Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
File: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft (raw, json)
Hash identifier: KFChaIEryA6WQ5UbXKTo1onYe23McQDfCRKRIXgh/Q4=
Subject key identifier: 34:F9:5F:F7:C6:1D:3C:69:7C:CA:BF:9A:D9:26:C8:CC:C9:FA:DD:30
Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Certificate serial: 0199FFC841588BC0957535D5C0A293478893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 04:02:17 +0000
Manifest this update: Mon 20 Oct 2025 04:02:17 +0000
Manifest next update: Tue 21 Oct 2025 04:02:17 +0000
Files and hashes: 1: 31Tgo6hkUgGEDxpcJDek08Avr_U.roa (hash: kmmgYbNt9oWzUWS0e88Ufjcw3KVy4vM/TBImZVi6icQ=)
2: BVA-ewMKFfhNlaM9uEKeCRcxb44.roa (hash: p6Ztck3uBhR0bzcjLWO0QVdiIOvuYAXPjQqrSbEcptQ=)
3: HqPvNlx7UZiRVbk5_3PH9NhbC6A.roa (hash: +/Uf0WY1OyHo7LRFa5WaahOPnbyyowzO8Q8lBC3l8kM=)
4: RowHyzmbIUhwLNzP2aGdUq-bTxw.roa (hash: BWNoFSha19ToKG1Hm+elPv4NQAdo5EC6p+W2DfujBas=)
5: dcug0fKg-KsGzBpKENJINtdS5vw.roa (hash: 4mmQ47qSm1UkTR696jh82p3nO+ZrpORkySuxILnJi4I=)
6: kXFsWv63EX5LzlpEXl1PFUMjMlU.roa (hash: 55+NcYoCAfsxn/1QTku+M6mFFv7l9njuKzUccasgI84=)
7: qBz1hjzykMH_ZcIwvTn0SDyhgfs.roa (hash: W/hp3H2l3tBtLyOj1Fa5/YEuC/XubK4WM06Ks3Q9e/8=)
8: xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl (hash: CVALpuoD6IOivkvfgqFCS8KvVFg+lpmuSKCPFcOFmjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:41:58:8b:c0:95:75:35:d5:c0:a2:93:47:88:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Validity
Not Before: Oct 20 04:02:17 2025 GMT
Not After : Oct 21 04:02:17 2025 GMT
Subject: CN=34f95ff7c61d3c697ccabf9ad926c8ccc9fadd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:f0:23:ee:bf:ab:08:f5:66:c6:27:00:be:
1c:85:4d:b6:20:90:6b:8f:f2:a0:0a:10:ad:2e:45:
78:55:6c:3f:4b:35:c9:0e:2a:37:c7:b4:be:4b:0a:
f8:79:59:76:23:5d:ea:93:17:3f:17:b4:13:f2:f2:
79:88:69:9c:ef:dd:ee:18:01:fd:9a:a8:79:de:18:
6a:9f:95:01:9a:46:7a:87:1d:da:b8:3e:58:a8:ed:
70:3b:18:71:11:8f:26:da:b2:32:cf:37:f0:1c:49:
11:6b:1a:49:1d:15:1c:f8:8e:57:9c:51:ce:92:6c:
af:90:c1:ec:da:ff:8e:ba:57:eb:82:4d:9d:3d:2d:
7f:fe:a3:c5:70:38:c0:05:c9:6e:7f:d6:01:14:cf:
b1:5a:28:6c:f7:fa:ce:b5:d7:29:e0:ac:0f:56:85:
28:ba:74:b4:69:25:5d:92:72:98:dd:2e:ec:1d:59:
72:70:9a:04:bb:b7:b0:0c:96:6a:ae:4f:1c:42:1e:
09:f2:fd:0d:05:72:4b:e4:2a:46:3b:be:96:45:14:
21:c9:60:b3:30:04:61:bf:f3:da:f3:06:eb:35:99:
f6:e0:09:37:67:a8:4c:96:56:75:f4:2a:1e:5b:5f:
70:3e:82:6a:3b:f9:9e:d1:15:75:37:6a:fb:5f:75:
84:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F9:5F:F7:C6:1D:3C:69:7C:CA:BF:9A:D9:26:C8:CC:C9:FA:DD:30
X509v3 Authority Key Identifier:
keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b7:83:19:1c:67:24:6e:b9:55:cb:74:b5:cf:5b:36:38:9f:
68:d5:ad:65:d9:84:2b:3d:ed:cf:16:0a:a9:59:a0:b0:c9:e8:
b2:27:12:92:47:61:45:81:65:45:17:6d:3d:6d:5e:da:b5:7a:
70:0b:03:7b:4e:99:07:6c:9b:19:85:75:6a:41:ac:37:fd:e0:
a2:69:14:07:63:ea:14:50:a9:a5:ca:bf:1b:5f:d3:31:ee:95:
a3:4f:18:0c:66:59:44:3c:82:0d:50:cf:29:cb:08:b4:bc:78:
92:a8:09:2e:58:6e:a0:df:8e:08:94:c7:04:1c:7a:05:93:e2:
0c:af:dc:d2:34:cd:0d:12:2f:60:34:94:1d:88:92:50:cc:c3:
db:3c:b8:3c:67:7b:63:1b:b5:2f:de:c8:eb:b3:a1:10:dd:52:
5e:9d:11:86:4d:15:c6:57:ec:68:b4:fe:37:c3:c1:68:9c:28:
c4:6b:79:0f:4b:92:9e:ad:17:30:41:38:09:af:24:54:de:ac:
ea:62:65:4b:52:eb:3b:ed:82:04:aa:ee:64:6f:bf:2e:af:67:
55:05:4e:ab:11:28:92:27:0b:74:22:35:b1:37:c5:ad:0d:77:
68:af:1c:e6:8c:c1:20:54:65:85:fa:1d:e4:0c:66:4b:e6:f1:
9c:3e:8e:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yEFYi8CVdTXVwKKTR4iTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NDE3MzhiYWFiOTg4YjFkNjg2OTNiYjA1ZTI5YmZiYjRm
MGY2NzEwHhcNMjUxMDIwMDQwMjE3WhcNMjUxMDIxMDQwMjE3WjAzMTEwLwYDVQQD
EygzNGY5NWZmN2M2MWQzYzY5N2NjYWJmOWFkOTI2YzhjY2M5ZmFkZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHrwI+6/qwj1ZsYnAL4chU22IJBr
j/KgChCtLkV4VWw/SzXJDio3x7S+Swr4eVl2I13qkxc/F7QT8vJ5iGmc793uGAH9
mqh53hhqn5UBmkZ6hx3auD5YqO1wOxhxEY8m2rIyzzfwHEkRaxpJHRUc+I5XnFHO
kmyvkMHs2v+Oulfrgk2dPS1//qPFcDjABcluf9YBFM+xWihs9/rOtdcp4KwPVoUo
unS0aSVdknKY3S7sHVlycJoEu7ewDJZqrk8cQh4J8v0NBXJL5CpGO76WRRQhyWCz
MARhv/Pa8wbrNZn24Ak3Z6hMllZ19CoeW19wPoJqO/me0RV1N2r7X3WE3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDT5X/fGHTxpfMq/mtkmyMzJ+t0wMB8GA1UdIwQY
MBaAFMRBc4uquYix1oaTuwXim/u08PZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUt
NGM5OGQ5YTUxNDA1LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mODMxNGUtYTNiYy00NWU5LWE5ZjUtNGM5OGQ5YTUxNDA1
LzEveEVGemk2cTVpTEhXaHBPN0JlS2ItN1R3OW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbeDGRxn
JG65Vct0tc9bNjifaNWtZdmEKz3tzxYKqVmgsMnosicSkkdhRYFlRRdtPW1e2rV6
cAsDe06ZB2ybGYV1akGsN/3gomkUB2PqFFCppcq/G1/TMe6Vo08YDGZZRDyCDVDP
KcsItLx4kqgJLlhuoN+OCJTHBBx6BZPiDK/c0jTNDRIvYDSUHYiSUMzD2zy4PGd7
Yxu1L97I67OhEN1SXp0Rhk0VxlfsaLT+N8PBaJwoxGt5D0uSnq0XMEE4Ca8kVN6s
6mJlS1LrO+2CBKruZG+/Lq9nVQVOqxEokicLdCI1sTfFrQ13aK8c5ozBIFRlhfod
5AxmS+bxnD6OGw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:37:33 2025 by rpki-client