Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
File: Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft (raw, json)
Hash identifier: eipR0DDrn8E9xA11/z/dZcg4hVuQsv+YAT6OZHtjC74=
Subject key identifier: 4E:23:0F:74:00:E5:6A:5F:0C:C6:A2:45:B5:76:08:83:4E:67:53:43
Authority key identifier: 5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
Certificate issuer: /CN=5e79acd4ee40fda43022a2c9642b071da649526c
Certificate serial: 0199FBB36D02EA4A68140E74981C52003146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
Manifest number: 0F13
Signing time: Sun 19 Oct 2025 09:01:04 +0000
Manifest this update: Sun 19 Oct 2025 09:01:04 +0000
Manifest next update: Mon 20 Oct 2025 09:01:04 +0000
Files and hashes: 1: PCViN5XjjWy3uXa6yVs2Quk_6To.roa (hash: Aquofks2bcfd5azy6+IqavH7O37I4bc+/mKKyjG/YPU=)
2: Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl (hash: frrACMUhOrMcOVYOUMyYgESzbqtw8xrGs2OusmCm5UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6d:02:ea:4a:68:14:0e:74:98:1c:52:00:31:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e79acd4ee40fda43022a2c9642b071da649526c
Validity
Not Before: Oct 19 09:01:04 2025 GMT
Not After : Oct 20 09:01:04 2025 GMT
Subject: CN=4e230f7400e56a5f0cc6a245b57608834e675343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:27:a5:27:36:30:c4:31:b7:f8:a0:9d:e2:23:
39:14:4e:75:52:8f:ae:42:90:a5:63:4a:6c:32:2b:
77:fe:07:3d:14:34:93:e7:3c:66:f4:03:72:e2:2f:
3a:1c:23:81:09:c3:2b:fd:fa:24:60:e7:87:08:32:
83:d6:2d:f6:7b:29:e7:50:08:14:48:ab:92:b4:fe:
74:29:1a:87:4d:5d:f8:c2:de:c1:6e:59:f1:09:db:
62:c7:73:6d:20:87:b5:87:b2:8b:06:da:bb:3d:1d:
ae:d6:fa:44:1e:c7:9a:9d:f7:d9:a7:e9:7e:13:f4:
9e:44:d4:1c:04:62:b3:d8:8d:60:3f:e1:13:5b:f7:
30:c8:97:35:c2:ed:7e:b7:f8:c1:fd:d5:65:45:20:
49:92:93:ce:97:b4:91:79:43:18:ff:ea:c9:4e:a0:
d8:36:25:4e:51:4e:78:4a:9b:dd:c2:e9:14:ca:03:
ac:92:be:6b:0a:88:33:93:f6:02:33:96:5a:f1:39:
15:f1:64:c3:09:9a:3a:18:8e:c5:1f:e5:12:36:e1:
da:d7:8d:4a:76:c1:d4:fa:a9:f8:0b:33:0d:40:c5:
89:ea:9d:99:01:bb:18:e3:5a:46:b6:69:e0:4c:8b:
5d:99:14:a9:b4:b8:e6:c0:74:c3:6e:11:d9:d6:3a:
5c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:23:0F:74:00:E5:6A:5F:0C:C6:A2:45:B5:76:08:83:4E:67:53:43
X509v3 Authority Key Identifier:
keyid:5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1b:bb:78:49:8f:d7:36:c8:a1:76:f1:cd:b4:d5:eb:08:df:
9e:79:d7:ce:29:15:9b:0d:13:12:5e:31:05:9d:51:ac:8c:09:
