Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: 6Bh0dlwmBHRyLq0Ol0po0Hm9Us1j0wkCJo37dP0n4Rk=
Subject key identifier: 9E:9A:86:38:12:69:6E:2F:94:A3:DB:50:28:AD:3F:46:30:F4:2A:8E
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 0199FB0F4329CB9154F848DE305E9AB715AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: 0617
Signing time: Sun 19 Oct 2025 06:01:45 +0000
Manifest this update: Sun 19 Oct 2025 06:01:45 +0000
Manifest next update: Mon 20 Oct 2025 06:01:45 +0000
Files and hashes: 1: 3EU0oyFeuVgyRfJv8cphRhidY_4.roa (hash: uUVRINmwKIXEw7WBi5QJ2PuB8r4TwtW/ERy1bKhXTs0=)
2: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: 9TxJLXl+kMvjfvu3BKv0Pp10n9r4krN502+Mdta6hdA=)
3: z8EvHyxXFy9jjv9R0JxJLEvy2D4.roa (hash: sXJWZt8I6k1zbSOq8kLHcxqJ9ibbT5w1l4T6edD/QLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:43:29:cb:91:54:f8:48:de:30:5e:9a:b7:15:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Oct 19 06:01:45 2025 GMT
Not After : Oct 20 06:01:45 2025 GMT
Subject: CN=9e9a863812696e2f94a3db5028ad3f4630f42a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ed:a9:dc:ad:a9:d8:df:a3:6b:37:ad:0a:f7:
84:03:1b:b8:24:73:f7:a8:28:0c:8a:3f:ca:d6:74:
43:8f:9a:bd:5a:34:0e:1e:31:58:96:fc:e2:2b:cf:
d8:5a:e4:aa:e7:d9:76:5d:8d:1d:2f:27:00:7f:86:
b3:d9:3e:bb:fb:94:03:c6:28:5d:ae:84:79:85:3b:
d4:e6:f2:59:49:b6:c4:44:00:8c:10:18:9a:9c:ab:
d6:95:f3:75:ef:ee:5c:4c:ed:71:d3:84:25:ab:f9:
11:2c:07:5c:a2:dc:b5:70:57:54:cb:56:24:ea:06:
91:ed:99:ec:82:3b:67:2d:e3:dc:11:bb:ff:5e:24:
9a:97:d5:48:40:5e:7e:74:65:2a:ea:d2:5e:19:6d:
d7:a1:dc:02:9b:a9:e7:f0:4f:91:93:ec:d8:9f:6d:
d7:a3:54:af:a4:bd:9e:1a:7e:55:7c:de:d5:6c:7b:
22:3a:94:46:cb:08:fc:1a:25:8e:3f:62:28:fb:14:
5e:a3:02:de:ec:da:36:1e:94:94:2b:d6:ef:16:13:
4f:22:5a:92:ce:18:0b:b5:05:4d:c3:35:e3:86:fe:
60:e3:f0:42:67:23:70:ea:e8:ad:26:15:b8:9d:5f:
c6:e8:9e:cc:1e:20:59:79:f4:6a:a7:2e:95:62:3a:
6c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9A:86:38:12:69:6E:2F:94:A3:DB:50:28:AD:3F:46:30:F4:2A:8E
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:82:86:9f:6d:aa:8e:bb:cd:1f:47:bb:90:08:03:27:ce:e0:
a2:79:98:f6:9b:1b:13:9e:1f:7e:cb:59:db:c9:83:4c:f7:98:
f0:68:12:b9:ed:98:04:cd:89:08:60:89:dc:38:02:04:ef:60:
ae:0b:ee:54:56:d5:a9:f0:08:43:1d:b3:d9:86:e3:4f:ce:b1:
58:fe:4d:ee:3e:1d:60:ea:7b:c0:83:12:32:7f:dd:f9:78:fc:
d9:99:b1:8c:88:cb:76:e9:a9:53:c0:f4:e2:97:08:bf:3f:b7:
03:97:c3:17:07:43:68:c5:04:60:84:ff:44:25:3f:da:6a:e0:
a6:39:13:1e:02:62:5e:c8:8f:9e:7d:99:7d:3e:fe:24:42:81:
c3:98:94:41:d3:15:b9:be:bf:f8:ba:95:02:ef:5e:f6:70:1c:
02:8c:12:56:fc:74:36:52:75:1f:94:1f:24:f3:78:bc:7d:8a:
50:04:eb:da:95:c9:b2:d9:69:b4:5e:56:06:8e:e9:00:7a:a1:
1b:ea:2d:f7:33:d0:aa:c9:4b:7a:b2:87:13:83:52:f6:f1:06:
d6:dc:2c:de:60:11:f2:12:60:1c:3d:04:a7:0a:59:d2:8c:ac:
44:d0:41:ee:d3:69:f9:7b:aa:49:fa:bb:4e:c9:0b:11:87:e5:
29:c3:f6:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7D0Mpy5FU+EjeMF6atxWvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMDY2ZGU5ODI5Yjc2MWVkY2UxNzFlOGVhM2M1OTM1ZTQ0
ZjRlOWEwHhcNMjUxMDE5MDYwMTQ1WhcNMjUxMDIwMDYwMTQ1WjAzMTEwLwYDVQQD
Eyg5ZTlhODYzODEyNjk2ZTJmOTRhM2RiNTAyOGFkM2Y0NjMwZjQyYThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO2p3K2p2N+jazetCveEAxu4JHP3
qCgMij/K1nRDj5q9WjQOHjFYlvziK8/YWuSq59l2XY0dLycAf4az2T67+5QDxihd
roR5hTvU5vJZSbbERACMEBianKvWlfN17+5cTO1x04Qlq/kRLAdcoty1cFdUy1Yk
6gaR7ZnsgjtnLePcEbv/XiSal9VIQF5+dGUq6tJeGW3XodwCm6nn8E+Rk+zYn23X
o1SvpL2eGn5VfN7VbHsiOpRGywj8GiWOP2Io+xReowLe7No2HpSUK9bvFhNPIlqS
zhgLtQVNwzXjhv5g4/BCZyNw6uitJhW4nV/G6J7MHiBZefRqpy6VYjpsvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6ahjgSaW4vlKPbUCitP0Yw9CqOMB8GA1UdIwQY
MBaAFF4GbemCm3Ye3OFx6Oo8WTXkT06aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjIt
NDc1YWRmM2FhN2IxLzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjItNDc1YWRmM2FhN2Ix
LzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIKGn22q
jrvNH0e7kAgDJ87gonmY9psbE54ffstZ28mDTPeY8GgSue2YBM2JCGCJ3DgCBO9g
rgvuVFbVqfAIQx2z2YbjT86xWP5N7j4dYOp7wIMSMn/d+Xj82ZmxjIjLdumpU8D0
4pcIvz+3A5fDFwdDaMUEYIT/RCU/2mrgpjkTHgJiXsiPnn2ZfT7+JEKBw5iUQdMV
ub6/+LqVAu9e9nAcAowSVvx0NlJ1H5QfJPN4vH2KUATr2pXJstlptF5WBo7pAHqh
G+ot9zPQqslLerKHE4NS9vEG1tws3mAR8hJgHD0EpwpZ0oysRNBB7tNp+XuqSfq7
TskLEYflKcP2Fw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:25 2025 by rpki-client