Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
File: xFP14jBCC8SnDQph3jtH3NoajQ4.mft (raw, json)
Hash identifier: gca6wFu1QTHjgA3CLAPgo8IdnTirkOCxrXpHXeXfJv4=
Subject key identifier: AF:D7:75:0E:70:26:66:F5:DA:89:64:52:5E:AA:9B:E9:A3:AC:5A:85
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial: 0199FCFD9DACD6672F10FCB5EA52EFC7E842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
Manifest number: 1614
Signing time: Sun 19 Oct 2025 15:01:43 +0000
Manifest this update: Sun 19 Oct 2025 15:01:43 +0000
Manifest next update: Mon 20 Oct 2025 15:01:43 +0000
Files and hashes: 1: PzyzSWT4zWJ7K4Xqd4I7pv369ec.roa (hash: kQSQuA7MhqelhKVGJ/f7HDWMP3sBIAz6W/9i3q+k7jg=)
2: afz7BRJzqEPxj8BZVsdOin_5y-4.roa (hash: 8P/qRECRaiQdIehiJb8DPPkG7wuZbj1mnaUAo4ZwGHI=)
3: xFP14jBCC8SnDQph3jtH3NoajQ4.crl (hash: UE4YyjdzjUXU2YlYqHWrdJfkcRjoxm1ZieiN6mNVmJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:9d:ac:d6:67:2f:10:fc:b5:ea:52:ef:c7:e8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Validity
Not Before: Oct 19 15:01:43 2025 GMT
Not After : Oct 20 15:01:43 2025 GMT
Subject: CN=afd7750e702666f5da8964525eaa9be9a3ac5a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:51:98:91:57:a8:32:39:54:2e:c0:c1:7b:
bf:29:95:de:f6:4c:05:1f:e9:14:5c:4d:6b:81:8b:
c6:e4:4a:ee:78:6b:da:07:37:be:f2:7f:2c:cb:c0:
8e:be:81:72:25:4b:dc:4a:28:e7:8f:ee:49:3d:7a:
c7:4b:4c:f0:ef:95:89:fe:8f:9b:ca:5e:1c:39:97:
4f:89:72:b0:62:05:29:20:47:5a:5b:fa:58:86:96:
71:e6:3c:a9:fa:bd:60:52:89:da:fb:a2:16:c3:23:
27:9b:c9:2c:ff:c3:32:b8:b5:fd:9c:6a:fa:ac:fc:
a4:1f:5a:09:e1:66:2f:98:e9:43:04:24:78:07:c2:
6c:91:6c:f6:56:b2:2c:de:9a:0c:53:c4:5e:1f:1a:
2a:34:9e:e6:2a:11:08:23:2b:3d:01:5d:12:8f:6f:
5b:b4:bb:0e:c9:17:2d:6e:0b:00:98:72:d3:87:61:
46:3e:92:1e:5e:f6:6c:62:6a:64:6f:96:75:6a:ad:
7c:3b:d6:ce:34:f8:7b:4b:e4:6d:03:38:a5:8c:a4:
36:14:d1:6e:db:07:29:40:47:53:52:fd:e3:7a:8a:
1a:94:0f:e8:a8:08:65:95:67:a8:f5:36:53:60:c4:
49:f5:ac:31:0a:84:2f:44:89:e9:f4:31:ac:d4:4e:
94:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D7:75:0E:70:26:66:F5:DA:89:64:52:5E:AA:9B:E9:A3:AC:5A:85
X509v3 Authority Key Identifier:
keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:87:f8:11:d9:29:cf:64:c6:e0:38:68:07:b5:f1:bc:3b:4e:
55:6f:9f:16:d1:08:0a:1a:61:a2:9e:f9:1a:ab:df:02:5b:16:
87:ce:9d:2d:9b:6a:c5:f3:c3:88:b9:65:82:a1:48:8f:9c:6f:
e4:7e:57:75:2d:ce:e9:19:f1:53:c7:02:5d:95:1c:2d:a8:a2:
d9:8e:83:b5:65:c7:4a:d7:88:6b:fe:11:a1:ec:37:d0:f7:14:
72:e2:52:af:a4:b4:0a:86:dd:b3:2c:37:87:64:13:e8:2c:a3:
53:bf:3b:71:a8:63:ea:fc:42:1f:1e:32:00:d7:16:ad:36:e8:
db:e3:ec:21:8b:73:e1:64:22:b0:ec:8e:3e:ff:39:03:dd:1c:
bf:56:01:ba:33:8b:d0:1c:d1:ad:37:0b:6d:fd:e0:c7:30:59:
cd:c1:25:97:ce:ec:e9:a3:5a:ae:ac:be:34:d8:25:0e:e4:be:
9c:6e:0e:82:7d:64:51:c4:15:0c:2e:19:75:76:ae:f8:2d:d7:
bc:c4:a5:a7:2c:bf:45:5d:0e:b8:3e:b4:72:b5:4f:9a:f2:94:
f6:be:76:91:ce:34:f3:10:da:eb:27:fb:2f:4f:2f:39:aa:a4:
66:92:f4:f8:27:9e:31:b3:f5:45:40:8d:8a:38:1d:a3:1d:65:
b8:98:88:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/Z2s1mcvEPy16lLvx+hCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NTNmNWUyMzA0MjBiYzRhNzBkMGE2MWRlM2I0N2RjZGEx
YThkMGUwHhcNMjUxMDE5MTUwMTQzWhcNMjUxMDIwMTUwMTQzWjAzMTEwLwYDVQQD
EyhhZmQ3NzUwZTcwMjY2NmY1ZGE4OTY0NTI1ZWFhOWJlOWEzYWM1YTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD1RmJFXqDI5VC7AwXu/KZXe9kwF
H+kUXE1rgYvG5ErueGvaBze+8n8sy8COvoFyJUvcSijnj+5JPXrHS0zw75WJ/o+b
yl4cOZdPiXKwYgUpIEdaW/pYhpZx5jyp+r1gUona+6IWwyMnm8ks/8MyuLX9nGr6
rPykH1oJ4WYvmOlDBCR4B8JskWz2VrIs3poMU8ReHxoqNJ7mKhEIIys9AV0Sj29b
tLsOyRctbgsAmHLTh2FGPpIeXvZsYmpkb5Z1aq18O9bONPh7S+RtAziljKQ2FNFu
2wcpQEdTUv3jeooalA/oqAhllWeo9TZTYMRJ9awxCoQvRInp9DGs1E6U9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/XdQ5wJmb12olkUl6qm+mjrFqFMB8GA1UdIwQY
MBaAFMRT9eIwQgvEpw0KYd47R9zaGo0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1Njkt
ZTZjZjE3Y2RkYTRmLzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1NjktZTZjZjE3Y2RkYTRm
LzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIf4Edkp
z2TG4DhoB7XxvDtOVW+fFtEIChphop75GqvfAlsWh86dLZtqxfPDiLllgqFIj5xv
5H5XdS3O6RnxU8cCXZUcLaii2Y6DtWXHSteIa/4Roew30PcUcuJSr6S0Cobdsyw3
h2QT6CyjU787cahj6vxCHx4yANcWrTbo2+PsIYtz4WQisOyOPv85A90cv1YBujOL
0BzRrTcLbf3gxzBZzcEll87s6aNarqy+NNglDuS+nG4Ogn1kUcQVDC4ZdXau+C3X
vMSlpyy/RV0OuD60crVPmvKU9r52kc408xDa6yf7L08vOaqkZpL0+CeeMbP1RUCN
ijgdox1luJiIGA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:27 2025 by rpki-client