Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
File: xafD9LFGk1EiAllaik-VsNa3oQE.mft (raw, json)
Hash identifier: vOUHz7/Rh7MchV8PGBmxvM6tOctnBJ7cl/XN64mmqkg=
Subject key identifier: 3F:0F:70:A9:38:AF:69:5C:D8:AE:02:8F:B7:DC:BA:C5:F6:9D:26:C4
Authority key identifier: C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01
Certificate issuer: /CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101
Certificate serial: 0199FD6B1431F931B21DE245CD353AA90DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 17:01:16 +0000
Manifest this update: Sun 19 Oct 2025 17:01:16 +0000
Manifest next update: Mon 20 Oct 2025 17:01:16 +0000
Files and hashes: 1: Bbxo5GOkMtBPV4eyDiJBtgGCAvs.roa (hash: gPTOZ/QwaGNzYqcGskaYm0Q9CUgsB/kmTCxE6lNVoV8=)
2: GkWtiMh4Kekgq83feCXLfv_pub8.roa (hash: UboiG7GPy5Vm4OyfuuuEVh7hhcZoHsmQQgbXPLJ/4ug=)
3: ScP8kW7fVZKKIlJqtoPhrGG1uQo.roa (hash: kBK8cN2i6ByxK8RJnTQxES9FzgvOd8FoOcnJVY/e4Bc=)
4: xafD9LFGk1EiAllaik-VsNa3oQE.crl (hash: XJPU5diOhXx6Rbkb3P+fhSgfR6GfzlNaUVjmQELrMVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:14:31:f9:31:b2:1d:e2:45:cd:35:3a:a9:0d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101
Validity
Not Before: Oct 19 17:01:16 2025 GMT
Not After : Oct 20 17:01:16 2025 GMT
Subject: CN=3f0f70a938af695cd8ae028fb7dcbac5f69d26c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:ab:72:8c:19:8b:08:82:bd:28:3f:75:4c:
9a:3e:42:ac:ba:99:42:be:1d:76:92:2f:45:23:42:
63:d7:ca:42:ad:d6:6a:94:ef:8b:a7:6f:11:88:32:
a0:c9:de:3c:1f:e8:1e:d2:11:ee:e2:57:6c:c8:34:
67:f0:bf:50:f4:91:f1:5f:02:ce:78:63:17:b2:2c:
cf:34:00:54:7a:4d:bf:97:da:58:35:13:de:9b:02:
d4:f8:4b:0a:9e:58:72:37:9a:b0:6d:54:f7:e4:c2:
43:47:af:bc:88:4c:e4:ad:77:6d:80:2c:48:3e:bd:
39:e7:38:ff:9c:f0:34:44:cc:4e:0a:95:9a:ef:ed:
16:aa:61:00:44:ed:b4:28:a6:4a:88:5c:ad:d0:8d:
3c:e4:b7:fb:49:c1:68:97:e7:e6:de:dc:16:82:2e:
2e:72:a9:36:73:47:61:cc:24:b7:ba:bf:7c:87:38:
c4:f4:8a:88:d0:74:9b:0e:e1:ad:03:12:a2:9b:8d:
28:65:15:67:4b:02:5a:d6:39:b7:e5:95:99:83:5f:
13:e9:e4:e8:32:5e:56:ad:2a:07:a6:26:1e:5d:e8:
cf:45:83:34:33:85:23:90:aa:e0:f3:f8:ae:2b:09:
39:f4:87:b0:ae:9b:8c:8b:7d:4a:11:c9:3f:88:53:
71:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0F:70:A9:38:AF:69:5C:D8:AE:02:8F:B7:DC:BA:C5:F6:9D:26:C4
X509v3 Authority Key Identifier:
keyid:C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4b:19:b9:12:2a:30:9b:86:1b:76:77:be:e1:04:ac:7d:07:
bf:15:bf:40:2e:e6:b4:a7:9b:fc:f7:01:f0:63:ac:83:f2:a1:
fe:13:89:23:69:e7:0d:39:34:cb:d7:11:a8:36:da:e0:ac:c4:
af:7f:73:04:5a:e9:5e:7d:23:96:5a:98:99:d8:dd:71:b4:f4:
a3:33:62:28:a6:80:f7:f9:c4:8c:7f:79:d9:c2:be:c6:9d:10:
a2:6d:e0:ac:48:6a:ff:21:03:97:8e:7e:01:de:29:5d:e1:22:
26:b0:00:0c:25:60:2b:de:6e:5a:24:fd:fc:82:6a:49:65:0e:
50:31:00:99:f0:ef:77:1b:85:a3:b5:42:e5:f7:9a:72:82:01:
2b:dc:6e:bb:69:83:93:1e:30:dd:82:97:f7:db:db:6c:af:fe:
9f:c0:c9:cb:aa:1b:39:79:00:58:7e:b0:4c:9f:1b:71:f8:6c:
80:e2:e7:bc:16:0a:4e:c1:80:fe:88:f1:03:75:15:0c:37:b3:
fb:ce:20:75:e2:fc:49:dc:fd:f1:ab:e8:29:33:04:84:b7:da:
c4:c4:ec:1a:c9:d0:35:e3:34:ac:e3:99:95:ad:59:0b:64:85:
28:5f:cc:27:5a:d1:44:88:b7:fc:71:95:2c:ef:01:f8:9d:68:
b4:25:12:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9axQx+TGyHeJFzTU6qQ2tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTdjM2Y0YjE0NjkzNTEyMjAyNTk1YThhNGY5NWIwZDZi
N2ExMDEwHhcNMjUxMDE5MTcwMTE2WhcNMjUxMDIwMTcwMTE2WjAzMTEwLwYDVQQD
EygzZjBmNzBhOTM4YWY2OTVjZDhhZTAyOGZiN2RjYmFjNWY2OWQyNmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhyrcowZiwiCvSg/dUyaPkKsuplC
vh12ki9FI0Jj18pCrdZqlO+Lp28RiDKgyd48H+ge0hHu4ldsyDRn8L9Q9JHxXwLO
eGMXsizPNABUek2/l9pYNRPemwLU+EsKnlhyN5qwbVT35MJDR6+8iEzkrXdtgCxI
Pr055zj/nPA0RMxOCpWa7+0WqmEARO20KKZKiFyt0I085Lf7ScFol+fm3twWgi4u
cqk2c0dhzCS3ur98hzjE9IqI0HSbDuGtAxKim40oZRVnSwJa1jm35ZWZg18T6eTo
Ml5WrSoHpiYeXejPRYM0M4UjkKrg8/iuKwk59IewrpuMi31KEck/iFNx9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8PcKk4r2lc2K4Cj7fcusX2nSbEMB8GA1UdIwQY
MBaAFMWnw/SxRpNRIgJZWopPlbDWt6EBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFmRDlMRkdrMUVpQWxsYWlrLVZzTmEzb1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8zYTNiMmMtNzZiOS00OWI0LTgyMTgt
ZDEyZjFlMjQ1NmJhLzEveGFmRDlMRkdrMUVpQWxsYWlrLVZzTmEzb1FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8zYTNiMmMtNzZiOS00OWI0LTgyMTgtZDEyZjFlMjQ1NmJh
LzEveGFmRDlMRkdrMUVpQWxsYWlrLVZzTmEzb1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEsZuRIq
MJuGG3Z3vuEErH0HvxW/QC7mtKeb/PcB8GOsg/Kh/hOJI2nnDTk0y9cRqDba4KzE
r39zBFrpXn0jllqYmdjdcbT0ozNiKKaA9/nEjH952cK+xp0Qom3grEhq/yEDl45+
Ad4pXeEiJrAADCVgK95uWiT9/IJqSWUOUDEAmfDvdxuFo7VC5feacoIBK9xuu2mD
kx4w3YKX99vbbK/+n8DJy6obOXkAWH6wTJ8bcfhsgOLnvBYKTsGA/ojxA3UVDDez
+84gdeL8Sdz98avoKTMEhLfaxMTsGsnQNeM0rOOZla1ZC2SFKF/MJ1rRRIi3/HGV
LO8B+J1otCUSMQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:36:37 2025 by rpki-client