Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
File: Xhv2oxnaJImBau26G0_QzH3fPh4.mft (raw, json)
Hash identifier: hNNtlnDcmOL5dRMu0g6/Kr/InliBa+vzj5+ej/UrxYU=
Subject key identifier: 7E:23:F7:60:27:2A:02:08:DA:C6:95:3F:84:DA:F4:8D:95:4A:1F:E5
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial: 019A00DA52AA941C2C8CF5F0A6E7CECE8E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
Manifest number: 19F6
Signing time: Mon 20 Oct 2025 09:01:39 +0000
Manifest this update: Mon 20 Oct 2025 09:01:39 +0000
Manifest next update: Tue 21 Oct 2025 09:01:39 +0000
Files and hashes: 1: 1GyrUxU5ncoO0ywZDYFgdJ6y2r4.roa (hash: kDq/AEoKn6TZ8VV7MHni6ZaE6GFOdZhmSmqCC4BtKqA=)
2: 4CoVMMKw0iAY2WbvgdHQblv-YLI.roa (hash: bPGOSQ6fTh78RE8OIALZzzCGD5F7zJ/rcPqgSt70E8I=)
3: Xhv2oxnaJImBau26G0_QzH3fPh4.crl (hash: OPCJp5fG6hBoQJchq/hhyyzeYLyxoFxPLUaZYjoBl1o=)
4: iqMWrdYjQE7-0EAs-UJD3ECPr_w.roa (hash: FMsouH+BVF8KZzVVUNWdEHgvx7uvSHfCw/ya9vRwpvo=)
5: jPPJRlQHOW3Bdo3Xffl1cKS8yYI.roa (hash: +QHKisnDpujXyoJyM4AGTUHFPfJzBO245kYgUJWvE8Q=)
6: s6nYW-wwFY4e4FliH1slATjjkcI.roa (hash: IaJM9j4ERldNW3bqfwmZZck2Nh3sfZGgvyUZuPD1Rqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:52:aa:94:1c:2c:8c:f5:f0:a6:e7:ce:ce:8e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Validity
Not Before: Oct 20 09:01:39 2025 GMT
Not After : Oct 21 09:01:39 2025 GMT
Subject: CN=7e23f760272a0208dac6953f84daf48d954a1fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:59:14:c8:13:a6:32:60:30:01:cd:7d:2d:4b:
2a:06:d9:5b:fb:3b:25:46:fc:54:48:53:4f:53:33:
7c:00:06:82:8c:04:fc:b2:0e:f0:99:15:46:17:5c:
c4:4a:02:ae:68:e8:56:13:11:7d:f9:01:ba:8c:55:
26:a1:d4:b9:2c:55:e0:35:44:58:5d:1f:06:0d:d6:
9f:13:da:35:ba:18:0a:0e:de:82:38:7e:76:40:8b:
0e:83:3c:92:74:9e:2d:d9:7d:d7:b2:a1:53:5d:9a:
37:e2:cd:9e:5e:19:69:8a:2e:b1:00:c7:c5:13:35:
5e:e3:58:0d:b1:85:e4:e3:55:28:d0:92:27:e9:b3:
cb:6b:f6:5f:d2:d0:8f:b4:15:89:05:4c:cf:fb:e7:
2b:59:12:9c:2b:c1:d9:b3:bd:3c:82:99:ef:b5:05:
2a:1d:18:1f:3c:47:3a:0b:82:69:1d:23:96:c7:97:
43:b2:d2:ed:5c:16:a7:1b:1b:fd:1d:7b:8f:46:c8:
1b:dd:bc:79:5e:7f:42:30:6d:80:12:0d:7c:d3:48:
1e:11:b0:0e:2f:ca:34:0f:55:d4:7f:8a:c8:c7:65:
c4:be:69:9f:d4:75:72:ed:87:2a:1a:3d:c9:db:d5:
99:88:d8:18:50:0c:91:d4:4d:76:3d:5e:c4:3b:59:
b3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:23:F7:60:27:2A:02:08:DA:C6:95:3F:84:DA:F4:8D:95:4A:1F:E5
