Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json)
Hash identifier: odDjv/CgvZ/Wp/dYJgi89+fQmAPM3K0Ph5cHFTVYV9c=
Subject key identifier: 8D:63:DA:26:46:63:FF:32:9A:D5:B1:5E:09:F1:DA:07:C2:88:16:52
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 019A541B0D2A9724148FD06A3B2DCC44CDF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
Manifest number: 0754
Signing time: Wed 05 Nov 2025 13:00:50 +0000
Manifest this update: Wed 05 Nov 2025 13:00:50 +0000
Manifest next update: Thu 06 Nov 2025 13:00:50 +0000
Files and hashes: 1: 16AbDLexWxM7mos0qMmQG31v5Rg.roa (hash: 3u1e4Mqp4DtPhz1Ro9vKRDiTKwkU7uS9FwPKV5J5Ahk=)
2: FnJQovhlbIvUdo0j6O0hr0vUYNM.roa (hash: wBBuOwEzLi1HNHDVjYRKKazRYQG/hq5eug3JUFJ4Ec0=)
3: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: Bvc66z3mbHJjqtAS3t3Q5K0/PDRE1qWNbTKcN4pj/a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:0d:2a:97:24:14:8f:d0:6a:3b:2d:cc:44:cd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Nov 5 13:00:50 2025 GMT
Not After : Nov 6 13:00:50 2025 GMT
Subject: CN=8d63da264663ff329ad5b15e09f1da07c2881652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:ee:6e:b8:44:47:cb:72:02:24:b2:72:35:
75:12:e3:3d:a6:26:29:32:98:af:90:0c:c2:3d:05:
53:33:ca:61:57:26:7b:68:7b:54:a3:ff:59:26:be:
7a:e9:ca:63:34:82:78:da:4d:76:b6:82:36:bb:b4:
51:87:dc:21:32:84:36:5b:be:8c:b2:fe:9d:0f:4d:
0b:66:b9:b5:47:59:1d:68:b6:87:6a:da:01:52:f4:
2f:53:2c:82:27:62:b4:c1:9f:aa:d5:51:ac:e5:dd:
3c:f2:85:10:c8:fd:d2:4f:37:0c:0b:92:7e:6f:78:
35:14:58:0f:fd:bd:c9:e9:c2:6b:ab:33:60:1a:40:
e3:ed:d1:bd:e5:c6:92:93:5f:74:32:3a:84:56:db:
f4:a3:ef:f0:f0:c7:24:78:79:a0:7c:dc:53:db:40:
31:b9:e7:07:af:b2:2d:55:05:f6:87:58:f2:9f:86:
fd:28:71:af:f2:3c:de:9a:9e:86:38:50:e6:de:2f:
1a:37:28:c1:a4:a6:be:94:ba:be:07:5a:21:21:02:
ba:c3:00:37:09:fc:52:3d:42:30:c6:24:07:36:af:
ed:3b:2e:bf:f1:83:a4:62:75:8a:46:cb:7e:01:d6:
3d:cd:25:20:cc:20:a3:2b:79:5b:d0:68:1d:95:3f:
29:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:63:DA:26:46:63:FF:32:9A:D5:B1:5E:09:F1:DA:07:C2:88:16:52
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:7b:e0:ad:4e:33:e6:f6:d5:08:06:60:69:c8:a4:5f:70:f5:
8f:8b:5d:b9:f3:df:7b:8c:98:bc:96:dc:e6:f5:3e:3b:a6:31:
d1:10:46:a6:94:a9:11:bb:65:b4:c3:52:a3:d5:30:96:a6:79:
9e:52:c7:5f:3c:cf:2b:66:31:b8:05:5e:33:78:15:16:80:e4:
b5:67:4e:bc:d8:f5:07:73:5c:67:d9:0d:da:e2:86:9d:c6:3c:
59:62:b5:5d:8a:04:17:85:25:ed:54:32:ca:ea:0e:54:55:bd:
0a:1b:21:7a:7b:b5:df:bb:0e:49:9d:03:b7:42:fe:ee:51:97:
25:87:67:02:90:d1:1a:92:de:33:d7:e6:f2:f5:95:87:ee:26:
80:12:19:11:a0:e4:21:20:39:27:ef:3a:e0:52:a9:95:22:d7:
35:a5:ce:06:52:5b:44:91:05:1e:b0:fa:65:53:b1:13:53:e9:
87:ec:5a:2d:9d:e0:20:7b:09:23:18:db:e1:cc:ea:30:18:6f:
09:99:c5:13:34:fa:4f:c1:14:43:72:5c:a3:d0:53:55:6a:89:
b8:2a:90:d2:6b:1f:4a:34:de:d8:81:b0:e9:8e:58:89:16:43:
00:fb:2d:73:96:bc:12:74:d6:dd:1d:ab:05:44:14:a4:13:2e:
81:72:f8:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUGw0qlyQUj9BqOy3MRM3zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYmJhMDczNWEwN2U0MGNhMzIwMjYyNzhiMjY3ODY3OGY4
YmFjZDkwHhcNMjUxMTA1MTMwMDUwWhcNMjUxMTA2MTMwMDUwWjAzMTEwLwYDVQQD
Eyg4ZDYzZGEyNjQ2NjNmZjMyOWFkNWIxNWUwOWYxZGEwN2MyODgxNjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lTubrhER8tyAiSycjV1EuM9piYp
MpivkAzCPQVTM8phVyZ7aHtUo/9ZJr566cpjNIJ42k12toI2u7RRh9whMoQ2W76M
sv6dD00LZrm1R1kdaLaHatoBUvQvUyyCJ2K0wZ+q1VGs5d088oUQyP3STzcMC5J+
b3g1FFgP/b3J6cJrqzNgGkDj7dG95caSk190MjqEVtv0o+/w8MckeHmgfNxT20Ax
uecHr7ItVQX2h1jyn4b9KHGv8jzemp6GOFDm3i8aNyjBpKa+lLq+B1ohIQK6wwA3
CfxSPUIwxiQHNq/tOy6/8YOkYnWKRst+AdY9zSUgzCCjK3lb0GgdlT8pAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1j2iZGY/8ymtWxXgnx2gfCiBZSMB8GA1UdIwQY
MBaAFF67oHNaB+QMoyAmJ4smeGePi6zZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAt
MzIxMmI2ODU4NGU5LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAtMzIxMmI2ODU4NGU5
LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAynvgrU4z
5vbVCAZgacikX3D1j4tdufPfe4yYvJbc5vU+O6Yx0RBGppSpEbtltMNSo9UwlqZ5
nlLHXzzPK2YxuAVeM3gVFoDktWdOvNj1B3NcZ9kN2uKGncY8WWK1XYoEF4Ul7VQy
yuoOVFW9Chshenu137sOSZ0Dt0L+7lGXJYdnApDRGpLeM9fm8vWVh+4mgBIZEaDk
ISA5J+864FKplSLXNaXOBlJbRJEFHrD6ZVOxE1Pph+xaLZ3gIHsJIxjb4czqMBhv
CZnFEzT6T8EUQ3Jco9BTVWqJuCqQ0msfSjTe2IGw6Y5YiRZDAPstc5a8EnTW3R2r
BUQUpBMugXL4wg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:03:33 2025 by rpki-client