Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
File: X2c9L2Ia4xQHABdIu95jisvYYFA.mft (raw, json)
Hash identifier: 4T0WdOuO+srspA6kHgilgoDJsBBwqex1OOwl8mN9El4=
Subject key identifier: 1A:D4:02:80:14:31:38:5E:38:0C:F5:B1:93:91:1F:6A:7B:6C:20:7A
Authority key identifier: 5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
Certificate issuer: /CN=5f673d2f621ae31407001748bbde638acbd86050
Certificate serial: 019A4EF4D39007E311F9783C0DA6A581EDAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
Manifest number: 0782
Signing time: Tue 04 Nov 2025 13:00:59 +0000
Manifest this update: Tue 04 Nov 2025 13:00:59 +0000
Manifest next update: Wed 05 Nov 2025 13:00:59 +0000
Files and hashes: 1: HqDRIksWN36QXauqYoD2knIGjbc.roa (hash: 05DMa/ontaHtCWdbIzNxIFAgYET2ZoK4nwid3joHlm8=)
2: X2c9L2Ia4xQHABdIu95jisvYYFA.crl (hash: RjQClMQDyKZCsOrgOL8TXeTUbY91TGBpkLnHTSCj5zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:d3:90:07:e3:11:f9:78:3c:0d:a6:a5:81:ed:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f673d2f621ae31407001748bbde638acbd86050
Validity
Not Before: Nov 4 13:00:59 2025 GMT
Not After : Nov 5 13:00:59 2025 GMT
Subject: CN=1ad402801431385e380cf5b193911f6a7b6c207a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:30:e8:4e:3c:d3:db:31:3c:40:31:8c:c4:
97:e2:ba:41:ac:f6:54:de:ad:4b:59:4f:c9:83:59:
63:3a:d3:bb:20:7e:1a:f8:35:f7:4c:89:43:2d:50:
a2:13:c9:bf:1b:6c:2c:e6:b3:56:23:83:a5:15:3d:
90:60:4d:01:ea:c8:fe:80:82:6f:58:3e:cd:0b:56:
c3:6f:49:c4:ec:99:ba:9d:48:5a:30:aa:34:24:4c:
91:46:fe:d5:59:4e:7a:01:03:82:9c:fe:f5:6c:07:
ba:88:f6:ab:66:4a:eb:f5:05:d2:f5:12:c4:57:32:
47:4c:13:65:c5:d5:58:30:76:d5:1d:87:95:4e:59:
58:5a:df:c1:11:f0:2b:60:d5:c0:3d:f8:f2:e8:33:
7f:fe:3b:dc:fa:d1:4b:59:db:a9:e0:81:a5:86:a4:
84:f3:3d:4f:76:e7:b6:5a:62:21:b1:04:d9:ca:dd:
0b:a0:1e:43:be:ba:51:17:5d:eb:f7:af:13:d1:84:
32:b3:f1:6f:49:3e:12:0a:63:60:11:03:db:c2:34:
4d:8a:60:57:8d:bd:40:bd:a6:16:7d:1d:74:35:a7:
ff:26:3d:28:b1:10:e1:7d:00:67:91:3d:a7:07:36:
a0:27:ec:7e:dc:e1:53:56:d6:2e:5b:28:89:f7:ac:
1a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D4:02:80:14:31:38:5E:38:0C:F5:B1:93:91:1F:6A:7B:6C:20:7A
X509v3 Authority Key Identifier:
keyid:5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:31:e2:70:f0:a4:e5:c7:bd:2a:9c:b8:95:d0:f1:fa:4d:b2:
72:e0:d6:66:90:40:5c:56:4d:e2:9e:7f:54:50:74:9e:a7:a7:
