Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
File: XWMX9pNua1eLOMPfsZgCVJj8rqE.mft (raw, json)
Hash identifier: zbe9OKFMNSEOCbXbLq6ORpDp6kk/Y7z2S2UUT89RU2c=
Subject key identifier: DE:C6:49:35:D0:CF:EE:34:6B:61:13:C1:E6:2C:85:F7:6E:0B:C0:14
Authority key identifier: 5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1
Certificate issuer: /CN=5d6317f6936e6b578b38c3dfb198025498fcaea1
Certificate serial: 019A73A7398374BBE085AB4152F642413238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
Manifest number: 0670
Signing time: Tue 11 Nov 2025 16:02:10 +0000
Manifest this update: Tue 11 Nov 2025 16:02:10 +0000
Manifest next update: Wed 12 Nov 2025 16:02:10 +0000
Files and hashes: 1: NfD0bu6CTOHFOwKX83vXlWW-BFM.roa (hash: E6orvDZyM/U63REesg6yOGTM6Hs+Hh2EKGVP0jWzDOg=)
2: XWMX9pNua1eLOMPfsZgCVJj8rqE.crl (hash: aSVqyus3rpOftg3lfGY/Mkb91gg14loFn7geiEAvRNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a7:39:83:74:bb:e0:85:ab:41:52:f6:42:41:32:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6317f6936e6b578b38c3dfb198025498fcaea1
Validity
Not Before: Nov 11 16:02:10 2025 GMT
Not After : Nov 12 16:02:10 2025 GMT
Subject: CN=dec64935d0cfee346b6113c1e62c85f76e0bc014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7c:60:f1:5a:13:bd:86:65:ca:c8:0b:98:f4:
9f:e5:64:d3:92:b8:97:3b:98:02:38:8e:4d:c6:93:
9a:bf:d0:df:50:79:c1:2a:db:53:be:58:f9:74:87:
6c:5d:60:42:00:63:ae:53:3a:77:e7:e0:80:a5:67:
39:80:4a:69:7a:8a:dd:93:ca:af:26:7a:a5:00:26:
4f:30:66:ce:58:41:5c:d0:79:62:ce:f5:e1:be:9b:
9f:34:77:8e:e1:5e:0a:17:58:14:f8:fb:02:d6:6b:
1a:39:06:3c:19:92:22:4d:ac:99:88:65:38:b2:bc:
f6:8d:2f:00:75:29:cf:00:af:36:86:6e:33:64:91:
8a:b5:d7:cd:70:bf:97:b6:18:57:c0:1e:24:b1:5d:
f0:96:48:4a:39:21:fa:c2:54:14:b1:40:28:66:89:
80:21:c4:fb:b6:ac:fe:5f:bd:d1:69:32:bc:7f:4a:
24:69:f9:69:d3:f4:44:cb:6e:a5:e6:a9:ca:c6:e2:
54:04:59:13:96:95:b4:17:bd:bf:73:07:c3:1f:b3:
1c:15:fc:b4:a0:d7:fe:39:9d:44:4d:3e:b3:93:01:
cf:67:09:9d:b4:d7:ac:fb:87:a4:9d:a2:4f:69:73:
26:48:8a:1c:5c:ba:95:7b:53:0d:b3:9f:a1:32:56:
e5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C6:49:35:D0:CF:EE:34:6B:61:13:C1:E6:2C:85:F7:6E:0B:C0:14
X509v3 Authority Key Identifier:
keyid:5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:7c:37:2e:c0:70:b7:c4:d0:17:20:f9:e1:2f:23:6c:dc:8c:
71:3c:9a:d5:06:2d:90:eb:72:82:9f:8f:02:e0:fe:1f:11:2c:
c4:bf:cc:46:96:b6:63:71:06:cd:4c:73:e7:e1:a2:02:cd:2e:
16:32:89:01:72:71:d3:39:b2:31:ca:67:ae:a4:54:60:72:c0:
29:2c:09:f6:cf:c9:6d:bc:99:84:27:40:a8:79:a7:25:c7:b5:
9c:5e:ed:7b:66:a9:92:df:d1:d8:8d:12:90:5f:f6:28:fc:27:
3e:b9:bb:5f:4d:4d:03:2d:7b:3e:c9:15:00:34:4c:15:fc:3f:
e3:49:18:32:62:8f:33:73:7d:ae:87:f3:d5:9d:c3:82:2f:ca:
66:a9:c8:43:9a:ab:5a:07:16:c3:c7:ee:27:9b:1a:5c:7e:f1:
6c:5f:13:87:8c:78:d6:de:dd:35:f4:da:39:7d:f0:26:55:3b:
53:d0:b5:1f:c6:78:d8:85:8d:df:8b:7b:0e:c9:81:6b:20:64:
d4:e2:7d:fc:af:9e:87:89:32:f7:14:7f:f4:39:57:e8:e3:db:
93:c4:dc:ca:98:32:dd:da:37:b5:90:4b:03:7e:54:d3:19:92:
25:13:09:7c:bd:25:54:c6:3b:bd:2c:8d:bb:c3:57:38:bf:f5:
02:dd:9e:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzpzmDdLvghatBUvZCQTI4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNjMxN2Y2OTM2ZTZiNTc4YjM4YzNkZmIxOTgwMjU0OThm
Y2FlYTEwHhcNMjUxMTExMTYwMjEwWhcNMjUxMTEyMTYwMjEwWjAzMTEwLwYDVQQD
EyhkZWM2NDkzNWQwY2ZlZTM0NmI2MTEzYzFlNjJjODVmNzZlMGJjMDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznxg8VoTvYZlysgLmPSf5WTTkriX
O5gCOI5NxpOav9DfUHnBKttTvlj5dIdsXWBCAGOuUzp35+CApWc5gEppeordk8qv
JnqlACZPMGbOWEFc0HlizvXhvpufNHeO4V4KF1gU+PsC1msaOQY8GZIiTayZiGU4
srz2jS8AdSnPAK82hm4zZJGKtdfNcL+XthhXwB4ksV3wlkhKOSH6wlQUsUAoZomA
IcT7tqz+X73RaTK8f0okaflp0/REy26l5qnKxuJUBFkTlpW0F72/cwfDH7McFfy0
oNf+OZ1ETT6zkwHPZwmdtNes+4eknaJPaXMmSIocXLqVe1MNs5+hMlblMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7GSTXQz+40a2ETweYshfduC8AUMB8GA1UdIwQY
MBaAFF1jF/aTbmtXizjD37GYAlSY/K6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFdNWDlwTnVhMWVMT01QZnNaZ0NWSmo4cnFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wMzQ5MGMtZWE0Ny00MDJhLThiYjAt
ZDU2NThkMGYzMjkyLzEvWFdNWDlwTnVhMWVMT01QZnNaZ0NWSmo4cnFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8wMzQ5MGMtZWE0Ny00MDJhLThiYjAtZDU2NThkMGYzMjky
LzEvWFdNWDlwTnVhMWVMT01QZnNaZ0NWSmo4cnFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApnw3LsBw
t8TQFyD54S8jbNyMcTya1QYtkOtygp+PAuD+HxEsxL/MRpa2Y3EGzUxz5+GiAs0u
FjKJAXJx0zmyMcpnrqRUYHLAKSwJ9s/JbbyZhCdAqHmnJce1nF7te2apkt/R2I0S
kF/2KPwnPrm7X01NAy17PskVADRMFfw/40kYMmKPM3N9rofz1Z3Dgi/KZqnIQ5qr
WgcWw8fuJ5saXH7xbF8Th4x41t7dNfTaOX3wJlU7U9C1H8Z42IWN34t7DsmBayBk
1OJ9/K+eh4ky9xR/9DlX6OPbk8Tcypgy3do3tZBLA35U0xmSJRMJfL0lVMY7vSyN
u8NXOL/1At2eNQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:39 2025 by rpki-client