Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
File: Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft (raw, json)
Hash identifier: Bxn6ZqN2mkVtg6QjjJyp2S43YIVruR9jTRKJgm9POr8=
Subject key identifier: F6:74:57:72:31:46:6D:E9:34:45:84:94:96:E6:DF:C0:C3:5D:52:7E
Authority key identifier: 5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38
Certificate issuer: /CN=5e4f1a32a37e083900aba561708e52ab234e3a38
Certificate serial: 019A71B840D070F3380F144DD00614809135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
Manifest number: 06DD
Signing time: Tue 11 Nov 2025 07:01:31 +0000
Manifest this update: Tue 11 Nov 2025 07:01:31 +0000
Manifest next update: Wed 12 Nov 2025 07:01:31 +0000
Files and hashes: 1: MjurembtvVeEftl3x1ofb2bHb8o.roa (hash: LMEfB1EahjyEN1vkkgX4Rq92rZ+ObZyJ1Ue8yFCn1Pk=)
2: Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl (hash: jbBUySjnfCKVcYsUHY9xVX9f8WOrNJK/fFO4CpsCGaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:40:d0:70:f3:38:0f:14:4d:d0:06:14:80:91:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e4f1a32a37e083900aba561708e52ab234e3a38
Validity
Not Before: Nov 11 07:01:31 2025 GMT
Not After : Nov 12 07:01:31 2025 GMT
Subject: CN=f674577231466de93445849496e6dfc0c35d527e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:77:65:08:ea:08:b9:f3:fb:a6:63:25:ea:c0:
e7:0f:5f:3a:f8:b1:5a:85:33:5a:ce:7a:7b:df:a4:
1b:69:b9:5e:8b:a2:34:23:7f:67:0f:84:72:f0:01:
5a:ce:2e:37:73:d7:fa:78:43:f0:02:d2:4d:30:d0:
cb:9c:90:5e:3e:5b:bf:71:77:66:e2:0a:92:f9:ca:
f6:d7:51:2f:a6:4e:18:1c:cb:76:24:29:0f:97:ae:
01:6a:fb:91:37:bc:9b:62:06:79:8b:28:15:f8:59:
cf:5c:28:9a:33:0d:44:59:67:7d:63:c4:b8:6c:2e:
f8:fe:3d:e2:31:e8:93:90:9d:f5:70:a6:91:03:c3:
ba:54:46:79:c9:e1:45:5c:55:80:ef:1f:d9:09:c6:
0c:8f:26:87:90:d7:9e:4c:51:d7:c5:3e:bb:c0:a4:
d3:02:42:97:fe:e9:28:8d:c0:51:7a:ad:2d:0f:80:
71:32:e2:04:03:45:85:8c:5c:74:9b:48:08:f1:e3:
3f:b9:68:5c:c6:03:46:b1:37:4c:77:f0:db:8a:4b:
da:e1:bc:83:bc:43:ab:b7:d0:e6:79:27:a4:47:3c:
40:d7:87:1b:4f:25:d2:44:64:9e:87:d5:a3:e4:34:
f0:1e:39:6e:01:7c:d1:b3:92:08:01:fe:ad:6f:c6:
63:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:74:57:72:31:46:6D:E9:34:45:84:94:96:E6:DF:C0:C3:5D:52:7E
X509v3 Authority Key Identifier:
keyid:5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e3:8d:65:3a:9a:8e:ec:bd:d8:66:85:4f:c3:0a:c0:36:44:
77:55:c7:ba:a5:25:91:cf:b4:4d:c6:64:ac:a1:5b:c6:2c:11:
4a:f1:18:dd:e8:3e:70:aa:be:2e:c1:00:8d:5f:3c:b2:02:17:
da:1f:2b:0a:b8:12:0d:e7:dc:05:29:cc:f6:88:65:7e:df:34:
1d:ba:cb:a1:ea:ad:e4:38:a2:68:76:39:b9:27:24:2e:36:69:
de:30:3d:fb:8d:27:d2:31:e8:3e:72:00:43:fc:0c:04:32:91:
15:77:2b:59:88:2e:55:74:e8:d2:62:38:44:a7:d7:e9:02:e2:
e7:cd:fb:b8:36:4f:7d:f9:fd:37:88:0d:25:56:b7:4a:9d:ac:
28:17:9a:7d:94:0b:29:fc:9a:17:78:41:c5:9b:4e:35:7f:1f:
89:65:3f:e4:83:4d:b9:01:77:c8:7d:55:da:6b:70:f2:7e:a4:
84:f3:58:f2:78:1e:d6:52:7a:e4:d6:f6:f7:f1:38:9e:f9:c0:
42:79:ca:a7:42:15:b6:3b:b0:5d:a7:56:73:32:6d:1c:06:13:
cb:f3:be:03:69:fa:9d:9e:f6:4d:47:9a:1c:e7:5a:5f:8b:01:
db:e9:14:55:0f:7d:f9:88:8b:48:cf:97:e4:85:c2:cf:f0:0e:
41:f3:a0:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuEDQcPM4DxRN0AYUgJE1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNGYxYTMyYTM3ZTA4MzkwMGFiYTU2MTcwOGU1MmFiMjM0
ZTNhMzgwHhcNMjUxMTExMDcwMTMxWhcNMjUxMTEyMDcwMTMxWjAzMTEwLwYDVQQD
EyhmNjc0NTc3MjMxNDY2ZGU5MzQ0NTg0OTQ5NmU2ZGZjMGMzNWQ1MjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HdlCOoIufP7pmMl6sDnD186+LFa
hTNaznp736Qbablei6I0I39nD4Ry8AFazi43c9f6eEPwAtJNMNDLnJBePlu/cXdm
4gqS+cr211Evpk4YHMt2JCkPl64BavuRN7ybYgZ5iygV+FnPXCiaMw1EWWd9Y8S4
bC74/j3iMeiTkJ31cKaRA8O6VEZ5yeFFXFWA7x/ZCcYMjyaHkNeeTFHXxT67wKTT
AkKX/ukojcBReq0tD4BxMuIEA0WFjFx0m0gI8eM/uWhcxgNGsTdMd/Dbikva4byD
vEOrt9DmeSekRzxA14cbTyXSRGSeh9Wj5DTwHjluAXzRs5IIAf6tb8Zj7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZ0V3IxRm3pNEWElJbm38DDXVJ+MB8GA1UdIwQY
MBaAFF5PGjKjfgg5AKulYXCOUqsjTjo4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGs4YU1xTi1DRGtBcTZWaGNJNVNxeU5PT2pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZWY5MjEtMjllZC00MGNmLWI0NTQt
NGMyYWNiNzgzMDllLzEvWGs4YU1xTi1DRGtBcTZWaGNJNVNxeU5PT2pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zZWY5MjEtMjllZC00MGNmLWI0NTQtNGMyYWNiNzgzMDll
LzEvWGs4YU1xTi1DRGtBcTZWaGNJNVNxeU5PT2pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOONZTqa
juy92GaFT8MKwDZEd1XHuqUlkc+0TcZkrKFbxiwRSvEY3eg+cKq+LsEAjV88sgIX
2h8rCrgSDefcBSnM9ohlft80HbrLoeqt5DiiaHY5uSckLjZp3jA9+40n0jHoPnIA
Q/wMBDKRFXcrWYguVXTo0mI4RKfX6QLi5837uDZPffn9N4gNJVa3Sp2sKBeafZQL
KfyaF3hBxZtONX8fiWU/5INNuQF3yH1V2mtw8n6khPNY8nge1lJ65Nb29/E4nvnA
QnnKp0IVtjuwXadWczJtHAYTy/O+A2n6nZ72TUeaHOdaX4sB2+kUVQ99+YiLSM+X
5IXCz/AOQfOgYQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:02 2025 by rpki-client