Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
File: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft (raw, json)
Hash identifier: QwLcaGzVWlS+xOOTOwHCXhBdhgsxcS+vw5VXYKi/mk4=
Subject key identifier: EF:C8:AE:AB:9F:E8:BF:9B:A6:A7:D4:22:A0:E4:10:45:E9:99:A9:CA
Authority key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
Certificate issuer: /CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Certificate serial: 019A54C015B2DD48C9E14AF6C3A4F92FAA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
Manifest number: 01C6
Signing time: Wed 05 Nov 2025 16:01:05 +0000
Manifest this update: Wed 05 Nov 2025 16:01:05 +0000
Manifest next update: Thu 06 Nov 2025 16:01:05 +0000
Files and hashes: 1: YZ1rgmmdGJTdnaDAgDl2-yE974E.roa (hash: Lb3bg3bm9QZky/VWwidZy1sN1eo2ThSodX/AgWbvOtQ=)
2: _5i050DixZy2EtKOhz8lOMgCfIg.roa (hash: /YfNbDhqCMdFRtH+NtU0vFR+Vi8QHGbG/GrA2aaBEwM=)
3: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl (hash: tNxF0BfqpV5BuZGFK4n0846ngXR1ToiLPL+zSkB4Jd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:15:b2:dd:48:c9:e1:4a:f6:c3:a4:f9:2f:aa:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Validity
Not Before: Nov 5 16:01:05 2025 GMT
Not After : Nov 6 16:01:05 2025 GMT
Subject: CN=efc8aeab9fe8bf9ba6a7d422a0e41045e999a9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:97:8d:4f:08:ee:ae:3d:dd:ef:c2:b2:ef:
b5:c7:67:85:6f:c9:8d:92:ea:a7:23:2b:94:d4:10:
cf:05:a6:bb:d7:36:dd:cd:a9:1f:50:d9:ba:9a:c6:
6e:e1:fd:9c:9f:57:25:5c:d7:eb:20:ba:79:fc:d6:
75:d3:0b:fd:3f:4e:db:86:d8:5b:fd:4f:2e:0d:8f:
75:73:ed:06:06:5b:91:bc:53:13:58:11:e1:b6:df:
21:5c:94:16:c3:31:f8:e1:30:06:15:93:2e:3f:48:
00:56:71:00:13:7b:91:13:35:cb:ae:d5:07:b9:c8:
a1:30:66:9b:2b:e3:15:89:af:24:40:c4:88:a9:bc:
f1:c0:97:8f:0a:30:8b:70:ae:15:c3:f1:11:be:50:
86:c9:00:ab:0f:ac:8a:b3:96:2b:c0:98:16:89:df:
b9:08:7a:ce:80:32:aa:8f:03:9b:ae:41:1c:c6:57:
89:36:7d:09:49:da:03:a0:01:59:10:8a:04:e0:1f:
53:b1:2b:c4:f2:64:be:da:ca:cd:2c:f3:f4:01:d5:
ca:50:2b:c9:a4:ac:a4:d8:77:ba:aa:28:12:d2:69:
2e:a3:c2:d1:1e:e8:14:d2:78:71:b8:85:5f:40:32:
b0:16:2c:ae:74:ac:c6:2c:e9:18:b2:07:d9:b8:cf:
86:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C8:AE:AB:9F:E8:BF:9B:A6:A7:D4:22:A0:E4:10:45:E9:99:A9:CA
X509v3 Authority Key Identifier:
