Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
File: XQwn-FWB4ue94MmPvVS-HUlnBRc.mft (raw, json)
Hash identifier: UculWtAo+y/SPZBFet4z4AKJbdEWAy8e1zrkBFdqNBU=
Subject key identifier: 49:DE:56:92:4C:94:DF:C9:00:53:55:84:0D:E8:A2:F2:41:14:34:9E
Authority key identifier: 5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
Certificate issuer: /CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Certificate serial: 019A1FBF9044F3189A9ADFA37D60A5C1D2F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 09:00:39 +0000
Manifest this update: Sun 26 Oct 2025 09:00:39 +0000
Manifest next update: Mon 27 Oct 2025 09:00:39 +0000
Files and hashes: 1: 5lc5ZmxcIf_S-qtTdxwVFYdfw74.roa (hash: nWQ6LzHmMcNUWFVJjD8F6A2IBDinnQ/3GkZ+tOcMhcc=)
2: XQwn-FWB4ue94MmPvVS-HUlnBRc.crl (hash: CpfjhQHZo14szqyssMngWLasnFchtZBGMd9/MsTTKDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:90:44:f3:18:9a:9a:df:a3:7d:60:a5:c1:d2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Validity
Not Before: Oct 26 09:00:39 2025 GMT
Not After : Oct 27 09:00:39 2025 GMT
Subject: CN=49de56924c94dfc9005355840de8a2f24114349e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:50:a3:e6:83:82:4c:0f:43:77:22:d5:06:
4b:83:2e:4a:d0:5c:c3:3b:3a:ba:12:1c:45:9b:3f:
c3:0f:0f:0d:24:bf:0e:05:42:21:20:c1:be:fb:14:
c5:cc:d9:f5:2f:53:42:ae:38:75:bc:7f:cc:28:ed:
65:16:d2:33:da:4f:fa:d1:f4:2b:cd:aa:cb:2e:61:
c3:78:9a:9d:b2:55:bf:01:f0:f8:d1:97:8a:e6:7e:
38:0f:c5:4d:10:90:85:f8:39:f4:78:d2:64:9e:21:
76:c3:a8:26:51:07:0c:35:b0:e1:5f:f1:93:b2:96:
8e:8e:cd:72:58:27:43:ae:b2:0f:53:b2:6f:84:ff:
b0:e0:33:25:e4:84:62:c9:e8:94:7a:98:2f:f0:cc:
93:fb:59:86:e7:82:72:c3:25:79:bf:08:12:53:52:
4f:cd:ce:75:ba:ff:f3:47:b6:8c:f5:5c:ad:c0:08:
f9:b7:4a:fe:2b:5c:c1:83:93:17:98:57:64:06:ab:
87:27:97:f1:bc:b9:fb:3a:32:97:f2:c8:f7:90:f7:
99:bf:88:dc:46:1e:6b:19:3d:fc:67:2c:c1:68:3d:
92:6c:33:12:39:86:f6:c8:eb:80:d7:14:13:f9:9c:
ec:ef:85:ed:24:f8:27:07:d6:92:ed:3b:a0:11:1c:
61:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DE:56:92:4C:94:DF:C9:00:53:55:84:0D:E8:A2:F2:41:14:34:9E
X509v3 Authority Key Identifier:
keyid:5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:16:7b:d5:2f:4a:b1:56:76:9c:db:34:e4:95:bb:e0:d6:4b:
f2:6c:4d:c1:70:0c:7e:e4:87:bb:e5:9a:50:9b:0c:a8:0b:3b:
33:52:fa:1d:c6:a5:3c:36:ab:ea:57:fe:62:6c:16:a2:c3:f8:
