Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
File: xhMz0OgQeIbQMFx72BvdNUiVJ64.mft (raw, json)
Hash identifier: hdXiFrR4vv3hCys6ER1eZyAv937O+UtJjLe7x4QW0iU=
Subject key identifier: 74:0D:E3:92:47:45:3E:DB:87:2E:02:FD:6A:D6:FA:57:2B:93:EF:18
Authority key identifier: C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
Certificate issuer: /CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Certificate serial: 0199FD3458083B59A95687AD86802C1B5778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:29 +0000
Manifest this update: Sun 19 Oct 2025 16:01:29 +0000
Manifest next update: Mon 20 Oct 2025 16:01:29 +0000
Files and hashes: 1: vl15h6bSawu987-Q_9jiY_8d_bU.roa (hash: Ky1qbRFkXL3xxI3+FV1tNHYzBN6SggIg4pNwGCFKnF8=)
2: xhMz0OgQeIbQMFx72BvdNUiVJ64.crl (hash: PFI6rDDmOA30W9cBCFfcpOWReDcNaGld57eGWnX7tpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:58:08:3b:59:a9:56:87:ad:86:80:2c:1b:57:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Validity
Not Before: Oct 19 16:01:29 2025 GMT
Not After : Oct 20 16:01:29 2025 GMT
Subject: CN=740de39247453edb872e02fd6ad6fa572b93ef18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:31:f9:87:60:80:31:8d:59:fd:a3:b2:aa:f0:
19:64:65:02:02:cd:e9:9a:ca:df:3e:e7:8e:58:36:
b3:ec:04:04:a8:1f:5c:71:14:1d:ba:97:26:ef:71:
87:1c:af:d1:44:c2:cf:7a:33:15:b4:e8:c9:24:af:
9c:4b:ec:8b:a3:36:99:50:47:26:50:88:79:a8:c1:
4f:74:59:ac:d8:08:28:b1:06:89:ad:38:31:f3:90:
5d:fd:e2:90:22:43:23:8d:00:00:83:eb:46:fa:0e:
af:ff:be:2c:13:41:33:d8:65:83:e5:8d:28:a7:5b:
32:cd:3f:ad:15:9c:e0:77:38:1a:ac:92:5e:64:26:
57:8b:56:8d:08:ec:86:c5:40:9f:38:01:7b:58:a8:
88:b6:6d:bc:38:6a:c8:c5:36:91:17:cd:19:dd:3b:
2f:7d:09:f7:2d:51:4a:23:1d:0d:5c:dd:20:b5:07:
6f:16:99:f3:ea:ac:5c:1b:42:33:d4:c3:17:ee:0f:
18:be:91:43:df:c9:b6:d0:dc:64:b7:d6:3e:e8:f1:
68:73:df:04:2a:73:11:5e:b5:8e:9a:80:4a:0b:e7:
80:9f:e2:1c:3e:6e:31:67:98:2c:2f:60:fa:51:ae:
96:61:d2:22:d5:d4:b5:6a:b2:a8:cf:f1:82:64:d8:
9d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0D:E3:92:47:45:3E:DB:87:2E:02:FD:6A:D6:FA:57:2B:93:EF:18
X509v3 Authority Key Identifier:
keyid:C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:00:6f:7c:7b:2a:a7:2b:89:06:f6:00:56:1c:08:7a:b9:7e:
95:1c:64:54:31:ff:e8:ec:ca:55:9c:79:d6:bc:83:e6:90:c0:
dc:06:fb:18:f4:9f:42:81:00:82:2b:de:70:5f:8a:dc:73:cf:
