Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json)
Hash identifier: /SSznVwYlx92fyckax4Sy73bGagULo2XyrB4QUM8BFA=
Subject key identifier: AE:4C:F4:7B:F6:F8:4C:A9:0F:D7:43:F6:D8:63:D2:09:F4:71:BC:FB
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 019A71EEDB4C086A3D0F1FE8773151AC8E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 08:01:10 +0000
Manifest this update: Tue 11 Nov 2025 08:01:10 +0000
Manifest next update: Wed 12 Nov 2025 08:01:10 +0000
Files and hashes: 1: VV0lcvnlnG9WTkwgXPk5TRHRcZQ.roa (hash: DsDIMEW7TR5yp1+sD2rXx7TV58t745Rd1fkPc4+bsBs=)
2: a85p_GEp5p6Bf3FjSd5TigV6wZQ.roa (hash: wqCCsxCv3hdKMkQBIvYu4j0t7kjF+iiKKHzp3iWmOnw=)
3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: bChN/RjI1TtwZvrYjIrBcsroPIS+ARqhLcxwiqL2rnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:db:4c:08:6a:3d:0f:1f:e8:77:31:51:ac:8e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: Nov 11 08:01:10 2025 GMT
Not After : Nov 12 08:01:10 2025 GMT
Subject: CN=ae4cf47bf6f84ca90fd743f6d863d209f471bcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:73:6f:a3:f9:4f:6c:8a:f9:8d:3f:67:d6:e8:
96:5a:38:9c:49:ee:4d:bf:16:33:c7:f8:85:c8:34:
92:0d:1d:50:f8:94:67:f6:bf:f0:e6:8c:bc:d9:0c:
22:f9:b5:e6:2b:b5:da:dd:cd:81:b4:c8:8f:4c:3f:
41:ca:06:22:f1:f2:6a:62:01:72:26:78:05:da:e9:
4f:41:38:16:bf:89:5e:80:64:6c:62:7b:49:42:d4:
b0:f6:05:36:df:ea:7e:c2:08:b5:85:19:c5:20:a4:
ea:e6:f3:6b:a4:4c:3d:fc:e7:89:ef:de:7b:98:56:
f2:6f:27:62:32:1f:57:ee:99:d8:4c:98:b4:a2:be:
18:a4:41:8d:e3:8d:d4:bb:d2:17:86:04:3e:d6:af:
78:f7:a2:b5:05:7c:dd:0f:68:9e:f3:3e:52:76:0a:
b4:7c:65:ec:8b:77:f5:93:1b:a8:06:c5:e0:47:5f:
49:4d:76:54:cb:7c:63:b5:05:b4:44:a2:10:d2:f0:
63:8d:d1:84:6f:5b:1e:96:6a:aa:c8:5b:2f:fb:38:
f1:8a:0c:64:89:bb:cf:1a:e9:f7:a0:0d:a1:af:b9:
18:9e:93:a1:90:9e:5d:65:f0:08:c5:c6:03:ed:cf:
95:d1:94:76:39:48:0b:96:cb:59:84:03:2f:32:91:
80:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4C:F4:7B:F6:F8:4C:A9:0F:D7:43:F6:D8:63:D2:09:F4:71:BC:FB
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:58:5b:68:d7:aa:97:bc:08:c1:9e:9a:b3:26:05:e8:9c:10:
c0:f5:22:d0:7f:00:f4:6a:08:85:ae:d4:96:87:6a:32:76:17:
9d:70:18:d7:54:8e:f9:45:96:1d:a9:bf:f0:ca:11:1b:59:87:
91:95:a9:1d:37:44:b2:a6:a6:75:9e:91:b0:0c:60:f2:1b:e2:
36:28:c3:bb:bf:6e:31:f9:a3:d8:16:79:65:4f:ae:25:ba:94:
ec:1d:25:cf:4c:09:c0:9b:29:54:1c:6a:31:87:7a:7e:25:48:
7d:71:f7:64:ee:dd:05:e6:21:5c:b1:8d:5e:4f:54:92:2f:e8:
d3:1e:69:88:a2:f6:c1:58:14:ed:b3:c3:10:90:cb:d2:08:cd:
58:cd:e7:ad:8f:c5:d3:e7:75:bd:e5:fd:7e:69:b9:e7:c9:a4:
9a:df:5c:4c:e6:e8:44:0b:15:9d:1c:56:1a:06:5a:c7:16:f4:
ba:e4:5e:49:25:63:59:a6:06:b4:6f:b1:75:11:2f:9a:db:ac:
b6:19:5f:9a:74:59:1d:13:81:20:24:f4:49:33:67:3e:3c:b9:
8a:49:a0:7b:2d:89:37:29:e8:a8:a3:12:0c:19:2d:bd:4c:82:
61:04:c6:92:16:93:5d:c5:3c:96:41:bc:e1:08:d5:e2:44:89:
0f:a1:70:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7ttMCGo9Dx/odzFRrI4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1N2U1OGMzNDZlN2I0MTU1NTBjMTNhZWFkZDJjZjkwZWRk
MDc4OTUwHhcNMjUxMTExMDgwMTEwWhcNMjUxMTEyMDgwMTEwWjAzMTEwLwYDVQQD
EyhhZTRjZjQ3YmY2Zjg0Y2E5MGZkNzQzZjZkODYzZDIwOWY0NzFiY2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nNvo/lPbIr5jT9n1uiWWjicSe5N
vxYzx/iFyDSSDR1Q+JRn9r/w5oy82Qwi+bXmK7Xa3c2BtMiPTD9BygYi8fJqYgFy
JngF2ulPQTgWv4legGRsYntJQtSw9gU23+p+wgi1hRnFIKTq5vNrpEw9/OeJ7957
mFbybydiMh9X7pnYTJi0or4YpEGN443Uu9IXhgQ+1q9496K1BXzdD2ie8z5Sdgq0
fGXsi3f1kxuoBsXgR19JTXZUy3xjtQW0RKIQ0vBjjdGEb1selmqqyFsv+zjxigxk
ibvPGun3oA2hr7kYnpOhkJ5dZfAIxcYD7c+V0ZR2OUgLlstZhAMvMpGAOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5M9Hv2+EypD9dD9thj0gn0cbz7MB8GA1UdIwQY
MBaAFMV+WMNG57QVVQwTrq3Sz5Dt0HiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFg1WXcwYm50QlZWREJPdXJkTFBrTzNRZUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jZWU3MGQtOGI1Mi00YzExLWE3N2Mt
MDc0MzA1NzM1YWMyLzEveFg1WXcwYm50QlZWREJPdXJkTFBrTzNRZUpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jZWU3MGQtOGI1Mi00YzExLWE3N2MtMDc0MzA1NzM1YWMy
LzEveFg1WXcwYm50QlZWREJPdXJkTFBrTzNRZUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVhbaNeq
l7wIwZ6asyYF6JwQwPUi0H8A9GoIha7UlodqMnYXnXAY11SO+UWWHam/8MoRG1mH
kZWpHTdEsqamdZ6RsAxg8hviNijDu79uMfmj2BZ5ZU+uJbqU7B0lz0wJwJspVBxq
MYd6fiVIfXH3ZO7dBeYhXLGNXk9Uki/o0x5piKL2wVgU7bPDEJDL0gjNWM3nrY/F
0+d1veX9fmm558mkmt9cTOboRAsVnRxWGgZaxxb0uuReSSVjWaYGtG+xdREvmtus
thlfmnRZHROBICT0STNnPjy5ikmgey2JNynoqKMSDBktvUyCYQTGkhaTXcU8lkG8
4QjV4kSJD6Fw5w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:43 2025 by rpki-client