Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
File: x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft (raw, json)
Hash identifier: C5MAxYiv2g7xmF+8joSrpOQq8YBq5VbQvpN+fDEBXRY=
Subject key identifier: BD:A5:E3:10:4C:8B:ED:12:6F:32:47:82:2E:2D:03:E4:5E:09:E7:4E
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 019A50E2EEB07A9D0E015E5F7CCD07836FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
Manifest number: 1356
Signing time: Tue 04 Nov 2025 22:00:40 +0000
Manifest this update: Tue 04 Nov 2025 22:00:40 +0000
Manifest next update: Wed 05 Nov 2025 22:00:40 +0000
Files and hashes: 1: ORZQ3TzlAnbqpUbLBvAypexe6yo.roa (hash: Yedmm0b14/xeLz9/IuhulJeoi6LG8nDdvf2zdmYeKsI=)
2: bHvrcJVM0y_8UrKAkmAx19ngbcE.roa (hash: 4t/UW5F2VPqOIt+6Vl0Kdb4c0JMpjSNkucxjES6YCqM=)
3: x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl (hash: 3RsQgkX5k1xymCC7alSOuXwPrzwwyuWzK9hBfmFOc+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:ee:b0:7a:9d:0e:01:5e:5f:7c:cd:07:83:6f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: Nov 4 22:00:40 2025 GMT
Not After : Nov 5 22:00:40 2025 GMT
Subject: CN=bda5e3104c8bed126f3247822e2d03e45e09e74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:67:3b:9c:30:76:38:b1:11:b0:78:b5:45:59:
dd:63:5d:c0:a4:ad:3e:06:a4:a3:9c:ac:eb:3d:35:
1d:33:61:b4:0d:53:c2:99:ba:f1:eb:7e:5d:bd:e7:
31:bf:8c:1e:bf:c4:2d:49:d9:c9:a2:01:b5:7c:6f:
21:96:96:a7:4d:7e:12:bd:d3:5d:06:7f:d9:03:79:
c5:53:9e:88:a7:cd:28:95:63:9c:a0:9c:80:a8:35:
88:02:c8:ac:b1:7a:2f:b9:16:b3:97:4e:cb:a7:1c:
0a:1c:de:66:1d:45:09:5d:75:23:24:18:84:1e:d3:
28:04:38:71:e7:b4:ed:99:a9:15:1a:e1:99:9a:5e:
30:55:c1:3e:d9:55:db:04:0e:ae:b0:ab:ac:a0:e3:
e8:fb:df:68:c4:b9:8d:8c:a7:b2:14:60:bd:6d:5a:
c3:26:9a:52:a5:4f:fb:2c:46:60:96:01:ba:cd:f4:
b7:5b:e9:b6:91:cf:e0:2f:a9:5c:c7:18:02:4a:4b:
ab:4a:97:64:97:2d:4c:7a:6e:83:fc:56:00:00:ec:
f5:d7:94:16:3d:c6:0d:66:c8:9f:f3:df:cc:b6:a2:
7a:af:6d:5f:52:b4:4e:f4:53:3a:42:3a:12:de:72:
ed:a2:4d:74:99:b6:40:de:b7:6a:7c:95:04:df:1a:
ed:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A5:E3:10:4C:8B:ED:12:6F:32:47:82:2E:2D:03:E4:5E:09:E7:4E
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9a:ac:23:4a:1d:e4:8a:e0:11:53:f6:a0:72:40:36:6e:f6:
4c:07:51:96:45:a9:c0:23:02:66:7a:c2:65:2b:46:35:3d:a0:
67:a0:91:39:d0:14:ff:6f:0c:19:2a:7e:d9:7c:19:ec:8c:31:
