Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
File: xalo7bcsFfX5Vn_TQme4dIXvNtE.mft (raw, json)
Hash identifier: z8ZR6vVOAXjDvWCM3pWA6aD2EFo4ePi40LEM6PRZVTg=
Subject key identifier: EC:F6:AE:66:26:01:A6:63:B1:E4:E4:16:94:76:73:C4:CD:F6:83:FC
Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Certificate issuer: /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Certificate serial: 0199FCFD48D22C8D47FB97DE339D61F27962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
Manifest number: 1344
Signing time: Sun 19 Oct 2025 15:01:21 +0000
Manifest this update: Sun 19 Oct 2025 15:01:21 +0000
Manifest next update: Mon 20 Oct 2025 15:01:21 +0000
Files and hashes: 1: L6-VizqbQShaQBu3JV896s_4tGg.roa (hash: 2W7drlEaijHWshfl4DyE1RE1WYGrzJu6Z78yEoBqxmE=)
2: RHZBo8Pr6Q-AwsJ6UMblKavesaU.roa (hash: 0vFm3yhvgBy4kgPfdSeT0wbY5J6zHgZ0B78QJ9Nt4MM=)
3: xalo7bcsFfX5Vn_TQme4dIXvNtE.crl (hash: 9WsbmNn4fgy2MGELq1kk92i+8dL9Cn4v5DrX91gsNmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:48:d2:2c:8d:47:fb:97:de:33:9d:61:f2:79:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Validity
Not Before: Oct 19 15:01:21 2025 GMT
Not After : Oct 20 15:01:21 2025 GMT
Subject: CN=ecf6ae662601a663b1e4e416947673c4cdf683fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:83:d6:30:f3:9a:b6:a5:5e:b4:fc:5c:1e:
c1:d0:88:58:da:62:49:2f:a1:fc:87:af:3d:a8:0a:
1f:e4:2b:9c:68:a6:7b:ac:1e:80:d5:85:fd:69:ab:
44:11:d7:fe:9c:53:82:bc:e8:b3:db:62:99:94:4a:
fb:0a:58:d1:91:2b:8b:35:98:46:f0:32:7c:d8:e4:
c4:87:02:f0:2c:66:45:75:47:3c:7e:25:db:92:90:
d7:44:fb:a6:68:78:8d:33:1f:56:8d:2c:71:48:05:
8e:66:43:b4:70:e9:3f:1e:ec:b1:1f:b1:79:23:a9:
04:7e:cf:83:36:c3:a6:4b:a4:4d:97:8d:29:60:a6:
54:10:99:9e:e6:c8:61:1e:a4:43:86:09:fe:4e:8a:
83:ed:78:79:c3:05:da:a7:22:14:d0:e3:88:6b:5a:
9f:13:10:a1:e7:29:ec:b5:3a:4a:90:e5:a9:3c:4b:
4d:ac:60:ff:10:3d:2e:ca:9e:41:65:61:2d:35:aa:
9c:36:7b:9c:ec:38:aa:17:db:c8:e4:9d:dd:57:88:
50:68:c2:5e:05:15:b9:91:6e:dd:7d:13:55:4d:4c:
31:49:10:05:33:74:0f:a6:7c:35:c4:85:82:e3:72:
6f:5c:1d:3f:cc:c6:cc:87:41:4c:01:89:15:20:76:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F6:AE:66:26:01:A6:63:B1:E4:E4:16:94:76:73:C4:CD:F6:83:FC
X509v3 Authority Key Identifier:
keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b1:23:4c:6a:8a:d9:a1:81:8b:d5:35:fa:b9:bf:7a:5b:3d:
ad:bf:b0:c1:31:69:83:fb:9e:3b:33:3f:ef:87:ee:3a:a3:4f:
87:10:9d:41:02:03:35:e0:65:b6:cd:ea:15:2d:27:55:78:42:
2c:d3:aa:78:67:ba:71:58:c8:25:3c:ad:5f:72:0f:09:a6:20:
87:6e:34:c1:e8:33:cf:47:37:30:fd:95:52:c3:ea:f0:e5:b8:
8f:ea:cb:b4:fc:3c:fb:4b:e4:4b:2a:63:6c:2d:9a:f8:36:98:
fb:b6:bc:e9:b5:5a:18:b0:b5:f9:3f:b4:9f:b8:ad:30:7f:7a:
61:60:0c:92:4b:52:ba:34:6f:55:9a:ae:bc:a9:b8:c0:cf:79:
e0:b9:29:2e:85:07:fb:35:03:7b:cc:a1:7c:80:50:0b:f0:1e:
52:e2:5f:c4:47:04:13:01:9f:d8:57:7f:ad:a1:d6:e6:70:97:
fc:8d:54:e7:1a:80:75:06:4d:ba:07:74:61:a6:40:6d:6b:77:
e4:84:1e:fa:28:90:dc:cc:a0:c7:f8:fd:eb:80:90:fd:a6:b3:
e4:80:95:cf:85:3b:8e:db:4e:31:e2:72:89:53:5d:de:0f:4e:
e7:d4:ea:f6:b9:bc:77:fa:4c:72:38:30:8c:d6:05:c9:f9:c3:
17:17:d4:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/UjSLI1H+5feM51h8nliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTk2OGVkYjcyYzE1ZjVmOTU2N2ZkMzQyNjdiODc0ODVl
ZjM2ZDEwHhcNMjUxMDE5MTUwMTIxWhcNMjUxMDIwMTUwMTIxWjAzMTEwLwYDVQQD
EyhlY2Y2YWU2NjI2MDFhNjYzYjFlNGU0MTY5NDc2NzNjNGNkZjY4M2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXeD1jDzmralXrT8XB7B0IhY2mJJ
L6H8h689qAof5CucaKZ7rB6A1YX9aatEEdf+nFOCvOiz22KZlEr7CljRkSuLNZhG
8DJ82OTEhwLwLGZFdUc8fiXbkpDXRPumaHiNMx9WjSxxSAWOZkO0cOk/HuyxH7F5
I6kEfs+DNsOmS6RNl40pYKZUEJme5shhHqRDhgn+ToqD7Xh5wwXapyIU0OOIa1qf
ExCh5ynstTpKkOWpPEtNrGD/ED0uyp5BZWEtNaqcNnuc7DiqF9vI5J3dV4hQaMJe
BRW5kW7dfRNVTUwxSRAFM3QPpnw1xIWC43JvXB0/zMbMh0FMAYkVIHaoQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOz2rmYmAaZjseTkFpR2c8TN9oP8MB8GA1UdIwQY
MBaAFMWpaO23LBX1+VZ/00JnuHSF7zbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMt
YjJjMGRmYThhMGUxLzEveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMtYjJjMGRmYThhMGUx
LzEveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrEjTGqK
2aGBi9U1+rm/els9rb+wwTFpg/ueOzM/74fuOqNPhxCdQQIDNeBlts3qFS0nVXhC
LNOqeGe6cVjIJTytX3IPCaYgh240wegzz0c3MP2VUsPq8OW4j+rLtPw8+0vkSypj
bC2a+DaY+7a86bVaGLC1+T+0n7itMH96YWAMkktSujRvVZquvKm4wM954LkpLoUH
+zUDe8yhfIBQC/AeUuJfxEcEEwGf2Fd/raHW5nCX/I1U5xqAdQZNugd0YaZAbWt3
5IQe+iiQ3Mygx/j964CQ/aaz5ICVz4U7jttOMeJyiVNd3g9O59Tq9rm8d/pMcjgw
jNYFyfnDFxfUqw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:09:25 2025 by rpki-client