Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
File: X4rRNUEr-QQb5f0I50okEg2z7sc.mft (raw, json)
Hash identifier: nY5ZVlWjBZK4EiBblOSp+DAfemtsoi++9367/FblJeU=
Subject key identifier: FF:44:1A:E3:04:61:2F:4C:FC:BD:6D:04:EB:1C:9A:3A:04:65:1B:09
Authority key identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
Certificate issuer: /CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Certificate serial: 019A71133549E10D268F91F076F2A9A43EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
Manifest number: 0B71
Signing time: Tue 11 Nov 2025 04:01:15 +0000
Manifest this update: Tue 11 Nov 2025 04:01:15 +0000
Manifest next update: Wed 12 Nov 2025 04:01:15 +0000
Files and hashes: 1: OaP0ViKbeY2ivI-4rv6OeNEGIqA.roa (hash: e7Vy7pCIoWDvqhKmOHXfSd0NE1hCUf1lKUMb+Ggiqf0=)
2: X4rRNUEr-QQb5f0I50okEg2z7sc.crl (hash: GBm4OIr7ui4aKux9olQWVoi/6FxWOspN4OVU8PxJN80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:35:49:e1:0d:26:8f:91:f0:76:f2:a9:a4:3e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Validity
Not Before: Nov 11 04:01:15 2025 GMT
Not After : Nov 12 04:01:15 2025 GMT
Subject: CN=ff441ae304612f4cfcbd6d04eb1c9a3a04651b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:de:55:74:fe:cc:7a:8f:9a:57:70:b9:2f:
7c:b1:02:c3:21:3a:c0:cc:8b:9c:2a:07:5b:41:25:
b1:a0:2a:4f:71:f3:2a:14:f7:a6:58:92:b8:9d:27:
e3:cc:8e:3a:b9:c4:cb:3a:52:34:ab:9d:4f:e7:da:
28:6b:3b:bd:0b:1a:ec:9d:3e:e9:27:8b:28:d0:16:
fa:fe:4a:11:08:3e:02:07:80:d8:df:ce:b0:8d:cd:
b4:2b:91:b3:44:e0:63:13:36:34:d4:ac:da:4c:f7:
97:ab:ba:64:d1:df:61:30:e5:4a:47:b2:b7:b0:64:
55:20:a2:0a:b4:ad:81:00:71:a9:cd:93:56:72:bd:
0c:ff:d1:23:89:f1:18:f8:e9:f4:a5:8e:24:c3:0c:
cf:69:95:c7:06:bf:93:03:6e:58:48:90:45:f3:9d:
56:6c:fd:06:8b:9b:5a:6d:c4:b9:41:56:92:5f:ce:
a8:de:98:cd:a5:35:cf:1f:d6:30:80:a0:8c:18:89:
10:f2:de:0c:96:a7:99:e1:f1:35:94:ee:e1:99:f5:
88:bb:f5:1d:68:81:4c:37:22:24:99:f0:ba:40:34:
61:22:65:3f:a2:45:44:12:36:ff:69:c5:4e:8e:aa:
23:52:03:1f:15:66:61:b7:63:54:87:9a:70:86:ac:
37:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:44:1A:E3:04:61:2F:4C:FC:BD:6D:04:EB:1C:9A:3A:04:65:1B:09
X509v3 Authority Key Identifier:
keyid:5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:56:2a:c0:12:bc:71:d5:b1:a4:4b:68:72:33:86:00:51:05:
34:d4:84:ba:fe:4b:ae:fc:01:c6:0b:84:d6:cb:23:21:03:67:
f9:5e:54:55:a7:8d:bc:b5:d3:f8:b3:c5:a4:8f:35:9e:09:f3:
a2:29:9f:23:6d:d0:d3:e7:e4:e5:27:2a:15:75:18:c7:15:de:
e6:ef:52:32:eb:c4:81:36:83:f5:b2:5b:47:07:fd:b3:8c:f6:
96:0c:c5:48:c5:f4:70:de:96:22:3f:83:f9:67:53:79:60:2e:
01:d8:13:41:33:79:1f:20:0f:9e:1b:ef:25:f9:04:6c:6d:cb:
c0:f0:59:c3:ad:e5:7a:87:86:bd:46:fb:40:ef:3f:b8:6a:17:
4d:b5:a4:17:bb:62:86:89:d2:da:01:b3:93:1a:0a:76:3a:4e:
5b:7f:e8:09:a3:60:c8:54:f4:3c:c1:46:45:37:dc:d2:3f:b4:
0e:b8:fe:89:a5:11:fd:fb:c1:c4:d0:70:24:34:a7:57:08:cf:
60:ed:8c:25:b9:e0:11:df:1f:ee:21:8b:37:16:f7:e3:45:3c:
22:3d:26:74:ac:e4:93:f1:89:36:29:10:64:a2:e1:84:7e:a8:
1f:11:20:4a:4c:bd:6f:5a:3b:85:a9:3b:07:94:19:65:02:b1:
f9:14:dc:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEzVJ4Q0mj5HwdvKppD6sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOGFkMTM1NDEyYmY5MDQxYmU1ZmQwOGU3NGEyNDEyMGRi
M2VlYzcwHhcNMjUxMTExMDQwMTE1WhcNMjUxMTEyMDQwMTE1WjAzMTEwLwYDVQQD
EyhmZjQ0MWFlMzA0NjEyZjRjZmNiZDZkMDRlYjFjOWEzYTA0NjUxYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGveVXT+zHqPmldwuS98sQLDITrA
zIucKgdbQSWxoCpPcfMqFPemWJK4nSfjzI46ucTLOlI0q51P59ooazu9CxrsnT7p
J4so0Bb6/koRCD4CB4DY386wjc20K5GzROBjEzY01KzaTPeXq7pk0d9hMOVKR7K3
sGRVIKIKtK2BAHGpzZNWcr0M/9EjifEY+On0pY4kwwzPaZXHBr+TA25YSJBF851W
bP0Gi5tabcS5QVaSX86o3pjNpTXPH9YwgKCMGIkQ8t4MlqeZ4fE1lO7hmfWIu/Ud
aIFMNyIkmfC6QDRhImU/okVEEjb/acVOjqojUgMfFWZht2NUh5pwhqw39QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9EGuMEYS9M/L1tBOscmjoEZRsJMB8GA1UdIwQY
MBaAFF+K0TVBK/kEG+X9COdKJBINs+7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lM2VmYzgtNWYxZC00ZWI4LTk3MjAt
Mzc5NzMzYWIzOGNkLzEvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9lM2VmYzgtNWYxZC00ZWI4LTk3MjAtMzc5NzMzYWIzOGNk
LzEvWDRyUk5VRXItUVFiNWYwSTUwb2tFZzJ6N3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlYqwBK8
cdWxpEtocjOGAFEFNNSEuv5LrvwBxguE1ssjIQNn+V5UVaeNvLXT+LPFpI81ngnz
oimfI23Q0+fk5ScqFXUYxxXe5u9SMuvEgTaD9bJbRwf9s4z2lgzFSMX0cN6WIj+D
+WdTeWAuAdgTQTN5HyAPnhvvJfkEbG3LwPBZw63leoeGvUb7QO8/uGoXTbWkF7ti
honS2gGzkxoKdjpOW3/oCaNgyFT0PMFGRTfc0j+0Drj+iaUR/fvBxNBwJDSnVwjP
YO2MJbngEd8f7iGLNxb340U8Ij0mdKzkk/GJNikQZKLhhH6oHxEgSky9b1o7hak7
B5QZZQKx+RTcyg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:11 2025 by rpki-client