Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: 6N5c3xPluhZVoNI57T4Ukt0IEgYkVqs0543/5CBddGg=
Subject key identifier: 05:34:FC:98:D6:DC:81:81:7B:9F:AD:D3:39:DB:7B:FC:D7:7D:BC:95
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 019A2A43B5CB03F7ECF5872F1C674AD16C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 1701
Signing time: Tue 28 Oct 2025 10:01:11 +0000
Manifest this update: Tue 28 Oct 2025 10:01:11 +0000
Manifest next update: Wed 29 Oct 2025 10:01:11 +0000
Files and hashes: 1: 1hWOyxjtpeVhDwv-xDOeCqg3vaI.roa (hash: mKtZwD+iuzmAhkLKZ2UYytr92oY2lNBDkGBNEW7xkLg=)
2: Et3EjfyShVqsXEJ0-il-9h75pBI.roa (hash: 7NwgLcL7u8H9AHMShaODStUwLh9+b7vWHMW72q0np80=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: eDkncVmHWMq8FmL+CT+wQo9usB52HZUIxPTWwa7tr9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:b5:cb:03:f7:ec:f5:87:2f:1c:67:4a:d1:6c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Oct 28 10:01:11 2025 GMT
Not After : Oct 29 10:01:11 2025 GMT
Subject: CN=0534fc98d6dc81817b9fadd339db7bfcd77dbc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2a:a9:36:8d:ad:aa:47:03:eb:a9:6c:e5:00:
f5:0c:5e:a0:f6:42:ab:a7:31:4b:22:f8:04:42:d9:
16:41:0f:e1:ec:7c:e9:ac:47:94:2a:7d:20:2f:ca:
52:9e:d0:05:42:f4:81:eb:bd:2e:71:cf:ff:5a:66:
ad:28:10:4b:8c:7e:2a:39:67:2b:e0:00:7a:f0:2d:
9f:85:6b:4c:d7:94:b4:29:e4:c7:c7:26:b4:65:8a:
70:a5:91:9e:fd:62:12:ea:e5:16:02:ed:ea:81:07:
ce:b8:30:54:6e:db:17:be:c9:63:9d:a3:17:ee:67:
97:1f:3d:a2:0a:ea:9b:0c:4c:b2:75:37:f1:0c:c4:
d7:98:07:d0:f5:36:67:ac:1e:76:96:03:b7:6f:76:
a6:e9:b0:81:d8:3e:9c:9b:4a:35:eb:76:7d:a6:f7:
4b:a8:ff:df:7e:0d:1d:a6:81:40:11:39:10:54:44:
b9:a7:cf:07:7a:e0:7e:1d:2f:f2:b9:d7:89:df:d3:
19:4d:46:e4:28:39:2a:ac:c7:9b:73:5a:11:13:7c:
42:dc:b3:bc:55:3c:88:de:45:be:6f:d6:79:99:b4:
9e:db:1b:18:e6:a3:53:7e:b2:7a:5c:b8:08:35:8e:
3d:fa:91:c4:34:7a:07:18:34:39:d8:9e:b1:02:f7:
a5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:34:FC:98:D6:DC:81:81:7B:9F:AD:D3:39:DB:7B:FC:D7:7D:BC:95
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:38:f5:be:53:5c:08:f8:bd:f9:f3:ba:99:95:90:50:d5:c4:
14:e6:52:2f:96:14:28:bf:bd:33:e5:b7:35:42:59:2b:7c:cd:
f8:ab:b4:85:37:2b:f5:5b:88:b7:da:c8:59:0d:62:63:c5:eb:
c9:14:be:54:28:96:18:8f:a6:69:11:23:f3:bc:b2:a2:c7:ad:
d4:d7:18:bf:b5:10:24:b7:29:39:79:e4:08:0c:21:cb:9c:e8:
d9:56:50:de:c2:ed:12:66:cf:ca:59:b9:7a:e9:ed:00:2c:f8:
a7:55:39:3b:35:ea:ee:0b:d3:4a:d0:ad:da:34:cd:d9:ec:92:
72:f8:b8:58:22:73:ae:40:bc:c2:5c:30:09:13:60:f1:cf:30:
b2:f0:4a:74:35:1f:bf:97:4b:45:fe:eb:63:3b:13:5b:41:31:
18:ec:d1:a9:1e:4e:d3:8e:b7:46:4e:f6:0d:40:30:9f:b1:2c:
3c:51:43:5d:bc:b7:5f:e2:f3:fa:79:6b:eb:0a:08:db:9b:40:
c8:ca:71:d7:fa:91:8f:d9:c3:4d:4f:d0:95:05:6c:e8:f6:36:
d1:9e:6b:e3:eb:d9:67:fa:37:8b:9b:8b:6d:61:38:3c:0f:39:
10:f9:f9:8a:7b:3e:0c:c4:cd:a0:d2:0c:e9:57:0a:69:6d:33:
a8:9f:21:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqQ7XLA/fs9YcvHGdK0WxzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZmJlODQyMjQzMjcyN2QzODc0YjE1NjRiYWVhYzhhODA1
NTdiMmQwHhcNMjUxMDI4MTAwMTExWhcNMjUxMDI5MTAwMTExWjAzMTEwLwYDVQQD
EygwNTM0ZmM5OGQ2ZGM4MTgxN2I5ZmFkZDMzOWRiN2JmY2Q3N2RiYzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCqpNo2tqkcD66ls5QD1DF6g9kKr
pzFLIvgEQtkWQQ/h7HzprEeUKn0gL8pSntAFQvSB670ucc//WmatKBBLjH4qOWcr
4AB68C2fhWtM15S0KeTHxya0ZYpwpZGe/WIS6uUWAu3qgQfOuDBUbtsXvsljnaMX
7meXHz2iCuqbDEyydTfxDMTXmAfQ9TZnrB52lgO3b3am6bCB2D6cm0o163Z9pvdL
qP/ffg0dpoFAETkQVES5p88HeuB+HS/yudeJ39MZTUbkKDkqrMebc1oRE3xC3LO8
VTyI3kW+b9Z5mbSe2xsY5qNTfrJ6XLgINY49+pHENHoHGDQ52J6xAvelSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAU0/JjW3IGBe5+t0znbe/zXfbyVMB8GA1UdIwQY
MBaAFMT76EIkMnJ9OHSxVkuurIqAVXstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmIt
ZWNmMjIxN2Y5ODY3LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmItZWNmMjIxN2Y5ODY3
LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzj1vlNc
CPi9+fO6mZWQUNXEFOZSL5YUKL+9M+W3NUJZK3zN+Ku0hTcr9VuIt9rIWQ1iY8Xr
yRS+VCiWGI+maREj87yyoset1NcYv7UQJLcpOXnkCAwhy5zo2VZQ3sLtEmbPylm5
euntACz4p1U5OzXq7gvTStCt2jTN2eyScvi4WCJzrkC8wlwwCRNg8c8wsvBKdDUf
v5dLRf7rYzsTW0ExGOzRqR5O0463Rk72DUAwn7EsPFFDXby3X+Lz+nlr6woI25tA
yMpx1/qRj9nDTU/QlQVs6PY20Z5r4+vZZ/o3i5uLbWE4PA85EPn5ins+DMTNoNIM
6VcKaW0zqJ8hMg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 12:50:30 2025 by rpki-client