
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
File: XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft (raw, json)
Hash identifier: UbuOK1zXphHZPtU5+rSf4bM5KMjak0tOXQ+6ZKX1s/Y=
Subject key identifier: 6A:AA:D8:18:2A:05:F4:B2:5D:89:42:23:28:3F:BA:DB:EA:71:B7:73
Authority key identifier: 5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D
Certificate issuer: /CN=5ea68c853810d0320b156844f29317701b58610d
Certificate serial: 0199FE471808D88D6D27FC86343315EB2A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
Manifest number: 0B21
Signing time: Sun 19 Oct 2025 21:01:35 +0000
Manifest this update: Sun 19 Oct 2025 21:01:35 +0000
Manifest next update: Mon 20 Oct 2025 21:01:35 +0000
Files and hashes: 1: XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl (hash: KQG7wP+UKsIWmIA9eYXUiJMflxt5EobfNwGzmxMc3Yg=)
2: zWctF490hB_hw_nmdFUFC_bPmMM.roa (hash: SsIXLaayVDdukX1So7HtLQgGu/7qBD8U27FPnJFIDDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:18:08:d8:8d:6d:27:fc:86:34:33:15:eb:2a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea68c853810d0320b156844f29317701b58610d
Validity
Not Before: Oct 19 21:01:35 2025 GMT
Not After : Oct 20 21:01:35 2025 GMT
Subject: CN=6aaad8182a05f4b25d894223283fbadbea71b773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:78:b4:3d:b8:ae:13:02:d3:56:cd:7a:0e:43:
ba:ce:46:c8:8e:86:90:17:e9:78:42:8e:d7:55:4f:
1a:87:0a:04:04:c6:eb:48:9e:10:65:2c:b2:ae:20:
3f:12:46:c3:99:8c:3f:09:a3:e4:38:6a:0d:fe:8e:
45:fe:bc:88:14:42:74:38:d3:16:e6:e6:86:cf:75:
36:fc:dc:08:e0:4e:cb:17:15:7f:60:2e:81:6b:0b:
52:a5:5d:d8:f4:e3:75:a0:b2:34:6e:2e:d8:96:a3:
d8:5e:0f:2a:ec:85:71:a5:60:40:ec:a2:7a:17:22:
81:46:fc:60:2c:9a:e1:c1:9a:27:02:9d:a3:95:0e:
11:39:85:57:f5:81:f1:b6:bb:bc:a5:aa:50:dc:39:
f5:1c:c0:46:54:e0:dd:ae:e3:1a:d6:c1:bc:e4:29:
5c:e9:f0:40:74:00:34:2d:67:78:9f:19:d6:b4:89:
96:62:e8:52:9a:e8:16:fe:f9:95:49:18:9a:0c:8e:
55:91:55:ef:7b:d3:37:46:c5:70:dc:b1:7c:ac:65:
b5:ef:34:fc:b4:c9:3a:6d:d0:dd:68:21:f9:ae:26:
de:df:23:07:d3:0d:60:68:5a:72:5d:42:5e:83:e5:
6c:41:01:28:68:5a:6c:11:f6:b8:b4:52:69:21:90:
59:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AA:D8:18:2A:05:F4:B2:5D:89:42:23:28:3F:BA:DB:EA:71:B7:73
X509v3 Authority Key Identifier:
keyid:5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:20:49:54:9c:49:a3:3c:d5:a4:87:8a:17:f1:b6:18:45:6e:
ce:5a:7c:67:e3:7a:dc:85:cf:d2:b7:9e:81:ca:0f:27:d2:54:
3f:e7:0d:64:fe:d5:e1:12:4d:11:3e:d6:af:e0:6d:f3:27:6e:
61:07:f4:81:39:d4:e3:60:fe:f3:49:e2:4b:ee:b1:78:6c:2c:
25:b5:77:f4:3d:ca:58:c2:4e:a7:f6:11:d9:2e:5f:18:65:e9:
ae:4e:d7:2a:85:5a:05:ee:50:f9:1c:9f:ea:a2:8a:eb:5e:69:
8c:a0:4d:0a:ff:31:1b:bb:90:63:73:2e:18:7d:70:32:51:fd:
69:a4:c6:9a:84:b7:3c:be:be:e8:e1:09:ba:d2:1a:e1:e7:d0:
2f:1b:b3:54:22:62:f3:51:32:a0:91:71:a9:84:17:53:ec:91:
bb:18:0e:dd:6d:9d:ab:85:f8:79:dd:7a:86:70:d0:b8:e6:99:
20:e3:75:a0:5a:64:86:54:bb:2c:3e:a0:c4:1b:05:0e:ab:12:
f7:14:e0:4a:10:cb:af:02:e4:5d:cf:14:45:60:7b:ae:1a:ed:
ea:a3:f1:ef:7c:03:b4:4d:9b:c7:aa:3d:db:fb:54:3b:0d:70:
41:9c:82:9b:3e:e7:3d:4d:c6:1f:0b:91:24:6a:70:96:3b:21:
52:8b:7a:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RxgI2I1tJ/yGNDMV6ypeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYTY4Yzg1MzgxMGQwMzIwYjE1Njg0NGYyOTMxNzcwMWI1
ODYxMGQwHhcNMjUxMDE5MjEwMTM1WhcNMjUxMDIwMjEwMTM1WjAzMTEwLwYDVQQD
Eyg2YWFhZDgxODJhMDVmNGIyNWQ4OTQyMjMyODNmYmFkYmVhNzFiNzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHi0PbiuEwLTVs16DkO6zkbIjoaQ
F+l4Qo7XVU8ahwoEBMbrSJ4QZSyyriA/EkbDmYw/CaPkOGoN/o5F/ryIFEJ0ONMW
5uaGz3U2/NwI4E7LFxV/YC6BawtSpV3Y9ON1oLI0bi7YlqPYXg8q7IVxpWBA7KJ6
FyKBRvxgLJrhwZonAp2jlQ4ROYVX9YHxtru8papQ3Dn1HMBGVODdruMa1sG85Clc
6fBAdAA0LWd4nxnWtImWYuhSmugW/vmVSRiaDI5VkVXve9M3RsVw3LF8rGW17zT8
tMk6bdDdaCH5ribe3yMH0w1gaFpyXUJeg+VsQQEoaFpsEfa4tFJpIZBZzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqq2BgqBfSyXYlCIyg/utvqcbdzMB8GA1UdIwQY
MBaAFF6mjIU4ENAyCxVoRPKTF3AbWGENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHFhTWhUZ1EwRElMRldoRThwTVhjQnRZWVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zZTIzZDctYTNiNy00MTZmLTg4MTAt
MWVmYTdjZjc3M2EwLzEvWHFhTWhUZ1EwRElMRldoRThwTVhjQnRZWVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8zZTIzZDctYTNiNy00MTZmLTg4MTAtMWVmYTdjZjc3M2Ew
LzEvWHFhTWhUZ1EwRElMRldoRThwTVhjQnRZWVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyBJVJxJ
ozzVpIeKF/G2GEVuzlp8Z+N63IXP0reegcoPJ9JUP+cNZP7V4RJNET7Wr+Bt8ydu
YQf0gTnU42D+80niS+6xeGwsJbV39D3KWMJOp/YR2S5fGGXprk7XKoVaBe5Q+Ryf
6qKK615pjKBNCv8xG7uQY3MuGH1wMlH9aaTGmoS3PL6+6OEJutIa4efQLxuzVCJi
81EyoJFxqYQXU+yRuxgO3W2dq4X4ed16hnDQuOaZION1oFpkhlS7LD6gxBsFDqsS
9xTgShDLrwLkXc8URWB7rhrt6qPx73wDtE2bx6o92/tUOw1wQZyCmz7nPU3GHwuR
JGpwljshUot6yA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:45:17 2025 by rpki-client