Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
File: Xh1AYP1QHrrpPtRNprennmZwWy8.mft (raw, json)
Hash identifier: ZHbYihjax6W276JVbK7aQzrC3eno10QceHIOaUQFYZY=
Subject key identifier: A7:EB:97:50:FE:33:CB:0F:2B:D4:FF:19:D7:0C:E9:05:90:19:A3:81
Authority key identifier: 5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
Certificate issuer: /CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Certificate serial: 0199FB7CDC181B919B48145C2BFA07E7BE1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 08:01:27 +0000
Manifest this update: Sun 19 Oct 2025 08:01:27 +0000
Manifest next update: Mon 20 Oct 2025 08:01:27 +0000
Files and hashes: 1: KlSKJbns32ql0FeYlQMxJtpi1lg.roa (hash: 9F1/AQaZc6WZENDwjwcw6q8ufEFG6qmOq3cpIsOFvt8=)
2: Xh1AYP1QHrrpPtRNprennmZwWy8.crl (hash: fjWczznDCMRvvKYsQDRaMBu9biAp9tBOTbH++tVXGbw=)
3: kDFFmEHOxxsPr1PqT9Wra3pOapo.roa (hash: PtmDDx7DD6q5hVM880BXHYOoqWKL19qOEEf16G0FZlQ=)
4: whsaqddiyDI8xyshxKkHo02Q7GA.roa (hash: GiAQ6ec8LMUk9UTzynBovpvos9gk3+nUpwnbIm92gbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:dc:18:1b:91:9b:48:14:5c:2b:fa:07:e7:be:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Validity
Not Before: Oct 19 08:01:27 2025 GMT
Not After : Oct 20 08:01:27 2025 GMT
Subject: CN=a7eb9750fe33cb0f2bd4ff19d70ce9059019a381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:b2:46:ce:ab:2c:89:d0:a0:bb:34:84:a4:
3e:86:62:a3:00:03:f6:5f:72:65:6a:3d:d6:63:d7:
0c:0a:fb:b3:b8:fd:46:97:2e:24:1f:4f:ab:b0:79:
e3:af:24:98:84:7e:d5:36:4c:16:17:d6:21:71:56:
43:d0:8a:2a:53:44:75:32:64:64:f1:61:dc:d9:62:
0a:e7:03:00:30:9f:37:96:73:c8:79:47:6c:fd:9b:
7c:af:1d:50:c6:71:91:58:89:69:5c:43:45:f7:40:
6e:15:d1:61:78:c6:6a:2c:53:5c:d6:db:7f:99:1c:
ba:cf:02:8e:8c:99:87:6b:46:1f:4d:1a:bb:c1:d4:
33:1c:60:b2:c9:08:e0:de:c1:dc:91:10:1a:1b:fe:
3c:41:35:ec:9c:53:1b:ac:c7:32:e3:a0:a3:8b:93:
9b:51:43:4e:3e:53:a4:e6:58:f1:8e:d2:ff:90:3b:
3a:60:66:99:3a:76:67:f3:d9:07:63:6f:e8:12:de:
ea:48:1d:18:a7:29:40:6c:44:15:b9:c6:98:34:47:
84:18:5a:c0:09:c5:20:65:75:88:5e:8f:ee:5e:eb:
35:75:46:5b:e5:42:fe:f2:de:c1:80:d2:20:bc:07:
87:07:2b:bd:88:c8:e3:9c:7b:fb:d1:10:99:ea:e6:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EB:97:50:FE:33:CB:0F:2B:D4:FF:19:D7:0C:E9:05:90:19:A3:81
X509v3 Authority Key Identifier:
keyid:5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:81:82:cb:67:f9:75:d7:9e:1b:34:0a:0a:78:f2:39:fd:e5:
54:4b:4a:13:15:e1:9c:73:16:35:82:64:8d:1d:88:20:56:2a:
3f:c1:80:e1:32:15:c1:c1:d8:3f:fa:e9:2b:80:89:3d:36:66:
a9:84:78:33:7e:49:f4:bc:72:f2:05:d1:d6:7f:6a:26:f0:42:
4a:cd:a9:62:b4:4e:17:16:62:fb:06:e4:a9:91:b2:a5:fe:ab:
64:54:1f:55:17:bd:9f:f1:0f:04:f1:7d:65:86:db:41:81:6e:
16:52:31:ce:7d:a2:e7:cd:19:cc:cd:c5:38:88:9a:53:fe:a9:
e6:e6:07:08:49:f4:53:70:00:7e:d4:d9:3f:2a:5a:5d:30:a7:
27:b6:b8:ef:37:c5:3e:7e:4c:a5:c4:22:63:8f:b2:97:5b:d7:
2f:1e:b0:fa:23:f6:06:d8:87:5e:d3:e6:18:2b:9f:9c:a9:86:
9b:1b:13:11:c5:ca:85:d5:83:ae:cf:0d:b7:38:1e:aa:74:41:
89:e8:64:8d:42:9e:37:03:ce:cd:6a:4a:92:e6:6c:4b:2c:f8:
b4:e5:45:36:91:cf:49:45:19:d7:61:62:cf:7a:e4:f2:77:38:
16:78:91:55:82:a7:8e:14:41:68:06:b1:e5:14:32:f0:fc:02:
5e:e8:b7:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fNwYG5GbSBRcK/oH574dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMWQ0MDYwZmQ1MDFlYmFlOTNlZDQ0ZGE2YjdhNzllNjY3
MDViMmYwHhcNMjUxMDE5MDgwMTI3WhcNMjUxMDIwMDgwMTI3WjAzMTEwLwYDVQQD
EyhhN2ViOTc1MGZlMzNjYjBmMmJkNGZmMTlkNzBjZTkwNTkwMTlhMzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwWyRs6rLInQoLs0hKQ+hmKjAAP2
X3Jlaj3WY9cMCvuzuP1Gly4kH0+rsHnjrySYhH7VNkwWF9YhcVZD0IoqU0R1MmRk
8WHc2WIK5wMAMJ83lnPIeUds/Zt8rx1QxnGRWIlpXENF90BuFdFheMZqLFNc1tt/
mRy6zwKOjJmHa0YfTRq7wdQzHGCyyQjg3sHckRAaG/48QTXsnFMbrMcy46Cji5Ob
UUNOPlOk5ljxjtL/kDs6YGaZOnZn89kHY2/oEt7qSB0YpylAbEQVucaYNEeEGFrA
CcUgZXWIXo/uXus1dUZb5UL+8t7BgNIgvAeHByu9iMjjnHv70RCZ6uaO4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfrl1D+M8sPK9T/GdcM6QWQGaOBMB8GA1UdIwQY
MBaAFF4dQGD9UB666T7UTaa3p55mcFsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hNzBhODQtZjU1Mi00MzU0LWExMDQt
MGUxZGI5OGFkMjMxLzEvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9hNzBhODQtZjU1Mi00MzU0LWExMDQtMGUxZGI5OGFkMjMx
LzEvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIGCy2f5
ddeeGzQKCnjyOf3lVEtKExXhnHMWNYJkjR2IIFYqP8GA4TIVwcHYP/rpK4CJPTZm
qYR4M35J9Lxy8gXR1n9qJvBCSs2pYrROFxZi+wbkqZGypf6rZFQfVRe9n/EPBPF9
ZYbbQYFuFlIxzn2i580ZzM3FOIiaU/6p5uYHCEn0U3AAftTZPypaXTCnJ7a47zfF
Pn5MpcQiY4+yl1vXLx6w+iP2BtiHXtPmGCufnKmGmxsTEcXKhdWDrs8NtzgeqnRB
iehkjUKeNwPOzWpKkuZsSyz4tOVFNpHPSUUZ12Fiz3rk8nc4FniRVYKnjhRBaAax
5RQy8PwCXui3CA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:43 2025 by rpki-client