzUtMjc5ZjU5NGIzYTJm
LzEvWEs1Nm9WbE5pWktiRVJvM0h3X3lieUF2V09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNEJ7VgQ
5uVtQzXqkQ6+aHCuuJ0EwQsdJyXzncwNGDM2ZT5kUT55IJFt5qsC4GoPDug9EDyq
Ey32uBOzDEwYtZjjO3xJTFBtuq8vh1ogvKKqlDlRpinby6uF7aysqWroOjhMo/yi
9PTsPLwKSCGL3gQDZSZipbjiGGW6qqwK6psjC7b5wpHl0VkvfhQtxLhRlJzWRrcz
zD9GJITH6XsG4bP6ClQ9iNdgYFReMizmaGdJg/8hr4NhW43ZGtv8SkpG8QvtItXA
73T721+wVDvvyLukzDLTsBLBRLnT7VBTjK7by8uDfc3NvjqYSXAbQiTmFz9tGGhA
Z9RZpkZgMYbweA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:41:29 2025 by rpki-client