35:62:e2:ba:ee:cb:6a:39:9e:59:7a:7a:58:b6:5b:e1:85:7d:
a6:e6:2a:9a:5f:88:4d:14:df:12:61:db:c4:89:7e:32:95:37:
e3:49:5b:6e:72:7f:fb:fe:b1:23:5f:bb:49:e5:fe:49:57:53:
09:c2:07:b0:aa:85:11:1a:58:30:7a:89:f4:3e:61:1e:0d:bf:
4c:23:3b:7f:e8:73:f1:97:e7:19:b8:f2:3e:74:fa:39:78:18:
db:69:35:4f:fc:c6:17:fe:b0:c3:56:08:b4:0e:d8:b8:b6:af:
10:1c:a6:93:d1:62:f7:62:11:56:04:75:cf:1a:67:02:77:df:
e1:82:91:9d:d2:22:e5:75:48:81:7d:d9:33:88:43:1a:38:7a:
fd:a4:bc:d0:1a:79:e3:80:10:9d:ab:e5:07:45:11:ac:15:76:
41:64:89:ff:18:8b:29:d3:68:8e:ab:df:ee:a7:10:5e:04:51:
3f:dc:2f:b5:c7:01:5c:2c:ac:ec:6c:ca:b8:39:c8:65:17:ee:
33:ae:49:11:4f:62:16:74:28:e3:c4:a2:dc:26:3b:4e:45:7d:
86:e1:16:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9NOQB+MR+Xg8Daalge2qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNjczZDJmNjIxYWUzMTQwNzAwMTc0OGJiZGU2MzhhY2Jk
ODYwNTAwHhcNMjUxMTA0MTMwMDU5WhcNMjUxMTA1MTMwMDU5WjAzMTEwLwYDVQQD
EygxYWQ0MDI4MDE0MzEzODVlMzgwY2Y1YjE5MzkxMWY2YTdiNmMyMDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGEw6E4809sxPEAxjMSX4rpBrPZU
3q1LWU/Jg1ljOtO7IH4a+DX3TIlDLVCiE8m/G2ws5rNWI4OlFT2QYE0B6sj+gIJv
WD7NC1bDb0nE7Jm6nUhaMKo0JEyRRv7VWU56AQOCnP71bAe6iParZkrr9QXS9RLE
VzJHTBNlxdVYMHbVHYeVTllYWt/BEfArYNXAPfjy6DN//jvc+tFLWdup4IGlhqSE
8z1Pdue2WmIhsQTZyt0LoB5DvrpRF13r968T0YQys/FvST4SCmNgEQPbwjRNimBX
jb1AvaYWfR10Naf/Jj0osRDhfQBnkT2nBzagJ+x+3OFTVtYuWyiJ96waYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrUAoAUMTheOAz1sZORH2p7bCB6MB8GA1UdIwQY
MBaAFF9nPS9iGuMUBwAXSLveY4rL2GBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDJjOUwySWE0eFFIQUJkSXU5NWppc3ZZWUZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82NTI3ODAtM2VhMS00MTVlLTgzOWUt
ODQ0NzI5MTM3ZWU1LzEvWDJjOUwySWE0eFFIQUJkSXU5NWppc3ZZWUZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82NTI3ODAtM2VhMS00MTVlLTgzOWUtODQ0NzI5MTM3ZWU1
LzEvWDJjOUwySWE0eFFIQUJkSXU5NWppc3ZZWUZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjHicPCk
5ce9Kpy4ldDx+k2ycuDWZpBAXFZN4p5/VFB0nqenNWLiuu7LajmeWXp6WLZb4YV9
puYqml+ITRTfEmHbxIl+MpU340lbbnJ/+/6xI1+7SeX+SVdTCcIHsKqFERpYMHqJ
9D5hHg2/TCM7f+hz8ZfnGbjyPnT6OXgY22k1T/zGF/6ww1YItA7YuLavEBymk9Fi
92IRVgR1zxpnAnff4YKRndIi5XVIgX3ZM4hDGjh6/aS80Bp544AQnavlB0URrBV2
QWSJ/xiLKdNojqvf7qcQXgRRP9wvtccBXCys7GzKuDnIZRfuM65JEU9iFnQo48Si
3CY7TkV9huEW1Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:50 2025 by rpki-client