Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
File: CxxtDecMxRgFtjpeIydiJSXQdbE.mft (raw, json)
Hash identifier: 7/5INwoLT7/CAJNQLeqbvSevURhyao8VoTNCqqTOZRk=
Subject key identifier: A9:D5:0B:A0:61:D3:7D:E5:DF:E1:AE:AD:04:79:E1:CF:5B:9E:8C:74
Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
Certificate issuer: /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Certificate serial: 019A55643063679076E482773FE4FCAA8564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
Manifest number: 0895
Signing time: Wed 05 Nov 2025 19:00:20 +0000
Manifest this update: Wed 05 Nov 2025 19:00:20 +0000
Manifest next update: Thu 06 Nov 2025 19:00:20 +0000
Files and hashes: 1: CxxtDecMxRgFtjpeIydiJSXQdbE.crl (hash: UmkoSTkuSCv+uLxWlucFZ15hTGULxTONtP0xTYJFSKw=)
2: EWTxX8xHCQ-y0eC-O4N3o3QoyvM.roa (hash: dVuWzw7AA4Zse8atqpUG5cLLbJKhbiKvMBsraKeVoHo=)
3: MJmSheQwhqTa8TcshZRbeEjyzHg.roa (hash: Gp/YgLDeJmP+HyXt6WhUwXyvRtnPi/acuut1qwHPb1I=)
4: NK7GdHMYRv_hDeWPBmQND98lvj8.roa (hash: jBbpvQcqJ1jdxJjUVdSmEBEQDhr0KhV9KMUkwMQPtk8=)
5: mx1zhwHtw-uurdoc1Rs-ub83PY4.roa (hash: O6YFpkOTCBT8CmU8XHKba4R6Y/9CL3lbQUtfKViPzQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:30:63:67:90:76:e4:82:77:3f:e4:fc:aa:85:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Validity
Not Before: Nov 5 19:00:20 2025 GMT
Not After : Nov 6 19:00:20 2025 GMT
Subject: CN=a9d50ba061d37de5dfe1aead0479e1cf5b9e8c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6b:fc:d4:9e:d5:1a:7e:74:e9:c2:50:f6:0b:
bb:57:bc:9c:0b:73:73:85:07:39:25:ef:03:37:07:
f4:fc:29:50:6f:08:6d:c8:53:2c:dd:27:8a:49:9f:
4b:1a:cf:60:48:be:c6:15:c9:49:b4:4e:b8:9a:b7:
a3:7a:59:20:cf:6f:e2:d1:d6:da:c3:77:06:0a:ff:
21:63:27:12:56:fb:da:0b:e2:97:28:e7:0e:c6:5e:
8f:e1:4a:b9:e5:a3:ec:4b:8e:57:d3:91:a5:3d:3c:
7a:35:59:67:49:c8:c3:f5:a2:f1:98:71:16:05:e6:
03:01:44:01:d7:3f:3f:7d:d8:7c:ff:9e:94:ae:f5:
20:b9:1b:1b:ff:66:ce:74:26:e3:cc:0f:e5:3a:1b:
93:7d:d0:d9:ff:26:ef:6e:c9:1a:e7:96:e0:cb:87:
b4:cb:14:91:b7:c6:00:f5:df:7b:63:64:df:71:30:
bc:7f:01:1c:d2:d9:f3:80:ba:38:c2:90:85:1d:8e:
5f:0b:6a:22:17:58:c7:c7:3d:8d:c7:b2:15:b1:2c:
53:61:37:08:0b:cc:ee:c0:3a:f2:ed:9f:28:39:7c:
f2:a2:6a:e0:0f:cb:49:44:40:4f:6f:19:61:a0:2a:
ed:d5:cb:3b:46:09:7b:82:e1:49:c1:91:6f:25:14:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D5:0B:A0:61:D3:7D:E5:DF:E1:AE:AD:04:79:E1:CF:5B:9E:8C:74
