Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
File: XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json)
Hash identifier: 171VsTDqsAqoBNFRun6H8hK+pi+UklOaJP6suEptk1g=
Subject key identifier: 97:2C:74:E2:64:91:C6:67:5C:4D:1B:6C:43:29:4D:78:31:75:90:15
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Certificate issuer: /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial: 019A51BE559ED0D4BDF3737391DC6D15B10C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
Manifest number: 05EE
Signing time: Wed 05 Nov 2025 02:00:19 +0000
Manifest this update: Wed 05 Nov 2025 02:00:19 +0000
Manifest next update: Thu 06 Nov 2025 02:00:19 +0000
Files and hashes: 1: 02wqSv6S3QfGQclsARr7QXNvdWI.roa (hash: blfoT2HbR+GD9/4BT0/OCiD+iemp7TQrPXABrjQFnJw=)
2: RSjMhTaGtuAfeDXOX3uwyAT1Eok.roa (hash: Y4/cSuW1UOGa89zMuz5QH1r95dZUNstGhg+JOqcELak=)
3: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: 1pzki4oCAXh/Jq5Uz9q0bu742WCqWEhWsVp+R6FXZL8=)
4: xJZ2Genlg6FZ5BYdZvsnK__KGuk.roa (hash: vX+ymzFaWBe0MgYWBkL1Ckb8oOlGEmiJb877SUGvYCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:55:9e:d0:d4:bd:f3:73:73:91:dc:6d:15:b1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
Validity
Not Before: Nov 5 02:00:19 2025 GMT
Not After : Nov 6 02:00:19 2025 GMT
Subject: CN=972c74e26491c6675c4d1b6c43294d7831759015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:58:e4:6d:d0:db:24:10:a8:9a:32:f5:68:
47:d7:4f:9b:15:7e:0a:b6:fa:15:a2:48:33:47:7a:
9b:31:c4:61:1d:f6:20:9d:1a:ce:c8:15:1d:1a:c2:
24:2a:a4:b9:e8:c9:78:9c:15:1f:67:11:37:18:27:
94:7f:1f:29:c5:5f:fd:fb:71:5b:e2:11:c8:00:f9:
52:1f:bf:a8:10:8d:9f:14:39:2d:07:86:c0:11:3b:
60:9d:3d:4a:40:e2:d8:09:ea:6b:83:61:0b:27:85:
ed:d0:17:17:01:50:73:8b:22:11:07:5f:99:4c:62:
74:52:2d:5c:ea:b3:f7:c7:73:da:eb:a2:5d:34:05:
3d:9e:17:2f:21:50:b3:cc:e3:75:33:05:51:13:3e:
e2:01:f7:19:a6:3e:6e:f7:2f:43:d9:fb:82:75:6d:
45:2d:3c:b5:4f:ce:b3:fe:0c:8c:6b:3b:d6:2d:ae:
59:b3:04:8d:c8:d6:44:56:b9:7d:7e:d5:c4:9f:a0:
f2:0b:71:da:ce:cc:39:77:14:2f:30:53:7d:64:86:
2c:94:a5:3d:2f:7c:7c:6a:21:71:1b:c4:4a:b9:92:
ad:be:d4:29:1e:a2:d2:0a:a0:50:f7:89:2a:ab:9b:
11:85:5f:e0:c9:40:eb:32:a4:ae:e0:16:34:79:60:
21:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2C:74:E2:64:91:C6:67:5C:4D:1B:6C:43:29:4D:78:31:75:90:15
X509v3 Authority Key Identifier:
keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5f:b8:97:71:b5:f6:8b:87:d9:53:d5:cd:dd:88:66:e1:2f:
84:ac:ed:a6:11:f4:2f:42:dd:a2:27:cb:22:56:39:fe:f2:80:
59:20:52:c8:5f:8b:41:82:29:7a:1f:4f:28:b6:99:a7:c3:52:
7b:78:75:a0:07:31:84:f2:4e:13:a1:f8:0c:8e:33:65:25:8f:
c1:65:39:ff:8e:2e:59:a6:70:bf:c7:0f:cf:64:41:23:49:61:
b3:74:e3:0e:bf:f4:d8:17:4c:55:e8:98:a8:6d:63:45:28:ea:
26:43:e6:94:ce:b2:22:4c:9b:6c:ec:cc:12:9a:40:72:c4:5f:
75:1e:cd:11:19:8d:7d:19:29:d7:33:77:3c:19:7a:97:18:55:
86:42:6a:e7:bd:2b:8a:7b:19:40:65:e6:91:6d:de:c6:7b:a7:
3b:b9:c4:ec:a3:6d:be:6a:53:91:60:8c:68:ba:18:6d:ec:99:
6d:3c:fb:9f:9c:d2:5e:d8:80:42:cd:9b:9f:7b:75:2f:81:12:
75:62:60:26:28:70:32:db:77:a6:0e:67:26:c8:33:1b:21:0b:
26:01:84:84:d5:1d:48:96:a5:0d:49:2f:8e:d6:55:3d:dc:d8:
c6:a9:f5:df:1e:fa:87:e9:95:6f:b2:d0:fa:e6:aa:18:81:aa:
20:f9:96:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvlWe0NS983NzkdxtFbEMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMDhkYzEwMjE4YWM2ZGI3OTQzMGFlN2M0NDUxNTU5MDQx
N2Q2MDUwHhcNMjUxMTA1MDIwMDE5WhcNMjUxMTA2MDIwMDE5WjAzMTEwLwYDVQQD
Eyg5NzJjNzRlMjY0OTFjNjY3NWM0ZDFiNmM0MzI5NGQ3ODMxNzU5MDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbZY5G3Q2yQQqJoy9WhH10+bFX4K
tvoVokgzR3qbMcRhHfYgnRrOyBUdGsIkKqS56Ml4nBUfZxE3GCeUfx8pxV/9+3Fb
4hHIAPlSH7+oEI2fFDktB4bAETtgnT1KQOLYCeprg2ELJ4Xt0BcXAVBziyIRB1+Z
TGJ0Ui1c6rP3x3Pa66JdNAU9nhcvIVCzzON1MwVREz7iAfcZpj5u9y9D2fuCdW1F
LTy1T86z/gyMazvWLa5ZswSNyNZEVrl9ftXEn6DyC3Hazsw5dxQvMFN9ZIYslKU9
L3x8aiFxG8RKuZKtvtQpHqLSCqBQ94kqq5sRhV/gyUDrMqSu4BY0eWAhxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcsdOJkkcZnXE0bbEMpTXgxdZAVMB8GA1UdIwQY
MBaAFF8I3BAhisbbeUMK58RFFVkEF9YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kODE3NDUtNjU4ZC00YTc0LTkyZjct
NWQzYTQyMWEwZjEwLzEvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9kODE3NDUtNjU4ZC00YTc0LTkyZjctNWQzYTQyMWEwZjEw
LzEvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoF+4l3G1
9ouH2VPVzd2IZuEvhKztphH0L0LdoifLIlY5/vKAWSBSyF+LQYIpeh9PKLaZp8NS
e3h1oAcxhPJOE6H4DI4zZSWPwWU5/44uWaZwv8cPz2RBI0lhs3TjDr/02BdMVeiY
qG1jRSjqJkPmlM6yIkybbOzMEppAcsRfdR7NERmNfRkp1zN3PBl6lxhVhkJq570r
insZQGXmkW3exnunO7nE7KNtvmpTkWCMaLoYbeyZbTz7n5zSXtiAQs2bn3t1L4ES
dWJgJihwMtt3pg5nJsgzGyELJgGEhNUdSJalDUkvjtZVPdzYxqn13x76h+mVb7LQ
+uaqGIGqIPmW/g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:24:59 2025 by rpki-client