86:0c:46:c4:a4:ba:51:39:84:f7:ab:db:94:a6:fa:f0:5c:14:
1a:c6:29:1c:be:80:71:ae:1d:3c:f0:b9:70:14:1e:2c:5b:67:
f5:25:0b:2f:07:a0:1d:fa:78:a6:10:c3:30:10:56:c6:a9:40:
7d:6b:78:82:19:ea:ca:9e:20:94:ca:49:e1:e6:90:83:95:eb:
f1:06:5f:21:27:3f:58:f8:a7:d1:28:51:cd:03:07:8c:7b:0d:
6d:ae:af:5a:6f:59:23:45:30:8d:7d:64:0e:73:65:fe:62:80:
b6:8e:8a:08:27:45:27:dd:a9:74:05:86:2b:28:e8:0b:54:1e:
71:98:df:5a:dd:55:80:19:97:bd:d0:fd:83:a7:48:09:f6:a4:
e8:d5:e6:2d:65:47:8e:97:8c:e1:c1:1f:bf:e7:4b:c9:fc:d0:
29:d1:c6:17:01:fd:01:37:d8:4d:78:a1:c0:36:34:99:8a:fd:
70:a9:75:e6:60:4d:2e:e8:9c:18:af:5a:aa:3b:07:11:1b:1b:
41:1d:46:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NFgIO1mpVoethoAsG1d4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTMzM2QwZTgxMDc4ODZkMDMwNWM3YmQ4MWJkZDM1NDg5
NTI3YWUwHhcNMjUxMDE5MTYwMTI5WhcNMjUxMDIwMTYwMTI5WjAzMTEwLwYDVQQD
Eyg3NDBkZTM5MjQ3NDUzZWRiODcyZTAyZmQ2YWQ2ZmE1NzJiOTNlZjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zH5h2CAMY1Z/aOyqvAZZGUCAs3p
msrfPueOWDaz7AQEqB9ccRQdupcm73GHHK/RRMLPejMVtOjJJK+cS+yLozaZUEcm
UIh5qMFPdFms2AgosQaJrTgx85Bd/eKQIkMjjQAAg+tG+g6v/74sE0Ez2GWD5Y0o
p1syzT+tFZzgdzgarJJeZCZXi1aNCOyGxUCfOAF7WKiItm28OGrIxTaRF80Z3Tsv
fQn3LVFKIx0NXN0gtQdvFpnz6qxcG0Iz1MMX7g8YvpFD38m20Nxkt9Y+6PFoc98E
KnMRXrWOmoBKC+eAn+IcPm4xZ5gsL2D6Ua6WYdIi1dS1arKoz/GCZNid1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQN45JHRT7bhy4C/WrW+lcrk+8YMB8GA1UdIwQY
MBaAFMYTM9DoEHiG0DBce9gb3TVIlSeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhNejBPZ1FlSWJRTUZ4NzJCdmROVWlWSjY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9kZDMyYzMtZmU4Zi00MDQ3LWI2OGEt
OGVjNWYwZWVhMDQ1LzEveGhNejBPZ1FlSWJRTUZ4NzJCdmROVWlWSjY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9kZDMyYzMtZmU4Zi00MDQ3LWI2OGEtOGVjNWYwZWVhMDQ1
LzEveGhNejBPZ1FlSWJRTUZ4NzJCdmROVWlWSjY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUABvfHsq
pyuJBvYAVhwIerl+lRxkVDH/6OzKVZx51ryD5pDA3Ab7GPSfQoEAgivecF+K3HPP
hgxGxKS6UTmE96vblKb68FwUGsYpHL6Aca4dPPC5cBQeLFtn9SULLwegHfp4phDD
MBBWxqlAfWt4ghnqyp4glMpJ4eaQg5Xr8QZfISc/WPin0ShRzQMHjHsNba6vWm9Z
I0UwjX1kDnNl/mKAto6KCCdFJ92pdAWGKyjoC1QecZjfWt1VgBmXvdD9g6dICfak
6NXmLWVHjpeM4cEfv+dLyfzQKdHGFwH9ATfYTXihwDY0mYr9cKl15mBNLuicGK9a
qjsHERsbQR1GtA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:53:24 2025 by rpki-client