Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
File: xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft (raw, json)
Hash identifier: tDtLBm4dO7qP8hlU9UViBtBkxMZuYwGmYWJi0a8+M2k=
Subject key identifier: 3C:DB:BC:90:A9:E3:39:BE:62:4A:72:35:78:03:57:2B:D2:D2:BE:6B
Authority key identifier: C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25
Certificate issuer: /CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825
Certificate serial: 0199FB0ED739BEEDDB421F8EB1BAB3DE759E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
Manifest number: 04CA
Signing time: Sun 19 Oct 2025 06:01:17 +0000
Manifest this update: Sun 19 Oct 2025 06:01:17 +0000
Manifest next update: Mon 20 Oct 2025 06:01:17 +0000
Files and hashes: 1: SGkYily7UQPusAexDOf3Pto8qlU.roa (hash: suweJqoDq78riZx1pHsROfmVS4S86mc1JzDxd3RsgQs=)
2: xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl (hash: KjQLiFxt/F+/X3VFOK1HpfGTQQcLy2UZfhhMEwUfNs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:d7:39:be:ed:db:42:1f:8e:b1:ba:b3:de:75:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825
Validity
Not Before: Oct 19 06:01:17 2025 GMT
Not After : Oct 20 06:01:17 2025 GMT
Subject: CN=3cdbbc90a9e339be624a72357803572bd2d2be6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:93:1e:41:27:18:05:f5:3d:fa:75:f1:c7:ea:
54:61:29:41:d1:d5:eb:17:e7:71:3f:45:f0:77:34:
b8:af:fe:54:eb:62:d4:55:e9:b2:68:ed:66:b2:a3:
54:1a:a8:16:5a:93:a5:cb:12:db:59:25:f0:96:e0:
55:cf:b6:be:39:49:4e:a9:bc:c5:f1:6b:4e:30:6d:
68:a4:16:54:e8:07:41:50:7e:a2:f7:29:89:fb:3f:
49:f6:94:bb:c0:81:42:20:7e:41:0e:56:a8:91:61:
ae:ae:2d:a8:3b:ff:bf:4e:f0:f6:05:03:8f:8d:04:
ad:df:e3:ee:2c:ff:fa:83:70:7d:b6:76:dd:e3:82:
28:f8:16:77:7b:c1:7a:f1:13:4f:b7:d1:ad:c5:8d:
ee:74:7c:87:cd:42:33:13:33:59:71:47:bc:ab:a0:
db:d1:a7:b7:78:94:0c:ca:f4:c4:fb:d5:e3:00:7f:
79:bf:83:c4:f1:d8:40:2a:25:03:7a:f7:60:7d:2b:
fc:41:5a:ea:ce:72:31:d6:e2:b5:90:32:eb:d7:bf:
32:ec:7a:6f:5f:26:5b:4f:57:6e:91:ba:12:ce:45:
a4:b2:4a:73:d2:9a:be:22:29:7b:ef:d8:81:27:69:
23:cd:df:f2:f7:7c:9e:56:da:8d:03:fe:b7:d3:77:
16:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DB:BC:90:A9:E3:39:BE:62:4A:72:35:78:03:57:2B:D2:D2:BE:6B
X509v3 Authority Key Identifier:
keyid:C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:62:84:1b:d0:90:4e:7d:df:61:1b:0a:89:ed:65:74:88:2c:
fc:0c:6e:77:8e:8e:2e:2e:e7:d2:f7:e1:e4:24:71:6d:b4:ac:
e6:60:11:f1:56:ef:7a:0e:ca:d4:85:45:22:3a:02:b7:c5:5f:
bb:73:95:04:c5:d4:f6:d4:54:db:1e:a7:fb:66:b0:7d:38:db:
8c:c8:a0:3c:3d:d6:c7:b6:a0:86:eb:db:a7:09:c5:34:8f:fc:
7b:b1:cf:f8:77:92:72:89:ae:70:1e:d1:55:c6:69:49:d6:6d:
77:9e:c3:12:f3:ae:2e:24:4d:8b:c7:5f:73:da:d2:e7:db:de:
26:9c:a4:9b:60:14:a1:5a:6d:fa:10:1f:1e:9d:f3:d1:d6:9c:
c7:04:63:86:cc:81:da:85:5a:a5:3f:ff:f4:c5:17:a4:5f:e5:
a2:c5:83:f7:70:a1:8a:22:84:b1:98:8d:ea:16:d0:3c:45:40:
ae:e5:6f:12:dd:c4:2c:97:9e:46:39:da:67:b9:d1:8f:a9:bd:
5a:3c:18:da:a4:08:3f:35:f9:5a:d1:07:77:e0:bd:a5:b5:a7:
a6:47:f4:3f:5c:55:c9:3a:79:0b:24:01:9f:86:a1:f1:0c:4e:
98:eb:c2:93:6f:58:3f:ab:d1:1a:9f:d5:8a:dd:2b:b3:0e:3a:
9c:9b:d9:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Dtc5vu3bQh+Osbqz3nWeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YTBmMzExMDk4NGNjZmJmNTI5OTgwYjZkNDE2ZGRkNGUx
YTg4MjUwHhcNMjUxMDE5MDYwMTE3WhcNMjUxMDIwMDYwMTE3WjAzMTEwLwYDVQQD
EygzY2RiYmM5MGE5ZTMzOWJlNjI0YTcyMzU3ODAzNTcyYmQyZDJiZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpMeQScYBfU9+nXxx+pUYSlB0dXr
F+dxP0XwdzS4r/5U62LUVemyaO1msqNUGqgWWpOlyxLbWSXwluBVz7a+OUlOqbzF
8WtOMG1opBZU6AdBUH6i9ymJ+z9J9pS7wIFCIH5BDlaokWGuri2oO/+/TvD2BQOP
jQSt3+PuLP/6g3B9tnbd44Io+BZ3e8F68RNPt9GtxY3udHyHzUIzEzNZcUe8q6Db
0ae3eJQMyvTE+9XjAH95v4PE8dhAKiUDevdgfSv8QVrqznIx1uK1kDLr178y7Hpv
XyZbT1dukboSzkWkskpz0pq+Iil779iBJ2kjzd/y93yeVtqNA/6303cWEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzbvJCp4zm+YkpyNXgDVyvS0r5rMB8GA1UdIwQY
MBaAFMSg8xEJhMz79SmYC21Bbd1OGoglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEtEekVRbUV6UHYxS1pnTGJVRnQzVTRhaUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hNmM1ZjYtNjA0Zi00Mzk5LTk0NDMt
ZDEyYTkwYmY1MDJlLzEveEtEekVRbUV6UHYxS1pnTGJVRnQzVTRhaUNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hNmM1ZjYtNjA0Zi00Mzk5LTk0NDMtZDEyYTkwYmY1MDJl
LzEveEtEekVRbUV6UHYxS1pnTGJVRnQzVTRhaUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmKEG9CQ
Tn3fYRsKie1ldIgs/Axud46OLi7n0vfh5CRxbbSs5mAR8Vbveg7K1IVFIjoCt8Vf
u3OVBMXU9tRU2x6n+2awfTjbjMigPD3Wx7aghuvbpwnFNI/8e7HP+HeScomucB7R
VcZpSdZtd57DEvOuLiRNi8dfc9rS59veJpykm2AUoVpt+hAfHp3z0dacxwRjhsyB
2oVapT//9MUXpF/losWD93ChiiKEsZiN6hbQPEVAruVvEt3ELJeeRjnaZ7nRj6m9
WjwY2qQIPzX5WtEHd+C9pbWnpkf0P1xVyTp5CyQBn4ah8QxOmOvCk29YP6vRGp/V
it0rsw46nJvZAg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:45 2025 by rpki-client