Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
File: xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json)
Hash identifier: /iqJtna4GkS49j7E0UFwHD6ZaO3JDN/qa9I4PrB4yQ8=
Subject key identifier: 91:29:31:44:B2:5C:CF:9F:8F:00:74:9F:FD:CD:62:C5:19:3C:EC:81
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 0199FC589112F90CC7E7A2F4E417EA145708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
Manifest number: 0F69
Signing time: Sun 19 Oct 2025 12:01:26 +0000
Manifest this update: Sun 19 Oct 2025 12:01:26 +0000
Manifest next update: Mon 20 Oct 2025 12:01:26 +0000
Files and hashes: 1: 5stymyV2VXExRNfPDRHs0SsKv84.roa (hash: LAJy81D8Y1W3Al27GIYu76cE8aqvZvfTwIjGsrUN8O8=)
2: wX4zTXXZMo2WWHOKinMvyAiRYeE.roa (hash: dkBnWGmwxThQE3RCE6xz1EoswQLwUBpuloKrWzo2tUE=)
3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: L9i0Q/ZP/Fjg6qy7dNQw5MED9RG5J29GzukS13kRw4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:91:12:f9:0c:c7:e7:a2:f4:e4:17:ea:14:57:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: Oct 19 12:01:26 2025 GMT
Not After : Oct 20 12:01:26 2025 GMT
Subject: CN=91293144b25ccf9f8f00749ffdcd62c5193cec81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:41:6b:bc:57:cd:72:06:bc:f9:5a:4b:68:7a:
61:d6:c7:9d:b7:5a:80:7c:da:09:e1:25:62:e1:b0:
1b:a3:5f:a5:12:ad:69:13:a9:ba:fe:14:c5:20:98:
0b:46:7d:0e:51:54:44:6d:fa:c8:27:2d:02:ed:07:
e4:9e:db:be:c3:25:f2:d2:5d:b2:7e:e1:fd:dd:d6:
30:0e:30:07:a4:19:de:d8:d9:37:4a:06:1e:b8:fa:
38:d3:92:a3:8e:22:7e:3f:91:ce:91:77:ec:a1:3e:
d3:55:46:c3:75:ba:27:ac:7b:86:bc:65:db:20:d2:
fb:64:9c:63:ca:bf:3b:a6:fd:04:e0:0f:c2:d7:d8:
49:bf:28:7c:59:d2:ac:8b:5a:00:02:62:4d:85:fc:
7c:4e:4f:51:57:59:f9:69:72:cd:ca:41:06:1c:f7:
ae:81:ae:b5:a8:74:0b:01:1c:12:8a:5c:2b:33:77:
ef:5b:1f:39:de:c2:52:b5:e2:41:ec:38:7d:bf:1a:
96:c5:fa:92:d0:04:38:05:f0:e3:d8:a6:ab:17:1c:
02:d0:ec:ec:e6:27:f0:7d:10:3e:cd:b9:e0:d2:88:
f8:e2:ac:ce:e4:a7:e8:3a:bd:19:7a:ea:e5:d8:e3:
53:e3:e5:61:47:4c:5d:27:05:44:27:79:21:ba:ea:
01:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:29:31:44:B2:5C:CF:9F:8F:00:74:9F:FD:CD:62:C5:19:3C:EC:81
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fe:97:13:9f:60:e3:82:09:3a:26:bf:22:a3:77:18:48:54:
c0:c3:a9:cb:1d:69:07:ab:cc:40:78:12:48:16:41:cd:ff:32:
c6:81:bc:04:92:63:42:62:ec:c1:15:6c:1e:01:8e:d0:7d:2c:
