Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
File: XZno1XE6XmOCwNE4nWJCgW-db7k.mft (raw, json)
Hash identifier: Cht6mUBY3LjrCpNs5YvuvDfFR7/LmJXDvkhDwZLQ1KY=
Subject key identifier: E8:F2:BC:5D:2B:81:0D:81:DC:26:58:6D:A7:24:5A:8B:C3:52:F7:96
Authority key identifier: 5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
Certificate issuer: /CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Certificate serial: 0199FF594688E1411EEA1A09594A4B421535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 02:01:04 +0000
Manifest this update: Mon 20 Oct 2025 02:01:04 +0000
Manifest next update: Tue 21 Oct 2025 02:01:04 +0000
Files and hashes: 1: 1-NGjnQxo4c6IDfqjk5paae-wSfM.roa (hash: 4pr97OcGZEpEysIvYdOK32obqFh3ATs7kdH95HWDctQ=)
2: UUanwV5xGuK3SINsq8WiMNy7Rsw.roa (hash: JbzAaEUNAUROpdNsWj7B0ylMXqQOejnEiOY//pgAVzs=)
3: XZno1XE6XmOCwNE4nWJCgW-db7k.crl (hash: +emjdUeQTVqMIziTSlsJYUXk3NWN0pDi37CBRwDfviY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:46:88:e1:41:1e:ea:1a:09:59:4a:4b:42:15:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Validity
Not Before: Oct 20 02:01:04 2025 GMT
Not After : Oct 21 02:01:04 2025 GMT
Subject: CN=e8f2bc5d2b810d81dc26586da7245a8bc352f796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:16:67:a9:77:45:11:26:f2:a3:24:3c:ab:60:
13:7b:85:cd:a8:c7:8b:d2:a4:49:87:87:92:78:1f:
17:ca:1c:e3:bc:13:5d:20:ce:9f:41:48:bc:31:f6:
35:11:26:59:9d:b6:dd:e1:b0:92:b4:9e:ed:ce:67:
10:a1:37:d9:86:9d:7e:03:a0:95:29:68:15:f9:1e:
8a:bd:02:89:59:d2:04:b1:20:b8:0e:f0:22:cd:be:
a1:79:be:92:34:a9:e2:cc:b4:91:98:3f:92:66:2a:
69:51:78:fb:98:b5:09:fc:29:e8:36:bf:c8:7e:53:
3c:a9:c5:89:c7:f0:6f:6b:5d:25:a6:bc:39:98:a6:
c4:73:72:9b:6b:ef:42:74:a9:1d:72:29:71:b0:1f:
0c:6f:a4:d3:9f:88:86:50:52:c9:e7:85:f6:21:09:
0a:f1:d7:34:f7:c8:ad:8c:cd:fb:f8:07:3b:c8:a2:
fd:0e:d6:b2:ec:68:74:c0:b8:6a:7c:04:7d:69:ee:
02:d2:c8:bb:d4:b4:a2:13:48:76:3f:56:68:d6:d1:
61:bb:48:63:4c:20:ea:43:3b:f3:ae:38:0f:77:95:
e6:51:d0:3b:f2:ff:8f:67:72:57:72:3e:05:d3:5d:
05:12:3d:d7:ce:39:22:e3:1b:ad:e7:5e:12:f1:1a:
39:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F2:BC:5D:2B:81:0D:81:DC:26:58:6D:A7:24:5A:8B:C3:52:F7:96
X509v3 Authority Key Identifier:
keyid:5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9b:b6:62:bd:97:76:a1:36:be:fa:10:80:69:f5:38:ca:94:
80:01:aa:af:c5:17:6c:23:84:4e:fd:1a:85:7b:50:77:1a:76:
