Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: 9uFPQZvocMYLvmmLcQyuLMaDIYuJc3J/sbiUVpZypJI=
Subject key identifier: F4:E1:63:96:5A:CB:DF:A5:09:D6:4C:E0:EB:10:78:CD:4D:4C:42:4C
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 0199FC58D7179EE6AB9C3645E73D2663FC07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:44 +0000
Manifest this update: Sun 19 Oct 2025 12:01:44 +0000
Manifest next update: Mon 20 Oct 2025 12:01:44 +0000
Files and hashes: 1: H1wKiz5SsZHWgQJv7hF0PlabyfY.roa (hash: 6wfj+F7k71jPfzNN92P8c52KydQsMzI1OT40ddg5oJs=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: zegSIEaoiOCLOHrN5HKcLs4Vki05sFt4m+0vQCUhdoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d7:17:9e:e6:ab:9c:36:45:e7:3d:26:63:fc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: Oct 19 12:01:44 2025 GMT
Not After : Oct 20 12:01:44 2025 GMT
Subject: CN=f4e163965acbdfa509d64ce0eb1078cd4d4c424c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:57:fd:0e:df:24:fe:6a:0d:17:5c:c0:e1:
d1:29:36:f1:dd:ed:38:fa:e5:1a:49:ff:5e:ee:7f:
fa:49:78:1b:c9:06:40:4e:dc:53:4c:46:60:06:3d:
ae:d8:bf:44:8c:1f:82:ac:67:28:53:0e:b0:ee:39:
b1:92:23:b5:8a:ee:5e:74:bd:07:8f:9d:94:40:ad:
e3:12:81:c2:d8:31:d4:5b:09:74:2c:aa:b1:8a:4b:
14:fc:c6:69:52:a5:1e:a3:25:7c:af:4d:3d:be:a0:
a2:57:d2:e1:be:5a:52:56:c0:5e:bf:2f:01:ac:28:
80:e0:db:89:9f:f5:64:1a:2c:19:a3:f6:80:2d:bd:
ec:4c:c5:62:83:91:16:56:b5:ac:9d:0f:cc:1b:45:
aa:c7:e5:9d:be:da:de:d9:41:b9:d6:7c:77:22:f3:
5f:b3:84:9e:42:ec:6f:cf:a1:f0:b0:34:a7:38:05:
d9:6a:84:f1:fa:91:74:5c:a6:c2:bb:b3:7f:42:5b:
98:9f:a9:69:5f:30:3f:b6:cb:a4:c9:03:dd:8c:79:
ef:e7:fb:e0:04:20:f9:c0:bb:d3:9f:56:1e:01:ac:
11:97:4a:0a:b6:ad:27:f3:d9:7d:bc:c3:05:66:1b:
b6:86:97:f7:43:c5:4c:2b:d1:1a:e6:61:98:cf:3b:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E1:63:96:5A:CB:DF:A5:09:D6:4C:E0:EB:10:78:CD:4D:4C:42:4C
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ac:3b:59:2d:ea:1c:22:f8:75:ed:27:e5:e3:6c:ee:c3:20:
8f:3d:af:8e:79:bf:72:25:f9:8f:ef:65:e2:8f:8d:3d:44:f2:
63:91:3e:83:09:da:81:22:f0:53:e6:3e:2d:42:82:88:c3:99:
e3:97:cc:cb:04:43:8b:e3:cb:ca:43:bc:0f:43:98:fc:eb:94:
d5:bd:47:e5:18:73:a8:42:6e:91:80:38:24:61:cd:e4:d2:f1:
f2:53:89:bb:44:2c:50:39:91:18:22:38:eb:a3:46:a3:0e:71:
4b:ea:a8:ce:76:34:e5:54:e2:09:94:c3:6f:8f:6b:a8:78:09:
33:f7:0c:ed:5d:a9:7a:f0:e3:7c:04:81:36:8a:4a:82:a2:f2:
3f:d8:aa:d1:9b:72:b5:2c:a0:32:b6:07:16:78:b3:ce:9f:f1:
2c:03:72:f2:43:71:5f:63:93:b3:6a:fc:73:1b:4c:7b:6e:fc:
dd:0b:d6:db:ea:e7:f4:0f:d6:ba:a5:da:46:4c:94:20:e8:0a:
07:b0:ce:b7:02:4b:ae:59:5d:eb:d0:ce:f1:c6:4f:ed:e5:7a:
93:6c:e1:10:c3:59:fa:df:bf:44:b8:75:15:d8:01:85:5c:b0:
90:2a:e9:17:6b:28:8c:f6:f4:fc:39:cc:d5:1b:35:8d:a7:13:
d5:25:9f:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WNcXnuarnDZF5z0mY/wHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMTZiMjk0YjFhNjQ3YmY2ZDY3NjgzYjUxNjE0NDk3ZTc1
MWYyMWYwHhcNMjUxMDE5MTIwMTQ0WhcNMjUxMDIwMTIwMTQ0WjAzMTEwLwYDVQQD
EyhmNGUxNjM5NjVhY2JkZmE1MDlkNjRjZTBlYjEwNzhjZDRkNGM0MjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywhX/Q7fJP5qDRdcwOHRKTbx3e04
+uUaSf9e7n/6SXgbyQZATtxTTEZgBj2u2L9EjB+CrGcoUw6w7jmxkiO1iu5edL0H
j52UQK3jEoHC2DHUWwl0LKqxiksU/MZpUqUeoyV8r009vqCiV9LhvlpSVsBevy8B
rCiA4NuJn/VkGiwZo/aALb3sTMVig5EWVrWsnQ/MG0Wqx+Wdvtre2UG51nx3IvNf
s4SeQuxvz6HwsDSnOAXZaoTx+pF0XKbCu7N/QluYn6lpXzA/tsukyQPdjHnv5/vg
BCD5wLvTn1YeAawRl0oKtq0n89l9vMMFZhu2hpf3Q8VMK9Ea5mGYzztgjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPThY5Zay9+lCdZM4OsQeM1NTEJMMB8GA1UdIwQY
MBaAFF8WspSxpke/bWdoO1FhRJfnUfIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYt
YTg4MjcwZjVkMWE5LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYtYTg4MjcwZjVkMWE5
LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqw7WS3q
HCL4de0n5eNs7sMgjz2vjnm/ciX5j+9l4o+NPUTyY5E+gwnagSLwU+Y+LUKCiMOZ
45fMywRDi+PLykO8D0OY/OuU1b1H5RhzqEJukYA4JGHN5NLx8lOJu0QsUDmRGCI4
66NGow5xS+qoznY05VTiCZTDb49rqHgJM/cM7V2pevDjfASBNopKgqLyP9iq0Zty
tSygMrYHFnizzp/xLANy8kNxX2OTs2r8cxtMe2783QvW2+rn9A/WuqXaRkyUIOgK
B7DOtwJLrlld69DO8cZP7eV6k2zhEMNZ+t+/RLh1FdgBhVywkCrpF2sojPb0/DnM
1Rs1jacT1SWfdA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:52 2025 by rpki-client