Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
File: xzic6Ca8jSaGm0UvPNk2kCxVL78.mft (raw, json)
Hash identifier: Vqs750wneLu7+jJHN57Yg8NNg4l5GnEVJyebQvv5Vhs=
Subject key identifier: 22:8E:0F:8A:83:1B:1D:67:8B:78:E1:38:E7:C0:01:2F:64:AD:9D:42
Authority key identifier: C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
Certificate issuer: /CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Certificate serial: 019A7226733253BB58ADD9E11F8D9BFE811B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
Manifest number: 0C93
Signing time: Tue 11 Nov 2025 09:01:53 +0000
Manifest this update: Tue 11 Nov 2025 09:01:53 +0000
Manifest next update: Wed 12 Nov 2025 09:01:53 +0000
Files and hashes: 1: Zjp5spJdh84vGP_NYi-8y5LIKQU.roa (hash: rWVrxK253VGyHCI0i7PfPHvDu/qTwuTk4y8VuJ8okKA=)
2: xzic6Ca8jSaGm0UvPNk2kCxVL78.crl (hash: fOu1/Zphsy5lOzKJjAiyv5GajI0jZsjbNCGCANu7kSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:73:32:53:bb:58:ad:d9:e1:1f:8d:9b:fe:81:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Validity
Not Before: Nov 11 09:01:53 2025 GMT
Not After : Nov 12 09:01:53 2025 GMT
Subject: CN=228e0f8a831b1d678b78e138e7c0012f64ad9d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:76:bf:74:e5:75:99:68:be:93:26:e1:97:
1a:de:80:30:c7:72:a4:20:e3:8c:78:80:81:d6:8f:
6e:81:f8:d5:a0:70:21:fc:4a:8c:2e:40:51:01:a4:
6f:c0:7c:0b:05:87:d4:14:ae:a7:06:c6:f9:f7:e7:
55:3e:b7:9e:6e:d9:7d:56:e9:cc:c2:aa:cf:31:81:
9c:a7:f4:34:6a:9a:5b:b6:83:4d:f8:18:2a:7d:a4:
4c:cb:4c:ed:9b:0a:af:a3:6c:60:41:4b:20:73:1d:
49:a2:b3:45:ae:ca:80:85:97:2e:84:75:5e:5b:3f:
79:fa:14:75:d0:5b:59:b7:8e:4a:37:45:ca:b4:3c:
04:92:35:d3:48:45:a9:ca:30:a6:92:ed:0c:ab:77:
5a:af:ca:c6:e2:44:c6:a3:4f:5c:c5:bf:f9:3c:1f:
38:1e:6a:41:6c:94:23:68:f1:3d:12:3b:9a:52:13:
ea:b3:b8:6e:78:f9:0d:cf:a3:34:17:fc:93:cd:9a:
1c:86:2d:3d:0c:3d:aa:fb:b9:3b:6d:1c:b7:8a:6d:
19:4b:64:53:cc:c9:f3:e9:94:3e:a3:9e:d5:11:70:
e3:6f:6d:b4:32:4a:48:c0:a9:6c:87:be:81:56:a5:
96:4a:f9:9d:7d:15:12:89:1a:2a:5b:25:71:13:f3:
aa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8E:0F:8A:83:1B:1D:67:8B:78:E1:38:E7:C0:01:2F:64:AD:9D:42
X509v3 Authority Key Identifier:
keyid:C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:91:a2:ac:d3:bb:d3:2e:26:cf:0e:f3:e4:ef:67:f3:6f:fe:
15:41:c4:4c:a1:9e:8a:c5:31:0c:d3:14:52:ce:c6:1e:0d:fd:
ce:db:60:37:de:bd:fa:7d:67:80:d8:9d:42:d4:4f:6e:79:37:
da:03:92:6f:b3:6b:83:26:b7:78:7e:8f:97:54:d9:46:f6:1f:
09:31:d0:2c:d4:7e:e6:4d:d8:a6:bd:36:82:14:9f:59:fd:89:
36:e9:0a:a5:41:db:ae:fc:60:f6:a8:17:b0:7d:74:2e:da:3b:
a2:d3:98:42:7a:ee:35:54:ac:74:af:68:fd:07:cf:99:12:cf:
11:04:fe:55:39:64:fe:01:0a:50:17:f0:82:36:14:6e:34:85:
59:50:46:50:73:46:de:c7:59:28:a9:19:19:ff:21:5e:6f:11:
55:6e:c8:23:4f:48:01:3a:b3:03:9b:74:94:fd:0f:6a:36:12:
63:aa:e6:3f:ca:81:ed:50:3e:86:d2:3e:10:f8:cb:ca:28:4f:
b4:4c:4b:96:3c:ac:53:79:8d:00:ef:02:31:80:92:61:70:ad:
be:1b:e6:f3:80:12:bc:be:02:5c:d1:ea:3c:be:85:0c:ec:9c:
1c:58:99:60:7a:3d:ce:16:26:77:77:22:10:a0:c4:c2:ba:6d:
87:64:e6:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJnMyU7tYrdnhH42b/oEbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3Mzg5Y2U4MjZiYzhkMjY4NjliNDUyZjNjZDkzNjkwMmM1
NTJmYmYwHhcNMjUxMTExMDkwMTUzWhcNMjUxMTEyMDkwMTUzWjAzMTEwLwYDVQQD
EygyMjhlMGY4YTgzMWIxZDY3OGI3OGUxMzhlN2MwMDEyZjY0YWQ5ZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMB2v3TldZlovpMm4Zca3oAwx3Kk
IOOMeICB1o9ugfjVoHAh/EqMLkBRAaRvwHwLBYfUFK6nBsb59+dVPreebtl9VunM
wqrPMYGcp/Q0appbtoNN+BgqfaRMy0ztmwqvo2xgQUsgcx1JorNFrsqAhZcuhHVe
Wz95+hR10FtZt45KN0XKtDwEkjXTSEWpyjCmku0Mq3dar8rG4kTGo09cxb/5PB84
HmpBbJQjaPE9EjuaUhPqs7huePkNz6M0F/yTzZochi09DD2q+7k7bRy3im0ZS2RT
zMnz6ZQ+o57VEXDjb220MkpIwKlsh76BVqWWSvmdfRUSiRoqWyVxE/OqWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKOD4qDGx1ni3jhOOfAAS9krZ1CMB8GA1UdIwQY
MBaAFMc4nOgmvI0mhptFLzzZNpAsVS+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHppYzZDYThqU2FHbTBVdlBOazJrQ3hWTDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kYzFkMDktOWY2OS00NzFiLWJlN2Et
NTIwMDhkMWNiOWI2LzEveHppYzZDYThqU2FHbTBVdlBOazJrQ3hWTDc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kYzFkMDktOWY2OS00NzFiLWJlN2EtNTIwMDhkMWNiOWI2
LzEveHppYzZDYThqU2FHbTBVdlBOazJrQ3hWTDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJGirNO7
0y4mzw7z5O9n82/+FUHETKGeisUxDNMUUs7GHg39zttgN969+n1ngNidQtRPbnk3
2gOSb7Nrgya3eH6Pl1TZRvYfCTHQLNR+5k3Ypr02ghSfWf2JNukKpUHbrvxg9qgX
sH10Lto7otOYQnruNVSsdK9o/QfPmRLPEQT+VTlk/gEKUBfwgjYUbjSFWVBGUHNG
3sdZKKkZGf8hXm8RVW7II09IATqzA5t0lP0PajYSY6rmP8qB7VA+htI+EPjLyihP
tExLljysU3mNAO8CMYCSYXCtvhvm84ASvL4CXNHqPL6FDOycHFiZYHo9zhYmd3ci
EKDEwrpth2TmWQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:16 2025 by rpki-client