Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
File: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft (raw, json)
Hash identifier: K6/H6qaP1HnJW6HR6uDKZQCl5ICx3v6iB4ECdck6tY4=
Subject key identifier: 97:81:3C:2C:A0:C7:50:39:0B:3D:CA:FB:47:FC:DF:7D:9D:2C:7F:AE
Authority key identifier: C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
Certificate issuer: /CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Certificate serial: 0199FDD9F97BB4D7E28BB0CC10EF7A7D35E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
Manifest number: 0171
Signing time: Sun 19 Oct 2025 19:02:24 +0000
Manifest this update: Sun 19 Oct 2025 19:02:24 +0000
Manifest next update: Mon 20 Oct 2025 19:02:24 +0000
Files and hashes: 1: NGw8ktOj6OOwsyhqpmQcxVz3HFU.roa (hash: Z7YWYHXxapOgTQP+VOKpEFoycxd68wL+FS31DhS3NVc=)
2: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl (hash: SE4Hjw3lxj3G92lNxY+elqH7hudBxjBJ0Yz2nKlWFzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:f9:7b:b4:d7:e2:8b:b0:cc:10:ef:7a:7d:35:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Validity
Not Before: Oct 19 19:02:24 2025 GMT
Not After : Oct 20 19:02:24 2025 GMT
Subject: CN=97813c2ca0c750390b3dcafb47fcdf7d9d2c7fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:6e:0a:df:d7:fe:e3:c5:4d:d7:7c:02:fa:
c4:e0:17:5d:a6:ed:cd:31:d6:32:ae:05:3d:31:91:
1b:5f:86:c3:4b:3a:f1:db:d3:bd:f1:55:45:fe:17:
19:64:5d:fa:41:73:98:e1:e3:be:76:1a:8d:56:e3:
1c:91:23:a7:ca:a6:cc:ca:79:07:27:bb:7e:01:b0:
08:30:8d:e4:5b:b8:f8:b0:6d:04:b0:b6:08:5c:b1:
e3:65:17:4b:40:db:44:2e:1f:5a:ca:47:5c:63:38:
3a:18:0b:0c:fb:74:6e:92:b5:6d:00:b3:08:77:b2:
ab:e0:31:d3:28:c6:41:7b:78:03:c3:f6:a2:e2:10:
fa:f6:16:cf:28:f6:6d:4c:ce:8a:d4:28:ad:f0:04:
ab:07:65:46:13:d6:9e:6a:ed:7c:fa:3b:41:cd:01:
63:23:da:9f:56:b9:48:c2:ca:15:62:91:b0:3d:52:
6f:59:eb:f5:f2:85:a2:11:c9:88:8b:2d:c2:af:cb:
f0:83:15:ff:b7:be:1d:d0:9c:cc:40:35:eb:8d:29:
0f:36:d8:2e:31:88:ce:58:b3:95:b2:71:3a:e3:a4:
32:46:a0:32:f9:f0:9b:5c:0c:5f:1c:0b:0a:78:6c:
cd:62:94:d1:dc:73:f7:e4:d2:7d:6e:b3:2f:33:e6:
4c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:81:3C:2C:A0:C7:50:39:0B:3D:CA:FB:47:FC:DF:7D:9D:2C:7F:AE
X509v3 Authority Key Identifier:
keyid:C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:96:7c:49:da:80:59:8e:62:e8:b1:7a:fa:7e:7f:11:36:da:
a8:3d:de:60:6e:df:1a:52:7c:0f:33:db:47:2c:91:d0:1f:ae:
84:a2:20:55:67:4e:47:ff:6e:6f:10:f1:5e:42:c9:ec:09:1b:
0e:c0:c2:81:f6:b6:47:3d:f8:1d:d8:3b:74:50:03:a7:b7:67:
1d:97:48:c6:1b:3a:cc:7a:e7:d6:5a:de:25:d4:e1:34:0c:4c:
dd:2c:7a:8d:7f:08:28:48:bd:5d:cb:3c:b9:a6:06:6f:6d:45:
8a:08:d6:51:16:aa:ed:07:0b:c3:f2:e0:d2:53:f5:33:60:1f:
36:53:92:be:6e:60:46:92:c9:89:73:30:40:63:27:60:20:60:
af:10:7d:96:80:2a:30:9d:cf:b1:21:e6:e7:76:5a:38:9f:11:
a7:07:94:3d:1e:50:55:e3:b4:32:b9:0e:66:95:e9:e8:fd:43:
58:6e:ec:ef:ae:8d:5d:7f:a8:e5:02:d8:3f:ad:fa:75:51:fe:
e9:ec:09:63:c4:e0:fc:75:45:f3:fc:26:96:1c:3b:4a:fb:8a:
21:94:31:dd:18:e8:15:e8:cc:e0:9f:54:15:ba:6b:bb:ab:0b:
ac:4f:9c:91:28:01:be:93:69:11:dc:e1:83:dc:07:9c:c3:3c:
f7:81:5f:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92fl7tNfii7DMEO96fTXmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MDZlYThkNWQ3MDU0ZWY4OTk3ZTYyOTJlM2IwNDRiMDkz
YTI3YzYwHhcNMjUxMDE5MTkwMjI0WhcNMjUxMDIwMTkwMjI0WjAzMTEwLwYDVQQD
Eyg5NzgxM2MyY2EwYzc1MDM5MGIzZGNhZmI0N2ZjZGY3ZDlkMmM3ZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg5uCt/X/uPFTdd8AvrE4Bddpu3N
MdYyrgU9MZEbX4bDSzrx29O98VVF/hcZZF36QXOY4eO+dhqNVuMckSOnyqbMynkH
J7t+AbAIMI3kW7j4sG0EsLYIXLHjZRdLQNtELh9aykdcYzg6GAsM+3RukrVtALMI
d7Kr4DHTKMZBe3gDw/ai4hD69hbPKPZtTM6K1Cit8ASrB2VGE9aeau18+jtBzQFj
I9qfVrlIwsoVYpGwPVJvWev18oWiEcmIiy3Cr8vwgxX/t74d0JzMQDXrjSkPNtgu
MYjOWLOVsnE646QyRqAy+fCbXAxfHAsKeGzNYpTR3HP35NJ9brMvM+ZMaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeBPCygx1A5Cz3K+0f8332dLH+uMB8GA1UdIwQY
MBaAFMQG6o1dcFTviZfmKS47BEsJOifGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMWIyNmMtMmI3Yy00MTE3LWIyMzUt
OGIzMDFiYWMzMGM5LzEveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iMWIyNmMtMmI3Yy00MTE3LWIyMzUtOGIzMDFiYWMzMGM5
LzEveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJZ8SdqA
WY5i6LF6+n5/ETbaqD3eYG7fGlJ8DzPbRyyR0B+uhKIgVWdOR/9ubxDxXkLJ7Akb
DsDCgfa2Rz34Hdg7dFADp7dnHZdIxhs6zHrn1lreJdThNAxM3Sx6jX8IKEi9Xcs8
uaYGb21FigjWURaq7QcLw/Lg0lP1M2AfNlOSvm5gRpLJiXMwQGMnYCBgrxB9loAq
MJ3PsSHm53ZaOJ8RpweUPR5QVeO0MrkOZpXp6P1DWG7s766NXX+o5QLYP636dVH+
6ewJY8Tg/HVF8/wmlhw7SvuKIZQx3RjoFejM4J9UFbpru6sLrE+ckSgBvpNpEdzh
g9wHnMM894FfFQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:57 2025 by rpki-client