Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File: xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier: BCD+vEwaakVQPfeKbcF3k/isiIx0Siuqhngf7HiFuWk=
Subject key identifier: 84:EA:3F:C2:C0:51:74:71:9E:F9:DF:6B:79:D9:14:00:7F:86:54:8D
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer: /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial: 0199FC216F84B7D95495060F49E53744973A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number: 1287
Signing time: Sun 19 Oct 2025 11:01:13 +0000
Manifest this update: Sun 19 Oct 2025 11:01:13 +0000
Manifest next update: Mon 20 Oct 2025 11:01:13 +0000
Files and hashes: 1: BSgJK3zd9Y_223mUoTLPcPOstiI.roa (hash: Xk2I33HjNWnCyc+NaAuDhngUeqYXn+K/y09c1v7ieOc=)
2: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: LXMN1GLTzsqgZTCKBNm3UA6DCj5Qepy9stjDu9C99UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6f:84:b7:d9:54:95:06:0f:49:e5:37:44:97:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Validity
Not Before: Oct 19 11:01:13 2025 GMT
Not After : Oct 20 11:01:13 2025 GMT
Subject: CN=84ea3fc2c05174719ef9df6b79d914007f86548d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:10:a8:40:73:6a:a4:86:d3:85:f8:01:2b:
f7:23:38:6b:f4:50:a2:04:89:25:64:61:e3:46:84:
ea:56:14:72:2a:ed:10:93:94:2b:10:67:9c:a2:25:
64:83:e7:f0:2e:e9:66:e3:f4:08:4d:7c:cc:77:65:
27:6f:43:f3:75:f9:30:00:70:e8:c5:5a:0a:e3:5c:
d6:0f:9d:fe:da:f3:cc:a5:ea:10:e2:ff:a3:71:e7:
17:2e:9c:b8:58:09:66:33:3e:2e:39:7b:9c:88:26:
c3:48:57:77:14:9d:13:22:05:10:76:2d:a1:f1:37:
2f:4d:41:37:65:76:6f:6e:2a:f4:06:9d:df:50:31:
96:7b:1b:87:ff:96:37:88:83:c5:71:04:e0:47:a4:
e3:55:a8:cb:9c:d1:6b:49:b2:68:06:0f:59:16:10:
c1:f2:4f:55:23:30:71:b9:49:c9:20:65:e6:b8:b3:
1e:54:04:e7:93:e0:0e:e0:4e:a1:ec:6e:15:f0:37:
06:69:e6:5e:65:4d:dc:a0:f8:63:73:eb:58:9b:d2:
ea:38:d5:2e:fa:50:d3:c2:c0:8f:79:93:bf:5d:53:
d2:c7:e0:9d:0e:2b:db:d2:eb:26:fc:44:15:e4:af:
f5:ad:93:ca:65:b0:18:14:9e:c5:89:77:b9:f6:51:
dd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EA:3F:C2:C0:51:74:71:9E:F9:DF:6B:79:D9:14:00:7F:86:54:8D
X509v3 Authority Key Identifier:
keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:66:66:01:aa:83:91:30:cb:b2:a4:a8:ab:62:1f:f9:88:35:
c0:ae:b7:c3:d0:d3:09:da:b4:27:34:b3:79:66:bb:6b:f8:9a:
15:c4:50:a6:f1:25:0a:df:7a:24:65:9f:13:18:26:9f:32:be:
5c:1b:06:b5:5f:0b:e9:2a:31:70:7f:fd:55:ef:4a:c9:a3:13:
b7:97:fd:54:7c:f2:ba:c3:fc:fd:68:75:2a:dd:4d:24:a1:82:
3a:82:70:12:74:2c:b3:a4:63:df:cf:da:11:54:bc:0e:4c:55:
c3:35:eb:1d:87:87:9c:da:c4:eb:46:2a:e0:c8:72:a9:6e:4d:
fe:83:ad:12:24:13:2d:01:1f:4f:c7:c0:a4:6b:53:9c:83:09:
b0:bb:cd:13:54:ac:89:3e:95:09:b2:8a:41:66:66:6f:c1:19:
61:58:3f:d7:91:ea:d1:0e:80:17:4d:7d:af:a4:b9:0f:df:fa:
d8:ba:c4:18:08:2e:8d:ea:0f:0a:4e:4a:cb:6c:8c:35:96:7f:
77:5f:c6:2d:91:c9:df:1f:f2:92:85:2e:89:ba:69:3d:fd:f5:
8c:ca:09:92:44:50:03:b4:f1:c4:f7:3a:cc:58:25:1e:c9:43:
2e:cd:58:99:2d:ac:4b:8e:23:f9:48:f3:8e:1e:fd:35:12:fc:
7b:bf:f1:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IW+Et9lUlQYPSeU3RJc6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZWU5NjNmODJhMGZiMDg2NmQ0MjU1M2IzMzc4NTk3ZDlm
M2VmNjgwHhcNMjUxMDE5MTEwMTEzWhcNMjUxMDIwMTEwMTEzWjAzMTEwLwYDVQQD
Eyg4NGVhM2ZjMmMwNTE3NDcxOWVmOWRmNmI3OWQ5MTQwMDdmODY1NDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdsQqEBzaqSG04X4ASv3Izhr9FCi
BIklZGHjRoTqVhRyKu0Qk5QrEGecoiVkg+fwLulm4/QITXzMd2Unb0PzdfkwAHDo
xVoK41zWD53+2vPMpeoQ4v+jcecXLpy4WAlmMz4uOXuciCbDSFd3FJ0TIgUQdi2h
8TcvTUE3ZXZvbir0Bp3fUDGWexuH/5Y3iIPFcQTgR6TjVajLnNFrSbJoBg9ZFhDB
8k9VIzBxuUnJIGXmuLMeVATnk+AO4E6h7G4V8DcGaeZeZU3coPhjc+tYm9LqONUu
+lDTwsCPeZO/XVPSx+CdDivb0usm/EQV5K/1rZPKZbAYFJ7FiXe59lHd6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITqP8LAUXRxnvnfa3nZFAB/hlSNMB8GA1UdIwQY
MBaAFMXulj+CoPsIZtQlU7M3hZfZ8+9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84M2QyNDYtNzQwZC00YjAxLTkwMjAt
ZGI1YWE1NzdjM2FmLzEveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS84M2QyNDYtNzQwZC00YjAxLTkwMjAtZGI1YWE1NzdjM2Fm
LzEveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuGZmAaqD
kTDLsqSoq2If+Yg1wK63w9DTCdq0JzSzeWa7a/iaFcRQpvElCt96JGWfExgmnzK+
XBsGtV8L6SoxcH/9Ve9KyaMTt5f9VHzyusP8/Wh1Kt1NJKGCOoJwEnQss6Rj38/a
EVS8DkxVwzXrHYeHnNrE60Yq4MhyqW5N/oOtEiQTLQEfT8fApGtTnIMJsLvNE1Ss
iT6VCbKKQWZmb8EZYVg/15Hq0Q6AF019r6S5D9/62LrEGAgujeoPCk5Ky2yMNZZ/
d1/GLZHJ3x/ykoUuibppPf31jMoJkkRQA7TxxPc6zFglHslDLs1YmS2sS44j+Ujz
jh79NRL8e7/xww==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:52 2025 by rpki-client