Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
File: xEGuJhLSUnFnyD96_Bb15nTYiw8.mft (raw, json)
Hash identifier: xT/Pu/Lp+2D/VeBwg/KEcP3ofvvtSvJqAYkwGaui6Jg=
Subject key identifier: A5:AB:1F:95:73:41:22:72:CA:2A:F0:FD:B0:36:07:21:A6:92:2A:A7
Authority key identifier: C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F
Certificate issuer: /CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
Certificate serial: 019A70A55973569D9540A0EC378D8CBE0E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 02:01:15 +0000
Manifest this update: Tue 11 Nov 2025 02:01:15 +0000
Manifest next update: Wed 12 Nov 2025 02:01:15 +0000
Files and hashes: 1: Z27odeAw_NXJehyB-fy3FNRc6to.roa (hash: AQOZKpMALx7C9oCtz366eVXQquGIlXipPb9ncWEUe5g=)
2: xEGuJhLSUnFnyD96_Bb15nTYiw8.crl (hash: 8yyhRggIHHLv0VQ72f9siU89HKapojY5oHkuDeMpiKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:59:73:56:9d:95:40:a0:ec:37:8d:8c:be:0e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
Validity
Not Before: Nov 11 02:01:15 2025 GMT
Not After : Nov 12 02:01:15 2025 GMT
Subject: CN=a5ab1f9573412272ca2af0fdb0360721a6922aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:a2:63:ca:7e:01:ed:22:6e:3f:ad:23:72:
f6:23:df:35:e1:f6:51:0c:cc:88:94:d5:5a:48:8e:
43:dd:8c:ae:f6:c7:ba:59:d0:87:b0:20:da:90:de:
6b:f9:cc:c2:9d:d0:07:57:5c:f6:81:54:02:6a:af:
eb:8f:68:74:c6:75:00:ad:14:43:bd:99:8f:6e:f1:
9e:a2:65:a6:e2:05:e8:cd:97:e1:87:25:bb:13:c8:
0f:1f:f6:1d:84:64:2f:8c:6e:93:82:e0:c9:91:07:
97:e2:9e:11:1a:b4:f9:31:05:bd:94:9e:81:e1:d3:
e5:57:7e:3c:38:dd:d6:21:04:99:70:2e:e6:92:66:
57:ef:3b:84:9a:bf:6e:27:9f:d6:bc:a1:97:0e:8e:
8a:2f:49:44:a2:0e:ff:c2:6f:fd:44:f0:f4:28:eb:
a0:55:b6:f0:cc:6e:8b:79:f5:4c:71:a0:3e:03:c3:
f6:d4:84:b0:63:de:f5:b9:5c:28:7f:2b:f2:f6:4a:
9f:7f:c1:c1:9a:f4:68:7a:fe:d2:e6:fd:75:39:76:
50:0e:e8:9c:04:de:1d:75:82:97:6c:29:45:5e:a0:
bb:ef:06:2d:5a:48:a8:df:6b:a7:4e:16:47:ba:7a:
18:c1:46:e6:0f:34:73:d9:05:bb:e7:42:e9:02:75:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AB:1F:95:73:41:22:72:CA:2A:F0:FD:B0:36:07:21:A6:92:2A:A7
X509v3 Authority Key Identifier:
keyid:C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:cb:53:24:f1:cd:a9:15:0a:8f:0a:aa:09:c2:57:b6:44:25:
23:a0:37:32:c0:b6:19:7a:bb:f5:42:e3:38:cb:7a:93:4d:74:
8f:b8:c2:fe:f6:10:37:5f:b1:94:0e:fb:c3:9b:33:79:5b:f3:
b2:42:f7:72:81:bf:5f:1e:e8:85:e7:5f:da:04:e7:33:8b:20:
3c:50:c1:6f:d6:0b:a5:95:30:79:b7:8e:20:9c:33:7e:6f:47:
5c:c3:ee:93:b0:24:c9:3b:3b:64:26:a4:70:70:4e:05:e0:2f:
57:6b:37:0b:4c:56:e4:64:0e:ff:93:fa:b8:bb:34:65:cc:b3:
21:ce:dc:90:6c:cd:14:54:64:0c:4c:ee:4e:af:95:41:84:d5:
c9:c1:69:1d:f2:53:78:7e:c0:c3:0a:1a:b1:6f:81:d6:58:69:
12:52:f1:9c:04:b9:45:70:e9:21:be:1a:b4:7b:2f:9e:e6:ec:
62:77:02:d1:99:2a:93:67:79:c7:d7:ac:5a:57:99:61:b8:96:
90:4c:9b:76:da:12:5d:e7:55:ea:0f:11:a1:92:47:82:22:e4:
31:1d:f9:92:af:30:42:4f:cf:1d:61:89:e0:08:c8:4a:fd:2f:
3f:8c:48:40:1c:d5:ed:c4:69:69:d0:6f:3c:59:7e:00:c9:e0:
ae:33:fb:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpVlzVp2VQKDsN42Mvg6KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NDFhZTI2MTJkMjUyNzE2N2M4M2Y3YWZjMTZmNWU2NzRk
ODhiMGYwHhcNMjUxMTExMDIwMTE1WhcNMjUxMTEyMDIwMTE1WjAzMTEwLwYDVQQD
EyhhNWFiMWY5NTczNDEyMjcyY2EyYWYwZmRiMDM2MDcyMWE2OTIyYWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMqiY8p+Ae0ibj+tI3L2I9814fZR
DMyIlNVaSI5D3Yyu9se6WdCHsCDakN5r+czCndAHV1z2gVQCaq/rj2h0xnUArRRD
vZmPbvGeomWm4gXozZfhhyW7E8gPH/YdhGQvjG6TguDJkQeX4p4RGrT5MQW9lJ6B
4dPlV348ON3WIQSZcC7mkmZX7zuEmr9uJ5/WvKGXDo6KL0lEog7/wm/9RPD0KOug
VbbwzG6LefVMcaA+A8P21ISwY971uVwofyvy9kqff8HBmvRoev7S5v11OXZQDuic
BN4ddYKXbClFXqC77wYtWkio32unThZHunoYwUbmDzRz2QW750LpAnX5RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWrH5VzQSJyyirw/bA2ByGmkiqnMB8GA1UdIwQY
MBaAFMRBriYS0lJxZ8g/evwW9eZ02IsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEVHdUpoTFNVbkZueUQ5Nl9CYjE1blRZaXc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lY2RlM2UtMWZjZi00NTMxLWIwZjkt
MjRlN2U2YWRhMWUyLzEveEVHdUpoTFNVbkZueUQ5Nl9CYjE1blRZaXc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9lY2RlM2UtMWZjZi00NTMxLWIwZjktMjRlN2U2YWRhMWUy
LzEveEVHdUpoTFNVbkZueUQ5Nl9CYjE1blRZaXc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGstTJPHN
qRUKjwqqCcJXtkQlI6A3MsC2GXq79ULjOMt6k010j7jC/vYQN1+xlA77w5szeVvz
skL3coG/Xx7ohedf2gTnM4sgPFDBb9YLpZUwebeOIJwzfm9HXMPuk7AkyTs7ZCak
cHBOBeAvV2s3C0xW5GQO/5P6uLs0ZcyzIc7ckGzNFFRkDEzuTq+VQYTVycFpHfJT
eH7AwwoasW+B1lhpElLxnAS5RXDpIb4atHsvnubsYncC0Zkqk2d5x9esWleZYbiW
kEybdtoSXedV6g8RoZJHgiLkMR35kq8wQk/PHWGJ4AjISv0vP4xIQBzV7cRpadBv
PFl+AMngrjP7gA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:29 2025 by rpki-client