28:bf:ad:99:43:77:ce:d2:cf:9a:c0:4a:d0:09:4f:f8:67:33:
40:0c:8d:22:f1:c2:62:b9:14:fa:73:1d:61:72:32:3e:24:a0:
5f:cc:0d:c0:85:a1:17:de:17:7d:2c:88:70:31:80:08:51:7e:
8d:8c:ad:fb:dd:a4:fa:1d:ad:7c:df:a5:b8:8a:1d:7c:78:1b:
ff:21:17:76:79:6d:75:b9:94:f6:94:ef:28:54:cf:c0:4e:1e:
37:35:4b:89:d4:4f:a2:14:3c:9d:09:61:1f:e8:56:a8:9e:9b:
32:76:16:30:e2:a6:f4:51:44:76:7c:8a:31:13:4a:fa:38:55:
90:e8:11:cb:92:a0:94:8b:07:7f:6c:12:5d:cc:28:ef:d6:59:
65:65:66:14:a6:9d:f2:ae:68:0e:92:dd:cb:05:2c:f7:a4:50:
ee:91:04:6f:45:95:6a:39:64:ba:27:36:24:f6:53:44:3c:d6:
e9:4b:aa:04:cb:47:63:42:05:7e:6f:40:d9:17:4a:6a:6f:3c:
c0:c4:23:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4u6wep0OAV5ffM0Hg2/1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZGI1NmNkYTJlN2RkYjAyMzE2OGM1ZDc3ZWM5N2Q5YTAw
NmJhZWQwHhcNMjUxMTA0MjIwMDQwWhcNMjUxMTA1MjIwMDQwWjAzMTEwLwYDVQQD
EyhiZGE1ZTMxMDRjOGJlZDEyNmYzMjQ3ODIyZTJkMDNlNDVlMDllNzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2c7nDB2OLERsHi1RVndY13ApK0+
BqSjnKzrPTUdM2G0DVPCmbrx635dvecxv4wev8QtSdnJogG1fG8hlpanTX4SvdNd
Bn/ZA3nFU56Ip80olWOcoJyAqDWIAsissXovuRazl07LpxwKHN5mHUUJXXUjJBiE
HtMoBDhx57TtmakVGuGZml4wVcE+2VXbBA6usKusoOPo+99oxLmNjKeyFGC9bVrD
JppSpU/7LEZglgG6zfS3W+m2kc/gL6lcxxgCSkurSpdkly1Mem6D/FYAAOz115QW
PcYNZsif89/MtqJ6r21fUrRO9FM6QjoS3nLtok10mbZA3rdqfJUE3xrtjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2l4xBMi+0SbzJHgi4tA+ReCedOMB8GA1UdIwQY
MBaAFMfbVs2i592wIxaMXXfsl9mgBrrtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDl0V3phTG4zYkFqRm94ZGQteVgyYUFHdXUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hOTc4YWItNDNkNS00MzM1LWFmYTIt
ODJlYjZmZDExZGQ1LzEveDl0V3phTG4zYkFqRm94ZGQteVgyYUFHdXUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hOTc4YWItNDNkNS00MzM1LWFmYTItODJlYjZmZDExZGQ1
LzEveDl0V3phTG4zYkFqRm94ZGQteVgyYUFHdXUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5qsI0od
5IrgEVP2oHJANm72TAdRlkWpwCMCZnrCZStGNT2gZ6CROdAU/28MGSp+2XwZ7Iwx
KL+tmUN3ztLPmsBK0AlP+GczQAyNIvHCYrkU+nMdYXIyPiSgX8wNwIWhF94XfSyI
cDGACFF+jYyt+92k+h2tfN+luIodfHgb/yEXdnltdbmU9pTvKFTPwE4eNzVLidRP
ohQ8nQlhH+hWqJ6bMnYWMOKm9FFEdnyKMRNK+jhVkOgRy5KglIsHf2wSXcwo79ZZ
ZWVmFKad8q5oDpLdywUs96RQ7pEEb0WVajlkuic2JPZTRDzW6UuqBMtHY0IFfm9A
2RdKam88wMQj3Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:04:36 2025 by rpki-client