Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
File: Xh1AYP1QHrrpPtRNprennmZwWy8.mft (raw, json)
Hash identifier: Lka8gixFk6EzPGL084QLgTL0SJk+lFqiMxPG+Nom3rQ=
Subject key identifier: F5:B0:70:3E:64:9E:6D:B9:86:24:9C:5D:5A:9C:F1:BA:EC:56:85:4F
Authority key identifier: 5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
Certificate issuer: /CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Certificate serial: 019A714A1FE86DB9881C972C6741340763F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 05:01:14 +0000
Manifest this update: Tue 11 Nov 2025 05:01:14 +0000
Manifest next update: Wed 12 Nov 2025 05:01:14 +0000
Files and hashes: 1: KlSKJbns32ql0FeYlQMxJtpi1lg.roa (hash: 9F1/AQaZc6WZENDwjwcw6q8ufEFG6qmOq3cpIsOFvt8=)
2: Xh1AYP1QHrrpPtRNprennmZwWy8.crl (hash: +mdyv4Y4xcfTbDEPJNjOW+CJiiP3isTUxQ27/yiKGTc=)
3: kDFFmEHOxxsPr1PqT9Wra3pOapo.roa (hash: PtmDDx7DD6q5hVM880BXHYOoqWKL19qOEEf16G0FZlQ=)
4: whsaqddiyDI8xyshxKkHo02Q7GA.roa (hash: GiAQ6ec8LMUk9UTzynBovpvos9gk3+nUpwnbIm92gbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:1f:e8:6d:b9:88:1c:97:2c:67:41:34:07:63:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1d4060fd501ebae93ed44da6b7a79e66705b2f
Validity
Not Before: Nov 11 05:01:14 2025 GMT
Not After : Nov 12 05:01:14 2025 GMT
Subject: CN=f5b0703e649e6db986249c5d5a9cf1baec56854f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:69:17:33:18:69:2c:75:ce:21:cf:78:4d:
b9:9a:0e:4e:4c:63:fb:26:5a:e9:d1:87:86:9a:8e:
32:1a:46:2d:b3:65:4c:a9:ba:ab:bd:82:34:de:c9:
ab:b9:c9:9e:a7:12:7c:0d:ae:33:d7:7e:58:ee:ef:
1f:b9:9b:7d:3d:bf:d0:b1:7c:9a:6d:39:8c:ad:9d:
0e:58:c6:49:81:22:06:1a:af:4d:49:0d:ac:5f:e7:
aa:e1:e3:5a:29:7d:4c:ab:42:66:06:85:b8:83:dd:
7f:f5:2c:9b:a7:60:ec:8e:74:46:f1:dc:2c:a8:0f:
5d:ff:60:d0:e2:35:85:fe:5a:8b:02:39:11:58:b1:
fa:8f:3e:e7:b3:15:17:02:91:5c:d9:95:e4:53:49:
c4:d7:78:a9:71:45:59:3a:05:83:30:06:2f:25:51:
cc:76:00:55:f2:a1:dc:9e:6c:5c:17:f1:ad:d0:45:
57:4a:e7:5f:d6:70:a8:ec:70:72:c7:bb:34:ab:52:
9b:80:c8:aa:23:e6:f4:e1:d7:7f:bd:9d:c5:fe:dc:
c6:b1:d5:9c:de:b4:94:a6:8e:0e:94:73:01:39:ef:
e3:0f:57:39:27:0b:0f:fe:b5:23:73:79:dd:90:ba:
78:22:01:59:8f:0b:35:e8:b3:a2:42:b9:99:da:25:
3e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B0:70:3E:64:9E:6D:B9:86:24:9C:5D:5A:9C:F1:BA:EC:56:85:4F
X509v3 Authority Key Identifier:
keyid:5E:1D:40:60:FD:50:1E:BA:E9:3E:D4:4D:A6:B7:A7:9E:66:70:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xh1AYP1QHrrpPtRNprennmZwWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a70a84-f552-4354-a104-0e1db98ad231/1/Xh1AYP1QHrrpPtRNprennmZwWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:01:ee:9e:12:02:3e:cc:7e:58:a2:11:f9:61:39:ce:b6:ea:
8b:65:60:81:95:07:95:0f:52:66:57:18:f8:cb:9c:5a:5c:81:
c0:29:9f:bf:2e:5a:51:8c:47:cb:7e:ea:80:02:ab:be:d7:42:
ee:32:5b:95:f9:11:2f:5d:1c:ca:f7:57:6e:9b:37:0b:ac:54:
70:47:ee:25:4f:2f:cf:80:c1:53:14:fc:cf:d6:0c:c1:25:9d:
22:01:b5:e3:5b:1b:44:e2:e2:b3:88:ac:b8:06:ba:87:b1:a9:
e0:94:4f:f4:92:7d:4e:a6:f9:57:f0:8b:42:70:66:fa:cd:88:
26:26:7e:be:62:87:13:eb:7d:0e:3c:40:0e:7a:7b:67:e9:7c:
22:b1:54:12:da:7a:5c:89:f5:de:99:83:37:36:7b:84:f1:63:
d6:58:9e:11:3f:3d:d1:db:83:2d:2a:43:f3:e0:55:cd:5e:30:
8d:f5:22:37:1d:d1:04:47:79:c9:9c:02:aa:02:52:34:93:9c:
2d:2d:b7:99:0a:6c:c5:7c:98:a9:a1:ea:df:9e:b3:97:9e:a3:
06:69:be:66:6a:f7:d4:40:e5:c8:1a:7d:dd:91:ed:92:18:ec:
37:cb:07:f3:3b:2a:ba:af:69:0f:8d:86:88:ba:87:61:77:72:
3f:8f:df:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSh/obbmIHJcsZ0E0B2PyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMWQ0MDYwZmQ1MDFlYmFlOTNlZDQ0ZGE2YjdhNzllNjY3
MDViMmYwHhcNMjUxMTExMDUwMTE0WhcNMjUxMTEyMDUwMTE0WjAzMTEwLwYDVQQD
EyhmNWIwNzAzZTY0OWU2ZGI5ODYyNDljNWQ1YTljZjFiYWVjNTY4NTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1BpFzMYaSx1ziHPeE25mg5OTGP7
Jlrp0YeGmo4yGkYts2VMqbqrvYI03smrucmepxJ8Da4z135Y7u8fuZt9Pb/QsXya
bTmMrZ0OWMZJgSIGGq9NSQ2sX+eq4eNaKX1Mq0JmBoW4g91/9Sybp2DsjnRG8dws
qA9d/2DQ4jWF/lqLAjkRWLH6jz7nsxUXApFc2ZXkU0nE13ipcUVZOgWDMAYvJVHM
dgBV8qHcnmxcF/Gt0EVXSudf1nCo7HByx7s0q1KbgMiqI+b04dd/vZ3F/tzGsdWc
3rSUpo4OlHMBOe/jD1c5JwsP/rUjc3ndkLp4IgFZjws16LOiQrmZ2iU+DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWwcD5knm25hiScXVqc8brsVoVPMB8GA1UdIwQY
MBaAFF4dQGD9UB666T7UTaa3p55mcFsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hNzBhODQtZjU1Mi00MzU0LWExMDQt
MGUxZGI5OGFkMjMxLzEvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9hNzBhODQtZjU1Mi00MzU0LWExMDQtMGUxZGI5OGFkMjMx
LzEvWGgxQVlQMVFIcnJwUHRSTnByZW5ubVp3V3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwHunhIC
Psx+WKIR+WE5zrbqi2VggZUHlQ9SZlcY+MucWlyBwCmfvy5aUYxHy37qgAKrvtdC
7jJblfkRL10cyvdXbps3C6xUcEfuJU8vz4DBUxT8z9YMwSWdIgG141sbROLis4is
uAa6h7Gp4JRP9JJ9Tqb5V/CLQnBm+s2IJiZ+vmKHE+t9DjxADnp7Z+l8IrFUEtp6
XIn13pmDNzZ7hPFj1lieET890duDLSpD8+BVzV4wjfUiNx3RBEd5yZwCqgJSNJOc
LS23mQpsxXyYqaHq356zl56jBmm+Zmr31EDlyBp93ZHtkhjsN8sH8zsquq9pD42G
iLqHYXdyP4/fcw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:25 2025 by rpki-client