Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
File: xGPDRgOpRpUv8nbgol_TYfys8lE.mft (raw, json)
Hash identifier: H4CawzFXjB9cBGz+O7lY84dHYncbg9LIYcdfboTbY0Y=
Subject key identifier: 43:97:89:60:31:42:04:40:77:4C:0C:B1:BA:F4:5F:2E:F9:86:AB:C2
Authority key identifier: C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
Certificate issuer: /CN=c463c34603a946952ff276e0a25fd361fcacf251
Certificate serial: 019A72938817061FDCB974E88A7C708FA508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 11:01:02 +0000
Manifest this update: Tue 11 Nov 2025 11:01:02 +0000
Manifest next update: Wed 12 Nov 2025 11:01:02 +0000
Files and hashes: 1: md0xmKCv-Yp-JRpqVfuJ2Ux3if8.roa (hash: 8054rmQS0LY7yY1rJuM5gJA2IaUlLbJ4rpwSB+nsZj8=)
2: xGPDRgOpRpUv8nbgol_TYfys8lE.crl (hash: pQeIDuDs1v7OmoHbbK4hj40jIN1jMZAMNN7OamAA854=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:88:17:06:1f:dc:b9:74:e8:8a:7c:70:8f:a5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c463c34603a946952ff276e0a25fd361fcacf251
Validity
Not Before: Nov 11 11:01:02 2025 GMT
Not After : Nov 12 11:01:02 2025 GMT
Subject: CN=4397896031420440774c0cb1baf45f2ef986abc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:b2:db:cf:1a:6c:f5:1d:71:f5:90:c0:84:
92:58:73:10:19:4b:48:ff:b6:30:c5:35:8b:0e:ec:
cd:3d:63:f4:bc:ad:97:67:4d:e1:6b:08:2a:2a:a4:
6e:c6:5e:6f:cc:a0:20:4f:e4:c1:ab:b7:65:28:04:
ea:09:e5:90:aa:fd:f4:09:b6:2c:69:73:80:1d:3d:
30:a8:ae:74:0c:b8:d9:a3:a2:8a:42:a3:79:24:45:
1f:7d:d5:95:02:be:90:ec:fa:a0:05:95:70:f8:51:
8b:de:60:af:62:d2:dc:47:19:05:eb:c5:9a:9e:ad:
5e:5d:ce:60:86:2e:bd:87:00:da:a0:22:bd:1e:7e:
6d:9e:0f:14:62:16:51:41:b0:7e:13:99:c0:44:be:
d1:e0:e6:40:b8:f5:12:8c:0f:53:56:d7:92:5d:2d:
2f:04:38:3e:b2:69:ea:ea:06:01:23:d8:4c:95:89:
7e:1a:15:e0:e4:58:dd:7a:f5:79:eb:c8:87:28:6f:
dd:fb:3f:16:4b:ae:81:5d:88:18:a8:c8:a3:2c:78:
44:5d:ac:24:8e:68:f3:d6:7b:53:3c:fb:7c:91:82:
6a:a5:d3:b4:2d:81:66:3c:43:da:aa:7b:6f:4e:84:
c6:cd:ba:6e:ac:02:16:30:7c:39:03:fb:16:74:4b:
e0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:97:89:60:31:42:04:40:77:4C:0C:B1:BA:F4:5F:2E:F9:86:AB:C2
X509v3 Authority Key Identifier:
keyid:C4:63:C3:46:03:A9:46:95:2F:F2:76:E0:A2:5F:D3:61:FC:AC:F2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGPDRgOpRpUv8nbgol_TYfys8lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/24fae9-ed87-44f6-a795-006420e4344d/1/xGPDRgOpRpUv8nbgol_TYfys8lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:97:ce:ae:a7:26:ef:b1:23:f5:00:e8:11:87:cc:4a:05:39:
f7:7e:d3:53:08:e7:41:1c:28:fa:6b:d8:b0:d2:6b:54:e7:16:
e6:8a:de:92:d9:26:1a:b4:7d:ce:07:55:5b:eb:8b:c6:74:5c:
9a:36:b4:1d:43:a6:d8:c4:82:67:62:0c:24:39:0c:55:a8:5f:
bb:9f:57:75:22:dc:2d:4c:ea:37:c0:07:ba:f4:9f:ad:eb:a8:
7d:1c:f5:f7:ce:ba:aa:11:3b:58:6d:f2:06:1c:0e:5a:1e:64:
c1:d3:07:09:3f:2d:5e:93:41:ad:e2:2f:f6:d1:03:09:b8:0e:
81:9b:54:a3:81:66:74:b5:ad:9e:ad:e7:5e:f6:8d:5b:aa:f8:
f7:88:c8:06:3c:2b:5b:cf:2e:06:59:12:db:db:4d:ac:b4:f8:
1d:93:f7:59:88:3e:e9:3c:34:4e:65:23:ab:14:9d:0f:2c:e2:
64:72:e2:ae:d6:22:c8:da:33:88:1c:c4:29:0d:25:ca:c6:61:
a9:dc:77:84:ed:28:0f:18:6d:64:95:1c:b7:ed:bb:84:79:5d:
52:82:68:e5:c7:41:42:cb:1f:e1:ce:b9:f4:03:cb:c2:a8:e5:
f1:0c:bc:4f:d9:b9:c4:40:f1:ab:c1:d3:9c:f7:52:c9:22:67:
81:52:73:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk4gXBh/cuXToinxwj6UIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NjNjMzQ2MDNhOTQ2OTUyZmYyNzZlMGEyNWZkMzYxZmNh
Y2YyNTEwHhcNMjUxMTExMTEwMTAyWhcNMjUxMTEyMTEwMTAyWjAzMTEwLwYDVQQD
Eyg0Mzk3ODk2MDMxNDIwNDQwNzc0YzBjYjFiYWY0NWYyZWY5ODZhYmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf6y288abPUdcfWQwISSWHMQGUtI
/7YwxTWLDuzNPWP0vK2XZ03hawgqKqRuxl5vzKAgT+TBq7dlKATqCeWQqv30CbYs
aXOAHT0wqK50DLjZo6KKQqN5JEUffdWVAr6Q7PqgBZVw+FGL3mCvYtLcRxkF68Wa
nq1eXc5ghi69hwDaoCK9Hn5tng8UYhZRQbB+E5nARL7R4OZAuPUSjA9TVteSXS0v
BDg+smnq6gYBI9hMlYl+GhXg5FjdevV568iHKG/d+z8WS66BXYgYqMijLHhEXawk
jmjz1ntTPPt8kYJqpdO0LYFmPEPaqntvToTGzbpurAIWMHw5A/sWdEvgQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOXiWAxQgRAd0wMsbr0Xy75hqvCMB8GA1UdIwQY
MBaAFMRjw0YDqUaVL/J24KJf02H8rPJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8yNGZhZTktZWQ4Ny00NGY2LWE3OTUt
MDA2NDIwZTQzNDRkLzEveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8yNGZhZTktZWQ4Ny00NGY2LWE3OTUtMDA2NDIwZTQzNDRk
LzEveEdQRFJnT3BScFV2OG5iZ29sX1RZZnlzOGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr5fOrqcm
77Ej9QDoEYfMSgU5937TUwjnQRwo+mvYsNJrVOcW5orektkmGrR9zgdVW+uLxnRc
mja0HUOm2MSCZ2IMJDkMVahfu59XdSLcLUzqN8AHuvSfreuofRz19866qhE7WG3y
BhwOWh5kwdMHCT8tXpNBreIv9tEDCbgOgZtUo4FmdLWtnq3nXvaNW6r494jIBjwr
W88uBlkS29tNrLT4HZP3WYg+6Tw0TmUjqxSdDyziZHLirtYiyNoziBzEKQ0lysZh
qdx3hO0oDxhtZJUct+27hHldUoJo5cdBQssf4c659APLwqjl8Qy8T9m5xEDxq8HT
nPdSySJngVJzSg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:49 2025 by rpki-client