Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File: XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier: E2H0/uJH+Q+6I8z4ItTSeBWue99MJ+yaWPgUrHtr9M8=
Subject key identifier: 2E:4F:22:DC:E0:7B:A9:21:3C:37:C5:5F:8B:C2:65:A4:09:00:C9:67
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial: 019A25F82D730DDBC93469E893470733BB4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number: 0EB4
Signing time: Mon 27 Oct 2025 14:00:12 +0000
Manifest this update: Mon 27 Oct 2025 14:00:12 +0000
Manifest next update: Tue 28 Oct 2025 14:00:12 +0000
Files and hashes: 1: 1-YgT2Dp81wwlxN4YhUFJI1jv6Y.roa (hash: yL6zyGeH92adtXQSKd8Mq3UDRt+aKFGYWzlFrk9kOSk=)
2: I8DMWQAbEysV4PDmbb3bRruhjec.roa (hash: Cl7Aw52r728Nutene1KOGwtu14nrh0ED/njKmWb9bKc=)
3: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: /QUnG6oJg9OiXdO238GLYNNxpNn31fyzwxqzD/cJfSI=)
4: Z81p6D_dRIvEDGrIYx1WijPMCWI.roa (hash: B0c4eefCOibc6e3+7zDAkWkLSK4xkeiQAdhY0t08sgw=)
5: h_7ZeyN0CJd5pV3oePoLMnfCfv4.roa (hash: eo68bGKMEV2uIG8GoiwpOo5Bk9D1vHS+LUaw94GkOVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:2d:73:0d:db:c9:34:69:e8:93:47:07:33:bb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
Validity
Not Before: Oct 27 14:00:12 2025 GMT
Not After : Oct 28 14:00:12 2025 GMT
Subject: CN=2e4f22dce07ba9213c37c55f8bc265a40900c967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a9:e0:de:d9:43:1e:d5:0c:fc:97:6d:2e:84:
76:af:2e:1a:31:b9:b6:c3:f5:f2:4a:c2:95:dc:36:
8d:8b:e4:5f:d2:ca:b6:01:c7:54:54:4b:ce:f6:75:
9a:de:40:0d:a9:a7:47:cf:7b:ab:a8:0b:88:28:d3:
8d:1f:4d:01:bf:6c:b6:50:7b:f1:fb:61:c4:92:4c:
23:99:ef:e7:5e:5d:b2:98:a0:11:36:50:e9:98:8f:
6d:be:6c:f9:04:90:36:ea:85:be:c8:38:4f:90:83:
70:4b:f1:46:b5:17:0d:bd:4a:4d:7b:31:f3:af:fa:
24:1d:bf:b6:5f:bb:32:30:4e:bd:3f:3d:59:56:31:
d9:62:af:c7:1c:4f:c9:0a:e1:c0:1e:63:7e:2b:97:
f6:20:87:cc:af:f3:a0:19:d2:df:70:71:e4:ee:6b:
99:94:04:0f:15:41:a1:e7:61:04:b2:2b:e1:94:21:
3e:28:08:cb:66:25:d4:ad:da:42:35:40:f5:8b:05:
f9:28:2f:dc:b2:85:41:7a:13:a8:25:85:3a:01:21:
18:f0:ac:99:92:08:dd:e9:22:04:ba:e9:15:bc:d6:
5f:53:db:bc:94:8f:6e:79:dc:d0:1c:db:08:7e:8c:
1f:cf:d5:bc:f8:3c:93:51:b3:46:bd:8b:87:34:a2:
65:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4F:22:DC:E0:7B:A9:21:3C:37:C5:5F:8B:C2:65:A4:09:00:C9:67
X509v3 Authority Key Identifier:
keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:af:9b:99:39:ed:9c:d6:b0:36:3b:d4:19:f0:7a:89:52:ed:
fd:63:d2:ca:0d:c8:be:e4:d2:7a:7f:17:2d:a1:2f:e7:d0:ab:
cf:75:6b:b2:2e:f9:54:54:81:63:e7:97:f4:22:59:26:3f:ea:
cb:51:ce:dd:ee:fc:f7:ce:10:87:5a:18:4f:bc:29:a2:0e:97:
41:93:b0:9e:d8:a3:45:02:d6:ee:94:45:0f:9b:48:5b:34:a6:
72:e9:e2:5d:83:5a:62:09:65:ba:2b:66:13:0b:05:90:e4:05:
0a:2a:06:ea:18:76:8e:b5:79:b4:80:05:c9:32:24:b2:84:d5:
95:02:42:24:2e:32:fe:b4:07:c2:a8:38:76:7f:09:a6:de:e1:
57:90:b1:2c:bc:86:8f:80:33:ee:8a:2d:41:8e:2a:ab:89:9f:
d7:59:18:b6:a3:03:24:cd:fd:f6:38:80:4f:05:a7:ce:82:17:
3f:55:bd:da:29:f8:f3:88:0c:63:32:73:ef:be:1d:30:1c:9a:
aa:55:93:3c:b4:b0:dc:c9:60:a4:57:0e:79:51:aa:3b:d2:7c:
11:4b:b9:68:88:c7:0c:de:49:58:be:86:5b:07:43:47:98:77:
0e:46:a8:d6:f4:3a:6c:d5:24:73:b0:96:cf:01:8c:4f:d6:6e:
f1:c5:0a:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZol+C1zDdvJNGnok0cHM7tLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNjFkY2QzZWI1MGM4M2Q2ODA2MGJjYmE0YWYxNTIyMDQx
OTM1MDMwHhcNMjUxMDI3MTQwMDEyWhcNMjUxMDI4MTQwMDEyWjAzMTEwLwYDVQQD
EygyZTRmMjJkY2UwN2JhOTIxM2MzN2M1NWY4YmMyNjVhNDA5MDBjOTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56ng3tlDHtUM/JdtLoR2ry4aMbm2
w/XySsKV3DaNi+Rf0sq2AcdUVEvO9nWa3kANqadHz3urqAuIKNONH00Bv2y2UHvx
+2HEkkwjme/nXl2ymKARNlDpmI9tvmz5BJA26oW+yDhPkINwS/FGtRcNvUpNezHz
r/okHb+2X7syME69Pz1ZVjHZYq/HHE/JCuHAHmN+K5f2IIfMr/OgGdLfcHHk7muZ
lAQPFUGh52EEsivhlCE+KAjLZiXUrdpCNUD1iwX5KC/csoVBehOoJYU6ASEY8KyZ
kgjd6SIEuukVvNZfU9u8lI9uedzQHNsIfowfz9W8+DyTUbNGvYuHNKJl0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5PItzge6khPDfFX4vCZaQJAMlnMB8GA1UdIwQY
MBaAFFxh3NPrUMg9aAYLy6SvFSIEGTUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2Qt
YzM2ZDFjNDYwZTJmLzEvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NGExNTUtNGQwMi00MDAyLThmM2QtYzM2ZDFjNDYwZTJm
LzEvWEdIYzAtdFF5RDFvQmd2THBLOFZJZ1FaTlFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6+bmTnt
nNawNjvUGfB6iVLt/WPSyg3IvuTSen8XLaEv59Crz3Vrsi75VFSBY+eX9CJZJj/q
y1HO3e78984Qh1oYT7wpog6XQZOwntijRQLW7pRFD5tIWzSmcuniXYNaYglluitm
EwsFkOQFCioG6hh2jrV5tIAFyTIksoTVlQJCJC4y/rQHwqg4dn8Jpt7hV5CxLLyG
j4Az7ootQY4qq4mf11kYtqMDJM399jiATwWnzoIXP1W92in484gMYzJz774dMBya
qlWTPLSw3MlgpFcOeVGqO9J8EUu5aIjHDN5JWL6GWwdDR5h3Dkao1vQ6bNUkc7CW
zwGMT9Zu8cUKsQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 21:31:37 2025 by rpki-client