eb:af:5f:5d:38:52:85:d6:a9:76:8c:00:25:8d:95:f3:b4:de:
cb:8d:a8:bf:a4:46:39:0d:b6:ea:7f:e9:bf:b2:84:99:3a:d6:
95:83:d2:41:3d:55:ac:40:66:b4:63:8f:93:79:e5:bd:b8:ae:
13:c8:ac:88:4d:20:19:53:5b:ea:1e:0b:44:ab:47:97:2d:20:
53:67:8c:3d:bb:21:f3:4e:93:2a:74:fd:0d:18:0e:a4:a1:18:
a3:7b:a2:57:7c:33:8f:24:f5:ce:79:5d:53:4e:23:d2:8c:41:
7c:73:aa:ea:d9:00:82:89:5e:e1:53:29:a4:c6:ae:75:4f:07:
b1:74:1b:7a:c8:36:76:99:4c:ea:80:7c:76:8a:67:63:a2:ac:
9c:c6:a3:c3:c8:9a:ab:68:17:dc:c4:ab:17:d1:51:f3:9f:6e:
e9:29:15:20:f9:a3:97:f8:cb:79:b9:5f:33:3a:a5:91:34:29:
17:67:f9:30:2c:91:8b:67:2d:f2:e2:3d:d1:0e:45:fc:3e:33:
1f:bf:04:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WJES+QzH56L05BfqFFcIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZDExYjY0ZmZlMThlZmE0MmY0M2E2Yzc2NTYzOWRlZTM4
ZDAyN2UwHhcNMjUxMDE5MTIwMTI2WhcNMjUxMDIwMTIwMTI2WjAzMTEwLwYDVQQD
Eyg5MTI5MzE0NGIyNWNjZjlmOGYwMDc0OWZmZGNkNjJjNTE5M2NlYzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUFrvFfNcga8+VpLaHph1sedt1qA
fNoJ4SVi4bAbo1+lEq1pE6m6/hTFIJgLRn0OUVREbfrIJy0C7Qfkntu+wyXy0l2y
fuH93dYwDjAHpBne2Nk3SgYeuPo405KjjiJ+P5HOkXfsoT7TVUbDdbonrHuGvGXb
INL7ZJxjyr87pv0E4A/C19hJvyh8WdKsi1oAAmJNhfx8Tk9RV1n5aXLNykEGHPeu
ga61qHQLARwSilwrM3fvWx853sJSteJB7Dh9vxqWxfqS0AQ4BfDj2KarFxwC0Ozs
5ifwfRA+zbng0oj44qzO5KfoOr0Zeurl2ONT4+VhR0xdJwVEJ3khuuoBowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEpMUSyXM+fjwB0n/3NYsUZPOyBMB8GA1UdIwQY
MBaAFMbRG2T/4Y76QvQ6bHZWOd7jjQJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHRFYlpQX2hqdnBDOURwc2RsWTUzdU9OQW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80Y2FjNmItOGUwNS00NDhhLTgzZjct
NjgzNTg1MjE1OGQ4LzEveHRFYlpQX2hqdnBDOURwc2RsWTUzdU9OQW40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80Y2FjNmItOGUwNS00NDhhLTgzZjctNjgzNTg1MjE1OGQ4
LzEveHRFYlpQX2hqdnBDOURwc2RsWTUzdU9OQW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/6XE59g
44IJOia/IqN3GEhUwMOpyx1pB6vMQHgSSBZBzf8yxoG8BJJjQmLswRVsHgGO0H0s
669fXThShdapdowAJY2V87Tey42ov6RGOQ226n/pv7KEmTrWlYPSQT1VrEBmtGOP
k3nlvbiuE8isiE0gGVNb6h4LRKtHly0gU2eMPbsh806TKnT9DRgOpKEYo3uiV3wz
jyT1znldU04j0oxBfHOq6tkAgole4VMppMaudU8HsXQbesg2dplM6oB8dopnY6Ks
nMajw8iaq2gX3MSrF9FR859u6SkVIPmjl/jLeblfMzqlkTQpF2f5MCyRi2ct8uI9
0Q5F/D4zH78E3Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:32 2025 by rpki-client