Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
File: xVCFAF0ORJ07r6McXLQp_4nSxLc.mft (raw, json)
Hash identifier: hMYg4sb65giJZfuXidT0CIk+2KuGoN/i4fnWu18WQo0=
Subject key identifier: 81:82:6A:BD:69:1B:64:1E:4F:FC:31:E2:F6:64:3A:11:53:8D:4B:96
Authority key identifier: C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
Certificate issuer: /CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Certificate serial: 019A7301073524BAD179861C6387E60F7F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 13:00:38 +0000
Manifest this update: Tue 11 Nov 2025 13:00:38 +0000
Manifest next update: Wed 12 Nov 2025 13:00:38 +0000
Files and hashes: 1: qW8p1VoO0rmUxSBMMtwtZyhbaDM.roa (hash: qyIGTJ6GSXvozvgOJxEgitWAj9Fu7yaT8GLFsC9Ti8Q=)
2: xVCFAF0ORJ07r6McXLQp_4nSxLc.crl (hash: oe66I6YY60IsseVSuhMjn6ndn79IMyTBnB0HPTXi2YI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:07:35:24:ba:d1:79:86:1c:63:87:e6:0f:7f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Validity
Not Before: Nov 11 13:00:38 2025 GMT
Not After : Nov 12 13:00:38 2025 GMT
Subject: CN=81826abd691b641e4ffc31e2f6643a11538d4b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9e:06:da:cb:1a:12:1a:16:8a:c8:df:ae:76:
2b:8f:21:f5:f2:da:29:2a:1f:46:97:6e:d4:67:16:
bb:51:b7:14:f4:4f:2f:43:9a:15:16:28:0c:8d:5b:
d5:4f:19:e8:a8:c9:2c:41:ce:a1:60:fc:dc:af:49:
cd:ce:de:fb:c7:40:c3:13:6c:08:97:58:f0:ea:4a:
79:da:71:d6:4d:e4:4a:19:34:27:93:7d:79:45:f0:
44:cf:15:9f:44:72:b6:10:55:f2:32:b9:b4:43:8e:
32:6c:53:5b:eb:d4:06:e6:c9:ca:5e:01:3a:aa:54:
79:92:15:ba:72:c9:41:e0:bf:81:58:cf:08:ea:a8:
e8:05:a9:a0:cf:27:d9:78:59:ac:24:db:54:55:d2:
f8:5e:4c:9d:71:eb:67:88:d4:4c:08:06:1a:f4:b1:
9d:9c:fc:7c:b3:f0:f6:18:cc:cb:e9:0d:53:6e:02:
ee:bd:39:36:a0:4d:b8:26:f1:71:5f:eb:05:3c:0b:
e7:ba:2e:59:9f:e6:5d:2a:0b:b7:7a:3c:e8:14:d8:
96:65:40:28:76:9c:34:e9:2b:3e:b9:3e:2f:e6:5f:
2c:93:37:b3:2c:92:bd:19:41:c6:b3:a2:fc:0c:89:
c7:34:a0:3a:5b:3d:bf:45:6b:86:54:51:37:47:60:
0d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:82:6A:BD:69:1B:64:1E:4F:FC:31:E2:F6:64:3A:11:53:8D:4B:96
X509v3 Authority Key Identifier:
keyid:C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b8:a0:f6:39:00:f4:7c:b4:8f:35:b9:31:de:9c:7b:15:16:
7c:1d:e3:3b:6d:8b:36:a5:96:d5:a4:8c:19:b5:33:f1:ce:a3:
eb:1e:06:f6:ea:9b:86:b8:96:a9:f8:b8:18:05:47:d7:38:8f:
ab:e1:c1:d2:4b:8b:d2:e9:01:cc:5c:73:d1:91:16:f3:dd:df:
95:0c:27:85:e3:48:28:7d:05:ee:b9:24:50:89:80:a0:74:4f:
e6:a9:0d:61:5a:e0:db:c7:91:54:11:9f:5f:4a:48:8b:5f:ca:
29:5f:35:cc:b9:46:24:71:f2:0f:91:af:2a:c7:85:89:9f:10:
ab:ce:38:8a:5f:f5:b8:9b:df:17:d0:e3:c3:d0:ec:0a:35:94:
5e:be:7d:2e:e1:65:22:ed:f9:8e:cd:63:7c:75:46:2b:24:ab:
5d:4f:b2:cf:eb:98:4b:bd:65:72:69:a1:23:af:fd:31:25:f1:
b3:b2:3d:32:ea:1c:75:85:af:4a:01:b9:5b:db:37:38:84:7e:
07:f3:74:03:30:48:59:0a:c4:c1:c1:4e:96:08:1d:ed:7e:f4:
f6:d6:48:bd:90:fd:85:0d:bd:22:f8:1d:51:9c:ca:59:9c:ad:
b8:1e:82:4e:9b:98:2e:eb:84:ad:93:8b:31:04:fe:e9:0d:b4:
04:11:4d:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAQc1JLrReYYcY4fmD391MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTA4NTAwNWQwZTQ0OWQzYmFmYTMxYzVjYjQyOWZmODlk
MmM0YjcwHhcNMjUxMTExMTMwMDM4WhcNMjUxMTEyMTMwMDM4WjAzMTEwLwYDVQQD
Eyg4MTgyNmFiZDY5MWI2NDFlNGZmYzMxZTJmNjY0M2ExMTUzOGQ0Yjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z4G2ssaEhoWisjfrnYrjyH18top
Kh9Gl27UZxa7UbcU9E8vQ5oVFigMjVvVTxnoqMksQc6hYPzcr0nNzt77x0DDE2wI
l1jw6kp52nHWTeRKGTQnk315RfBEzxWfRHK2EFXyMrm0Q44ybFNb69QG5snKXgE6
qlR5khW6cslB4L+BWM8I6qjoBamgzyfZeFmsJNtUVdL4XkydcetniNRMCAYa9LGd
nPx8s/D2GMzL6Q1TbgLuvTk2oE24JvFxX+sFPAvnui5Zn+ZdKgu3ejzoFNiWZUAo
dpw06Ss+uT4v5l8skzezLJK9GUHGs6L8DInHNKA6Wz2/RWuGVFE3R2ANRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGCar1pG2QeT/wx4vZkOhFTjUuWMB8GA1UdIwQY
MBaAFMVQhQBdDkSdO6+jHFy0Kf+J0sS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZDRkFGME9SSjA3cjZNY1hMUXBfNG5TeExjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83Mzg4MDEtZGRjNi00ODQzLTkzNmMt
MjBhY2MzOGJjOGZmLzEveFZDRkFGME9SSjA3cjZNY1hMUXBfNG5TeExjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83Mzg4MDEtZGRjNi00ODQzLTkzNmMtMjBhY2MzOGJjOGZm
LzEveFZDRkFGME9SSjA3cjZNY1hMUXBfNG5TeExjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirig9jkA
9Hy0jzW5Md6cexUWfB3jO22LNqWW1aSMGbUz8c6j6x4G9uqbhriWqfi4GAVH1ziP
q+HB0kuL0ukBzFxz0ZEW893flQwnheNIKH0F7rkkUImAoHRP5qkNYVrg28eRVBGf
X0pIi1/KKV81zLlGJHHyD5GvKseFiZ8Qq844il/1uJvfF9Djw9DsCjWUXr59LuFl
Iu35js1jfHVGKySrXU+yz+uYS71lcmmhI6/9MSXxs7I9MuocdYWvSgG5W9s3OIR+
B/N0AzBIWQrEwcFOlggd7X709tZIvZD9hQ29IvgdUZzKWZytuB6CTpuYLuuErZOL
MQT+6Q20BBFN3g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:49 2025 by rpki-client