Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File: rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier: Z7jVfpC6JpauHf2dCNdpbW8I68+XfEJj88YGoJ3/ulo=
Subject key identifier: 91:7D:A3:EF:B4:30:7B:1B:68:94:53:E5:46:E6:59:D6:4B:38:67:06
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer: /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial: 019A4DE1D1897B0546FEBADF9FA0EEC08B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number: 124C
Signing time: Tue 04 Nov 2025 08:00:36 +0000
Manifest this update: Tue 04 Nov 2025 08:00:36 +0000
Manifest next update: Wed 05 Nov 2025 08:00:36 +0000
Files and hashes: 1: GLfBevz3wo4dWS7xfj6ER67qM3I.roa (hash: q4r6hj69iY9YNJGXRxob1aI8UDhv8Z84d+2MRw6HY98=)
2: dwfEfRg8877Atw4vgQddrhHW_dc.roa (hash: SdtTc5eD1TxuTF/mYnxmN25vPFVewXwZEmOu76MAXN0=)
3: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: MHFVgZjcQ95yUpxTtJ3SGH/bCYbkxX6yN2JRDYyxq2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d1:89:7b:05:46:fe:ba:df:9f:a0:ee:c0:8b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
Validity
Not Before: Nov 4 08:00:36 2025 GMT
Not After : Nov 5 08:00:36 2025 GMT
Subject: CN=917da3efb4307b1b689453e546e659d64b386706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:63:95:8f:ae:f5:24:6f:af:d0:21:ab:aa:
7b:75:4f:66:a7:03:2b:b6:2d:f9:1d:9e:32:e7:46:
19:7b:60:aa:99:6a:4c:6a:06:88:00:c7:ab:99:c6:
5f:77:1d:7d:b8:6b:c5:11:c0:54:42:ce:e4:42:49:
1e:f0:71:b4:14:6b:b2:ae:98:57:db:f6:b7:16:66:
c4:d5:9d:3e:45:8b:db:42:b0:41:73:0c:7d:d5:fd:
31:dd:c7:88:e7:41:10:05:70:95:c8:89:7e:76:37:
97:5a:8b:5c:79:52:1e:b8:5d:f6:c6:86:ff:d2:87:
8d:2c:de:f9:20:32:37:1c:c5:2a:aa:c0:60:d5:4f:
f7:4a:ae:0b:91:bf:29:30:13:f1:43:47:76:ed:ae:
9a:e0:32:04:ac:2a:01:1e:a2:b4:36:42:d7:6a:ab:
43:7a:87:f3:00:96:06:c6:e5:78:23:d6:73:f7:48:
d6:84:df:ea:93:34:c8:23:51:a2:4b:11:ee:16:d0:
eb:30:cc:a3:f4:e1:4c:39:bd:4c:20:7a:be:5d:29:
72:fd:87:fc:86:0b:7a:7d:d7:7f:76:4e:72:8e:c3:
2b:d7:66:00:41:ca:47:c2:bd:c6:11:9f:24:39:bf:
6f:88:11:d0:80:bc:7f:8b:f6:b5:eb:3e:c4:29:84:
df:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7D:A3:EF:B4:30:7B:1B:68:94:53:E5:46:E6:59:D6:4B:38:67:06
X509v3 Authority Key Identifier:
keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a7:27:c2:29:c0:36:8c:62:63:b5:7e:88:ea:60:63:36:2e:
0e:9c:82:62:e0:c1:75:df:b8:4a:89:18:be:97:00:89:4b:2f:
c4:be:fa:8e:38:7e:59:59:29:72:6a:df:93:d1:6c:61:ea:35:
d6:bf:11:9d:a1:17:1c:e1:6a:3e:6b:e6:9f:d5:ea:7b:6b:da:
48:1c:f1:5b:cd:50:07:5b:33:64:8b:73:47:38:76:e6:a1:0e:
7a:5f:1b:21:5b:2a:6c:6d:5c:29:8f:24:1b:c5:a5:b6:66:56:
e1:5e:10:e4:cf:85:f7:be:0b:47:5e:fc:23:80:65:71:79:d1:
08:80:26:2b:b1:2e:ab:3a:0c:7e:15:c8:6b:08:b2:72:0c:69:
c3:5d:7f:b6:65:4d:32:d8:d8:75:3e:43:84:a3:b9:0a:01:74:
b3:75:a4:85:2f:f2:38:dd:36:eb:1e:2a:a6:9f:5a:db:fc:fb:
f4:30:c0:14:6c:12:82:fc:39:b8:08:bc:60:3f:c8:32:88:f0:
cc:49:41:ad:16:d0:ab:15:c7:79:d4:54:25:54:85:6d:31:c4:
9e:64:00:3f:a2:1c:a1:a6:73:05:47:f6:a3:0b:ec:74:0a:17:
db:86:58:c5:56:67:d1:7c:3c:a4:5c:82:25:48:2d:31:9b:d7:
82:a9:4e:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4dGJewVG/rrfn6DuwIuSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMTIxY2Q2ZTExZGEwOTVmODU2ZDc5ZGVlYzQ2OWQwYzYz
NTg0OTQwHhcNMjUxMTA0MDgwMDM2WhcNMjUxMTA1MDgwMDM2WjAzMTEwLwYDVQQD
Eyg5MTdkYTNlZmI0MzA3YjFiNjg5NDUzZTU0NmU2NTlkNjRiMzg2NzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcdjlY+u9SRvr9Ahq6p7dU9mpwMr
ti35HZ4y50YZe2CqmWpMagaIAMermcZfdx19uGvFEcBUQs7kQkke8HG0FGuyrphX
2/a3FmbE1Z0+RYvbQrBBcwx91f0x3ceI50EQBXCVyIl+djeXWotceVIeuF32xob/
0oeNLN75IDI3HMUqqsBg1U/3Sq4Lkb8pMBPxQ0d27a6a4DIErCoBHqK0NkLXaqtD
eofzAJYGxuV4I9Zz90jWhN/qkzTII1GiSxHuFtDrMMyj9OFMOb1MIHq+XSly/Yf8
hgt6fdd/dk5yjsMr12YAQcpHwr3GEZ8kOb9viBHQgLx/i/a16z7EKYTf9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJF9o++0MHsbaJRT5UbmWdZLOGcGMB8GA1UdIwQY
MBaAFK8SHNbhHaCV+FbXne7EadDGNYSUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEt
YWYzZjc5NGFlNjA3LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEtYWYzZjc5NGFlNjA3
LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtqcnwinA
NoxiY7V+iOpgYzYuDpyCYuDBdd+4SokYvpcAiUsvxL76jjh+WVkpcmrfk9FsYeo1
1r8RnaEXHOFqPmvmn9Xqe2vaSBzxW81QB1szZItzRzh25qEOel8bIVsqbG1cKY8k
G8WltmZW4V4Q5M+F974LR178I4BlcXnRCIAmK7EuqzoMfhXIawiycgxpw11/tmVN
MtjYdT5DhKO5CgF0s3WkhS/yON026x4qpp9a2/z79DDAFGwSgvw5uAi8YD/IMojw
zElBrRbQqxXHedRUJVSFbTHEnmQAP6IcoaZzBUf2owvsdAoX24ZYxVZn0Xw8pFyC
JUgtMZvXgqlOEw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:58 2025 by rpki-client