
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: QPA9EfM0WJqh79hiotuPGrXNSAFcWAW3G67JpzoFntg=
Subject key identifier: C4:97:72:2C:10:DF:86:C3:FD:55:CF:E0:AF:BD:0D:3E:91:24:5A:01
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 0199FC8F988547F7603B3E71C40E65E87458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 13:01:33 +0000
Manifest this update: Sun 19 Oct 2025 13:01:33 +0000
Manifest next update: Mon 20 Oct 2025 13:01:33 +0000
Files and hashes: 1: BF6kk7Ioe_IANLRocL5TB8rFDXg.roa (hash: I9vdVPlJI90+Jqde5mcaJ83frB+5PPL50CTnL2GyUcg=)
2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: +rkDXTMFzYZY4QZuC0wqwIioJh56RIWgURtOJurT6bU=)
3: ciH-ly2HETPUQCD4TRirLR18GQo.roa (hash: 71uXiXu0mczhWCwGxw73zRSUQufVbuKwkYWRQfbodEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:98:85:47:f7:60:3b:3e:71:c4:0e:65:e8:74:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Oct 19 13:01:33 2025 GMT
Not After : Oct 20 13:01:33 2025 GMT
Subject: CN=c497722c10df86c3fd55cfe0afbd0d3e91245a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:b8:04:60:d9:c1:0f:97:c4:27:8a:12:b9:
74:fc:2b:27:13:a6:fb:85:24:3a:1c:f3:95:b5:de:
7a:55:2a:41:cc:f5:3a:ad:c0:43:76:3b:3a:af:54:
6c:24:91:19:f9:c5:e7:dd:69:75:40:bb:1a:5a:64:
a8:e5:df:3c:45:28:04:56:21:88:6a:0a:22:78:27:
f9:ac:b2:78:d4:57:73:48:b9:f5:37:0c:8e:ee:b3:
e6:55:fa:42:41:d3:fa:ad:0c:c1:8c:7a:b5:c6:eb:
45:06:92:8c:60:f2:e2:72:f3:6e:f4:86:a1:d8:33:
cb:6b:7e:7f:4b:76:d1:79:27:97:f9:4d:2f:3e:dc:
06:3e:f1:7b:86:69:b7:d5:d4:b6:00:6f:4b:52:d8:
40:50:5f:5c:5c:4f:74:cd:2d:69:a0:5c:e2:f9:8a:
15:40:9e:76:21:c7:9c:45:a2:df:9a:59:54:c2:a0:
90:9b:ae:85:4b:d9:32:09:0c:89:dc:7a:c9:22:eb:
f8:dc:a6:2b:8a:cf:a2:2d:29:51:c4:20:19:db:82:
34:4b:17:cd:6b:03:ab:0d:92:28:f1:e8:3e:b3:84:
18:e7:53:90:16:16:d6:65:9a:a9:b7:42:17:6c:ef:
53:23:b7:d6:19:bd:7a:70:93:e7:87:af:04:4c:90:
11:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:97:72:2C:10:DF:86:C3:FD:55:CF:E0:AF:BD:0D:3E:91:24:5A:01
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:53:70:18:a3:ae:f6:c6:91:38:28:11:f2:04:d2:2b:05:be:
16:bd:fb:b9:55:c0:fe:8e:71:c9:eb:1d:a4:98:d7:89:ed:59:
61:34:69:d3:00:16:69:61:dd:aa:f0:57:be:f8:07:0a:b7:f0:
58:8b:6a:6a:a9:71:74:9b:b0:12:3a:4b:cb:f4:08:11:f5:34:
82:d4:af:d7:9f:28:d3:5b:e0:69:43:fe:51:29:5b:ec:85:70:
92:a9:33:6f:b1:11:d8:25:8e:5a:50:23:0a:83:dd:7a:2d:1c:
95:af:3a:49:73:ab:e2:80:b9:33:60:b7:22:2a:14:8e:5e:7e:
5c:87:3a:e6:15:aa:a8:9d:cc:ea:e2:65:df:f7:92:51:e6:2a:
a6:d2:7f:4b:76:2d:8c:ea:65:8f:08:cc:73:a8:e8:61:fa:5f:
e5:dc:e4:25:cd:5a:ec:82:00:c1:2e:13:b7:0c:cc:aa:e5:bb:
8b:52:b5:0e:c1:69:0f:a8:5e:26:72:d5:d1:77:a6:53:c2:1f:
da:58:69:f6:0e:54:7b:df:36:6d:2c:4d:03:59:dd:81:46:9b:
90:ca:85:1e:e8:c6:16:00:5e:97:47:be:4f:72:c5:c7:bb:6c:
75:89:c1:76:f1:44:72:f4:ee:ed:a7:1a:11:eb:20:28:85:f2:
05:47:62:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j5iFR/dgOz5xxA5l6HRYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNTdjOGY4ZDllZTVlMmNlNzA0M2UxZWMyNmJiMTY5M2Y3
ZjEyMWYwHhcNMjUxMDE5MTMwMTMzWhcNMjUxMDIwMTMwMTMzWjAzMTEwLwYDVQQD
EyhjNDk3NzIyYzEwZGY4NmMzZmQ1NWNmZTBhZmJkMGQzZTkxMjQ1YTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAW4BGDZwQ+XxCeKErl0/CsnE6b7
hSQ6HPOVtd56VSpBzPU6rcBDdjs6r1RsJJEZ+cXn3Wl1QLsaWmSo5d88RSgEViGI
agoieCf5rLJ41FdzSLn1NwyO7rPmVfpCQdP6rQzBjHq1xutFBpKMYPLicvNu9Iah
2DPLa35/S3bReSeX+U0vPtwGPvF7hmm31dS2AG9LUthAUF9cXE90zS1poFzi+YoV
QJ52IcecRaLfmllUwqCQm66FS9kyCQyJ3HrJIuv43KYris+iLSlRxCAZ24I0SxfN
awOrDZIo8eg+s4QY51OQFhbWZZqpt0IXbO9TI7fWGb16cJPnh68ETJARswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSXciwQ34bD/VXP4K+9DT6RJFoBMB8GA1UdIwQY
MBaAFFxXyPjZ7l4s5wQ+HsJrsWk/fxIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQt
MWY2YjJkMTRmNGY5LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQtMWY2YjJkMTRmNGY5
LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVNwGKOu
9saROCgR8gTSKwW+Fr37uVXA/o5xyesdpJjXie1ZYTRp0wAWaWHdqvBXvvgHCrfw
WItqaqlxdJuwEjpLy/QIEfU0gtSv158o01vgaUP+USlb7IVwkqkzb7ER2CWOWlAj
CoPdei0cla86SXOr4oC5M2C3IioUjl5+XIc65hWqqJ3M6uJl3/eSUeYqptJ/S3Yt
jOpljwjMc6joYfpf5dzkJc1a7IIAwS4TtwzMquW7i1K1DsFpD6heJnLV0XemU8If
2lhp9g5Ue982bSxNA1ndgUabkMqFHujGFgBel0e+T3LFx7tsdYnBdvFEcvTu7aca
EesgKIXyBUdiOA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:57 2025 by rpki-client