b8:74:03:0c:99:46:39:c9:c4:0d:c5:ed:25:6b:95:47:a3:bc:
3b:51:6a:d6:1f:5b:16:49:a6:69:d3:66:ab:b0:b2:df:15:f9:
99:25:fa:1e:08:1b:f7:3d:85:69:1c:9f:76:9b:ae:d0:e5:c5:
8a:30:46:e8:21:d4:e2:c7:08:e9:c9:ad:50:3f:f7:f5:8b:5c:
7b:0a:0e:9b:dd:41:a3:ac:bc:be:7d:28:39:4f:8d:d4:ca:c6:
33:d7:0d:3b:3c:63:de:14:24:f1:47:b4:2e:ca:13:b7:4c:c5:
1b:16:fc:e6:94:3e:4b:ae:cc:c4:f4:45:25:7b:6f:24:eb:20:
db:d5:6c:df:9f:46:de:c8:5f:19:37:a0:53:db:28:46:0a:6a:
21:53:42:5c:f9:8d:93:1a:88:cd:ea:1f:3b:a8:21:11:62:d7:
9d:98:ed:19:6b:0f:c4:68:dc:09:72:aa:22:d7:33:65:10:9d:
1e:69:63:42:80:18:7d:04:43:01:72:55:08:69:ba:ce:87:3e:
18:b1:ca:85:f2:2b:36:f7:9d:84:9f:0d:54:4c:54:fa:f3:e5:
02:b2:f6:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s20C6kpoFA50mBxSADFGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNzlhY2Q0ZWU0MGZkYTQzMDIyYTJjOTY0MmIwNzFkYTY0
OTUyNmMwHhcNMjUxMDE5MDkwMTA0WhcNMjUxMDIwMDkwMTA0WjAzMTEwLwYDVQQD
Eyg0ZTIzMGY3NDAwZTU2YTVmMGNjNmEyNDViNTc2MDg4MzRlNjc1MzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyelJzYwxDG3+KCd4iM5FE51Uo+u
QpClY0psMit3/gc9FDST5zxm9ANy4i86HCOBCcMr/fokYOeHCDKD1i32eynnUAgU
SKuStP50KRqHTV34wt7BblnxCdtix3NtIIe1h7KLBtq7PR2u1vpEHseanffZp+l+
E/SeRNQcBGKz2I1gP+ETW/cwyJc1wu1+t/jB/dVlRSBJkpPOl7SReUMY/+rJTqDY
NiVOUU54SpvdwukUygOskr5rCogzk/YCM5Za8TkV8WTDCZo6GI7FH+USNuHa141K
dsHU+qn4CzMNQMWJ6p2ZAbsY41pGtmngTItdmRSptLjmwHTDbhHZ1jpcpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4jD3QA5WpfDMaiRbV2CINOZ1NDMB8GA1UdIwQY
MBaAFF55rNTuQP2kMCKiyWQrBx2mSVJsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG5tczFPNUFfYVF3SXFMSlpDc0hIYVpKVW13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC84YmNiMzAtODdlNC00M2I1LTgyNDYt
ZWI4ZGE1OTU0ZjNiLzEvWG5tczFPNUFfYVF3SXFMSlpDc0hIYVpKVW13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC84YmNiMzAtODdlNC00M2I1LTgyNDYtZWI4ZGE1OTU0ZjNi
LzEvWG5tczFPNUFfYVF3SXFMSlpDc0hIYVpKVW13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhu7eEmP
1zbIoXbxzbTV6wjfnnnXzikVmw0TEl4xBZ1RrIwJuHQDDJlGOcnEDcXtJWuVR6O8
O1Fq1h9bFkmmadNmq7Cy3xX5mSX6Hggb9z2FaRyfdpuu0OXFijBG6CHU4scI6cmt
UD/39YtcewoOm91Bo6y8vn0oOU+N1MrGM9cNOzxj3hQk8Ue0LsoTt0zFGxb85pQ+
S67MxPRFJXtvJOsg29Vs359G3shfGTegU9soRgpqIVNCXPmNkxqIzeofO6ghEWLX
nZjtGWsPxGjcCXKqItczZRCdHmljQoAYfQRDAXJVCGm6zoc+GLHKhfIrNvedhJ8N
VExU+vPlArL2HA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:03 2025 by rpki-client