Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
File: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft (raw, json)
Hash identifier: EOyvuXbXK/FmuAdDh2bk41OKarRSPxGvTLY3TofvhMU=
Subject key identifier: 91:C1:29:3E:E5:03:8F:3F:7D:42:F8:71:A3:0C:11:90:CA:44:A0:4D
Authority key identifier: 5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7
Certificate issuer: /CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
Certificate serial: 019A7293E42FC89E4CD6ED7D2B6A3B7A6C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:01:26 +0000
Manifest this update: Tue 11 Nov 2025 11:01:26 +0000
Manifest next update: Wed 12 Nov 2025 11:01:26 +0000
Files and hashes: 1: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl (hash: Sz8T2gggprPSsYuG5X2pISF0gqcSKZUCROIiAAk5D8U=)
2: jKWW8lM-7qWMZl51o-CojPJFkjs.roa (hash: qo4ws59Zs5PpOs3LLh3sz4ISOqKQfl11xb7AgRxxDws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e4:2f:c8:9e:4c:d6:ed:7d:2b:6a:3b:7a:6c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
Validity
Not Before: Nov 11 11:01:26 2025 GMT
Not After : Nov 12 11:01:26 2025 GMT
Subject: CN=91c1293ee5038f3f7d42f871a30c1190ca44a04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:75:81:a8:61:25:15:9b:92:06:1e:d3:29:
34:e0:3e:b1:ea:cc:f4:fb:8f:75:10:08:b4:e1:fb:
43:c0:52:33:69:c7:78:f3:fd:33:82:ef:99:fa:42:
85:06:32:80:97:ef:50:fb:bc:56:9d:65:fe:d4:cd:
30:47:c0:78:78:36:62:66:d3:78:e6:9f:f3:65:74:
1c:0f:e6:09:2f:48:88:a9:21:d0:ac:fc:b6:29:44:
34:da:ac:f6:af:73:6d:3c:5f:14:b1:27:f2:c7:e0:
70:27:a3:eb:b2:b2:83:29:72:14:f3:42:07:42:ea:
4f:ee:65:3e:0e:8b:ed:af:ff:c1:a3:3b:03:30:9f:
23:a8:19:00:1d:03:a7:ec:3f:ba:12:82:3c:a2:e6:
ee:b9:bd:f0:a3:ae:4b:7f:76:0b:26:46:42:af:34:
4f:df:44:35:9f:df:81:7c:9e:c1:38:1e:2b:93:16:
bd:18:58:8a:c9:13:14:9f:02:1d:79:c1:07:7e:ed:
e5:c7:e2:2b:49:03:20:66:41:de:23:c3:cd:aa:4f:
13:34:80:9c:d5:f3:9f:2c:80:8d:27:22:d1:28:48:
5c:07:78:48:9c:cc:e0:3e:ed:ef:2c:35:b5:bb:d7:
b7:06:ee:31:aa:64:67:2d:2f:3a:82:5f:a4:f6:7f:
cf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C1:29:3E:E5:03:8F:3F:7D:42:F8:71:A3:0C:11:90:CA:44:A0:4D
X509v3 Authority Key Identifier:
keyid:5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ac:3c:88:04:af:1d:e3:9d:03:de:07:3c:92:76:94:44:de:
34:73:c7:ae:d3:c6:b8:5f:4a:f7:99:eb:2a:0f:6b:60:d9:42:
02:15:e1:a8:96:34:5e:43:64:1e:af:01:d1:42:e4:26:c6:1b:
5e:88:83:b6:f1:62:e0:65:f5:c6:dd:fa:33:2a:9f:7d:d2:8d:
d9:82:99:36:8f:cf:74:77:dd:9a:3c:22:cc:b7:bf:ca:c8:46:
a3:39:9d:33:bc:3c:b3:a7:11:e3:de:92:c8:5f:a6:12:ca:87:
33:69:7a:03:1e:ae:f6:84:ae:4b:52:fa:83:46:f9:9e:d1:b8:
db:bb:4b:0b:c5:2f:68:5a:fc:5d:c6:b2:6d:3d:e3:af:71:bc:
44:15:2b:08:c4:7a:65:25:4c:5d:08:27:5b:42:e5:a5:f3:e7:
5e:96:fa:08:eb:96:c6:9f:c6:b6:f1:3d:d0:26:ca:62:fb:54:
ba:b1:98:81:3e:2f:df:50:b1:65:5c:47:83:32:f5:08:ab:71:
66:62:ed:b6:09:b0:29:4a:d3:69:3c:12:94:59:c9:8f:ec:3f:
9b:68:3d:ff:db:f7:a3:07:3d:d9:ca:b0:ea:ac:f2:0e:52:b5:
c4:1f:d1:47:d1:a2:b8:ee:24:3e:0f:d1:77:be:ec:dd:12:2a:
1b:a8:78:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk+QvyJ5M1u19K2o7emwmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMzVlZDA0M2M4ZGUxNTFiZWJkYzA5ZGZjYmZmY2M3ZGM3
NzU5YzcwHhcNMjUxMTExMTEwMTI2WhcNMjUxMTEyMTEwMTI2WjAzMTEwLwYDVQQD
Eyg5MWMxMjkzZWU1MDM4ZjNmN2Q0MmY4NzFhMzBjMTE5MGNhNDRhMDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ud1gahhJRWbkgYe0yk04D6x6sz0
+491EAi04ftDwFIzacd48/0zgu+Z+kKFBjKAl+9Q+7xWnWX+1M0wR8B4eDZiZtN4
5p/zZXQcD+YJL0iIqSHQrPy2KUQ02qz2r3NtPF8UsSfyx+BwJ6PrsrKDKXIU80IH
QupP7mU+Dovtr//BozsDMJ8jqBkAHQOn7D+6EoI8oubuub3wo65Lf3YLJkZCrzRP
30Q1n9+BfJ7BOB4rkxa9GFiKyRMUnwIdecEHfu3lx+IrSQMgZkHeI8PNqk8TNICc
1fOfLICNJyLRKEhcB3hInMzgPu3vLDW1u9e3Bu4xqmRnLS86gl+k9n/PKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHBKT7lA48/fUL4caMMEZDKRKBNMB8GA1UdIwQY
MBaAFF417QQ8jeFRvr3Anfy//Mfcd1nHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpYdEJEeU40VkctdmNDZF9MXzh4OXgzV2NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lMTdmYTItNzg2Ni00ZmExLTk3MmIt
MTc3NjgxM2U3MjI0LzEvWGpYdEJEeU40VkctdmNDZF9MXzh4OXgzV2NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9lMTdmYTItNzg2Ni00ZmExLTk3MmItMTc3NjgxM2U3MjI0
LzEvWGpYdEJEeU40VkctdmNDZF9MXzh4OXgzV2NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6w8iASv
HeOdA94HPJJ2lETeNHPHrtPGuF9K95nrKg9rYNlCAhXhqJY0XkNkHq8B0ULkJsYb
XoiDtvFi4GX1xt36MyqffdKN2YKZNo/PdHfdmjwizLe/yshGozmdM7w8s6cR496S
yF+mEsqHM2l6Ax6u9oSuS1L6g0b5ntG427tLC8UvaFr8XcaybT3jr3G8RBUrCMR6
ZSVMXQgnW0LlpfPnXpb6COuWxp/GtvE90CbKYvtUurGYgT4v31CxZVxHgzL1CKtx
ZmLttgmwKUrTaTwSlFnJj+w/m2g9/9v3owc92cqw6qzyDlK1xB/RR9GiuO4kPg/R
d77s3RIqG6h4Yg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:55 2025 by rpki-client