Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: rXaA1rQ9e6OIsJx7jHQtpIWGnf3deume4rcFouPkh0I=
Subject key identifier: 0D:97:18:49:ED:03:E1:46:27:CC:46:1B:29:D4:4E:83:92:17:5E:D3
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 019A33B3AECE93EAA9E9F9B17E3F37D67E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 1700
Signing time: Thu 30 Oct 2025 06:00:04 +0000
Manifest this update: Thu 30 Oct 2025 06:00:04 +0000
Manifest next update: Fri 31 Oct 2025 06:00:04 +0000
Files and hashes: 1: PbaQDOw99sbMqST1_6GFgBuET80.roa (hash: z/Z68ylDK98w4Ux4hRpw7BRYSr2koQbXP7ZWYLEFwCQ=)
2: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: TQ9wYiUmjOwsYkvM/cK9nlAVIOtyiWKipMB8vbARYjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 06:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:b3:ae:ce:93:ea:a9:e9:f9:b1:7e:3f:37:d6:7e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Oct 30 06:00:04 2025 GMT
Not After : Oct 31 06:00:04 2025 GMT
Subject: CN=0d971849ed03e14627cc461b29d44e8392175ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:8e:ab:a6:e8:82:f0:f8:9f:3f:1e:16:b8:
a3:9e:dc:37:32:90:44:7f:68:83:68:f2:97:a4:d9:
6c:65:4c:3c:64:e3:d9:89:bd:1a:6d:cd:43:56:46:
28:41:bf:99:3b:7b:ca:4e:f5:45:a3:b9:db:b4:8a:
67:8e:24:a7:c5:1e:0b:bd:c2:4d:a0:45:bc:e9:d3:
f1:04:ec:3f:b9:4a:4d:7b:96:fe:96:98:92:65:5e:
68:ab:24:2a:a5:38:1a:2d:01:21:44:16:fb:b2:42:
a3:15:84:34:f6:9e:93:a9:9e:1e:ad:90:eb:b0:9c:
20:22:f8:44:61:70:93:a3:84:13:37:ef:70:89:b9:
b5:2c:e5:9a:c3:7d:d5:bb:f6:67:45:33:3f:a7:63:
f5:38:8c:a9:cb:75:54:20:e7:50:a8:b3:39:ad:b2:
8a:0c:45:64:ac:bf:e2:32:b0:3e:38:0a:3d:66:fc:
00:53:9b:33:da:87:59:e7:67:de:86:a2:4e:47:02:
db:47:71:40:99:55:26:79:41:bf:4f:4e:42:1f:1e:
4a:26:5f:57:6d:c7:9a:b4:eb:7b:35:e1:36:21:ed:
0b:e6:16:bc:99:48:4d:70:24:57:b3:29:88:b4:f4:
e7:23:85:ad:36:75:e6:8c:40:c4:b0:95:67:5b:97:
f4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:97:18:49:ED:03:E1:46:27:CC:46:1B:29:D4:4E:83:92:17:5E:D3
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:25:6c:f5:c9:c8:54:d2:27:bd:8d:1f:e2:c1:77:5c:29:20:
41:4c:0d:fd:82:31:2f:cc:4b:6a:2b:e3:c0:b5:f4:7b:c6:e8:
a5:10:5b:d5:ec:39:20:7a:03:b8:f2:42:62:89:28:2d:09:39:
7b:b4:73:3a:77:b1:b5:89:6e:af:83:b3:ae:1f:08:6d:09:0f:
90:6c:2d:42:d5:a5:6d:f3:a9:c9:09:2a:51:9e:32:61:92:74:
fe:cc:8a:ce:48:69:bc:9b:72:8f:cd:f2:eb:b7:69:cd:7f:53:
7f:8a:ad:08:47:c0:c7:eb:a5:d7:93:bf:67:f2:b5:a8:8a:6f:
82:40:0e:ff:19:7d:dc:4b:44:27:e5:df:26:95:26:e1:c2:34:
43:f4:75:3d:a9:3c:68:a1:e8:ff:1c:dc:6d:cf:10:ce:2f:95:
cf:fb:f0:ce:1f:f9:f3:d9:b4:f9:3c:e9:ce:af:d3:90:2c:1f:
dc:25:5e:df:cf:d6:dd:a1:70:37:2b:c1:da:c4:31:9d:f4:10:
53:ce:02:e8:e7:ce:9a:63:55:13:b8:66:04:63:32:f1:b3:24:
45:33:18:ce:99:c7:a4:84:f9:40:1b:85:04:4a:6e:26:e8:bf:
f0:85:e3:9e:f1:8b:5c:ac:36:0f:48:59:b1:a4:0d:b1:f2:ef:
fe:77:f9:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZozs67Ok+qp6fmxfj831n5cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OGVjOWM3ZjFlY2MyN2NiMmVjNzEzYzI3NjRhMDIxNGZj
ZTc4MjgwHhcNMjUxMDMwMDYwMDA0WhcNMjUxMDMxMDYwMDA0WjAzMTEwLwYDVQQD
EygwZDk3MTg0OWVkMDNlMTQ2MjdjYzQ2MWIyOWQ0NGU4MzkyMTc1ZWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGeOq6bogvD4nz8eFrijntw3MpBE
f2iDaPKXpNlsZUw8ZOPZib0abc1DVkYoQb+ZO3vKTvVFo7nbtIpnjiSnxR4LvcJN
oEW86dPxBOw/uUpNe5b+lpiSZV5oqyQqpTgaLQEhRBb7skKjFYQ09p6TqZ4erZDr
sJwgIvhEYXCTo4QTN+9wibm1LOWaw33Vu/ZnRTM/p2P1OIypy3VUIOdQqLM5rbKK
DEVkrL/iMrA+OAo9ZvwAU5sz2odZ52fehqJORwLbR3FAmVUmeUG/T05CHx5KJl9X
bceatOt7NeE2Ie0L5ha8mUhNcCRXsymItPTnI4WtNnXmjEDEsJVnW5f0vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2XGEntA+FGJ8xGGynUToOSF17TMB8GA1UdIwQY
MBaAFMaOycfx7MJ8suxxPCdkoCFPzngoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kNzRjOWUtMDRmMC00ZTYzLWFmMzAt
ODYzMmVlOTQxNDViLzEveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kNzRjOWUtMDRmMC00ZTYzLWFmMzAtODYzMmVlOTQxNDVi
LzEveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApyVs9cnI
VNInvY0f4sF3XCkgQUwN/YIxL8xLaivjwLX0e8bopRBb1ew5IHoDuPJCYokoLQk5
e7RzOnextYlur4Ozrh8IbQkPkGwtQtWlbfOpyQkqUZ4yYZJ0/syKzkhpvJtyj83y
67dpzX9Tf4qtCEfAx+ul15O/Z/K1qIpvgkAO/xl93EtEJ+XfJpUm4cI0Q/R1Pak8
aKHo/xzcbc8Qzi+Vz/vwzh/589m0+Tzpzq/TkCwf3CVe38/W3aFwNyvB2sQxnfQQ
U84C6OfOmmNVE7hmBGMy8bMkRTMYzpnHpIT5QBuFBEpuJui/8IXjnvGLXKw2D0hZ
saQNsfLv/nf5Rw==
-----END CERTIFICATE-----
Generated at Thu Oct 30 14:59:07 2025 by rpki-client