Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
File: xpZo80fFWt13rFF-kzHd5_w1VqY.mft (raw, json)
Hash identifier: vvCLkSUXDA456s1agkMRXAdqv4BzoP+Jz54xN7GNH4E=
Subject key identifier: 63:45:CA:52:68:4D:9F:C5:1A:64:6B:70:A0:15:8A:83:10:36:16:FB
Authority key identifier: C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
Certificate issuer: /CN=c69668f347c55add77ac517e9331dde7fc3556a6
Certificate serial: 0199FD34054952F4B031F4AD72DCDD9A457E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 16:01:08 +0000
Manifest this update: Sun 19 Oct 2025 16:01:08 +0000
Manifest next update: Mon 20 Oct 2025 16:01:08 +0000
Files and hashes: 1: BXeoSIu-_SRx3A6HaJlOPOszvDk.roa (hash: GGULqsTNy/97TMMZdfL/fue1ku/lCYDFj0fY/D6J2uE=)
2: xpZo80fFWt13rFF-kzHd5_w1VqY.crl (hash: rtYMvjL0BfX9sl7BpG36i3RNESqYUQniLeWm9qSZg1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:05:49:52:f4:b0:31:f4:ad:72:dc:dd:9a:45:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69668f347c55add77ac517e9331dde7fc3556a6
Validity
Not Before: Oct 19 16:01:08 2025 GMT
Not After : Oct 20 16:01:08 2025 GMT
Subject: CN=6345ca52684d9fc51a646b70a0158a83103616fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a7:48:82:10:ee:c5:d3:ab:e7:94:85:16:04:
64:bc:e6:01:35:47:e3:47:a5:ad:53:d0:15:b3:8e:
46:c4:71:b1:8e:0b:30:06:59:8c:20:a4:f2:4a:ee:
4f:81:a4:0c:b5:ea:35:32:a4:a3:16:be:84:ea:56:
fa:7b:82:b0:d1:e4:76:78:98:4a:3d:4e:b6:04:a5:
ff:70:64:d8:13:27:a0:20:83:64:37:91:b2:f7:58:
e4:e8:a6:88:eb:9b:58:3c:8b:d4:aa:1e:6d:72:68:
35:26:41:2e:6b:69:73:d7:83:82:0d:f0:4f:93:78:
34:86:99:91:9e:e7:1b:11:3a:03:4a:8a:c7:e2:05:
0f:d5:f9:04:30:c9:12:6c:48:a8:5c:a9:6e:5c:1b:
90:05:98:5f:17:82:83:95:1b:d9:d5:cd:94:59:c7:
af:ab:08:41:ee:b2:08:5e:ad:07:bb:63:cb:4c:d4:
2b:d1:c2:e5:62:05:b0:05:d1:e0:3c:ab:f0:57:46:
79:c5:87:b2:d0:c9:e8:82:4c:2e:cc:94:d0:56:24:
aa:24:8e:98:64:90:b9:a2:4d:11:57:10:2e:66:c1:
9e:7e:dc:4f:f7:f5:0e:96:fa:69:ff:4e:00:36:16:
9e:e3:98:aa:d4:33:99:a7:2d:5c:db:1a:f1:ee:8d:
5a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:45:CA:52:68:4D:9F:C5:1A:64:6B:70:A0:15:8A:83:10:36:16:FB
X509v3 Authority Key Identifier:
keyid:C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f1:2b:4b:7f:3e:42:4c:d9:f4:c3:b7:2d:1b:f1:96:87:34:
05:fd:b0:c5:ab:5b:c6:4e:8f:c3:f0:39:80:3c:98:a9:cc:36:
49:6f:b7:f2:71:0a:10:60:9e:48:93:2f:05:94:d4:5f:74:6f:
c6:76:f3:05:b0:2e:82:61:6a:32:1b:7f:fe:01:a8:74:30:5a:
61:f3:5f:a9:d5:d3:83:a8:81:df:4a:d4:86:43:eb:f6:a5:c9:
c3:77:48:75:8f:e7:a4:4c:36:24:4b:78:1b:44:7f:de:6a:b4:
96:7f:38:57:d4:aa:a7:c9:4e:08:66:0f:6a:bb:55:33:af:47:
2d:6b:52:55:06:15:ee:87:1a:47:11:01:19:f1:63:de:96:4c:
e0:22:e9:fd:21:bf:69:e1:b4:49:0d:06:af:7c:15:50:5a:11:
2b:95:57:95:fe:fd:f2:06:b0:92:cb:ca:65:ae:fb:3d:47:7d:
72:8c:2f:ef:5a:78:42:4a:e1:f6:14:38:c5:37:14:55:db:fc:
1d:5e:7f:ae:ff:48:31:47:97:18:0b:ad:87:5e:9d:9f:5f:ec:
d0:98:21:5a:1d:5d:2e:c2:84:57:57:79:d1:23:b7:9e:27:23:
a1:ef:91:85:40:8a:98:10:52:c1:98:d1:25:01:6e:3d:08:5c:
92:2e:09:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NAVJUvSwMfStctzdmkV+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OTY2OGYzNDdjNTVhZGQ3N2FjNTE3ZTkzMzFkZGU3ZmMz
NTU2YTYwHhcNMjUxMDE5MTYwMTA4WhcNMjUxMDIwMTYwMTA4WjAzMTEwLwYDVQQD
Eyg2MzQ1Y2E1MjY4NGQ5ZmM1MWE2NDZiNzBhMDE1OGE4MzEwMzYxNmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9KdIghDuxdOr55SFFgRkvOYBNUfj
R6WtU9AVs45GxHGxjgswBlmMIKTySu5PgaQMteo1MqSjFr6E6lb6e4Kw0eR2eJhK
PU62BKX/cGTYEyegIINkN5Gy91jk6KaI65tYPIvUqh5tcmg1JkEua2lz14OCDfBP
k3g0hpmRnucbEToDSorH4gUP1fkEMMkSbEioXKluXBuQBZhfF4KDlRvZ1c2UWcev
qwhB7rIIXq0Hu2PLTNQr0cLlYgWwBdHgPKvwV0Z5xYey0MnogkwuzJTQViSqJI6Y
ZJC5ok0RVxAuZsGeftxP9/UOlvpp/04ANhae45iq1DOZpy1c2xrx7o1aVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNFylJoTZ/FGmRrcKAVioMQNhb7MB8GA1UdIwQY
MBaAFMaWaPNHxVrdd6xRfpMx3ef8NVamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wNjA5NjktNWNhZi00MThmLThjMjUt
YWNiMjcyM2E1MDc2LzEveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8wNjA5NjktNWNhZi00MThmLThjMjUtYWNiMjcyM2E1MDc2
LzEveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPErS38+
QkzZ9MO3LRvxloc0Bf2wxatbxk6Pw/A5gDyYqcw2SW+38nEKEGCeSJMvBZTUX3Rv
xnbzBbAugmFqMht//gGodDBaYfNfqdXTg6iB30rUhkPr9qXJw3dIdY/npEw2JEt4
G0R/3mq0ln84V9Sqp8lOCGYPartVM69HLWtSVQYV7ocaRxEBGfFj3pZM4CLp/SG/
aeG0SQ0Gr3wVUFoRK5VXlf798gawksvKZa77PUd9cowv71p4Qkrh9hQ4xTcUVdv8
HV5/rv9IMUeXGAuth16dn1/s0JghWh1dLsKEV1d50SO3nicjoe+RhUCKmBBSwZjR
JQFuPQhcki4J0g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:49 2025 by rpki-client