Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: bqereH/lb+bmUERYNruUp5AOixSEaUjUAZH5JAMvBn8=
Subject key identifier: 54:8B:17:3C:09:5C:22:11:90:64:88:8C:A0:10:F6:A6:D7:64:F8:02
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 019A4EF4A42BB23A9E825DD99E3C7AC8155C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 171C
Signing time: Tue 04 Nov 2025 13:00:46 +0000
Manifest this update: Tue 04 Nov 2025 13:00:46 +0000
Manifest next update: Wed 05 Nov 2025 13:00:46 +0000
Files and hashes: 1: TYwZFqNPf6Qsrw0GmPrjKEpe21A.roa (hash: CZIXGgcAUIozY1tQFUYLHdOZbi+azarBS/OuaFJStXY=)
2: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: kAADWBlJHXNTfE4oj4zlRY6TKMZk1e2BVEH+jYe2G60=)
3: b3OynJO2dQ-hJEqWlg7d4lwS2vQ.roa (hash: 2dy6h6k+j3ORshtIaAQ5KnKNXYXUa2URxchCR/WmKmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a4:2b:b2:3a:9e:82:5d:d9:9e:3c:7a:c8:15:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Nov 4 13:00:46 2025 GMT
Not After : Nov 5 13:00:46 2025 GMT
Subject: CN=548b173c095c22119064888ca010f6a6d764f802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:c2:c5:ef:f5:7b:5e:5f:dd:89:69:e1:7e:
87:45:ee:05:11:e7:e1:d4:73:e1:63:ef:3c:4f:cd:
b2:f7:91:86:8a:2e:bc:47:4a:0e:dd:60:99:85:0e:
7c:5b:9e:97:35:de:df:95:e3:9b:40:6f:c2:35:fb:
28:6f:73:b1:6e:15:e5:6d:02:a6:8e:e2:61:c5:c7:
45:bf:f3:9c:01:df:0f:1c:c4:b8:41:1b:4a:a3:54:
d7:b1:c2:b5:71:e4:1a:bb:e8:7d:d6:ed:1f:6a:5c:
c6:8f:72:e0:66:cd:c6:42:5d:1e:e0:2f:1b:5f:12:
50:ca:bc:6d:a6:63:1f:9c:94:f9:e3:78:db:74:77:
c0:50:d4:8f:92:db:16:6f:cf:bb:03:30:10:c0:0e:
3d:43:2f:2b:b3:e5:5f:cc:a0:ce:78:7c:31:99:06:
e0:39:d9:5d:22:9d:75:3d:39:74:ad:84:dd:37:ee:
c4:56:6d:4f:d1:50:3a:59:6c:fd:ff:f1:15:74:8d:
00:6a:6d:e2:4a:cb:58:3a:4d:d8:cc:0c:28:3c:84:
7a:4a:83:85:b3:5a:76:63:05:08:52:a8:de:b1:7e:
84:bd:bf:0e:1d:d3:ec:4b:b1:e6:53:6b:6b:f8:8d:
32:f0:74:54:5b:41:63:7c:33:b6:ac:af:4b:cb:46:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8B:17:3C:09:5C:22:11:90:64:88:8C:A0:10:F6:A6:D7:64:F8:02
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:64:1e:8f:1a:7f:38:a2:37:15:46:59:f4:bc:26:0f:8b:6c:
2c:c7:42:10:d4:16:dc:ae:2f:54:2d:2a:75:1f:85:3a:f0:f0:
3c:e9:4c:4c:95:46:7a:b8:e8:70:71:81:21:62:f7:a5:8b:6c:
29:02:90:7a:ac:bb:74:ea:37:c8:1c:b1:fe:3f:33:ff:5a:b5:
5e:c6:1c:70:06:bc:c4:33:40:fe:02:11:c5:b6:b2:f2:cd:fb:
b5:c3:67:29:74:af:03:f5:80:a1:ab:02:ce:c2:62:ad:fc:e5:
09:7e:c7:f9:8e:17:f4:c0:cf:42:0e:50:0b:5d:2c:10:5a:59:
9a:25:c9:2a:ab:30:06:4f:cf:21:cc:f2:aa:90:8e:d4:62:10:
dc:13:7c:19:7a:4b:5f:07:f6:62:2b:0d:eb:fd:ec:ce:d7:3a:
04:7d:16:5f:9c:7a:4b:1a:22:de:2f:8d:53:f8:a3:fe:f0:da:
65:70:c0:3e:82:ab:91:a1:ab:ed:90:4a:b6:92:96:34:2e:3c:
ef:6d:d6:e5:11:27:ca:06:d9:02:ec:f7:34:ac:bd:70:e0:b4:
46:1f:15:00:c6:71:f4:a7:8e:86:f0:76:f8:be:ef:b3:65:0d:
ac:fd:22:46:2a:cf:e1:f4:9b:e2:32:a4:c5:d0:87:d3:b2:05:
75:a4:59:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9KQrsjqegl3Znjx6yBVcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNDZiZjFmZjgxNmJlMGJhNGM2MjE3MTIzNDIzMzBhOWZh
ZDhiZGEwHhcNMjUxMTA0MTMwMDQ2WhcNMjUxMTA1MTMwMDQ2WjAzMTEwLwYDVQQD
Eyg1NDhiMTczYzA5NWMyMjExOTA2NDg4OGNhMDEwZjZhNmQ3NjRmODAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDDCxe/1e15f3Ylp4X6HRe4FEefh
1HPhY+88T82y95GGii68R0oO3WCZhQ58W56XNd7fleObQG/CNfsob3OxbhXlbQKm
juJhxcdFv/OcAd8PHMS4QRtKo1TXscK1ceQau+h91u0falzGj3LgZs3GQl0e4C8b
XxJQyrxtpmMfnJT543jbdHfAUNSPktsWb8+7AzAQwA49Qy8rs+VfzKDOeHwxmQbg
OdldIp11PTl0rYTdN+7EVm1P0VA6WWz9//EVdI0Aam3iSstYOk3YzAwoPIR6SoOF
s1p2YwUIUqjesX6Evb8OHdPsS7HmU2tr+I0y8HRUW0FjfDO2rK9Ly0bgkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSLFzwJXCIRkGSIjKAQ9qbXZPgCMB8GA1UdIwQY
MBaAFF5Gvx/4Fr4LpMYhcSNCMwqfrYvaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jOGNmNTYtYzQ4Yy00ZTYyLTk4ZWUt
YjhkYjE1YjUzMWEyLzEvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jOGNmNTYtYzQ4Yy00ZTYyLTk4ZWUtYjhkYjE1YjUzMWEy
LzEvWGthX0hfZ1d2Z3VreGlGeEkwSXpDcC10aTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGQejxp/
OKI3FUZZ9LwmD4tsLMdCENQW3K4vVC0qdR+FOvDwPOlMTJVGerjocHGBIWL3pYts
KQKQeqy7dOo3yByx/j8z/1q1XsYccAa8xDNA/gIRxbay8s37tcNnKXSvA/WAoasC
zsJirfzlCX7H+Y4X9MDPQg5QC10sEFpZmiXJKqswBk/PIczyqpCO1GIQ3BN8GXpL
Xwf2YisN6/3sztc6BH0WX5x6Sxoi3i+NU/ij/vDaZXDAPoKrkaGr7ZBKtpKWNC48
723W5REnygbZAuz3NKy9cOC0Rh8VAMZx9KeOhvB2+L7vs2UNrP0iRirP4fSb4jKk
xdCH07IFdaRZHg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:16 2025 by rpki-client