Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
File: xeP39AwQDf_bGBIccmGZ6FgExYU.mft (raw, json)
Hash identifier: BKiGK3Qrzpi23gZqswf6SpXj/wuoy2sydf6OyrWd6JA=
Subject key identifier: E8:0E:3C:05:1D:06:26:5C:93:7E:E8:D0:A2:5D:B7:1C:06:CB:98:63
Authority key identifier: C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85
Certificate issuer: /CN=c5e3f7f40c100dffdb18121c726199e85804c585
Certificate serial: 019A4DE208FBD8EFF6A36CAFB9135C152317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:00:50 +0000
Manifest this update: Tue 04 Nov 2025 08:00:50 +0000
Manifest next update: Wed 05 Nov 2025 08:00:50 +0000
Files and hashes: 1: pziQk_Jpqg7RVSwxW0kshn-FxgM.roa (hash: 3IfnTIQK5ln+c+ATiKdOHRNEXtXgflbchwoY1RIrNJU=)
2: xeP39AwQDf_bGBIccmGZ6FgExYU.crl (hash: M7vm0wEw/cEvK+/dk+QVyvror549nyWiYpz/RBqbnr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:08:fb:d8:ef:f6:a3:6c:af:b9:13:5c:15:23:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e3f7f40c100dffdb18121c726199e85804c585
Validity
Not Before: Nov 4 08:00:50 2025 GMT
Not After : Nov 5 08:00:50 2025 GMT
Subject: CN=e80e3c051d06265c937ee8d0a25db71c06cb9863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:14:35:e8:eb:8b:55:de:15:a1:12:f2:04:12:
a4:d1:1c:36:66:4c:e4:f7:00:01:b8:54:ba:18:e1:
fe:20:bb:b1:b3:64:ef:4c:af:72:d5:4d:8c:85:c7:
d1:78:97:c6:39:c8:7b:24:78:1c:46:8b:22:f2:c2:
1f:91:3c:29:aa:1f:58:14:c3:40:3c:be:5a:f1:38:
81:d3:92:a8:1b:0e:9b:3e:95:c4:7c:ed:06:ce:9e:
de:2f:c1:05:d3:54:75:f5:54:42:b4:e2:de:cb:55:
96:49:cc:1c:e3:47:78:7b:64:f2:33:ec:67:34:e9:
96:96:46:f9:59:8c:7a:0c:b4:95:0b:d4:57:9d:5b:
e0:79:0f:ea:8e:98:17:b2:69:4e:7b:55:3c:a7:01:
04:c4:a3:d3:a5:54:9f:1c:20:c2:51:c8:53:7f:27:
fd:4b:ce:15:76:7b:ed:c3:14:06:42:33:12:c4:be:
29:37:01:8d:29:2f:d1:a8:db:52:c6:65:b6:02:96:
51:5b:c5:f5:c4:a9:d7:84:98:25:8c:c8:99:0e:8c:
fd:00:ce:ac:9c:6a:e1:ee:4a:c7:53:f6:98:f0:84:
54:c5:a2:e5:af:e4:7d:b3:7f:cc:f8:91:8a:eb:2d:
36:a5:d1:ce:4c:83:07:96:13:aa:06:0d:a4:db:2d:
ca:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0E:3C:05:1D:06:26:5C:93:7E:E8:D0:A2:5D:B7:1C:06:CB:98:63
X509v3 Authority Key Identifier:
keyid:C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:64:3a:1d:b2:ab:7e:80:3f:96:78:a2:a3:73:b9:d9:9f:69:
9a:37:80:4b:8f:7d:1a:20:1d:0b:56:57:48:b8:4c:22:eb:af:
3b:9b:61:7c:77:d9:db:83:7f:bd:99:c0:f8:e1:62:bd:47:66:
d2:04:db:91:47:39:15:fb:a9:1f:60:e8:f4:b0:ca:2c:d6:4b:
1b:0e:e3:fe:b8:27:3e:81:0e:fb:85:04:cb:d6:56:4f:11:e8:
a8:01:40:29:d6:0a:47:a2:a0:c9:dc:f4:ee:a0:45:b0:c8:dd:
5a:88:2b:02:7b:dd:64:04:4d:74:e5:72:23:bf:45:a2:05:87:
80:4a:a3:3e:79:11:54:2b:31:5f:43:fe:0c:2c:8a:7e:b5:bd:
5b:ac:ee:01:15:76:6f:d2:de:bc:d2:99:c3:54:3d:54:fe:8f:
62:0a:f8:a8:91:4b:3a:05:32:66:ac:eb:9b:a6:8d:25:98:ae:
3b:40:8c:e8:88:5c:dc:46:a2:ef:ed:b6:30:c9:c9:82:25:e1:
11:80:3b:72:2c:77:5f:28:ae:32:65:5c:6d:43:1f:14:90:23:
70:a8:fa:40:92:4e:4e:41:d6:0d:cd:8b:9e:1f:33:62:cd:05:
26:d4:2f:af:ed:3b:80:6a:32:4b:5d:b6:44:cf:3b:b6:04:eb:
11:69:f9:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4gj72O/2o2yvuRNcFSMXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZTNmN2Y0MGMxMDBkZmZkYjE4MTIxYzcyNjE5OWU4NTgw
NGM1ODUwHhcNMjUxMTA0MDgwMDUwWhcNMjUxMTA1MDgwMDUwWjAzMTEwLwYDVQQD
EyhlODBlM2MwNTFkMDYyNjVjOTM3ZWU4ZDBhMjVkYjcxYzA2Y2I5ODYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBQ16OuLVd4VoRLyBBKk0Rw2Zkzk
9wABuFS6GOH+ILuxs2TvTK9y1U2MhcfReJfGOch7JHgcRosi8sIfkTwpqh9YFMNA
PL5a8TiB05KoGw6bPpXEfO0Gzp7eL8EF01R19VRCtOLey1WWScwc40d4e2TyM+xn
NOmWlkb5WYx6DLSVC9RXnVvgeQ/qjpgXsmlOe1U8pwEExKPTpVSfHCDCUchTfyf9
S84VdnvtwxQGQjMSxL4pNwGNKS/RqNtSxmW2ApZRW8X1xKnXhJgljMiZDoz9AM6s
nGrh7krHU/aY8IRUxaLlr+R9s3/M+JGK6y02pdHOTIMHlhOqBg2k2y3K9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgOPAUdBiZck37o0KJdtxwGy5hjMB8GA1UdIwQY
MBaAFMXj9/QMEA3/2xgSHHJhmehYBMWFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGVQMzlBd1FEZl9iR0JJY2NtR1o2RmdFeFlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYWY2ZWQtYmFmNC00MWJmLTlmMjIt
N2Q5NzJlMWQyZTYxLzEveGVQMzlBd1FEZl9iR0JJY2NtR1o2RmdFeFlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lYWY2ZWQtYmFmNC00MWJmLTlmMjItN2Q5NzJlMWQyZTYx
LzEveGVQMzlBd1FEZl9iR0JJY2NtR1o2RmdFeFlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2Q6HbKr
foA/lniio3O52Z9pmjeAS499GiAdC1ZXSLhMIuuvO5thfHfZ24N/vZnA+OFivUdm
0gTbkUc5FfupH2Do9LDKLNZLGw7j/rgnPoEO+4UEy9ZWTxHoqAFAKdYKR6Kgydz0
7qBFsMjdWogrAnvdZARNdOVyI79FogWHgEqjPnkRVCsxX0P+DCyKfrW9W6zuARV2
b9LevNKZw1Q9VP6PYgr4qJFLOgUyZqzrm6aNJZiuO0CM6Ihc3Eai7+22MMnJgiXh
EYA7cix3XyiuMmVcbUMfFJAjcKj6QJJOTkHWDc2Lnh8zYs0FJtQvr+07gGoyS122
RM87tgTrEWn5ZA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:15:55 2025 by rpki-client