Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
File: Xx-gbV262kPeRPTksdyUkrsofJ0.mft (raw, json)
Hash identifier: HIi19o8KOAYuEGfQARW+tr1LA7snsDHZwLlY4SzsReA=
Subject key identifier: 5B:AC:CF:CF:67:0D:54:82:20:09:72:98:6E:E5:E2:99:79:B9:C5:40
Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Certificate serial: 019A71131184DCF5ADDA44F66223CC9B2A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
Manifest number: 168B
Signing time: Tue 11 Nov 2025 04:01:06 +0000
Manifest this update: Tue 11 Nov 2025 04:01:06 +0000
Manifest next update: Wed 12 Nov 2025 04:01:06 +0000
Files and hashes: 1: 2-ZT3D_TT57WgEPZaHLs56UG0Yg.roa (hash: NyVeJy4V1X4eJ9opwnQRbcNHZ8PbRqXsdUICPp/i7rs=)
2: Xx-gbV262kPeRPTksdyUkrsofJ0.crl (hash: o5tKcOgvATtD1E69FLevnVecnvEs5fZ7eTf7SIO52qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:11:84:dc:f5:ad:da:44:f6:62:23:cc:9b:2a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Validity
Not Before: Nov 11 04:01:06 2025 GMT
Not After : Nov 12 04:01:06 2025 GMT
Subject: CN=5baccfcf670d5482200972986ee5e29979b9c540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:47:4c:fc:39:70:c7:3e:64:c7:36:63:28:21:
6a:6d:98:8b:09:0a:ef:f9:a0:bb:70:e8:02:1a:70:
37:2b:89:44:0e:15:cf:f9:0d:8a:00:96:f5:01:cc:
0a:7e:44:5d:5c:35:15:71:1b:fa:0b:9e:c3:cb:8f:
ff:1a:ba:9d:72:b2:bf:e4:a2:6d:28:46:05:e6:7f:
c8:a3:6f:94:4d:0a:5e:58:0b:73:86:fb:1e:1d:86:
25:52:7d:b3:a6:52:fb:4a:c1:95:2f:6c:4a:f7:16:
e7:d2:45:64:5e:e7:df:3c:2a:18:cf:a0:14:98:f5:
a8:6d:9c:ff:f2:d5:ba:00:92:73:64:e6:88:f7:32:
42:81:d5:e7:ad:7f:af:df:4b:01:e5:2c:46:bc:93:
2c:7d:ce:5a:d9:e5:0b:cc:0a:22:36:f4:61:e9:be:
c1:c6:8f:65:fb:3e:3e:b2:1e:bd:93:09:f0:67:2f:
2d:02:48:25:cd:f4:3f:a1:c4:a1:81:5b:72:a2:4b:
51:00:6a:8e:40:58:9d:1b:a2:32:cd:3f:dd:eb:36:
9f:e5:19:fb:9e:9f:93:8c:40:dd:92:5a:5e:b5:f4:
b9:ad:05:3a:6d:a6:46:a0:18:73:fc:58:98:f0:40:
1d:67:df:88:3d:bb:98:b8:b4:33:8f:40:23:bc:bd:
5e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AC:CF:CF:67:0D:54:82:20:09:72:98:6E:E5:E2:99:79:B9:C5:40
X509v3 Authority Key Identifier:
keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:56:d4:b4:38:87:29:bd:8a:24:95:e4:31:c3:a1:9f:5c:6a:
5d:50:22:0f:5d:12:bd:a3:be:87:2e:e1:78:91:17:f4:a5:6e:
e4:85:bd:35:20:ee:9f:35:fb:10:0c:1a:11:49:b2:e6:0c:31:
5b:fa:ad:27:c0:4e:62:10:45:e5:a3:88:d1:ce:f5:31:2e:73:
e4:f8:24:79:eb:f7:98:d8:69:c5:f1:ea:a6:47:18:b7:f1:9d:
6e:2f:39:a5:13:2b:01:85:99:a1:ae:f8:48:3c:2f:5f:d5:c7:
1c:9f:ec:5c:46:ba:50:5c:7f:86:d8:5f:a9:7f:9b:4c:47:81:
d9:5f:c7:8e:c6:d9:78:36:a6:a6:4e:35:e7:5d:60:5f:dc:ec:
69:0e:51:7d:16:03:dd:8d:95:c3:d3:ea:f5:11:b3:ac:3f:a7:
97:a6:0c:91:dc:c7:f3:e0:73:db:ed:b5:6c:18:6b:81:9c:b1:
55:7c:23:59:ba:85:59:bf:c0:1a:ae:ea:f4:83:10:42:26:48:
94:39:a2:3d:f2:53:e5:ad:9f:a1:c2:2c:34:11:eb:ee:4a:8b:
c0:4c:3a:a5:27:03:4a:2c:5e:36:4b:65:06:70:60:ed:a0:28:
ea:2b:25:5f:6e:9b:26:49:9a:f5:5f:5e:4f:96:85:eb:99:86:
72:2d:3c:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxExGE3PWt2kT2YiPMmypMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMWZhMDZkNWRiYWRhNDNkZTQ0ZjRlNGIxZGM5NDkyYmIy
ODdjOWQwHhcNMjUxMTExMDQwMTA2WhcNMjUxMTEyMDQwMTA2WjAzMTEwLwYDVQQD
Eyg1YmFjY2ZjZjY3MGQ1NDgyMjAwOTcyOTg2ZWU1ZTI5OTc5YjljNTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEdM/Dlwxz5kxzZjKCFqbZiLCQrv
+aC7cOgCGnA3K4lEDhXP+Q2KAJb1AcwKfkRdXDUVcRv6C57Dy4//GrqdcrK/5KJt
KEYF5n/Io2+UTQpeWAtzhvseHYYlUn2zplL7SsGVL2xK9xbn0kVkXuffPCoYz6AU
mPWobZz/8tW6AJJzZOaI9zJCgdXnrX+v30sB5SxGvJMsfc5a2eULzAoiNvRh6b7B
xo9l+z4+sh69kwnwZy8tAkglzfQ/ocShgVtyoktRAGqOQFidG6IyzT/d6zaf5Rn7
np+TjEDdklpetfS5rQU6baZGoBhz/FiY8EAdZ9+IPbuYuLQzj0AjvL1e9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFusz89nDVSCIAlymG7l4pl5ucVAMB8GA1UdIwQY
MBaAFF8foG1dutpD3kT05LHclJK7KHydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHgtZ2JWMjYya1BlUlBUa3NkeVVrcnNvZkowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84NDdkMTctYmE3Yy00ZWFlLTlkNTUt
MjU4NDZkNTlmZDYwLzEvWHgtZ2JWMjYya1BlUlBUa3NkeVVrcnNvZkowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS84NDdkMTctYmE3Yy00ZWFlLTlkNTUtMjU4NDZkNTlmZDYw
LzEvWHgtZ2JWMjYya1BlUlBUa3NkeVVrcnNvZkowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlbUtDiH
Kb2KJJXkMcOhn1xqXVAiD10SvaO+hy7heJEX9KVu5IW9NSDunzX7EAwaEUmy5gwx
W/qtJ8BOYhBF5aOI0c71MS5z5Pgkeev3mNhpxfHqpkcYt/Gdbi85pRMrAYWZoa74
SDwvX9XHHJ/sXEa6UFx/hthfqX+bTEeB2V/HjsbZeDampk41511gX9zsaQ5RfRYD
3Y2Vw9Pq9RGzrD+nl6YMkdzH8+Bz2+21bBhrgZyxVXwjWbqFWb/AGq7q9IMQQiZI
lDmiPfJT5a2focIsNBHr7kqLwEw6pScDSixeNktlBnBg7aAo6islX26bJkma9V9e
T5aF65mGci08XQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:27 2025 by rpki-client