keyid:C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2c:6d:f4:05:79:02:72:2d:77:0e:98:fa:dd:7b:27:a6:ab:
c8:4d:04:4a:0f:dd:06:2d:45:d4:61:b5:2d:63:38:2c:13:0c:
69:3c:82:d7:4b:12:a0:59:5b:5b:fc:81:f7:c2:15:cf:4e:6c:
bd:ab:f1:8d:ef:8b:80:a5:4b:ef:0c:e5:6c:34:dc:69:ae:2f:
41:62:21:d4:37:f6:c8:ac:89:09:a3:3a:44:63:45:d8:84:0d:
fc:cd:83:ab:8d:66:16:00:01:47:7d:be:1e:dc:dd:01:f4:00:
15:a7:ec:b0:ec:8d:06:e0:08:13:9c:44:de:fa:3f:88:6e:ed:
4a:0f:b8:d5:d5:9a:ed:6b:a3:06:14:c8:37:f0:f0:8f:43:0f:
e1:ea:27:49:e1:24:9b:27:86:86:d4:e0:3c:9f:16:17:2d:a4:
09:56:42:8b:1a:4a:91:61:7e:cb:9b:f4:cf:db:9f:48:ea:70:
68:75:f5:82:d1:7d:8b:1d:b6:ae:ea:07:e3:cc:b9:07:fe:b9:
c8:5f:46:c3:f3:ac:89:ac:dd:47:38:0c:4b:a9:09:9b:52:a8:
3c:0c:88:29:02:5f:8c:ee:c7:af:96:e2:60:e3:15:72:92:bc:
70:95:af:90:e1:c0:57:b6:fe:91:49:32:e3:45:0a:8d:c4:43:
23:89:57:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUwBWy3UjJ4Ur2w6T5L6pLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MzM4ZWZjZTQ0OTRmNWI5MjVmMGU5YWY3MzY1MWMxY2Jm
MWUwNGMwHhcNMjUxMTA1MTYwMTA1WhcNMjUxMTA2MTYwMTA1WjAzMTEwLwYDVQQD
EyhlZmM4YWVhYjlmZThiZjliYTZhN2Q0MjJhMGU0MTA0NWU5OTlhOWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxSXjU8I7q493e/Csu+1x2eFb8mN
kuqnIyuU1BDPBaa71zbdzakfUNm6msZu4f2cn1clXNfrILp5/NZ10wv9P07bhthb
/U8uDY91c+0GBluRvFMTWBHhtt8hXJQWwzH44TAGFZMuP0gAVnEAE3uREzXLrtUH
ucihMGabK+MVia8kQMSIqbzxwJePCjCLcK4Vw/ERvlCGyQCrD6yKs5YrwJgWid+5
CHrOgDKqjwObrkEcxleJNn0JSdoDoAFZEIoE4B9TsSvE8mS+2srNLPP0AdXKUCvJ
pKyk2He6qigS0mkuo8LRHugU0nhxuIVfQDKwFiyudKzGLOkYsgfZuM+GDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/Irquf6L+bpqfUIqDkEEXpmanKMB8GA1UdIwQY
MBaAFMUzjvzkSU9bkl8Omvc2UcHL8eBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS83YzRlMzItNmMyMC00MWMxLWE4NWYt
ZmRkM2E4MTVhYmI4LzEveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS83YzRlMzItNmMyMC00MWMxLWE4NWYtZmRkM2E4MTVhYmI4
LzEveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALyxt9AV5
AnItdw6Y+t17J6aryE0ESg/dBi1F1GG1LWM4LBMMaTyC10sSoFlbW/yB98IVz05s
vavxje+LgKVL7wzlbDTcaa4vQWIh1Df2yKyJCaM6RGNF2IQN/M2Dq41mFgABR32+
HtzdAfQAFafssOyNBuAIE5xE3vo/iG7tSg+41dWa7WujBhTIN/Dwj0MP4eonSeEk
myeGhtTgPJ8WFy2kCVZCixpKkWF+y5v0z9ufSOpwaHX1gtF9ix22ruoH48y5B/65
yF9Gw/OsiazdRzgMS6kJm1KoPAyIKQJfjO7Hr5biYOMVcpK8cJWvkOHAV7b+kUky
40UKjcRDI4lXKw==
-----END CERTIFICATE-----
Generated at Thu Nov 6 00:05:25 2025 by rpki-client