Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
File: XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft (raw, json)
Hash identifier: jUghKULNHLE+zSHhE3iYIricSaNQJC2DUi02uW2NcXM=
Subject key identifier: EE:3F:E0:88:B1:A4:EA:E2:12:30:47:DE:2A:42:07:BE:EE:AB:D6:D0
Authority key identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
Certificate issuer: /CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Certificate serial: 019A71EEF8F08FC9E5203C1175A2670DFFAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
Manifest number: 0C93
Signing time: Tue 11 Nov 2025 08:01:17 +0000
Manifest this update: Tue 11 Nov 2025 08:01:17 +0000
Manifest next update: Wed 12 Nov 2025 08:01:17 +0000
Files and hashes: 1: 4nKgTO7nMwv7E5XkGZGra4Dj7eU.roa (hash: /DJ3vJxgq5Ik8hchhiF1sG1wu/bXrSEOv/Tfe2hOIxg=)
2: XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl (hash: /3yFzh8aur3zgXSNVTxfyewP8cIGLiTKU5hcQU1m06c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f8:f0:8f:c9:e5:20:3c:11:75:a2:67:0d:ff:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Validity
Not Before: Nov 11 08:01:17 2025 GMT
Not After : Nov 12 08:01:17 2025 GMT
Subject: CN=ee3fe088b1a4eae2123047de2a4207beeeabd6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:58:1c:37:6b:ab:58:ff:e1:67:a5:c5:36:88:
ee:62:45:40:4f:b9:41:f2:65:29:ce:46:5e:4c:37:
28:d1:35:ad:64:41:66:ad:f3:6a:82:18:4d:6c:fe:
9a:c5:6a:af:10:16:65:80:6a:a6:61:2c:7f:93:9e:
59:75:40:cf:9c:6b:c4:65:0f:fc:ce:2a:f7:26:84:
56:97:d6:d3:40:ca:40:11:bf:67:c9:c9:52:43:49:
34:97:85:ab:4f:83:23:15:6d:a7:6b:93:af:d4:57:
45:37:9b:74:a5:5d:a9:52:8c:ed:85:50:7c:89:c7:
f4:0b:4b:8a:24:09:cb:4f:ce:48:65:5d:55:b4:52:
89:75:e2:f4:bd:10:4d:17:00:62:52:bf:71:03:75:
63:b2:17:6b:d2:34:7a:04:f0:a3:83:b5:f3:15:dc:
5f:83:1a:3d:68:86:c7:43:5b:63:32:88:6c:26:a8:
70:a0:17:ab:a8:9c:73:86:c6:da:a0:7a:c3:f9:fd:
1b:e8:c9:a8:98:fc:d6:90:5d:af:f2:b2:18:35:25:
1a:f8:5e:f4:8a:94:96:02:8a:4a:a4:b7:43:2a:eb:
b1:90:d6:18:c5:e8:fd:ba:cd:50:fc:bc:30:2f:e2:
ae:89:16:1e:72:7d:83:0d:32:fd:49:7e:40:f5:d1:
2f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3F:E0:88:B1:A4:EA:E2:12:30:47:DE:2A:42:07:BE:EE:AB:D6:D0
X509v3 Authority Key Identifier:
keyid:5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:20:5f:fd:bb:4e:ba:e1:67:14:f3:f5:93:82:69:0e:01:a1:
e6:c1:15:45:f9:09:e2:c4:3a:6d:50:62:87:45:a6:5e:1e:7f:
f6:00:19:fb:7e:9a:9f:33:12:6d:dc:b9:ac:7e:d4:6c:8e:09:
64:d7:61:dc:96:5e:92:b0:26:e7:fa:c8:c3:17:71:89:c4:8f:
b4:98:3d:f0:b3:82:00:12:a9:e8:6f:6f:85:fe:2e:73:76:2d:
e7:e3:2e:bf:83:3b:99:2f:65:4f:36:c1:ed:8d:66:bb:04:ee:
08:84:ba:e0:5d:40:4d:b2:10:06:8d:78:90:f7:e6:73:30:51:
82:df:5c:50:d8:de:c4:3e:aa:d8:67:67:1f:3e:86:06:a0:96:
7c:8e:04:94:8c:d4:0e:7d:1e:34:1e:59:ab:da:3e:06:38:35:
5b:5c:81:1a:53:9c:7a:c0:cc:4f:72:0a:e6:67:57:e1:66:bc:
52:66:a9:f4:ae:71:07:d1:85:a0:99:51:d1:e2:e8:26:1e:ae:
bb:c0:2d:58:69:ad:e9:4a:8a:24:4f:9e:2e:c0:73:a7:81:94:
71:80:c1:52:35:14:67:16:0f:12:b6:5a:40:81:f7:24:ab:ee:
40:ee:16:9b:b7:24:a0:63:bc:a2:b7:ac:b2:38:9d:4e:fd:7a:
8e:64:bb:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7vjwj8nlIDwRdaJnDf+vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlODY4YjAyZTUxOWRkN2U2OTRjN2FmMWU3MDhiZGQ2NjM2
OWJkZGYwHhcNMjUxMTExMDgwMTE3WhcNMjUxMTEyMDgwMTE3WjAzMTEwLwYDVQQD
EyhlZTNmZTA4OGIxYTRlYWUyMTIzMDQ3ZGUyYTQyMDdiZWVlYWJkNmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FgcN2urWP/hZ6XFNojuYkVAT7lB
8mUpzkZeTDco0TWtZEFmrfNqghhNbP6axWqvEBZlgGqmYSx/k55ZdUDPnGvEZQ/8
zir3JoRWl9bTQMpAEb9nyclSQ0k0l4WrT4MjFW2na5Ov1FdFN5t0pV2pUozthVB8
icf0C0uKJAnLT85IZV1VtFKJdeL0vRBNFwBiUr9xA3Vjshdr0jR6BPCjg7XzFdxf
gxo9aIbHQ1tjMohsJqhwoBerqJxzhsbaoHrD+f0b6MmomPzWkF2v8rIYNSUa+F70
ipSWAopKpLdDKuuxkNYYxej9us1Q/LwwL+KuiRYecn2DDTL9SX5A9dEvVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4/4IixpOriEjBH3ipCB77uq9bQMB8GA1UdIwQY
MBaAFF6GiwLlGd1+aUx68ecIvdZjab3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84MDJlMDUtMGQ1Yi00NTg5LTkxNmIt
OTBjMTdlYjc1MWY0LzEvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84MDJlMDUtMGQ1Yi00NTg5LTkxNmItOTBjMTdlYjc1MWY0
LzEvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSBf/btO
uuFnFPP1k4JpDgGh5sEVRfkJ4sQ6bVBih0WmXh5/9gAZ+36anzMSbdy5rH7UbI4J
ZNdh3JZekrAm5/rIwxdxicSPtJg98LOCABKp6G9vhf4uc3Yt5+Muv4M7mS9lTzbB
7Y1muwTuCIS64F1ATbIQBo14kPfmczBRgt9cUNjexD6q2GdnHz6GBqCWfI4ElIzU
Dn0eNB5Zq9o+Bjg1W1yBGlOcesDMT3IK5mdX4Wa8Umap9K5xB9GFoJlR0eLoJh6u
u8AtWGmt6UqKJE+eLsBzp4GUcYDBUjUUZxYPErZaQIH3JKvuQO4Wm7ckoGO8ores
sjidTv16jmS7EQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:35 2025 by rpki-client