Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
File: xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft (raw, json)
Hash identifier: bF5k00g29LY/rtsDxEGCwBlzJ4otaLLOA4dd60Wm4BM=
Subject key identifier: FC:D4:0B:FA:DA:EA:79:99:E8:C6:1D:F2:BC:BC:B1:0A:D4:D4:1F:2D
Authority key identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
Certificate issuer: /CN=c72e716353ec733ab4b5085308b386d89a74f147
Certificate serial: 0199FBEC11D334DCF1DFA22C7E1CBFCB597C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
Manifest number: 0F2E
Signing time: Sun 19 Oct 2025 10:02:56 +0000
Manifest this update: Sun 19 Oct 2025 10:02:56 +0000
Manifest next update: Mon 20 Oct 2025 10:02:56 +0000
Files and hashes: 1: i4OTVeCSPxgmFusN2MGQeEwphSs.roa (hash: swOQwwO4f3RtKfp1taiB7zCxN/mO3jgsarXonpS2zBQ=)
2: xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl (hash: 6f8ANTOxsZdwUJs4IIpdjywFJWeIJJaVy9RqJ3KAJJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:11:d3:34:dc:f1:df:a2:2c:7e:1c:bf:cb:59:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72e716353ec733ab4b5085308b386d89a74f147
Validity
Not Before: Oct 19 10:02:56 2025 GMT
Not After : Oct 20 10:02:56 2025 GMT
Subject: CN=fcd40bfadaea7999e8c61df2bcbcb10ad4d41f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:09:e6:cd:c0:72:75:17:e1:62:b4:db:9a:72:
b7:eb:52:d0:aa:ac:23:be:1e:26:ae:31:2d:71:b9:
c5:2c:0a:87:39:55:99:cd:e9:88:35:12:e1:13:34:
93:49:8f:32:b6:7b:cb:56:38:c8:66:9a:f8:9b:e0:
3e:0a:5d:34:14:61:e5:27:d3:a1:5b:50:72:d9:a0:
66:83:5c:47:9a:4b:b8:6b:50:40:0f:7a:c2:56:8e:
92:af:a9:a2:8d:7b:a4:e7:c0:ee:0d:72:ed:94:77:
84:c8:f5:91:f2:21:69:92:10:48:a9:db:2b:6c:7a:
92:bc:6a:47:84:1e:29:be:1b:21:b6:8b:7d:5f:cf:
f4:4d:a5:be:23:a0:24:12:00:e7:ef:06:22:12:9b:
53:88:76:fd:ad:7e:13:67:ec:11:d2:78:25:81:3a:
98:af:84:7d:3a:1e:5c:73:74:6c:2a:5f:f6:dc:5f:
14:cc:15:2c:b7:bf:92:24:9b:0b:7b:09:f0:6d:25:
a1:03:b0:ac:00:77:d5:47:2e:9e:bb:1b:ed:70:09:
7a:ec:aa:73:7c:66:c3:f7:04:9f:2f:49:62:6d:cb:
91:1a:17:aa:80:35:b1:05:3a:79:8f:8c:ea:b5:3f:
ad:01:bf:9e:41:12:8c:fc:42:4b:7e:1e:f4:f3:7e:
f1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D4:0B:FA:DA:EA:79:99:E8:C6:1D:F2:BC:BC:B1:0A:D4:D4:1F:2D
X509v3 Authority Key Identifier:
keyid:C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f5:fc:27:13:10:c8:38:9e:a7:fa:d2:fb:40:9c:f2:44:56:
2f:13:94:11:4a:32:8d:b1:b6:95:27:62:8a:97:55:0d:16:6d:
3a:14:06:a2:ed:25:27:bb:68:2a:9b:e1:8c:16:2e:dd:45:61:
5c:18:ac:c1:21:14:d2:98:f3:82:94:4a:5d:22:60:cd:49:e0:
e6:f8:ed:a2:4b:10:01:8b:80:d5:33:52:1c:71:f5:76:8c:48:
95:19:1d:3f:8e:aa:f4:f8:03:5c:c4:7f:25:e9:85:00:67:44:
58:4e:da:53:0e:9e:9b:88:4c:2c:86:9b:78:af:f0:83:84:bd:
19:0f:44:22:81:f6:c2:6b:33:1e:c5:ea:70:e3:3e:d0:e1:74:
9b:15:d5:97:2b:3f:cc:66:d5:43:e7:e9:61:32:e5:83:1c:46:
6a:79:d8:b4:cc:2a:5a:c4:6a:a5:1c:fc:f4:26:03:c5:03:3b:
b4:1e:e8:a6:1b:e5:7e:93:db:14:03:58:67:3d:12:75:d4:6b:
d0:4c:70:f8:34:63:0e:42:22:7a:61:35:ef:04:50:3c:22:8d:
c5:8e:69:c5:37:eb:3c:c5:06:f1:e1:06:5f:d8:1e:a6:b0:79:
82:60:b3:2d:0c:14:84:42:2c:d9:7a:15:2d:e2:24:0f:29:f1:
13:30:a4:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77BHTNNzx36Isfhy/y1l8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MmU3MTYzNTNlYzczM2FiNGI1MDg1MzA4YjM4NmQ4OWE3
NGYxNDcwHhcNMjUxMDE5MTAwMjU2WhcNMjUxMDIwMTAwMjU2WjAzMTEwLwYDVQQD
EyhmY2Q0MGJmYWRhZWE3OTk5ZThjNjFkZjJiY2JjYjEwYWQ0ZDQxZjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAnmzcBydRfhYrTbmnK361LQqqwj
vh4mrjEtcbnFLAqHOVWZzemINRLhEzSTSY8ytnvLVjjIZpr4m+A+Cl00FGHlJ9Oh
W1By2aBmg1xHmku4a1BAD3rCVo6Sr6mijXuk58DuDXLtlHeEyPWR8iFpkhBIqdsr
bHqSvGpHhB4pvhshtot9X8/0TaW+I6AkEgDn7wYiEptTiHb9rX4TZ+wR0nglgTqY
r4R9Oh5cc3RsKl/23F8UzBUst7+SJJsLewnwbSWhA7CsAHfVRy6euxvtcAl67Kpz
fGbD9wSfL0libcuRGheqgDWxBTp5j4zqtT+tAb+eQRKM/EJLfh70837x+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzUC/ra6nmZ6MYd8ry8sQrU1B8tMB8GA1UdIwQY
MBaAFMcucWNT7HM6tLUIUwizhtiadPFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9jNDlkMzQtMWIxNC00MDI2LWI3N2Yt
ZTRkZWY5YzY5N2E3LzEveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9jNDlkMzQtMWIxNC00MDI2LWI3N2YtZTRkZWY5YzY5N2E3
LzEveHk1eFkxUHNjenEwdFFoVENMT0cySnAwOFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPX8JxMQ
yDiep/rS+0Cc8kRWLxOUEUoyjbG2lSdiipdVDRZtOhQGou0lJ7toKpvhjBYu3UVh
XBiswSEU0pjzgpRKXSJgzUng5vjtoksQAYuA1TNSHHH1doxIlRkdP46q9PgDXMR/
JemFAGdEWE7aUw6em4hMLIabeK/wg4S9GQ9EIoH2wmszHsXqcOM+0OF0mxXVlys/
zGbVQ+fpYTLlgxxGannYtMwqWsRqpRz89CYDxQM7tB7ophvlfpPbFANYZz0SddRr
0Exw+DRjDkIiemE17wRQPCKNxY5pxTfrPMUG8eEGX9geprB5gmCzLQwUhEIs2XoV
LeIkDynxEzCkIg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:07 2025 by rpki-client