X509v3 Authority Key Identifier:
keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:95:3e:d2:a6:6c:e2:ab:5e:3b:25:2b:53:04:e1:b6:dc:ae:
53:22:01:83:31:1a:16:70:cc:3a:88:bc:94:c7:de:4e:34:96:
dd:b7:3c:72:6c:3f:e7:49:08:0c:96:c8:25:9f:56:a8:c1:c3:
28:23:a9:42:90:c4:b3:b6:7a:ed:73:ea:73:d6:fc:0c:00:80:
98:32:78:78:e6:ed:c0:56:c0:53:bd:0a:35:e6:84:9d:42:29:
2f:95:9e:cb:c5:35:d0:7b:36:82:7c:07:ce:fe:11:c5:8c:28:
ba:e5:94:d8:ac:c6:a2:2b:95:c0:cf:a1:f5:80:62:80:87:ae:
a2:35:dc:db:80:88:c9:b7:ef:fa:85:1b:97:41:a9:a1:ce:73:
c5:d3:e7:c6:46:15:2f:7b:a7:6a:6c:d9:8c:36:de:d7:4e:74:
eb:2b:89:13:be:67:0c:5a:20:1f:d7:b9:3b:5f:c9:b5:43:e7:
25:d2:74:24:41:03:2d:05:48:9e:37:f7:e0:d3:c4:41:43:7d:
1c:5a:1a:1b:c8:9a:25:ba:2d:92:fc:b3:3b:12:d2:31:84:c9:
af:b5:3a:02:d1:a3:7a:91:7c:ac:27:8f:b6:56:32:36:9e:43:
fd:f5:3a:ae:0c:fa:35:43:15:c9:3b:01:f4:98:15:55:e5:e9:
d8:fa:a8:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoA2lKqlBwsjPXwpufOzo5TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMWJmNmEzMTlkYTI0ODk4MTZhZWRiYTFiNGZkMGNjN2Rk
ZjNlMWUwHhcNMjUxMDIwMDkwMTM5WhcNMjUxMDIxMDkwMTM5WjAzMTEwLwYDVQQD
Eyg3ZTIzZjc2MDI3MmEwMjA4ZGFjNjk1M2Y4NGRhZjQ4ZDk1NGExZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFkUyBOmMmAwAc19LUsqBtlb+zsl
RvxUSFNPUzN8AAaCjAT8sg7wmRVGF1zESgKuaOhWExF9+QG6jFUmodS5LFXgNURY
XR8GDdafE9o1uhgKDt6COH52QIsOgzySdJ4t2X3XsqFTXZo34s2eXhlpii6xAMfF
EzVe41gNsYXk41Uo0JIn6bPLa/Zf0tCPtBWJBUzP++crWRKcK8HZs708gpnvtQUq
HRgfPEc6C4JpHSOWx5dDstLtXBanGxv9HXuPRsgb3bx5Xn9CMG2AEg1800geEbAO
L8o0D1XUf4rIx2XEvmmf1HVy7YcqGj3J29WZiNgYUAyR1E12PV7EO1mzHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4j92AnKgII2saVP4Ta9I2VSh/lMB8GA1UdIwQY
MBaAFF4b9qMZ2iSJgWrtuhtP0Mx93z4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84OGZkZDEtOGI3Yi00MTAxLWFjNjYt
YjU5MDk1N2Q5NDE1LzEvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84OGZkZDEtOGI3Yi00MTAxLWFjNjYtYjU5MDk1N2Q5NDE1
LzEvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJU+0qZs
4qteOyUrUwThttyuUyIBgzEaFnDMOoi8lMfeTjSW3bc8cmw/50kIDJbIJZ9WqMHD
KCOpQpDEs7Z67XPqc9b8DACAmDJ4eObtwFbAU70KNeaEnUIpL5Wey8U10Hs2gnwH
zv4RxYwouuWU2KzGoiuVwM+h9YBigIeuojXc24CIybfv+oUbl0Gpoc5zxdPnxkYV
L3unamzZjDbe10506yuJE75nDFogH9e5O1/JtUPnJdJ0JEEDLQVInjf34NPEQUN9
HFoaG8iaJbotkvyzOxLSMYTJr7U6AtGjepF8rCePtlYyNp5D/fU6rgz6NUMVyTsB
9JgVVeXp2PqoQg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:55:15 2025 by rpki-client