ab:dd:d7:18:b0:60:e9:4b:c6:be:cb:ab:09:87:98:ef:c1:7b:
21:26:2b:1b:7d:1f:e9:a5:a0:68:c1:af:4d:77:28:18:56:9e:
d0:38:e6:2f:31:a5:49:43:6f:12:52:0a:21:6c:7f:14:87:44:
2a:05:47:6e:c0:58:6b:e9:01:b7:fd:f7:bb:ef:2c:6e:5f:3f:
be:77:89:d6:bc:4e:e1:a6:cf:9c:76:84:2b:16:89:8d:61:f0:
12:d1:c7:29:08:16:03:46:08:5a:04:fa:f2:54:81:7e:db:84:
91:ad:17:be:9d:b5:c9:3b:9e:7d:96:06:df:71:47:a5:fa:23:
f0:62:07:9d:c6:7a:c0:bf:82:53:7d:0b:3c:6e:6f:b9:e6:15:
43:c4:63:e2:a7:c2:34:db:26:95:dc:9b:5f:ef:18:32:c1:b6:
9c:a1:c6:c8:18:de:48:5f:f2:0d:97:37:50:90:44:b9:eb:a6:
97:d3:27:7f:1d:54:9f:69:1f:32:16:27:fa:3e:39:dc:cd:0f:
f7:9c:10:e1:fb:44:1b:69:cb:91:63:3b:f5:75:91:92:93:21:
9a:71:02:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WUaI4UEe6hoJWUpLQhU1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkOTllOGQ1NzEzYTVlNjM4MmMwZDEzODlkNjI0MjgxNmY5
ZDZmYjkwHhcNMjUxMDIwMDIwMTA0WhcNMjUxMDIxMDIwMTA0WjAzMTEwLwYDVQQD
EyhlOGYyYmM1ZDJiODEwZDgxZGMyNjU4NmRhNzI0NWE4YmMzNTJmNzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRZnqXdFESbyoyQ8q2ATe4XNqMeL
0qRJh4eSeB8XyhzjvBNdIM6fQUi8MfY1ESZZnbbd4bCStJ7tzmcQoTfZhp1+A6CV
KWgV+R6KvQKJWdIEsSC4DvAizb6heb6SNKnizLSRmD+SZippUXj7mLUJ/CnoNr/I
flM8qcWJx/Bva10lprw5mKbEc3Kba+9CdKkdcilxsB8Mb6TTn4iGUFLJ54X2IQkK
8dc098itjM37+Ac7yKL9Dtay7Gh0wLhqfAR9ae4C0si71LSiE0h2P1Zo1tFhu0hj
TCDqQzvzrjgPd5XmUdA78v+PZ3JXcj4F010FEj3Xzjki4xut514S8Ro5QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjyvF0rgQ2B3CZYbackWovDUveWMB8GA1UdIwQY
MBaAFF2Z6NVxOl5jgsDROJ1iQoFvnW+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFpubzFYRTZYbU9Dd05FNG5XSkNnVy1kYjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9kMmY5OTItM2ExNy00OTc1LTljMmMt
OWNhOGVhOTBlNjE3LzEvWFpubzFYRTZYbU9Dd05FNG5XSkNnVy1kYjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9kMmY5OTItM2ExNy00OTc1LTljMmMtOWNhOGVhOTBlNjE3
LzEvWFpubzFYRTZYbU9Dd05FNG5XSkNnVy1kYjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5u2Yr2X
dqE2vvoQgGn1OMqUgAGqr8UXbCOETv0ahXtQdxp2q93XGLBg6UvGvsurCYeY78F7
ISYrG30f6aWgaMGvTXcoGFae0DjmLzGlSUNvElIKIWx/FIdEKgVHbsBYa+kBt/33
u+8sbl8/vneJ1rxO4abPnHaEKxaJjWHwEtHHKQgWA0YIWgT68lSBftuEka0Xvp21
yTuefZYG33FHpfoj8GIHncZ6wL+CU30LPG5vueYVQ8Rj4qfCNNsmldybX+8YMsG2
nKHGyBjeSF/yDZc3UJBEueuml9Mnfx1Un2kfMhYn+j453M0P95wQ4ftEG2nLkWM7
9XWRkpMhmnECjQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:04:24 2025 by rpki-client