Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
File: xaL0JAfyHJ12kPsw_YzbK_320DA.mft (raw, json)
Hash identifier: zz+xuQULtDW0zSMFtulkUaqIyt2mI/A9fbxpRgKJ2zo=
Subject key identifier: 1C:BA:FC:55:D5:9C:72:4D:1D:20:80:C7:79:B2:85:F8:D7:85:04:3D
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 019A71B7DA003C76A3FE18D6F282649C0E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
Manifest number: 1736
Signing time: Tue 11 Nov 2025 07:01:05 +0000
Manifest this update: Tue 11 Nov 2025 07:01:05 +0000
Manifest next update: Wed 12 Nov 2025 07:01:05 +0000
Files and hashes: 1: FVhHxIVfuNm-pwvjTgX_cs_Hfcs.roa (hash: mY8drD0B5z14cvplqrvZqDtdowa1l5LQ8YBe8N40mz4=)
2: xaL0JAfyHJ12kPsw_YzbK_320DA.crl (hash: /hlqR1kO5n8qyqAkdFGV17xxEHxnwwq1F1M5K/k78S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:da:00:3c:76:a3:fe:18:d6:f2:82:64:9c:0e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: Nov 11 07:01:05 2025 GMT
Not After : Nov 12 07:01:05 2025 GMT
Subject: CN=1cbafc55d59c724d1d2080c779b285f8d785043d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5d:db:f9:0b:c8:ad:de:17:b1:bd:b6:c2:73:
2e:07:0d:b4:0c:0f:7a:ef:b9:02:f0:79:76:66:2f:
5a:d1:49:19:04:d2:9e:6f:6c:fc:b5:22:bf:0d:22:
af:df:48:c7:03:22:a0:c9:86:ef:23:29:b0:e8:fe:
ef:92:b2:1c:92:96:99:f5:e8:15:cf:70:61:8a:d1:
fd:44:93:36:10:6a:29:03:a0:9b:08:88:85:c9:77:
98:85:2d:3a:50:e6:8a:c2:07:34:4a:3e:2f:de:4d:
97:89:a8:33:26:d3:86:c3:2b:8a:2b:25:b5:8e:da:
28:37:ef:bd:d4:8e:5f:0d:9d:89:db:4f:71:e2:70:
5d:6c:20:c8:be:45:c7:28:f1:f9:e7:06:ba:da:31:
7a:49:07:69:90:7c:5a:97:3b:f6:4d:cd:1f:2e:a3:
64:fd:64:20:07:87:14:30:a5:65:25:2f:6f:64:49:
ce:68:78:47:d9:d2:9d:55:02:33:3b:5e:57:7e:dd:
14:b7:47:3e:dc:c5:4d:64:cc:c5:2a:cc:44:3f:5d:
5b:b5:2c:d5:64:d4:ea:9a:6e:0c:4f:6b:1c:ee:00:
d3:ba:31:75:ee:af:29:2f:7f:5c:96:cb:47:b2:f7:
4e:7f:89:ae:02:7b:4f:ef:c8:1d:14:7b:90:7d:d2:
ac:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BA:FC:55:D5:9C:72:4D:1D:20:80:C7:79:B2:85:F8:D7:85:04:3D
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6e:ab:58:3c:f9:1b:16:1a:db:86:38:6e:9b:c9:b4:a1:c9:
93:40:2a:12:e1:22:c7:0c:d8:64:b0:59:d3:69:7d:49:30:f8:
1b:3d:b6:32:ac:08:9b:55:7a:55:e5:f2:b8:29:93:7f:d9:28:
34:db:46:69:13:18:2e:23:39:98:7b:04:3f:91:83:b9:ee:1c:
29:e9:f2:28:36:5e:5a:89:06:49:12:bf:25:95:6a:50:e9:e9:
41:e3:3d:f2:81:5e:61:66:4f:8f:83:d0:69:f0:ed:f8:f5:7b:
89:a2:c9:fc:b1:65:48:98:c7:a2:21:e5:01:90:af:7a:47:4c:
f7:35:48:ed:30:00:4e:97:61:a9:91:ef:44:dd:1a:96:d1:2d:
72:3b:c5:61:54:b4:25:12:43:61:58:76:45:87:5a:d7:b5:6d:
fd:a4:bc:bd:85:db:6f:0e:c7:0d:13:1c:45:6f:be:c4:d9:bb:
af:96:ce:cf:a7:b7:6d:38:c4:13:88:72:fd:95:7b:e8:ff:1c:
26:21:30:2f:ad:c9:38:6e:9a:e3:3d:ca:6b:e4:b3:fc:ea:d8:
8c:74:40:bb:0b:32:b5:65:d6:00:d0:dc:f8:d4:09:73:75:9b:
f0:c9:55:77:93:c4:69:e5:2a:75:05:50:28:28:bb:fa:a6:5c:
e3:6a:48:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt9oAPHaj/hjW8oJknA5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTJmNDI0MDdmMjFjOWQ3NjkwZmIzMGZkOGNkYjJiZmRm
NmQwMzAwHhcNMjUxMTExMDcwMTA1WhcNMjUxMTEyMDcwMTA1WjAzMTEwLwYDVQQD
EygxY2JhZmM1NWQ1OWM3MjRkMWQyMDgwYzc3OWIyODVmOGQ3ODUwNDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF3b+QvIrd4Xsb22wnMuBw20DA96
77kC8Hl2Zi9a0UkZBNKeb2z8tSK/DSKv30jHAyKgyYbvIymw6P7vkrIckpaZ9egV
z3BhitH9RJM2EGopA6CbCIiFyXeYhS06UOaKwgc0Sj4v3k2XiagzJtOGwyuKKyW1
jtooN++91I5fDZ2J209x4nBdbCDIvkXHKPH55wa62jF6SQdpkHxalzv2Tc0fLqNk
/WQgB4cUMKVlJS9vZEnOaHhH2dKdVQIzO15Xft0Ut0c+3MVNZMzFKsxEP11btSzV
ZNTqmm4MT2sc7gDTujF17q8pL39clstHsvdOf4muAntP78gdFHuQfdKsOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBy6/FXVnHJNHSCAx3myhfjXhQQ9MB8GA1UdIwQY
MBaAFMWi9CQH8hyddpD7MP2M2yv99tAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFMMEpBZnlISjEya1Bzd19ZemJLXzMyMERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xYTE4ZTEtNjdjOC00OTJlLThmYmEt
ZmI1YzYyZTQyZjZiLzEveGFMMEpBZnlISjEya1Bzd19ZemJLXzMyMERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8xYTE4ZTEtNjdjOC00OTJlLThmYmEtZmI1YzYyZTQyZjZi
LzEveGFMMEpBZnlISjEya1Bzd19ZemJLXzMyMERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATW6rWDz5
GxYa24Y4bpvJtKHJk0AqEuEixwzYZLBZ02l9STD4Gz22MqwIm1V6VeXyuCmTf9ko
NNtGaRMYLiM5mHsEP5GDue4cKenyKDZeWokGSRK/JZVqUOnpQeM98oFeYWZPj4PQ
afDt+PV7iaLJ/LFlSJjHoiHlAZCvekdM9zVI7TAATpdhqZHvRN0altEtcjvFYVS0
JRJDYVh2RYda17Vt/aS8vYXbbw7HDRMcRW++xNm7r5bOz6e3bTjEE4hy/ZV76P8c
JiEwL63JOG6a4z3Ka+Sz/OrYjHRAuwsytWXWANDc+NQJc3Wb8MlVd5PEaeUqdQVQ
KCi7+qZc42pILw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:57:10 2025 by rpki-client