Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
File: XLtvfRHev55LqLH2nDg7j8PErhI.mft (raw, json)
Hash identifier: alpzJSHsjCFLmE0BhHWpB0Bwvy2lK0jPWOwR1MYen4Q=
Subject key identifier: A5:A3:CC:5F:15:4B:0F:09:B7:53:8E:11:0E:22:E9:82:AA:02:68:F2
Authority key identifier: 5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
Certificate issuer: /CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Certificate serial: 019A2F3266D781F56A034C8529AACD5D8F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
Manifest number: 0B22
Signing time: Wed 29 Oct 2025 09:00:23 +0000
Manifest this update: Wed 29 Oct 2025 09:00:23 +0000
Manifest next update: Thu 30 Oct 2025 09:00:23 +0000
Files and hashes: 1: GeKBRab06m2Sa_WEDlm2vrbqt80.roa (hash: rshNYrEYAk6Ccd9rs6FmkxFoBRIeaz8vJy7lI8MW13k=)
2: XLtvfRHev55LqLH2nDg7j8PErhI.crl (hash: SdNs/21Sck4uzNpj6xyxQl764Fkybe9tciMWvjG9+Tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:32:66:d7:81:f5:6a:03:4c:85:29:aa:cd:5d:8f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Validity
Not Before: Oct 29 09:00:23 2025 GMT
Not After : Oct 30 09:00:23 2025 GMT
Subject: CN=a5a3cc5f154b0f09b7538e110e22e982aa0268f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bc:26:97:7d:81:3a:3c:24:fe:fa:e3:09:25:
60:3c:17:8d:d9:c1:30:3c:34:fb:76:0e:ee:da:84:
cc:84:cb:36:84:57:e4:10:52:1a:17:28:c2:e3:cb:
eb:c9:73:f5:cc:19:5f:d3:e7:f1:51:58:ae:99:11:
af:db:a7:96:2a:dc:31:8f:d3:a1:aa:15:a5:09:bf:
59:d8:23:60:0d:cd:b0:05:6a:2d:f7:cd:b4:25:d4:
2d:58:75:4b:5e:8b:22:fd:59:78:05:60:89:97:46:
86:7f:f4:60:43:00:b0:cc:c5:76:1e:e4:ff:c0:bb:
75:e1:ef:36:31:9d:b3:a0:c6:1a:9b:71:3d:bd:db:
7f:66:30:62:c7:75:62:af:00:0c:67:17:42:97:3b:
d7:2e:91:9a:bc:91:a0:39:7f:24:a3:a8:28:64:57:
1e:e4:93:93:72:23:39:d6:0d:be:71:b0:6d:29:c6:
31:6b:82:eb:1b:b6:ec:b3:bb:32:1e:08:ef:9c:50:
de:d1:08:43:58:2e:25:a7:5e:af:ac:99:76:92:59:
4c:e5:21:e4:e9:32:88:14:7a:ce:a6:f0:a3:98:ee:
8a:fe:6b:4f:a5:98:2e:a8:b0:e1:3f:f5:2f:7c:bc:
99:1f:71:3b:00:89:46:ad:d8:db:04:45:13:cd:23:
b9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A3:CC:5F:15:4B:0F:09:B7:53:8E:11:0E:22:E9:82:AA:02:68:F2
X509v3 Authority Key Identifier:
keyid:5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f3:4c:a7:86:87:b5:68:14:af:2c:49:f6:87:7c:e5:f8:89:
f6:6a:c3:27:fa:7d:49:ee:e0:c8:6c:55:ff:48:0f:e4:ab:21:
17:a2:2e:49:40:91:35:97:b7:25:53:57:ec:58:1b:c4:b9:08:
d3:90:3f:04:18:90:60:ec:d3:0f:1d:c2:61:56:c3:74:5a:ff:
59:64:4e:e0:43:15:b4:e1:b3:6d:30:af:c9:5b:26:83:ca:3b:
a2:47:cd:f0:ea:3a:2e:e0:3c:59:2d:fc:c8:56:72:38:d0:c7:
22:c6:c1:80:30:22:d2:6e:95:65:e4:d3:42:0a:cf:9c:18:81:
d7:ca:5c:06:c9:4f:e8:d8:9b:b3:48:6a:ab:5f:49:1d:83:ad:
ab:87:16:1e:34:cf:2a:12:45:0a:b4:06:3f:aa:5c:8d:18:86:
1f:3a:d8:b1:a1:20:4a:b5:8a:4d:d0:c6:8c:5f:03:98:95:71:
d6:30:6c:a8:1a:0d:dc:81:33:9c:fd:97:c4:df:60:05:e3:6b:
29:1f:1f:bf:75:76:c3:aa:29:11:06:23:05:31:cf:46:a6:4b:
61:b5:86:86:9d:bb:14:53:32:14:1f:e6:47:67:1a:c0:2d:55:
14:49:63:8d:9b:9d:78:c4:b4:b6:b0:f2:3b:7f:87:24:9f:af:
29:5d:5b:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZovMmbXgfVqA0yFKarNXY8JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYmI2ZjdkMTFkZWJmOWU0YmE4YjFmNjljMzgzYjhmYzNj
NGFlMTIwHhcNMjUxMDI5MDkwMDIzWhcNMjUxMDMwMDkwMDIzWjAzMTEwLwYDVQQD
EyhhNWEzY2M1ZjE1NGIwZjA5Yjc1MzhlMTEwZTIyZTk4MmFhMDI2OGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbwml32BOjwk/vrjCSVgPBeN2cEw
PDT7dg7u2oTMhMs2hFfkEFIaFyjC48vryXP1zBlf0+fxUViumRGv26eWKtwxj9Oh
qhWlCb9Z2CNgDc2wBWot9820JdQtWHVLXosi/Vl4BWCJl0aGf/RgQwCwzMV2HuT/
wLt14e82MZ2zoMYam3E9vdt/ZjBix3VirwAMZxdClzvXLpGavJGgOX8ko6goZFce
5JOTciM51g2+cbBtKcYxa4LrG7bss7syHgjvnFDe0QhDWC4lp16vrJl2kllM5SHk
6TKIFHrOpvCjmO6K/mtPpZguqLDhP/UvfLyZH3E7AIlGrdjbBEUTzSO5iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWjzF8VSw8Jt1OOEQ4i6YKqAmjyMB8GA1UdIwQY
MBaAFFy7b30R3r+eS6ix9pw4O4/DxK4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jYTgxMjUtNTQ3Ny00MjIyLWIwNTUt
YmJlYjQ1NTBkOWU2LzEvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9jYTgxMjUtNTQ3Ny00MjIyLWIwNTUtYmJlYjQ1NTBkOWU2
LzEvWEx0dmZSSGV2NTVMcUxIMm5EZzdqOFBFcmhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/NMp4aH
tWgUryxJ9od85fiJ9mrDJ/p9Se7gyGxV/0gP5KshF6IuSUCRNZe3JVNX7FgbxLkI
05A/BBiQYOzTDx3CYVbDdFr/WWRO4EMVtOGzbTCvyVsmg8o7okfN8Oo6LuA8WS38
yFZyONDHIsbBgDAi0m6VZeTTQgrPnBiB18pcBslP6Nibs0hqq19JHYOtq4cWHjTP
KhJFCrQGP6pcjRiGHzrYsaEgSrWKTdDGjF8DmJVx1jBsqBoN3IEznP2XxN9gBeNr
KR8fv3V2w6opEQYjBTHPRqZLYbWGhp27FFMyFB/mR2cawC1VFEljjZudeMS0trDy
O3+HJJ+vKV1bgQ==
-----END CERTIFICATE-----
Generated at Wed Oct 29 11:12:26 2025 by rpki-client