
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
File: xIQvgmL-vSPQE9QKMU2I4lSypUI.mft (raw, json)
Hash identifier: 6JSciKMNloi+NDFP/pnNUp7/FCbJUUZMDIISmerxfuE=
Subject key identifier: 23:5D:A8:F0:43:54:5F:DA:D7:AE:55:2B:BC:54:5F:12:5F:1D:9D:B0
Authority key identifier: C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
Certificate issuer: /CN=c4842f8262febd23d013d40a314d88e254b2a542
Certificate serial: 019A03DA78599AA72255CF7DD04B7B8A7DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
Manifest number: 0633
Signing time: Mon 20 Oct 2025 23:00:40 +0000
Manifest this update: Mon 20 Oct 2025 23:00:40 +0000
Manifest next update: Tue 21 Oct 2025 23:00:40 +0000
Files and hashes: 1: jlOcIMtwDZMSOghN5unIu5YgL8g.roa (hash: tVPtE+nX/8/3Q++k/ZBc6Lf2E5loPE1nlFFzJO0Km0I=)
2: xIQvgmL-vSPQE9QKMU2I4lSypUI.crl (hash: gaZkJvszKKhGv27EerVThLicZEUkfMwmgQdop0mPXHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:da:78:59:9a:a7:22:55:cf:7d:d0:4b:7b:8a:7d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4842f8262febd23d013d40a314d88e254b2a542
Validity
Not Before: Oct 20 23:00:40 2025 GMT
Not After : Oct 21 23:00:40 2025 GMT
Subject: CN=235da8f043545fdad7ae552bbc545f125f1d9db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:09:6d:9a:a4:ba:8e:35:be:48:d6:c6:ed:28:
ce:c6:05:9d:b3:39:41:fb:b3:d7:8c:e2:b5:d5:bd:
7f:a4:08:f2:54:2e:3c:07:6c:44:e4:7c:5e:e0:28:
aa:1c:83:e1:6d:a0:0a:23:5e:d4:31:0b:ba:69:4c:
21:66:8e:ef:a2:57:a2:23:58:d5:c0:38:fd:31:4e:
88:12:cc:f6:95:0c:c1:9b:75:9f:2a:20:f2:8f:70:
18:ad:8b:51:4a:40:ab:d4:47:9a:9d:b3:0c:ce:31:
28:d7:ce:99:28:1b:be:e1:fd:89:a8:5f:6e:40:88:
9c:ca:10:49:5a:c6:5f:ae:5b:1d:e5:b9:dc:ef:7b:
6e:93:5d:6e:0b:97:59:8a:21:69:b1:d7:66:67:7c:
56:95:0e:45:83:7d:65:29:f4:10:47:3a:c4:4c:27:
e7:b8:57:99:cd:a6:3f:3a:b2:d2:68:28:82:4d:6a:
61:2c:69:5c:e7:45:ee:97:af:0c:fd:b4:20:d1:93:
40:54:d7:20:9d:68:63:65:86:f5:70:33:d2:08:e8:
72:ca:9c:8b:24:c5:dd:8d:98:c2:17:01:51:25:48:
c3:19:e0:c8:0c:4c:aa:fb:c3:82:e3:c5:03:60:ce:
01:fb:e3:30:e3:ac:a6:8d:08:25:b8:00:93:12:5f:
bc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5D:A8:F0:43:54:5F:DA:D7:AE:55:2B:BC:54:5F:12:5F:1D:9D:B0
X509v3 Authority Key Identifier:
keyid:C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:87:39:61:12:3d:f4:f8:22:a7:87:2d:7c:60:b2:e4:ce:8d:
55:96:e2:9e:d1:da:d4:70:fd:ba:77:89:45:14:9b:ae:43:a7:
28:62:36:bd:e5:da:51:7a:ab:2c:c1:1a:53:1c:f7:94:7f:1e:
a0:2f:d0:80:ba:f6:6d:d0:de:d1:23:2a:78:5e:80:fc:30:97:
96:fa:0a:8b:6a:84:af:b0:58:44:5c:1f:c9:30:88:be:88:cd:
15:c2:24:8b:17:cb:63:42:ad:f4:33:42:e7:89:d6:af:c1:51:
a9:f3:29:06:b9:72:4d:09:63:94:41:68:cd:a3:c8:52:85:3f:
f9:ce:44:0f:1d:ea:db:e1:ce:ff:a5:b0:a8:8f:87:9b:6d:d2:
1e:99:20:c7:f5:b1:99:1f:dc:83:6d:4a:5b:3c:5c:08:55:0a:
99:ec:6e:45:35:c6:f7:70:1c:33:c0:22:d5:14:45:8e:ac:1c:
48:20:fd:da:ee:47:15:36:50:2f:ac:98:04:d4:ab:c2:80:04:
a7:e3:c9:f5:09:a0:bf:67:d8:bb:6d:05:f8:b1:6b:00:ce:ee:
c9:68:66:4f:89:67:e0:d0:88:e1:0b:de:ac:8d:19:61:6f:35:
22:ef:48:87:13:a4:ed:75:97:cb:d7:3f:ad:b8:06:7b:34:0c:
ee:7a:3d:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoD2nhZmqciVc990Et7in3jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ODQyZjgyNjJmZWJkMjNkMDEzZDQwYTMxNGQ4OGUyNTRi
MmE1NDIwHhcNMjUxMDIwMjMwMDQwWhcNMjUxMDIxMjMwMDQwWjAzMTEwLwYDVQQD
EygyMzVkYThmMDQzNTQ1ZmRhZDdhZTU1MmJiYzU0NWYxMjVmMWQ5ZGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAltmqS6jjW+SNbG7SjOxgWdszlB
+7PXjOK11b1/pAjyVC48B2xE5Hxe4CiqHIPhbaAKI17UMQu6aUwhZo7voleiI1jV
wDj9MU6IEsz2lQzBm3WfKiDyj3AYrYtRSkCr1EeanbMMzjEo186ZKBu+4f2JqF9u
QIicyhBJWsZfrlsd5bnc73tuk11uC5dZiiFpsddmZ3xWlQ5Fg31lKfQQRzrETCfn
uFeZzaY/OrLSaCiCTWphLGlc50Xul68M/bQg0ZNAVNcgnWhjZYb1cDPSCOhyypyL
JMXdjZjCFwFRJUjDGeDIDEyq+8OC48UDYM4B++Mw46ymjQgluACTEl+8eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNdqPBDVF/a165VK7xUXxJfHZ2wMB8GA1UdIwQY
MBaAFMSEL4Ji/r0j0BPUCjFNiOJUsqVCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNzBmZDMtZGZjMC00NWZiLTg2MGYt
ZmRkNjc0MWZjY2EzLzEveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9jNzBmZDMtZGZjMC00NWZiLTg2MGYtZmRkNjc0MWZjY2Ez
LzEveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYc5YRI9
9Pgip4ctfGCy5M6NVZbintHa1HD9uneJRRSbrkOnKGI2veXaUXqrLMEaUxz3lH8e
oC/QgLr2bdDe0SMqeF6A/DCXlvoKi2qEr7BYRFwfyTCIvojNFcIkixfLY0Kt9DNC
54nWr8FRqfMpBrlyTQljlEFozaPIUoU/+c5EDx3q2+HO/6WwqI+Hm23SHpkgx/Wx
mR/cg21KWzxcCFUKmexuRTXG93AcM8Ai1RRFjqwcSCD92u5HFTZQL6yYBNSrwoAE
p+PJ9Qmgv2fYu20F+LFrAM7uyWhmT4ln4NCI4QverI0ZYW81Iu9IhxOk7XWXy9c/
rbgGezQM7no9YA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 05:27:51 2025 by rpki-client