Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
File: xeu4t5Qi-y1tioLbfxrAtqpZs38.mft (raw, json)
Hash identifier: l1t0czjrsQkPOQHx3UDbynAynS/zVS6LeHCFpEOf9ZY=
Subject key identifier: BA:C5:E4:37:B0:73:68:A6:53:F8:29:B7:59:6B:9A:6F:73:E7:F5:04
Authority key identifier: C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
Certificate issuer: /CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Certificate serial: 019A71B87DC0D355E026E32E2C580CA40A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
Manifest number: 1642
Signing time: Tue 11 Nov 2025 07:01:47 +0000
Manifest this update: Tue 11 Nov 2025 07:01:47 +0000
Manifest next update: Wed 12 Nov 2025 07:01:47 +0000
Files and hashes: 1: xeu4t5Qi-y1tioLbfxrAtqpZs38.crl (hash: kF2qGFv166CbIkxSPejlgE5PkVAzkWLYZZr69LI+PMY=)
2: zG4ly3FhpsRy_muFf41M8ZKPF5o.roa (hash: 9tm7KsG1SMgxDQdJBogQZSZKc5Vw7KrlfAJHfrS64mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:7d:c0:d3:55:e0:26:e3:2e:2c:58:0c:a4:0a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Validity
Not Before: Nov 11 07:01:47 2025 GMT
Not After : Nov 12 07:01:47 2025 GMT
Subject: CN=bac5e437b07368a653f829b7596b9a6f73e7f504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8b:01:f2:45:dc:a1:fc:30:bc:94:65:5a:67:
55:f5:f4:9e:5b:8f:e1:a2:10:cc:c3:0a:95:b0:7c:
dc:bd:c7:8a:ff:dd:f6:16:9d:bf:8b:30:45:ea:b1:
28:21:d0:21:5f:8e:c8:98:e5:ee:e3:7e:04:b0:d2:
84:ed:25:3a:c9:a2:23:b3:49:17:a1:94:aa:fd:eb:
fc:f9:4a:20:a0:d5:a9:c5:3d:c3:fc:1b:27:a5:c4:
be:b9:b0:e3:e8:87:f8:f6:19:fc:7f:a9:c2:1f:ed:
95:72:16:5d:a5:cc:92:d3:e0:07:6c:ad:33:0f:cd:
46:f2:df:e9:ef:26:dc:45:81:9f:f1:93:47:a2:c6:
ad:f1:d5:9f:a4:d9:b2:9e:24:01:9f:a5:28:e2:6e:
09:7e:7b:90:dc:69:da:f7:c5:88:0e:89:a6:7a:f1:
bd:7e:8f:72:5a:20:a2:17:bd:ee:da:4c:51:38:1f:
c2:e1:0f:fb:12:99:53:c0:7c:b9:92:f4:fd:6d:0a:
8f:29:51:f6:84:b9:cf:cb:3c:de:c7:85:b1:e1:12:
9c:9b:0f:77:a5:87:6a:c2:9a:73:13:20:13:3f:94:
b9:f8:98:41:cc:c8:9b:80:69:97:ed:03:df:df:16:
84:21:e9:96:f4:a7:a9:5d:88:c1:95:ee:59:e4:dc:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C5:E4:37:B0:73:68:A6:53:F8:29:B7:59:6B:9A:6F:73:E7:F5:04
X509v3 Authority Key Identifier:
keyid:C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d6:58:0c:a1:c1:d6:87:ea:14:77:1c:40:d2:8c:7a:e0:4a:
1b:47:6c:3d:29:e0:62:98:5c:dc:45:38:73:0d:df:da:b6:55:
8b:9e:3e:16:92:cd:e8:a7:47:52:2b:52:11:13:20:06:b5:61:
25:66:06:6a:c1:a9:4c:ca:70:bb:ef:4a:27:31:34:75:61:b8:
54:09:7b:35:ec:1c:65:08:8e:41:f7:f8:27:ba:0b:21:15:20:
83:74:50:03:ee:71:14:5e:9a:a3:fc:66:e2:8e:71:24:df:2a:
47:1e:30:90:8c:d4:9b:03:e2:5a:b4:b7:8b:6a:db:f0:5d:cf:
b3:f4:6e:8a:2b:ba:82:94:e2:41:fd:59:de:a8:58:78:09:17:
c7:4d:48:ed:2b:67:3b:69:3b:46:99:e0:69:e8:41:d4:02:d3:
82:ef:43:c2:11:47:6f:69:1b:a4:f4:3c:ef:66:bf:01:39:7b:
f2:39:f4:dc:4f:74:1c:72:f0:0d:e7:23:f9:b0:2e:32:5c:08:
8a:4d:25:05:cb:70:c1:da:16:74:02:1d:fe:34:54:93:2e:27:
0e:a2:e6:ad:78:9b:0c:3a:00:d6:b9:86:f2:89:d4:01:da:5e:
16:eb:24:2f:75:4c:45:e6:14:84:e2:ac:9a:c1:7f:15:39:51:
71:75:3d:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuH3A01XgJuMuLFgMpAqQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZWJiOGI3OTQyMmZiMmQ2ZDhhODJkYjdmMWFjMGI2YWE1
OWIzN2YwHhcNMjUxMTExMDcwMTQ3WhcNMjUxMTEyMDcwMTQ3WjAzMTEwLwYDVQQD
EyhiYWM1ZTQzN2IwNzM2OGE2NTNmODI5Yjc1OTZiOWE2ZjczZTdmNTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzosB8kXcofwwvJRlWmdV9fSeW4/h
ohDMwwqVsHzcvceK/932Fp2/izBF6rEoIdAhX47ImOXu434EsNKE7SU6yaIjs0kX
oZSq/ev8+UogoNWpxT3D/BsnpcS+ubDj6If49hn8f6nCH+2VchZdpcyS0+AHbK0z
D81G8t/p7ybcRYGf8ZNHosat8dWfpNmyniQBn6Uo4m4JfnuQ3Gna98WIDommevG9
fo9yWiCiF73u2kxROB/C4Q/7EplTwHy5kvT9bQqPKVH2hLnPyzzex4Wx4RKcmw93
pYdqwppzEyATP5S5+JhBzMibgGmX7QPf3xaEIemW9KepXYjBle5Z5NwIGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrF5Dewc2imU/gpt1lrmm9z5/UEMB8GA1UdIwQY
MBaAFMXruLeUIvstbYqC238awLaqWbN/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGV1NHQ1UWkteTF0aW9MYmZ4ckF0cXBaczM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNTBlY2QtMWMxNi00YmQzLWJkMGUt
Yzg0YmZkNGVlODc4LzEveGV1NHQ1UWkteTF0aW9MYmZ4ckF0cXBaczM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mNTBlY2QtMWMxNi00YmQzLWJkMGUtYzg0YmZkNGVlODc4
LzEveGV1NHQ1UWkteTF0aW9MYmZ4ckF0cXBaczM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONZYDKHB
1ofqFHccQNKMeuBKG0dsPSngYphc3EU4cw3f2rZVi54+FpLN6KdHUitSERMgBrVh
JWYGasGpTMpwu+9KJzE0dWG4VAl7NewcZQiOQff4J7oLIRUgg3RQA+5xFF6ao/xm
4o5xJN8qRx4wkIzUmwPiWrS3i2rb8F3Ps/Ruiiu6gpTiQf1Z3qhYeAkXx01I7Stn
O2k7RpngaehB1ALTgu9DwhFHb2kbpPQ872a/ATl78jn03E90HHLwDecj+bAuMlwI
ik0lBctwwdoWdAId/jRUky4nDqLmrXibDDoA1rmG8onUAdpeFuskL3VMReYUhOKs
msF/FTlRcXU9lA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:45:18 2025 by rpki-client