X509v3 Authority Key Identifier:
keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:69:3f:83:c9:ce:ab:a9:ca:aa:5c:95:84:39:7a:65:b2:8b:
80:fd:3f:57:fc:a6:e4:58:2c:0f:4c:c7:07:90:da:da:c5:77:
5b:80:73:dc:da:7b:c1:32:06:f0:60:bb:ac:1a:99:a7:d1:c3:
e3:57:50:65:ee:b5:50:b5:f9:52:99:8a:69:db:ab:a3:ce:35:
53:4f:e3:b7:e6:0e:87:bf:e8:51:f2:e0:a8:78:68:87:8a:be:
b8:a3:b1:be:19:e0:99:41:d4:cc:d0:35:5c:04:e0:c2:19:d7:
cb:3e:50:6d:e6:88:51:dc:a0:c9:14:ab:3b:8c:1c:1d:3f:b0:
fb:4a:50:8d:56:47:50:fe:9e:ec:1b:5d:b5:94:a8:91:5e:84:
1f:d0:bc:06:50:89:9a:9e:fa:d1:da:41:84:a3:ae:f6:27:ad:
4b:77:f8:c6:6e:e4:54:8f:a1:93:bc:5f:b0:f8:31:ba:6d:e3:
cb:e3:8b:88:a0:07:29:1c:74:6a:59:bd:38:57:55:08:3c:af:
dc:7c:d8:e7:6f:26:3c:9e:7b:52:bd:ba:7c:b0:5f:a3:9a:e2:
66:95:7b:46:24:20:0b:fd:40:5c:1a:7e:ee:6b:3d:16:98:9f:
1a:eb:30:49:28:91:9f:67:63:94:a4:63:00:70:5c:5f:94:67:
14:cd:9a:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpVZDBjZ5B25IJ3P+T8qoVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMWM2ZDBkZTcwY2M1MTgwNWI2M2E1ZTIzMjc2MjI1MjVk
MDc1YjEwHhcNMjUxMTA1MTkwMDIwWhcNMjUxMTA2MTkwMDIwWjAzMTEwLwYDVQQD
EyhhOWQ1MGJhMDYxZDM3ZGU1ZGZlMWFlYWQwNDc5ZTFjZjViOWU4Yzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2v81J7VGn506cJQ9gu7V7ycC3Nz
hQc5Je8DNwf0/ClQbwhtyFMs3SeKSZ9LGs9gSL7GFclJtE64mrejelkgz2/i0dba
w3cGCv8hYycSVvvaC+KXKOcOxl6P4Uq55aPsS45X05GlPTx6NVlnScjD9aLxmHEW
BeYDAUQB1z8/fdh8/56UrvUguRsb/2bOdCbjzA/lOhuTfdDZ/ybvbska55bgy4e0
yxSRt8YA9d97Y2TfcTC8fwEc0tnzgLo4wpCFHY5fC2oiF1jHxz2Nx7IVsSxTYTcI
C8zuwDry7Z8oOXzyomrgD8tJREBPbxlhoCrt1cs7Rgl7guFJwZFvJRR/JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnVC6Bh033l3+GurQR54c9bnox0MB8GA1UdIwQY
MBaAFAscbQ3nDMUYBbY6XiMnYiUl0HWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAt
Zjc3NGYxZWFmYmZmLzEvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAtZjc3NGYxZWFmYmZm
LzEvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2k/g8nO
q6nKqlyVhDl6ZbKLgP0/V/ym5FgsD0zHB5Da2sV3W4Bz3Np7wTIG8GC7rBqZp9HD
41dQZe61ULX5UpmKaduro841U0/jt+YOh7/oUfLgqHhoh4q+uKOxvhngmUHUzNA1
XATgwhnXyz5QbeaIUdygyRSrO4wcHT+w+0pQjVZHUP6e7BtdtZSokV6EH9C8BlCJ
mp760dpBhKOu9ietS3f4xm7kVI+hk7xfsPgxum3jy+OLiKAHKRx0alm9OFdVCDyv
3HzY528mPJ57Ur26fLBfo5riZpV7RiQgC/1AXBp+7ms9FpifGuswSSiRn2djlKRj
AHBcX5RnFM2auQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:47:31 2025 by rpki-client