Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
File: P-XZqjR4a6oW1Fa9857K-12XMPg.mft (raw, json)
Hash identifier: 3QZ2o4/O5nCyJuMIiqjQChDDsELsR71cyBFO81CYsTc=
Subject key identifier: 13:E4:9F:65:84:28:CA:4B:A2:5A:0F:81:DB:AF:35:2A:6C:C4:8A:B7
Authority key identifier: 3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
Certificate issuer: /CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Certificate serial: 0199FBEB0F693722E0B4AB5BCB94649E517C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:01:50 +0000
Manifest this update: Sun 19 Oct 2025 10:01:50 +0000
Manifest next update: Mon 20 Oct 2025 10:01:50 +0000
Files and hashes: 1: I8Hl2QUOJ6pW-HzuzhburaAUCcs.roa (hash: TO7xgPDDMwBnfoyPmeOZq+S6vszklMWr0Jg0Yq+3Oiw=)
2: P-XZqjR4a6oW1Fa9857K-12XMPg.crl (hash: isSqvi76QSZkqrnRZUrkCfOGa8XW9ylUHGS56VAkoNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0f:69:37:22:e0:b4:ab:5b:cb:94:64:9e:51:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Validity
Not Before: Oct 19 10:01:50 2025 GMT
Not After : Oct 20 10:01:50 2025 GMT
Subject: CN=13e49f658428ca4ba25a0f81dbaf352a6cc48ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:d2:2e:3b:17:e4:26:ea:9e:f6:9d:1f:95:
cf:f9:72:28:a5:95:56:4a:49:73:60:b1:44:d9:8a:
31:00:2e:d7:67:3d:10:b4:26:87:44:ab:4f:42:5a:
31:97:e5:73:fb:c1:21:47:24:57:4c:fe:b8:32:78:
a1:85:1e:6e:f1:ec:59:bb:96:6a:37:33:45:6e:39:
63:63:81:85:d3:7e:2c:f7:02:ac:85:12:08:02:96:
cc:d9:b7:05:50:4c:cc:8d:56:56:e8:69:4f:0d:2d:
22:bf:2a:78:e0:10:04:c3:f2:61:36:b8:2c:c0:f6:
15:ba:3d:f3:ef:87:72:d4:1c:58:68:34:49:af:54:
7e:e0:ca:a4:ed:10:b7:f8:33:5b:05:33:8a:6f:7d:
78:33:06:8d:c5:cb:bb:44:02:9d:0b:8a:84:1e:60:
2f:ae:c1:d1:a6:db:f3:2b:8a:a9:a3:d9:1d:b7:71:
13:78:ea:75:c4:6b:11:32:85:97:44:dd:8d:ea:27:
24:77:54:91:ee:c6:fc:95:a8:97:9b:69:31:df:1f:
bd:0b:b0:e8:21:1b:59:f2:06:8b:b5:f2:97:86:dd:
b7:ad:9d:f8:02:b9:6d:98:25:ba:99:6a:39:0d:a6:
f5:29:20:84:01:67:f4:e2:09:5c:8d:da:fd:9a:08:
b0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E4:9F:65:84:28:CA:4B:A2:5A:0F:81:DB:AF:35:2A:6C:C4:8A:B7
X509v3 Authority Key Identifier:
keyid:3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:34:36:08:f1:b8:44:18:9d:74:e6:68:17:17:47:26:72:70:
36:6e:4d:d5:69:2a:54:7a:7a:93:2d:cb:da:2b:f4:37:70:1f:
65:69:e6:0d:a9:36:18:d1:34:e7:eb:dd:4e:02:b5:08:84:b3:
a9:12:f6:63:3e:1a:c5:ec:2e:73:26:e1:0d:dc:b9:6b:55:d4:
eb:8c:85:a8:7f:f7:99:85:24:4c:f4:4b:6c:74:b5:6a:d8:81:
aa:40:4b:fd:48:9d:4b:74:2e:8c:1c:e3:a5:40:fb:28:3d:07:
aa:af:00:31:3f:1d:1b:bb:78:d6:b8:a4:46:78:38:a2:8a:4f:
fd:0d:29:c3:97:97:97:f4:e3:5d:82:45:99:95:02:cb:62:d5:
4c:e3:ba:a4:61:2e:3d:2d:6c:df:d4:bc:e0:87:98:60:19:39:
43:c0:af:33:01:97:d5:78:c5:c4:55:37:5f:1f:35:f2:63:4a:
b4:36:82:80:42:2d:a2:de:9e:fa:04:7b:87:55:8e:cf:ed:b1:
14:6a:7f:bd:a3:f8:f8:0e:cc:33:09:cd:1e:0a:ed:15:8e:00:
b8:b5:81:0e:68:a5:82:f1:f7:2a:d9:1b:02:81:93:15:db:07:
89:76:4c:50:b6:54:d8:6a:ca:ae:a8:6f:c7:98:fb:c5:45:a3:
95:d8:4f:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76w9pNyLgtKtby5RknlF8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZTVkOWFhMzQ3ODZiYWExNmQ0NTZiZGYzOWVjYWZiNWQ5
NzMwZjgwHhcNMjUxMDE5MTAwMTUwWhcNMjUxMDIwMTAwMTUwWjAzMTEwLwYDVQQD
EygxM2U0OWY2NTg0MjhjYTRiYTI1YTBmODFkYmFmMzUyYTZjYzQ4YWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArljSLjsX5CbqnvadH5XP+XIopZVW
SklzYLFE2YoxAC7XZz0QtCaHRKtPQloxl+Vz+8EhRyRXTP64MnihhR5u8exZu5Zq
NzNFbjljY4GF034s9wKshRIIApbM2bcFUEzMjVZW6GlPDS0ivyp44BAEw/JhNrgs
wPYVuj3z74dy1BxYaDRJr1R+4Mqk7RC3+DNbBTOKb314MwaNxcu7RAKdC4qEHmAv
rsHRptvzK4qpo9kdt3ETeOp1xGsRMoWXRN2N6ickd1SR7sb8laiXm2kx3x+9C7Do
IRtZ8gaLtfKXht23rZ34ArltmCW6mWo5Dab1KSCEAWf04glcjdr9mgiwaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPkn2WEKMpLoloPgduvNSpsxIq3MB8GA1UdIwQY
MBaAFD/l2ao0eGuqFtRWvfOeyvtdlzD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9hMmZlNjgtNzYxZC00ZTZjLTlkY2Qt
NTk0YzFhY2Q5ZGFmLzEvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9hMmZlNjgtNzYxZC00ZTZjLTlkY2QtNTk0YzFhY2Q5ZGFm
LzEvUC1YWnFqUjRhNm9XMUZhOTg1N0stMTJYTVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTQ2CPG4
RBiddOZoFxdHJnJwNm5N1WkqVHp6ky3L2iv0N3AfZWnmDak2GNE05+vdTgK1CISz
qRL2Yz4axewucybhDdy5a1XU64yFqH/3mYUkTPRLbHS1atiBqkBL/UidS3QujBzj
pUD7KD0Hqq8AMT8dG7t41rikRng4oopP/Q0pw5eXl/TjXYJFmZUCy2LVTOO6pGEu
PS1s39S84IeYYBk5Q8CvMwGX1XjFxFU3Xx818mNKtDaCgEItot6e+gR7h1WOz+2x
FGp/vaP4+A7MMwnNHgrtFY4AuLWBDmilgvH3KtkbAoGTFdsHiXZMULZU2GrKrqhv
x5j7xUWjldhPcQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:16 2025 by rpki-client