Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
File: XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft (raw, json)
Hash identifier: db0SbIdVA+diC1wHBW9Kk2Qb7qcvAJIgP5D4MC4fbCc=
Subject key identifier: 66:FC:1F:79:3A:DE:54:C8:DB:67:29:16:01:E1:AE:47:BB:14:48:66
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial: 019A232E61DD6335BBFE7745A243C1AA6290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
Manifest number: 0EB7
Signing time: Mon 27 Oct 2025 01:00:33 +0000
Manifest this update: Mon 27 Oct 2025 01:00:33 +0000
Manifest next update: Tue 28 Oct 2025 01:00:33 +0000
Files and hashes: 1: AJZHmYeOjA6WzhCmkrG9-Q9R6e0.roa (hash: 2w9YT9FL9nWS9KMiSVT8Wf4Dme3XTUtS7KQ1r9kXdzY=)
2: IrihvyoC5WVtLyMsMa-SiimzVD4.roa (hash: jGXp7eSTl1p8h9SmYiq1Qn2/jPZ9ZUDFjn3K5+ZYCZI=)
3: XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl (hash: xOAN13wq+yf/oroVRTR//3enHDrgCq6Po0NVm+NUS0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:61:dd:63:35:bb:fe:77:45:a2:43:c1:aa:62:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Validity
Not Before: Oct 27 01:00:33 2025 GMT
Not After : Oct 28 01:00:33 2025 GMT
Subject: CN=66fc1f793ade54c8db67291601e1ae47bb144866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6a:8e:54:5e:04:4d:cd:5f:45:c8:1c:3a:c9:
92:73:dd:15:c2:89:5a:b3:a6:87:98:bc:b0:84:3c:
a3:78:d4:24:0e:be:28:46:3d:70:fb:ba:18:77:18:
92:c7:eb:1c:7b:01:a8:59:20:c8:a6:36:51:ce:0d:
fe:5e:2f:77:61:9e:df:4d:ce:2e:3c:ea:45:ba:6a:
41:f7:df:10:a9:ea:49:b5:6b:49:32:b4:43:e0:6d:
8a:13:a9:49:fc:28:a8:1b:88:5f:0a:46:60:55:93:
d6:3e:b8:71:9a:bb:73:f9:ca:2d:00:85:92:a9:7b:
6e:b0:e0:19:c4:19:29:1a:a5:db:87:98:12:d3:2c:
f4:22:09:72:f0:98:c0:a3:41:ca:c6:5f:1a:18:50:
f7:37:e1:0c:27:4e:9a:6f:1c:ce:d6:7d:96:28:d1:
78:21:85:d3:73:3e:eb:0b:4e:1b:f3:6d:02:64:fe:
cb:5d:95:ca:3d:6b:de:25:f0:fe:57:6b:4f:a9:f4:
92:5c:f6:24:9a:1e:8b:20:82:f2:42:82:d6:84:12:
a6:8d:95:88:43:ee:b1:48:d0:b8:2b:73:8e:08:97:
26:4e:57:40:31:a4:02:d1:1f:5d:3c:e3:55:f8:3e:
0e:be:e5:8a:93:a5:e7:c2:f9:55:c4:fb:c9:16:6d:
41:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FC:1F:79:3A:DE:54:C8:DB:67:29:16:01:E1:AE:47:BB:14:48:66
X509v3 Authority Key Identifier:
keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f9:63:3b:3a:b8:36:e4:78:8a:d3:0e:be:df:fe:bd:94:e3:
8d:66:4e:53:06:4e:d5:d9:b9:85:ac:2d:e5:cc:06:a1:1e:fc:
e9:97:25:c9:07:37:da:8b:4c:56:fe:23:e6:55:09:19:37:d0:
92:67:3f:0b:e1:57:16:34:ea:70:7f:c8:47:64:26:31:1f:c1:
7c:10:f4:0d:d7:40:d4:af:46:ed:24:e7:6e:a4:e9:03:ee:28:
ce:cb:29:97:d3:ed:b3:68:d3:0e:e7:d6:f4:5b:08:30:a3:03:
5c:cb:68:04:d5:46:00:c3:38:aa:d3:2e:32:71:45:af:50:8c:
3b:8a:4c:cb:db:92:97:bf:31:69:61:5b:99:91:2f:ef:58:0c:
3e:4a:94:92:57:46:9d:68:97:1f:bc:e3:68:4d:f5:26:71:57:
80:81:26:c6:b7:f6:01:70:cb:09:f9:49:bc:49:28:da:80:31:
61:ae:82:8d:f0:dc:ff:04:11:8c:ee:04:b0:8a:84:05:d1:d4:
ba:25:d6:57:96:87:7a:30:83:f6:1f:ec:22:5c:56:f5:49:ba:
92:b0:6c:d4:58:ab:c3:df:b1:b7:dc:27:a3:be:39:4f:a1:16:
b9:34:9d:3e:68:56:e8:b9:32:84:97:40:24:33:67:14:d8:04:
05:16:ee:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojLmHdYzW7/ndFokPBqmKQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNzQwMWYzMmNkMjgxNjk5ZmJlNGRjZjNiYjUwMmE2M2Ey
YTYwZGUwHhcNMjUxMDI3MDEwMDMzWhcNMjUxMDI4MDEwMDMzWjAzMTEwLwYDVQQD
Eyg2NmZjMWY3OTNhZGU1NGM4ZGI2NzI5MTYwMWUxYWU0N2JiMTQ0ODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GqOVF4ETc1fRcgcOsmSc90Vwola
s6aHmLywhDyjeNQkDr4oRj1w+7oYdxiSx+scewGoWSDIpjZRzg3+Xi93YZ7fTc4u
POpFumpB998QqepJtWtJMrRD4G2KE6lJ/CioG4hfCkZgVZPWPrhxmrtz+cotAIWS
qXtusOAZxBkpGqXbh5gS0yz0Igly8JjAo0HKxl8aGFD3N+EMJ06abxzO1n2WKNF4
IYXTcz7rC04b820CZP7LXZXKPWveJfD+V2tPqfSSXPYkmh6LIILyQoLWhBKmjZWI
Q+6xSNC4K3OOCJcmTldAMaQC0R9dPONV+D4OvuWKk6XnwvlVxPvJFm1BPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGb8H3k63lTI22cpFgHhrke7FEhmMB8GA1UdIwQY
MBaAFF50AfMs0oFpn75Nzzu1AqY6KmDeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xODg5OTQtMmQ0MC00YzQ4LWJhODgt
ZjYwNzBhNGFkODNhLzEvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8xODg5OTQtMmQ0MC00YzQ4LWJhODgtZjYwNzBhNGFkODNh
LzEvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPljOzq4
NuR4itMOvt/+vZTjjWZOUwZO1dm5hawt5cwGoR786ZclyQc32otMVv4j5lUJGTfQ
kmc/C+FXFjTqcH/IR2QmMR/BfBD0DddA1K9G7STnbqTpA+4ozsspl9Pts2jTDufW
9FsIMKMDXMtoBNVGAMM4qtMuMnFFr1CMO4pMy9uSl78xaWFbmZEv71gMPkqUkldG
nWiXH7zjaE31JnFXgIEmxrf2AXDLCflJvEko2oAxYa6CjfDc/wQRjO4EsIqEBdHU
uiXWV5aHejCD9h/sIlxW9Um6krBs1Firw9+xt9wno745T6EWuTSdPmhW6LkyhJdA
JDNnFNgEBRbunQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:20:55 2025 by rpki-client