Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
File: x8H9uvmsDlre7GCgkjxN1KAektw.mft (raw, json)
Hash identifier: RV6sHrSptafs+xLddtqKLa6two81CRvNh2KH79EbnIg=
Subject key identifier: 55:44:B8:27:6E:67:60:03:C4:0E:37:E4:2F:7D:B4:CD:0F:7C:54:EE
Authority key identifier: C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
Certificate issuer: /CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Certificate serial: 019A71EEC431B9CC1FA614C16A5BA177D730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 08:01:04 +0000
Manifest this update: Tue 11 Nov 2025 08:01:04 +0000
Manifest next update: Wed 12 Nov 2025 08:01:04 +0000
Files and hashes: 1: KuITA8F2JpisQKF630WYOsFc4wk.roa (hash: bB2rOvgz8hjIMe852Fv1qtbwAzNh+J9BjKdpPYjEPmg=)
2: x8H9uvmsDlre7GCgkjxN1KAektw.crl (hash: jE9kaKn/QzmWCwuNKFz9ncvC3WkfoybI39GGfv9OJkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c4:31:b9:cc:1f:a6:14:c1:6a:5b:a1:77:d7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Validity
Not Before: Nov 11 08:01:04 2025 GMT
Not After : Nov 12 08:01:04 2025 GMT
Subject: CN=5544b8276e676003c40e37e42f7db4cd0f7c54ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:38:c2:2e:b2:e3:d2:8f:ff:61:ff:40:f9:69:
65:8d:82:a4:26:40:2b:e7:20:a2:ad:f6:34:3f:92:
60:60:03:38:d1:f5:19:82:c0:33:d6:47:7e:5d:bd:
df:48:95:af:99:46:5b:22:af:d7:e7:ff:bd:80:e3:
ee:1a:95:02:f6:8c:42:34:49:80:52:9e:06:c9:b7:
93:a3:1a:2b:4e:8f:7d:06:f0:55:8b:1d:81:27:c1:
c7:62:37:e7:46:1d:9a:65:f1:00:56:c8:54:c4:50:
a9:68:b0:25:36:fa:1a:62:6b:d5:9a:28:7c:dc:14:
2d:f3:03:70:b0:5f:80:60:8d:3b:a5:48:f5:7d:4d:
2f:5a:b3:26:ac:b0:b4:eb:5b:8b:26:9d:1c:49:f0:
8d:fb:54:dd:56:b8:42:c4:d2:cd:36:68:a9:93:64:
8c:45:27:41:81:02:7a:bb:1f:e3:11:a4:c4:88:81:
ba:4f:98:94:f0:10:a0:47:d5:d2:81:7c:9f:a9:3d:
77:0b:76:1a:f9:ff:34:6d:77:e1:3b:0e:74:bb:55:
fa:45:b3:5f:c8:d9:14:73:86:63:2c:c0:d2:1b:d1:
d3:b6:ab:08:3a:63:ad:82:60:6c:d2:6e:85:96:3f:
54:e9:a6:cf:76:ff:37:e4:4e:18:67:9e:ad:ce:72:
a1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:44:B8:27:6E:67:60:03:C4:0E:37:E4:2F:7D:B4:CD:0F:7C:54:EE
X509v3 Authority Key Identifier:
keyid:C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:65:07:fb:b7:d6:fd:ca:f7:9b:63:91:1a:4f:4d:b4:73:1f:
b5:51:65:37:db:d1:84:18:8e:26:9a:04:93:cf:52:ae:25:5b:
07:96:db:b3:cf:98:3b:a9:bf:86:44:12:8a:79:08:dd:ce:bc:
8b:d5:57:df:ab:74:44:c1:7e:d4:83:fa:2e:d6:43:2c:31:d4:
e1:52:c0:6d:2e:fc:0c:5e:80:8b:86:d1:37:5a:c2:6d:c0:87:
3f:47:5f:5c:9a:42:66:8b:8e:de:63:6b:de:63:42:21:a2:43:
86:03:18:01:7d:d3:cc:99:3e:18:76:98:ce:7f:89:65:20:23:
c3:01:3b:87:c9:66:3b:20:97:31:9b:31:d7:de:ef:3b:0e:20:
8d:98:2d:b3:c1:ac:87:57:d4:3c:4d:59:48:40:75:d9:c3:72:
a1:b7:b3:4d:f4:f3:42:77:b8:99:bd:ea:e7:d6:2b:21:e4:6e:
a4:c8:e9:4f:b9:73:84:0e:33:c2:35:9f:36:e5:14:c2:cb:f6:
85:18:e6:08:a6:2e:30:8e:65:09:6c:6c:54:26:8e:ec:d2:9e:
9a:79:2e:c0:ae:41:bf:a3:58:6a:ad:3c:3d:c7:37:2c:e1:e7:
5c:11:ea:26:ec:02:f3:9a:83:f6:66:d1:ef:3b:5e:cd:a4:6d:
32:88:06:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7sQxucwfphTBaluhd9cwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YzFmZGJhZjlhYzBlNWFkZWVjNjBhMDkyM2M0ZGQ0YTAx
ZTkyZGMwHhcNMjUxMTExMDgwMTA0WhcNMjUxMTEyMDgwMTA0WjAzMTEwLwYDVQQD
Eyg1NTQ0YjgyNzZlNjc2MDAzYzQwZTM3ZTQyZjdkYjRjZDBmN2M1NGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TjCLrLj0o//Yf9A+WlljYKkJkAr
5yCirfY0P5JgYAM40fUZgsAz1kd+Xb3fSJWvmUZbIq/X5/+9gOPuGpUC9oxCNEmA
Up4GybeToxorTo99BvBVix2BJ8HHYjfnRh2aZfEAVshUxFCpaLAlNvoaYmvVmih8
3BQt8wNwsF+AYI07pUj1fU0vWrMmrLC061uLJp0cSfCN+1TdVrhCxNLNNmipk2SM
RSdBgQJ6ux/jEaTEiIG6T5iU8BCgR9XSgXyfqT13C3Ya+f80bXfhOw50u1X6RbNf
yNkUc4ZjLMDSG9HTtqsIOmOtgmBs0m6Flj9U6abPdv835E4YZ56tznKh2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVEuCduZ2ADxA435C99tM0PfFTuMB8GA1UdIwQY
MBaAFMfB/br5rA5a3uxgoJI8TdSgHpLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDhIOXV2bXNEbHJlN0dDZ2tqeE4xS0Fla3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi82YTI3MmItOGI2Zi00ZmUzLThmMjkt
ZjAwMjk4MTYwOTdlLzEveDhIOXV2bXNEbHJlN0dDZ2tqeE4xS0Fla3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi82YTI3MmItOGI2Zi00ZmUzLThmMjktZjAwMjk4MTYwOTdl
LzEveDhIOXV2bXNEbHJlN0dDZ2tqeE4xS0Fla3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGUH+7fW
/cr3m2ORGk9NtHMftVFlN9vRhBiOJpoEk89SriVbB5bbs8+YO6m/hkQSinkI3c68
i9VX36t0RMF+1IP6LtZDLDHU4VLAbS78DF6Ai4bRN1rCbcCHP0dfXJpCZouO3mNr
3mNCIaJDhgMYAX3TzJk+GHaYzn+JZSAjwwE7h8lmOyCXMZsx197vOw4gjZgts8Gs
h1fUPE1ZSEB12cNyobezTfTzQne4mb3q59YrIeRupMjpT7lzhA4zwjWfNuUUwsv2
hRjmCKYuMI5lCWxsVCaO7NKemnkuwK5Bv6NYaq08Pcc3LOHnXBHqJuwC85qD9mbR
7ztezaRtMogGJg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:26 2025 by rpki-client