Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
File: SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json)
Hash identifier: T0KzLGOGUgO1PdFytCsYPMuAJcDm1CTIYcXreGjVHzY=
Subject key identifier: 6D:AC:B5:E6:48:59:E3:26:8C:DE:6D:05:22:C5:C4:1E:8B:65:CD:EE
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 0199FCC67BB8BFEC84E5CEDB99F9437C7C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
Manifest number: 169A
Signing time: Sun 19 Oct 2025 14:01:30 +0000
Manifest this update: Sun 19 Oct 2025 14:01:30 +0000
Manifest next update: Mon 20 Oct 2025 14:01:30 +0000
Files and hashes: 1: 2_e31xA0ke3Styc34JcGbffddwc.roa (hash: SiZtRmCeZumulAZS0QR6GtmaGOYbZYgtQLDnc2RPi2w=)
2: N3VmvFOmqCre_Lx0IfYjn2v2b6w.roa (hash: bp1wfw2pyxZJdYCZm2jvav72UAXwLNhJfCLzE6u3iuo=)
3: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: SDeflB9jQiUa6maHUvjNjPw6jnlAVlEz9tIPOWIxXqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:7b:b8:bf:ec:84:e5:ce:db:99:f9:43:7c:7c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: Oct 19 14:01:30 2025 GMT
Not After : Oct 20 14:01:30 2025 GMT
Subject: CN=6dacb5e64859e3268cde6d0522c5c41e8b65cdee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:b1:84:b4:41:1c:d6:c0:25:f5:bf:6e:ff:
3e:31:71:c2:f3:fa:20:d3:fe:80:53:81:b3:ba:bf:
ab:5e:85:aa:16:cc:14:ef:ce:05:a3:c8:31:2f:e7:
34:cf:27:7f:4b:d8:ba:31:f4:37:9e:a9:2d:dc:93:
43:65:95:c8:91:5c:bf:d0:ab:ed:72:24:c1:aa:6a:
48:79:25:8e:36:38:ed:f8:72:87:8f:3a:49:c0:ab:
b5:46:f0:29:a0:61:4f:7a:4b:e2:58:e0:96:bc:8f:
34:48:a7:1b:06:e3:e4:fd:80:81:a1:84:50:f5:2f:
10:09:88:98:fd:3f:01:b3:90:ac:c0:ec:e5:68:0f:
7a:7e:60:20:a6:97:e8:72:4b:b7:64:74:26:17:c8:
fd:51:97:f9:d9:65:52:06:28:c8:25:63:5c:03:0b:
4f:e5:f3:fe:d2:78:aa:8a:52:c3:52:97:f5:28:52:
a7:52:e7:46:33:0c:41:c0:58:0b:93:b2:dc:57:73:
99:ae:7a:29:f1:9b:3e:ae:be:a9:76:d3:61:50:39:
cd:54:d2:a1:d5:b1:e6:91:41:cd:f2:c0:59:c2:27:
c6:b5:86:62:2e:78:09:36:c3:53:9f:1a:0c:e7:9d:
42:da:b7:2b:1d:ac:09:c9:da:82:26:82:d2:0a:10:
c7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AC:B5:E6:48:59:E3:26:8C:DE:6D:05:22:C5:C4:1E:8B:65:CD:EE
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f7:58:75:ea:5f:d2:1e:3d:8f:c5:66:70:bd:28:6c:55:ae:
3f:b4:56:a3:5a:82:a1:02:52:07:30:24:c3:a8:be:90:7a:ff:
bf:19:98:a6:e7:34:3f:ad:1b:8e:78:5a:30:d6:1f:61:e1:a8:
00:4e:90:b3:df:10:03:89:8e:97:c4:f6:13:03:1d:ac:48:e6:
13:40:3e:5e:80:2d:db:f1:94:bb:33:b7:7c:f0:78:1c:36:f6:
79:e0:a6:8a:89:81:ca:35:e6:1f:ae:7c:ee:84:c4:76:cd:e1:
5d:71:83:a9:ad:4b:44:b8:04:fa:4e:3e:9f:b5:50:dd:70:e5:
4b:68:64:a7:73:b0:a1:ea:1e:5d:e2:17:8e:32:dc:37:02:ad:
e4:74:6d:d8:a9:45:e2:5e:8e:6d:c7:a7:3c:7a:3c:aa:71:5f:
cc:9b:6d:92:4e:1e:8c:cb:2f:41:68:10:76:d7:0d:f2:61:5f:
ba:c2:69:28:6c:0d:d3:66:d1:62:fd:52:18:6a:80:97:bf:26:
4a:6a:58:e5:21:fd:8d:92:91:4e:a6:21:4a:48:d0:93:9a:80:
b6:d2:52:6f:9c:35:16:87:bc:df:c0:ed:e4:a3:6b:d0:67:d8:
42:32:ab:c8:c8:6d:92:01:31:28:ec:b3:3a:f2:84:f8:95:93:
8b:61:90:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xnu4v+yE5c7bmflDfHx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NzIyYTBjYThiYmM5NGQ0OGE1Y2I0OGNjYzkyZWZlZjg0
NWE3ZTMwHhcNMjUxMDE5MTQwMTMwWhcNMjUxMDIwMTQwMTMwWjAzMTEwLwYDVQQD
Eyg2ZGFjYjVlNjQ4NTllMzI2OGNkZTZkMDUyMmM1YzQxZThiNjVjZGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnixhLRBHNbAJfW/bv8+MXHC8/og
0/6AU4Gzur+rXoWqFswU784Fo8gxL+c0zyd/S9i6MfQ3nqkt3JNDZZXIkVy/0Kvt
ciTBqmpIeSWONjjt+HKHjzpJwKu1RvApoGFPekviWOCWvI80SKcbBuPk/YCBoYRQ
9S8QCYiY/T8Bs5CswOzlaA96fmAgppfocku3ZHQmF8j9UZf52WVSBijIJWNcAwtP
5fP+0niqilLDUpf1KFKnUudGMwxBwFgLk7LcV3OZrnop8Zs+rr6pdtNhUDnNVNKh
1bHmkUHN8sBZwifGtYZiLngJNsNTnxoM551C2rcrHawJydqCJoLSChDHawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2steZIWeMmjN5tBSLFxB6LZc3uMB8GA1UdIwQY
MBaAFElyKgyou8lNSKXLSMzJLv74RafjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9lYzUyMDgtZjY5NS00YmRiLTliYjIt
ZTE4ZmE2NTgwNTVhLzEvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9lYzUyMDgtZjY5NS00YmRiLTliYjItZTE4ZmE2NTgwNTVh
LzEvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPdYdepf
0h49j8VmcL0obFWuP7RWo1qCoQJSBzAkw6i+kHr/vxmYpuc0P60bjnhaMNYfYeGo
AE6Qs98QA4mOl8T2EwMdrEjmE0A+XoAt2/GUuzO3fPB4HDb2eeCmiomByjXmH658
7oTEds3hXXGDqa1LRLgE+k4+n7VQ3XDlS2hkp3OwoeoeXeIXjjLcNwKt5HRt2KlF
4l6ObcenPHo8qnFfzJttkk4ejMsvQWgQdtcN8mFfusJpKGwN02bRYv1SGGqAl78m
SmpY5SH9jZKRTqYhSkjQk5qAttJSb5w1Foe838Dt5KNr0GfYQjKryMhtkgExKOyz
OvKE+JWTi2GQpA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:29 2025 by rpki-client