a7:87:55:cb:6e:b9:d9:c3:07:39:37:ab:70:95:08:03:47:b5:
8b:ca:81:f3:fd:72:8c:ab:89:54:14:25:46:26:99:10:77:14:
f6:af:96:02:c3:8d:6a:56:fc:73:08:4d:5c:f8:44:41:c0:76:
69:00:15:13:67:58:92:b4:25:bc:13:58:5c:34:9d:ea:ee:84:
48:40:53:5e:52:15:a5:7f:3a:0f:bd:89:0d:84:01:7b:b1:3b:
49:05:ef:07:ad:95:88:1e:96:25:36:2c:d4:46:2a:92:0b:5d:
f4:af:08:40:fb:bc:3e:51:15:02:a9:d2:b9:7a:0a:42:9b:0f:
e2:6e:b0:f9:64:4a:24:54:2f:20:86:b0:44:49:0f:30:d6:bb:
6b:99:2f:c7:16:cc:43:5c:21:e0:a4:2d:81:fa:45:54:79:8e:
ee:db:33:80:9e:6f:48:e2:f9:6b:5c:09:fc:81:96:d9:38:f5:
e9:00:d4:df:86:7d:87:b3:1e:d6:76:ce:c7:60:3b:9d:05:99:
17:5d:35:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofv5BE8xiamt+jfWClwdL1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMGMyN2Y4NTU4MWUyZTdiZGUwYzk4ZmJkNTRiZTFkNDk2
NzA1MTcwHhcNMjUxMDI2MDkwMDM5WhcNMjUxMDI3MDkwMDM5WjAzMTEwLwYDVQQD
Eyg0OWRlNTY5MjRjOTRkZmM5MDA1MzU1ODQwZGU4YTJmMjQxMTQzNDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh5Qo+aDgkwPQ3ci1QZLgy5K0FzD
Ozq6EhxFmz/DDw8NJL8OBUIhIMG++xTFzNn1L1NCrjh1vH/MKO1lFtIz2k/60fQr
zarLLmHDeJqdslW/AfD40ZeK5n44D8VNEJCF+Dn0eNJkniF2w6gmUQcMNbDhX/GT
spaOjs1yWCdDrrIPU7JvhP+w4DMl5IRiyeiUepgv8MyT+1mG54JywyV5vwgSU1JP
zc51uv/zR7aM9VytwAj5t0r+K1zBg5MXmFdkBquHJ5fxvLn7OjKX8sj3kPeZv4jc
Rh5rGT38ZyzBaD2SbDMSOYb2yOuA1xQT+Zzs74XtJPgnB9aS7TugERxhewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEneVpJMlN/JAFNVhA3oovJBFDSeMB8GA1UdIwQY
MBaAFF0MJ/hVgeLnveDJj71Uvh1JZwUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFF3bi1GV0I0dWU5NE1tUHZWUy1IVWxuQlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mNzg3YTktNTc2My00YzM2LThjNzMt
MzQxZjUxNzNmY2Y3LzEvWFF3bi1GV0I0dWU5NE1tUHZWUy1IVWxuQlJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9mNzg3YTktNTc2My00YzM2LThjNzMtMzQxZjUxNzNmY2Y3
LzEvWFF3bi1GV0I0dWU5NE1tUHZWUy1IVWxuQlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBZ71S9K
sVZ2nNs05JW74NZL8mxNwXAMfuSHu+WaUJsMqAs7M1L6HcalPDar6lf+YmwWosP4
p4dVy2652cMHOTercJUIA0e1i8qB8/1yjKuJVBQlRiaZEHcU9q+WAsONalb8cwhN
XPhEQcB2aQAVE2dYkrQlvBNYXDSd6u6ESEBTXlIVpX86D72JDYQBe7E7SQXvB62V
iB6WJTYs1EYqkgtd9K8IQPu8PlEVAqnSuXoKQpsP4m6w+WRKJFQvIIawREkPMNa7
a5kvxxbMQ1wh4KQtgfpFVHmO7tszgJ5vSOL5a1wJ/IGW2Tj16QDU34Z9h7Me1nbO
x2A7nQWZF101Pw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 17:02:20 2025 by rpki-client