Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
File: xHqEBhZxYD3cKujuqcrVHudarsY.mft (raw, json)
Hash identifier: KSjBS6+2dVW26tuSQlQEG2wG3HqATvWPZiYlUOzrk/s=
Subject key identifier: ED:64:9C:FD:D0:54:3E:DE:F4:36:89:AD:77:D1:FA:D4:3C:77:E1:E8
Authority key identifier: C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
Certificate issuer: /CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Certificate serial: 019A71B80C125749372A8ADF7848B9683C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:01:18 +0000
Manifest this update: Tue 11 Nov 2025 07:01:18 +0000
Manifest next update: Wed 12 Nov 2025 07:01:18 +0000
Files and hashes: 1: 1G_BWf-F8T8J8X8N9NNB4K_YYMY.roa (hash: kKD9/wMia+gnqXI1OLYz+C+9k0a7eBZ1ba1nm7Hyp0A=)
2: xHqEBhZxYD3cKujuqcrVHudarsY.crl (hash: 0S3RmqX3iGyy+TkHWjc/yhYwNbWNkovqh5gXuCOlGHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:0c:12:57:49:37:2a:8a:df:78:48:b9:68:3c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6
Validity
Not Before: Nov 11 07:01:18 2025 GMT
Not After : Nov 12 07:01:18 2025 GMT
Subject: CN=ed649cfdd0543edef43689ad77d1fad43c77e1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e0:f8:3d:75:1d:c8:e9:1a:9a:d5:ad:94:fd:
4e:6c:c9:51:c2:c5:a7:cf:16:8d:ea:88:53:05:e4:
01:67:50:4d:02:67:61:ad:a7:a0:d0:a4:f8:8f:b2:
b8:58:9a:6b:d2:9a:d7:6d:63:d5:c5:81:94:2c:6b:
5e:ef:6e:16:a3:99:46:68:df:37:40:7a:de:1e:77:
6c:fb:df:49:c7:a3:c3:cb:07:36:b5:6d:29:60:8d:
3b:f0:9b:6e:98:b9:fa:d8:bb:e3:a1:af:bd:ca:f6:
da:36:89:2d:6f:69:b5:0f:d8:bb:c3:e4:b7:90:a4:
29:3e:0d:0a:85:42:ef:df:f2:75:38:d5:ce:24:3e:
88:74:b0:a5:41:c3:74:98:ac:01:90:d2:15:bb:3c:
aa:fa:0f:e3:2f:64:ab:92:e9:82:64:7e:ac:9c:b4:
5e:22:06:f7:5b:5f:95:56:6a:5e:4f:ed:02:e9:d0:
25:0b:31:5d:5c:a8:12:6a:da:a9:86:a7:03:6d:6a:
27:f1:ef:3a:4c:1b:82:a5:0d:32:a6:2b:57:23:e0:
34:68:2b:79:58:a9:21:13:3e:5b:fb:46:49:f6:26:
8c:ae:3f:a8:16:bb:ea:71:d9:dc:0d:2f:32:00:57:
0e:8c:e1:40:7b:ef:bf:08:31:6a:59:a7:c9:29:84:
0e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:64:9C:FD:D0:54:3E:DE:F4:36:89:AD:77:D1:FA:D4:3C:77:E1:E8
X509v3 Authority Key Identifier:
keyid:C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:74:bc:95:da:06:8c:10:1d:ec:bf:49:96:a6:1f:b1:23:73:
8c:81:1c:2a:cb:9f:cb:74:6f:f7:16:18:cb:75:75:16:fd:47:
90:2d:be:8d:bb:1e:7b:36:09:98:7d:c8:34:e7:05:0e:89:88:
81:84:41:e0:1a:9b:13:05:98:70:bd:3a:c4:42:3e:c6:c5:8c:
03:44:21:ca:f6:66:b0:2a:9b:8b:1f:8b:15:05:44:a9:5c:e4:
c7:95:42:90:42:61:7d:29:99:6c:31:57:f5:49:0e:59:fb:99:
29:67:f3:ff:a4:e6:71:98:e0:24:17:69:74:cb:14:61:63:5c:
4e:26:24:f6:a5:46:d7:13:7a:19:41:77:a4:d9:3a:58:2c:a8:
d0:09:16:d8:b0:f4:ac:94:cc:e7:17:b8:45:cb:36:1e:d8:92:
1b:97:dc:2a:d1:4a:cb:eb:2a:a4:30:bf:1e:52:27:c3:0f:38:
80:58:88:0f:e0:0d:18:53:0a:65:83:40:e5:07:1c:75:b8:fb:
e2:bd:a6:03:1a:84:6c:a4:44:7e:5b:b7:4f:64:1d:57:c4:a1:
c4:a5:42:7d:0b:fc:07:3b:34:a0:20:23:b0:da:67:40:02:f0:
e0:5f:16:b8:1e:36:52:80:a8:63:4d:48:b8:b9:e4:cb:7b:cb:
4f:c4:57:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuAwSV0k3KorfeEi5aDwmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0N2E4NDA2MTY3MTYwM2RkYzJhZThlZWE5Y2FkNTFlZTc1
YWFlYzYwHhcNMjUxMTExMDcwMTE4WhcNMjUxMTEyMDcwMTE4WjAzMTEwLwYDVQQD
EyhlZDY0OWNmZGQwNTQzZWRlZjQzNjg5YWQ3N2QxZmFkNDNjNzdlMWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+D4PXUdyOkamtWtlP1ObMlRwsWn
zxaN6ohTBeQBZ1BNAmdhraeg0KT4j7K4WJpr0prXbWPVxYGULGte724Wo5lGaN83
QHreHnds+99Jx6PDywc2tW0pYI078JtumLn62Lvjoa+9yvbaNoktb2m1D9i7w+S3
kKQpPg0KhULv3/J1ONXOJD6IdLClQcN0mKwBkNIVuzyq+g/jL2SrkumCZH6snLRe
Igb3W1+VVmpeT+0C6dAlCzFdXKgSatqphqcDbWon8e86TBuCpQ0ypitXI+A0aCt5
WKkhEz5b+0ZJ9iaMrj+oFrvqcdncDS8yAFcOjOFAe++/CDFqWafJKYQO8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1knP3QVD7e9DaJrXfR+tQ8d+HoMB8GA1UdIwQY
MBaAFMR6hAYWcWA93Cro7qnK1R7nWq7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEhxRUJoWnhZRDNjS3VqdXFjclZIdWRhcnNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC81M2YyNTItZjNmZS00NjdhLWJjY2Yt
YjI5MWY5N2I3MDk2LzEveEhxRUJoWnhZRDNjS3VqdXFjclZIdWRhcnNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC81M2YyNTItZjNmZS00NjdhLWJjY2YtYjI5MWY5N2I3MDk2
LzEveEhxRUJoWnhZRDNjS3VqdXFjclZIdWRhcnNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHS8ldoG
jBAd7L9JlqYfsSNzjIEcKsufy3Rv9xYYy3V1Fv1HkC2+jbseezYJmH3INOcFDomI
gYRB4BqbEwWYcL06xEI+xsWMA0QhyvZmsCqbix+LFQVEqVzkx5VCkEJhfSmZbDFX
9UkOWfuZKWfz/6TmcZjgJBdpdMsUYWNcTiYk9qVG1xN6GUF3pNk6WCyo0AkW2LD0
rJTM5xe4Rcs2HtiSG5fcKtFKy+sqpDC/HlInww84gFiID+ANGFMKZYNA5Qccdbj7
4r2mAxqEbKREflu3T2QdV8ShxKVCfQv8Bzs0oCAjsNpnQALw4F8WuB42UoCoY01I
uLnky3vLT8RXjA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:16 2025 by rpki-client