Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
File: xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft (raw, json)
Hash identifier: VdbK/cAvP3j5H2NoLAJDZ4JcAcxIeXFQ3KGBWXqek0U=
Subject key identifier: F1:5E:FB:47:65:B2:65:ED:EB:A7:21:91:C7:F6:DA:47:B8:BF:D5:8D
Authority key identifier: C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
Certificate issuer: /CN=c722ad43471b606bcc853bba11b8ed663c151882
Certificate serial: 0199FCC67308A5A30A7E20B93BC6DC60A8D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
Manifest number: 0DCF
Signing time: Sun 19 Oct 2025 14:01:27 +0000
Manifest this update: Sun 19 Oct 2025 14:01:27 +0000
Manifest next update: Mon 20 Oct 2025 14:01:27 +0000
Files and hashes: 1: G5_4IPMG5NHZjmfzPhI-Ht0hMBo.roa (hash: UQfSOOWEfVsgKWPp7JPv9q8rf4PIS8Inp9Mcfn7NDVc=)
2: xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl (hash: Jl5CVFgBXa7MjelKnI3vIO92iLY0rT0YLwHM1RUIEgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:73:08:a5:a3:0a:7e:20:b9:3b:c6:dc:60:a8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c722ad43471b606bcc853bba11b8ed663c151882
Validity
Not Before: Oct 19 14:01:27 2025 GMT
Not After : Oct 20 14:01:27 2025 GMT
Subject: CN=f15efb4765b265edeba72191c7f6da47b8bfd58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0f:35:10:b1:0b:d8:cc:5d:da:46:f4:72:82:
a6:22:18:31:80:71:7f:3b:3c:9b:af:a5:09:ec:61:
cc:9c:0b:6c:9e:30:e7:a2:7d:2f:06:7a:31:2f:fe:
b3:59:a6:bb:00:a7:91:c1:c5:04:81:16:7e:89:29:
73:5f:35:7a:3f:96:a9:80:b9:17:d4:ab:b3:ab:d0:
e2:47:64:41:e7:21:7b:2c:f1:e8:3e:f4:68:dc:d2:
e9:cb:01:e1:96:23:71:c2:a5:25:55:6a:62:8a:24:
f2:40:01:81:2d:00:7c:6b:4c:5f:05:bb:81:46:43:
3f:8c:39:d3:83:55:52:55:a1:e3:32:ca:4a:e0:c9:
a8:5e:c3:fa:b7:db:15:dd:28:12:0f:4e:5b:29:4c:
8a:7f:8a:d1:8f:74:2f:0a:16:78:15:fe:91:59:60:
f1:4b:ac:16:ad:b3:31:f7:de:c2:f0:e7:02:50:6e:
c3:39:df:fa:8c:f6:92:d7:72:c9:ab:ef:22:4e:a9:
86:0c:45:b6:d6:d9:fc:79:64:9d:1f:10:16:d4:87:
b3:95:0e:f8:fe:2b:e5:bc:44:8e:5b:84:34:db:a6:
b6:92:d2:5b:c6:5f:3a:f7:55:a3:26:96:f7:c2:3c:
68:ef:fb:cb:72:da:85:13:35:b3:be:ef:9b:9d:47:
39:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5E:FB:47:65:B2:65:ED:EB:A7:21:91:C7:F6:DA:47:B8:BF:D5:8D
X509v3 Authority Key Identifier:
keyid:C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c5:f1:12:57:3b:2a:07:5d:ab:76:66:91:66:e8:07:37:d5:
f6:98:c4:80:9b:ec:fd:81:61:e4:af:04:e5:6a:d9:d6:b8:4b:
8b:fa:5c:52:61:af:f1:97:93:2b:5f:c0:07:0e:86:d2:21:fe:
2d:9c:6f:9a:3c:e7:2c:07:15:5e:e5:8a:d5:f1:78:56:77:9d:
6a:ef:a4:7a:09:e5:fe:ef:a3:07:78:2b:7c:b5:cd:4e:17:2b:
70:05:ce:e2:6b:81:ca:11:8e:ea:08:91:0c:8c:06:13:2b:0f:
cd:04:48:ad:98:cc:1e:50:1a:ec:4b:ba:81:85:58:41:f3:a8:
9e:5c:68:92:86:36:c2:05:90:bd:4b:88:4e:a4:2e:0c:e7:62:
39:fa:96:e5:05:bc:48:90:4a:d9:6a:cf:e9:f8:34:8f:d8:e4:
a5:85:3d:e7:93:a1:3e:47:10:53:62:23:73:a1:37:e2:5f:72:
4d:0d:f3:c9:1d:eb:83:96:ef:ce:54:67:c2:62:97:f3:93:aa:
28:55:dd:b1:a6:b6:4b:5f:20:bd:18:07:4d:72:13:b3:85:da:
57:53:c8:93:15:ae:68:58:13:a2:3f:df:e8:f9:79:9d:c2:74:
95:57:e5:4c:1e:fd:e2:4c:96:99:40:87:03:98:8a:82:e4:72:
e9:bc:08:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xnMIpaMKfiC5O8bcYKjTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MjJhZDQzNDcxYjYwNmJjYzg1M2JiYTExYjhlZDY2M2Mx
NTE4ODIwHhcNMjUxMDE5MTQwMTI3WhcNMjUxMDIwMTQwMTI3WjAzMTEwLwYDVQQD
EyhmMTVlZmI0NzY1YjI2NWVkZWJhNzIxOTFjN2Y2ZGE0N2I4YmZkNThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA81ELEL2Mxd2kb0coKmIhgxgHF/
Ozybr6UJ7GHMnAtsnjDnon0vBnoxL/6zWaa7AKeRwcUEgRZ+iSlzXzV6P5apgLkX
1Kuzq9DiR2RB5yF7LPHoPvRo3NLpywHhliNxwqUlVWpiiiTyQAGBLQB8a0xfBbuB
RkM/jDnTg1VSVaHjMspK4MmoXsP6t9sV3SgSD05bKUyKf4rRj3QvChZ4Ff6RWWDx
S6wWrbMx997C8OcCUG7DOd/6jPaS13LJq+8iTqmGDEW21tn8eWSdHxAW1IezlQ74
/ivlvESOW4Q026a2ktJbxl8691WjJpb3wjxo7/vLctqFEzWzvu+bnUc5wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFe+0dlsmXt66chkcf22ke4v9WNMB8GA1UdIwQY
MBaAFMcirUNHG2BrzIU7uhG47WY8FRiCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHlLdFEwY2JZR3ZNaFR1NkVianRaandWR0lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kM2EwYjEtMDhhMC00NGRkLTg3NzQt
MDY2ZmZlZmQwY2FiLzEveHlLdFEwY2JZR3ZNaFR1NkVianRaandWR0lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9kM2EwYjEtMDhhMC00NGRkLTg3NzQtMDY2ZmZlZmQwY2Fi
LzEveHlLdFEwY2JZR3ZNaFR1NkVianRaandWR0lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqcXxElc7
Kgddq3ZmkWboBzfV9pjEgJvs/YFh5K8E5WrZ1rhLi/pcUmGv8ZeTK1/ABw6G0iH+
LZxvmjznLAcVXuWK1fF4Vnedau+kegnl/u+jB3grfLXNThcrcAXO4muByhGO6giR
DIwGEysPzQRIrZjMHlAa7Eu6gYVYQfOonlxokoY2wgWQvUuITqQuDOdiOfqW5QW8
SJBK2WrP6fg0j9jkpYU955OhPkcQU2Ijc6E34l9yTQ3zyR3rg5bvzlRnwmKX85Oq
KFXdsaa2S18gvRgHTXITs4XaV1PIkxWuaFgToj/f6Pl5ncJ0lVflTB794kyWmUCH
A5iKguRy6bwIJw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:49 2025 by rpki-client