Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json)
Hash identifier: qmBhfneO/7+fO9leoRjALRAUGMrhOHHzOXaK/YdhY68=
Subject key identifier: C9:D7:54:1C:F2:C5:69:F3:9F:12:E3:3D:AB:10:E4:E2:F2:DA:88:50
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 0199FC58B4E1C07CF032B0806BF5FD8016D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
Manifest number: 0CC7
Signing time: Sun 19 Oct 2025 12:01:35 +0000
Manifest this update: Sun 19 Oct 2025 12:01:35 +0000
Manifest next update: Mon 20 Oct 2025 12:01:35 +0000
Files and hashes: 1: 1-4QYL3zSIvubO19_zc5_sPHbtmM.roa (hash: RSu12j4NBBmo2Fros21N8BPczXB3VUvZpIMKKBoV+WA=)
2: GVUHIfvKpJdOHNnRnG93-HDINEI.roa (hash: /GunX5DVAaqCLeh5vLqdmjbmgKNjplZucj4LzeQ5W4Y=)
3: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: x+i+zu0oE7KueWNoikMsO8QabLaJbNq1WHP4UB/KVOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b4:e1:c0:7c:f0:32:b0:80:6b:f5:fd:80:16:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: Oct 19 12:01:35 2025 GMT
Not After : Oct 20 12:01:35 2025 GMT
Subject: CN=c9d7541cf2c569f39f12e33dab10e4e2f2da8850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c9:6a:f9:70:4f:6e:2e:ea:28:b0:8c:80:75:
62:30:eb:8e:5e:ad:fc:81:2a:30:b5:9e:ec:e4:90:
fd:e7:ac:ac:a1:34:b1:82:45:4f:4d:d6:29:5b:7c:
ac:a0:d8:13:a5:45:59:9e:f8:18:35:c2:cb:1e:6c:
38:79:2a:8d:e5:d0:d9:62:5d:53:2e:4b:73:c4:46:
bb:91:ec:c4:01:6c:2f:5a:7a:51:c3:7b:be:2f:d8:
56:04:6e:30:ed:5d:a6:2b:fd:0c:7d:ee:c3:0a:92:
83:ed:25:ea:37:88:de:32:9f:34:a0:02:c5:d8:2a:
a2:04:ed:3a:c6:a5:6f:f3:c7:65:d1:18:e7:d2:95:
94:1e:2e:63:cc:31:4d:d4:0c:0b:9b:2d:eb:c3:64:
8f:a1:d0:55:b6:d8:42:ff:aa:3e:29:e9:32:ae:2b:
25:ee:de:4b:0c:42:ad:83:10:2f:f9:c5:e1:61:0c:
c9:0f:0d:28:4d:75:c4:06:17:87:a7:d8:77:01:18:
b7:53:49:ef:95:a9:c9:b7:c9:30:fc:f8:8a:82:b1:
83:1b:ca:ff:78:e9:39:d8:bc:f8:cd:39:4e:4f:a7:
5a:25:fd:0b:b5:95:a4:aa:e3:0d:d9:f4:f1:56:83:
8c:2b:20:e6:da:7b:e7:8d:5b:2a:47:6a:16:ca:92:
bf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D7:54:1C:F2:C5:69:F3:9F:12:E3:3D:AB:10:E4:E2:F2:DA:88:50
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ce:97:bd:20:b1:4e:0a:42:2c:57:e7:bf:4e:9c:84:95:58:
90:61:bb:b3:ba:fa:a9:90:22:c4:bc:67:42:89:de:e5:47:1c:
c6:c2:ce:ad:5b:db:dc:3d:a2:39:ba:0f:6d:66:8a:81:26:b9:
76:11:c9:0f:e9:33:12:1f:a4:c0:f1:e2:3a:83:93:ea:3a:be:
af:42:c8:3a:ac:8a:e3:ee:9a:08:77:41:bc:29:b9:c8:a4:31:
f7:9d:41:c4:12:7a:4d:73:cb:d5:a9:e1:3b:70:dd:3c:20:c9:
22:5b:ae:6a:29:ed:c7:ff:93:cd:e4:ad:fe:15:6e:57:c6:b2:
d2:00:63:95:d6:a0:ee:86:98:e4:b3:40:aa:ba:f1:37:e8:fd:
60:f5:00:bd:38:2e:54:b6:51:f9:08:13:99:1a:ea:56:3a:9a:
d6:a7:9c:16:38:97:24:1e:74:12:19:c6:4f:9d:88:88:c6:2f:
02:ef:3c:be:e3:f9:af:be:fd:1a:68:8a:98:8b:0d:67:60:db:
38:0b:cd:c1:25:71:00:e0:be:e5:88:1d:07:38:fd:0e:7e:97:
8d:4d:89:fc:00:e2:95:5e:d6:4c:60:f5:25:e3:75:35:e3:88:
88:97:6f:92:30:53:d7:53:6a:25:0b:c1:cd:44:4b:fc:00:c0:
2e:29:46:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WLThwHzwMrCAa/X9gBbWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZWRkNmIwZTM2ZjRiZDhmMWQ1N2UyNmNjMWMyZDE4YzY5
OTNjMDQwHhcNMjUxMDE5MTIwMTM1WhcNMjUxMDIwMTIwMTM1WjAzMTEwLwYDVQQD
EyhjOWQ3NTQxY2YyYzU2OWYzOWYxMmUzM2RhYjEwZTRlMmYyZGE4ODUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2clq+XBPbi7qKLCMgHViMOuOXq38
gSowtZ7s5JD956ysoTSxgkVPTdYpW3ysoNgTpUVZnvgYNcLLHmw4eSqN5dDZYl1T
LktzxEa7kezEAWwvWnpRw3u+L9hWBG4w7V2mK/0Mfe7DCpKD7SXqN4jeMp80oALF
2CqiBO06xqVv88dl0Rjn0pWUHi5jzDFN1AwLmy3rw2SPodBVtthC/6o+Kekyrisl
7t5LDEKtgxAv+cXhYQzJDw0oTXXEBheHp9h3ARi3U0nvlanJt8kw/PiKgrGDG8r/
eOk52Lz4zTlOT6daJf0LtZWkquMN2fTxVoOMKyDm2nvnjVsqR2oWypK/XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnXVBzyxWnznxLjPasQ5OLy2ohQMB8GA1UdIwQY
MBaAFF3t1rDjb0vY8dV+JswcLRjGmTwEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mMDNjZGMtMjk0NS00MDhjLTg4ODkt
YzY5ODcxZjVkMzA1LzEvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9mMDNjZGMtMjk0NS00MDhjLTg4ODktYzY5ODcxZjVkMzA1
LzEvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiM6XvSCx
TgpCLFfnv06chJVYkGG7s7r6qZAixLxnQone5UccxsLOrVvb3D2iOboPbWaKgSa5
dhHJD+kzEh+kwPHiOoOT6jq+r0LIOqyK4+6aCHdBvCm5yKQx951BxBJ6TXPL1anh
O3DdPCDJIluuaintx/+TzeSt/hVuV8ay0gBjldag7oaY5LNAqrrxN+j9YPUAvTgu
VLZR+QgTmRrqVjqa1qecFjiXJB50EhnGT52IiMYvAu88vuP5r779GmiKmIsNZ2Db
OAvNwSVxAOC+5YgdBzj9Dn6XjU2J/ADilV7WTGD1JeN1NeOIiJdvkjBT11NqJQvB
zURL/ADALilGxg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:58 2025 by rpki-client