Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
File: XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft (raw, json)
Hash identifier: AxfM4z9J69N1lkLaeLmZ3zTOZCtrpWBCNuHlCRo4jKM=
Subject key identifier: 96:A1:C8:29:2C:57:FF:A1:62:B6:62:B6:8C:09:92:1A:43:FF:D9:35
Authority key identifier: 5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
Certificate issuer: /CN=5d656b2013e851516b942fa90706c72090dcddef
Certificate serial: 0199FE7E3C88A540CC4F2B4F0AAA36DF83C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 22:01:49 +0000
Manifest this update: Sun 19 Oct 2025 22:01:49 +0000
Manifest next update: Mon 20 Oct 2025 22:01:49 +0000
Files and hashes: 1: XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl (hash: +bwddxNbp9Nu09+bi/sUG5lMH21shB6R9fAfOU7bhhI=)
2: eE4dt64YbIc12mVCfO2vYEZbsAA.roa (hash: P8IHkCQWXy483d0oeppd6qsQK9bS8c+YRPET1f6MD4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:3c:88:a5:40:cc:4f:2b:4f:0a:aa:36:df:83:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d656b2013e851516b942fa90706c72090dcddef
Validity
Not Before: Oct 19 22:01:49 2025 GMT
Not After : Oct 20 22:01:49 2025 GMT
Subject: CN=96a1c8292c57ffa162b662b68c09921a43ffd935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:fd:23:c1:56:b2:dd:ed:40:08:cc:2b:1b:
17:49:10:08:f8:f1:ec:4b:f3:ec:1e:c0:a1:df:47:
36:08:25:7f:8c:a5:27:80:17:6d:56:f5:66:50:59:
64:cf:32:2e:37:72:9b:04:6d:10:cf:a0:34:1d:a0:
bb:c2:7b:24:b9:5f:23:38:78:81:8c:b4:9b:ca:87:
31:ff:fc:aa:20:b8:28:a9:0f:17:fc:bb:5b:35:fa:
d6:96:9a:d0:c3:94:98:78:31:04:bd:c7:59:9f:f0:
6b:a5:92:fa:fa:68:fe:15:84:9d:2b:aa:45:16:db:
c5:46:e4:6c:e9:31:72:73:92:80:02:6d:d0:88:fb:
6d:50:ca:ca:bb:c1:ea:ac:67:08:c4:8f:dd:a1:14:
0f:ce:51:5b:20:2e:e4:4e:a9:ac:f3:f5:34:5c:97:
f0:b8:fa:a8:fa:05:2e:57:6d:df:c6:04:b0:8c:f4:
0f:f6:57:f3:6b:b8:6a:9d:74:69:5f:8a:92:63:90:
18:68:19:5f:2e:17:f5:5c:9e:b5:97:9d:48:01:e0:
f4:e8:20:ca:09:07:08:95:58:9e:4b:20:aa:32:b8:
67:bb:d6:86:77:9d:8f:8d:ab:92:a9:e7:a3:24:18:
b2:af:5e:96:13:b8:48:a6:1b:7c:3d:bd:98:24:ba:
a5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A1:C8:29:2C:57:FF:A1:62:B6:62:B6:8C:09:92:1A:43:FF:D9:35
X509v3 Authority Key Identifier:
keyid:5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1d:cb:4b:4c:2c:59:ef:33:eb:52:68:71:19:54:bc:2d:4d:
f3:ec:2f:e7:45:aa:a0:03:c4:a9:b9:1d:ab:7d:6c:38:3b:64:
ee:de:33:66:97:ce:3b:71:63:94:5c:22:84:b0:6b:a6:a8:13:
5f:bf:9e:84:86:1b:51:0f:96:56:86:e6:5d:47:83:f2:74:f9:
8a:9a:2b:27:df:b2:a0:6a:c7:ed:d2:57:e0:de:08:b5:bf:54:
9b:d3:9e:bb:95:c9:bc:c7:5b:69:cf:16:74:3a:81:4f:2a:c4:
73:54:08:7e:5d:d8:e3:65:f7:64:aa:b2:fc:58:22:1b:73:28:
ed:40:a4:0b:c1:14:f2:d6:a2:d5:b0:e0:17:22:5e:0c:1f:1e:
ee:4b:25:69:c4:86:ac:76:11:ef:44:8c:a0:dd:77:bd:72:84:
fd:6d:01:62:47:73:8a:d3:3d:b3:3c:4b:b9:ef:4d:75:42:c5:
03:a1:2e:8d:71:8b:33:0b:1f:c4:1f:11:29:18:e3:cd:f6:cf:
32:b4:4b:f7:e6:bb:2b:aa:47:5a:00:b5:76:a6:6c:a2:67:48:
1e:1a:95:c3:4d:62:f5:fd:61:2a:a2:26:e5:f2:5e:eb:d2:f7:
75:9e:f7:1b:ec:a9:c1:03:9e:bc:5b:90:c4:66:da:98:27:6a:
b7:4e:8c:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fjyIpUDMTytPCqo234PCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNjU2YjIwMTNlODUxNTE2Yjk0MmZhOTA3MDZjNzIwOTBk
Y2RkZWYwHhcNMjUxMDE5MjIwMTQ5WhcNMjUxMDIwMjIwMTQ5WjAzMTEwLwYDVQQD
Eyg5NmExYzgyOTJjNTdmZmExNjJiNjYyYjY4YzA5OTIxYTQzZmZkOTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDb9I8FWst3tQAjMKxsXSRAI+PHs
S/PsHsCh30c2CCV/jKUngBdtVvVmUFlkzzIuN3KbBG0Qz6A0HaC7wnskuV8jOHiB
jLSbyocx//yqILgoqQ8X/LtbNfrWlprQw5SYeDEEvcdZn/BrpZL6+mj+FYSdK6pF
FtvFRuRs6TFyc5KAAm3QiPttUMrKu8HqrGcIxI/doRQPzlFbIC7kTqms8/U0XJfw
uPqo+gUuV23fxgSwjPQP9lfza7hqnXRpX4qSY5AYaBlfLhf1XJ61l51IAeD06CDK
CQcIlVieSyCqMrhnu9aGd52PjauSqeejJBiyr16WE7hIpht8Pb2YJLqlRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJahyCksV/+hYrZitowJkhpD/9k1MB8GA1UdIwQY
MBaAFF1layAT6FFRa5QvqQcGxyCQ3N3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xZGY3NjQtMmI4My00MzQzLTkxMDIt
NDdhOWY5NmNhNTg2LzEvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8xZGY3NjQtMmI4My00MzQzLTkxMDItNDdhOWY5NmNhNTg2
LzEvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARR3LS0ws
We8z61JocRlUvC1N8+wv50WqoAPEqbkdq31sODtk7t4zZpfOO3FjlFwihLBrpqgT
X7+ehIYbUQ+WVobmXUeD8nT5iporJ9+yoGrH7dJX4N4Itb9Um9Oeu5XJvMdbac8W
dDqBTyrEc1QIfl3Y42X3ZKqy/FgiG3Mo7UCkC8EU8tai1bDgFyJeDB8e7kslacSG
rHYR70SMoN13vXKE/W0BYkdzitM9szxLue9NdULFA6EujXGLMwsfxB8RKRjjzfbP
MrRL9+a7K6pHWgC1dqZsomdIHhqVw01i9f1hKqIm5fJe69L3dZ73G+ypwQOevFuQ
xGbamCdqt06MuQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:50:54 2025 by rpki-client