Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
File: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft (raw, json)
Hash identifier: S+rXduqkoZ7FJcfanhBm4ViedW2uMdu94OP1KC6fUfk=
Subject key identifier: 70:BB:7B:30:36:A9:11:E0:69:4C:EA:9D:D3:3C:2D:F6:02:F9:E5:5A
Authority key identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
Certificate issuer: /CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Certificate serial: 019A4C981A1BE6FCC7B879BA439DBAF3701D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
Manifest number: 0D16
Signing time: Tue 04 Nov 2025 02:00:27 +0000
Manifest this update: Tue 04 Nov 2025 02:00:27 +0000
Manifest next update: Wed 05 Nov 2025 02:00:27 +0000
Files and hashes: 1: Gia5qJnxkTQXZv942Pyg_qz0Ijw.roa (hash: Ohs/5SqLV2Md0cGZVcdev41UIaMnOgv11AyrRygjew0=)
2: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl (hash: sbQCbJ9yAAyIx+BvK8OPKtgoJmCDRYZjcaRUV0FnUIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:1a:1b:e6:fc:c7:b8:79:ba:43:9d:ba:f3:70:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Validity
Not Before: Nov 4 02:00:27 2025 GMT
Not After : Nov 5 02:00:27 2025 GMT
Subject: CN=70bb7b3036a911e0694cea9dd33c2df602f9e55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d6:ff:e5:f5:7a:1b:4b:d3:50:0c:b8:03:3d:
fa:6d:06:5e:b8:55:c7:2f:4e:6e:10:c2:7d:a1:7f:
a4:e5:e9:ad:52:a8:df:3f:d1:36:8d:f5:00:e6:0b:
37:65:77:be:44:ef:97:e8:8c:60:a1:5c:d5:75:4f:
50:4f:a2:25:46:45:b8:1c:33:bd:c6:7d:68:3b:3f:
e7:cb:81:3a:1e:90:92:df:33:03:ed:fd:0c:57:da:
e6:d4:a5:22:72:76:8f:7a:2e:b0:03:dd:d5:4d:a7:
b0:fd:db:a8:c6:73:ba:e8:bc:02:de:81:b5:4a:72:
dd:dd:3c:7d:07:48:93:c1:df:71:5a:e7:64:ae:02:
b2:1c:ff:e4:44:b7:2f:c2:3d:38:eb:19:24:ca:a0:
c9:8b:26:a2:f2:f5:dc:a3:7a:cb:b2:ef:f5:aa:65:
ec:4f:7a:97:51:fa:12:c3:f8:94:fc:ad:f5:04:c2:
dd:69:98:53:63:af:12:f3:cc:d5:3b:cc:16:fe:25:
a2:33:15:9d:45:e9:03:42:7e:2f:da:32:1c:3e:9d:
33:74:df:43:05:f9:6b:3b:84:3d:81:86:bd:90:8f:
d5:f1:6e:7d:b5:ef:35:1b:8e:58:00:36:56:18:6c:
e7:43:c4:b7:5f:af:02:e5:eb:08:99:1a:7b:9f:24:
8b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BB:7B:30:36:A9:11:E0:69:4C:EA:9D:D3:3C:2D:F6:02:F9:E5:5A
X509v3 Authority Key Identifier:
keyid:C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ef:d7:98:4c:19:26:e1:74:6a:c4:68:c8:2e:f0:20:67:0b:
94:c8:18:2e:ac:1b:dc:63:40:03:86:45:02:f1:09:ba:fd:bb:
33:e6:93:c5:94:19:45:d8:7d:8d:3e:56:aa:f8:0b:1c:fe:52:
b9:8b:18:b8:0b:30:c4:57:5c:ae:94:53:02:7f:74:7a:a4:78:
0a:4a:a8:09:ac:55:ad:28:f0:58:ea:d9:12:46:46:aa:e1:e4:
a4:a0:39:e7:ac:a0:af:61:c9:ce:c1:18:ae:70:d3:b9:57:82:
8b:c7:da:81:40:3a:e9:83:0c:fe:21:4f:25:5b:4f:69:3c:75:
83:e9:c2:8b:90:81:8d:b2:3e:b1:05:16:b2:9a:68:93:4f:a0:
a1:cc:9c:0b:23:ee:ee:d0:4b:58:d8:23:ed:dd:5c:3d:d9:43:
85:c1:74:a1:ac:35:ba:02:04:0a:9d:53:91:31:38:fb:47:c2:
6a:e1:b0:bb:3b:c5:79:4e:77:b3:ee:74:96:29:23:c9:d2:ac:
40:31:ce:e2:58:a9:53:6c:aa:16:39:94:5f:fd:18:c8:c9:34:
81:78:01:d4:96:b5:a1:5b:1c:1c:d6:5a:ec:68:41:86:0a:24:
7d:2e:0e:76:3b:7a:1d:c4:45:88:eb:af:10:3c:6c:14:04:cd:
05:c9:e2:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMmBob5vzHuHm6Q52683AdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MGUwODAxODIzZjE5ZDUxYjk2MmFiNmQ0ZWJiYmMyN2Rk
NGVkOTYwHhcNMjUxMTA0MDIwMDI3WhcNMjUxMTA1MDIwMDI3WjAzMTEwLwYDVQQD
Eyg3MGJiN2IzMDM2YTkxMWUwNjk0Y2VhOWRkMzNjMmRmNjAyZjllNTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydb/5fV6G0vTUAy4Az36bQZeuFXH
L05uEMJ9oX+k5emtUqjfP9E2jfUA5gs3ZXe+RO+X6IxgoVzVdU9QT6IlRkW4HDO9
xn1oOz/ny4E6HpCS3zMD7f0MV9rm1KUicnaPei6wA93VTaew/duoxnO66LwC3oG1
SnLd3Tx9B0iTwd9xWudkrgKyHP/kRLcvwj046xkkyqDJiyai8vXco3rLsu/1qmXs
T3qXUfoSw/iU/K31BMLdaZhTY68S88zVO8wW/iWiMxWdRekDQn4v2jIcPp0zdN9D
BflrO4Q9gYa9kI/V8W59te81G45YADZWGGznQ8S3X68C5esImRp7nySLOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHC7ezA2qRHgaUzqndM8LfYC+eVaMB8GA1UdIwQY
MBaAFMUOCAGCPxnVG5YqttTru8J91O2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80NzRmNjUtZmUyOS00ODIyLWJhMTQt
Y2U4MjE0Y2VmNmI1LzEveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80NzRmNjUtZmUyOS00ODIyLWJhMTQtY2U4MjE0Y2VmNmI1
LzEveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+/XmEwZ
JuF0asRoyC7wIGcLlMgYLqwb3GNAA4ZFAvEJuv27M+aTxZQZRdh9jT5WqvgLHP5S
uYsYuAswxFdcrpRTAn90eqR4CkqoCaxVrSjwWOrZEkZGquHkpKA556ygr2HJzsEY
rnDTuVeCi8fagUA66YMM/iFPJVtPaTx1g+nCi5CBjbI+sQUWsppok0+gocycCyPu
7tBLWNgj7d1cPdlDhcF0oaw1ugIECp1TkTE4+0fCauGwuzvFeU53s+50likjydKs
QDHO4lipU2yqFjmUX/0YyMk0gXgB1Ja1oVscHNZa7GhBhgokfS4Odjt6HcRFiOuv
EDxsFATNBcniOQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:43 2025 by rpki-client