Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
File: XQu-t4M73JvnJQYRV8A58qEPGoA.mft (raw, json)
Hash identifier: vvZ44bY7AVmWOTp+UNu4EXhUDwp/aSfUNTqh2UY0nbU=
Subject key identifier: F2:04:50:F7:58:87:4E:30:0A:C0:AB:02:AA:3C:F2:3E:4F:C5:11:CD
Authority key identifier: 5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
Certificate issuer: /CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Certificate serial: 019A73383456AAE3D420164275CABAB735D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 14:00:54 +0000
Manifest this update: Tue 11 Nov 2025 14:00:54 +0000
Manifest next update: Wed 12 Nov 2025 14:00:54 +0000
Files and hashes: 1: EhB6weKGJ4-421K8pUvkm2LrMKg.roa (hash: GehRK19n2FBgVxX0RORTYOeMQOvVei0ObqKHpANJ3js=)
2: XQu-t4M73JvnJQYRV8A58qEPGoA.crl (hash: BkOWx/uLZHU7CI2dzmqFyFGZLD8USoRbSx30dVLCANw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:34:56:aa:e3:d4:20:16:42:75:ca:ba:b7:35:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Validity
Not Before: Nov 11 14:00:54 2025 GMT
Not After : Nov 12 14:00:54 2025 GMT
Subject: CN=f20450f758874e300ac0ab02aa3cf23e4fc511cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:40:72:a9:af:54:ec:74:73:95:c7:42:87:
fd:40:74:31:3a:0b:04:cc:bb:d3:12:bb:70:66:5d:
d7:ff:43:82:b6:60:87:9c:71:ec:af:e6:74:69:55:
c1:5a:13:8c:5b:48:73:1d:bf:23:af:54:09:af:b0:
3e:21:3d:f2:1a:50:f5:38:93:80:3b:5a:2d:e1:62:
81:5f:ee:d7:1a:01:db:95:63:fa:47:61:9d:97:05:
46:3e:f9:70:03:00:3d:b5:63:4c:18:38:91:d3:c3:
65:42:bc:dc:48:05:64:5a:4d:5f:fd:a6:06:7b:58:
09:3a:fb:cd:4d:5a:a2:5f:e7:e8:49:f3:7e:cd:ff:
55:ff:89:6d:97:33:4b:10:f4:cf:2b:a7:04:d2:24:
80:fd:a1:eb:a0:a5:14:90:77:06:ef:13:b8:17:7e:
f5:c1:21:83:d4:94:cf:1e:01:1b:39:50:c6:a3:79:
2a:78:a6:e1:32:ee:91:28:92:09:69:88:df:38:52:
54:c4:88:54:49:31:bb:f2:4c:de:55:b4:e7:0a:85:
6c:f3:6c:f4:15:f2:48:c9:06:c6:93:07:04:a3:c1:
e9:c3:bc:40:39:02:27:1e:45:8b:ac:b7:ee:98:b3:
ab:13:b6:04:7c:c9:bd:31:38:58:87:e9:d7:c1:89:
40:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:04:50:F7:58:87:4E:30:0A:C0:AB:02:AA:3C:F2:3E:4F:C5:11:CD
X509v3 Authority Key Identifier:
keyid:5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:79:c9:3a:df:07:cd:4e:4d:0f:f1:18:25:a8:f6:20:da:e2:
ca:40:07:d6:87:11:3c:5e:40:f4:1c:17:e3:a5:7c:2f:a8:29:
b6:44:5d:69:49:ec:cb:5c:71:61:91:9b:31:b5:0d:dc:b6:d6:
80:b3:03:78:20:ed:4e:6b:99:7b:20:92:69:64:37:33:78:05:
46:7a:66:4c:33:22:9b:8c:53:39:94:8f:48:af:b4:93:48:bf:
7b:3f:b2:73:ec:95:bf:81:32:c8:90:64:5a:a7:c9:50:e4:b6:
fb:8d:49:d2:ff:2f:2a:47:02:64:fb:c2:55:dd:ca:f7:a8:69:
58:c8:69:08:cf:43:0f:79:0c:ee:78:3b:e6:8b:50:71:ec:cc:
6c:1e:87:d1:27:4b:01:60:03:c3:60:e2:9d:af:78:0f:c5:05:
98:af:a1:79:2f:93:3f:77:64:cd:33:17:71:42:12:77:fa:8d:
7f:db:68:d1:bf:20:8f:a6:fb:48:86:83:11:1b:9c:f3:e9:d6:
77:8a:02:fb:19:0b:b0:39:29:c2:b4:ae:87:aa:08:89:0d:35:
b3:eb:be:ba:2f:8d:b0:58:b1:c7:eb:c6:27:b0:83:68:4f:b8:
08:9e:42:bd:cf:16:68:9c:b1:da:42:d4:65:72:fc:e5:c3:a1:
87:ed:9d:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzODRWquPUIBZCdcq6tzXQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMGJiZWI3ODMzYmRjOWJlNzI1MDYxMTU3YzAzOWYyYTEw
ZjFhODAwHhcNMjUxMTExMTQwMDU0WhcNMjUxMTEyMTQwMDU0WjAzMTEwLwYDVQQD
EyhmMjA0NTBmNzU4ODc0ZTMwMGFjMGFiMDJhYTNjZjIzZTRmYzUxMWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIlAcqmvVOx0c5XHQof9QHQxOgsE
zLvTErtwZl3X/0OCtmCHnHHsr+Z0aVXBWhOMW0hzHb8jr1QJr7A+IT3yGlD1OJOA
O1ot4WKBX+7XGgHblWP6R2GdlwVGPvlwAwA9tWNMGDiR08NlQrzcSAVkWk1f/aYG
e1gJOvvNTVqiX+foSfN+zf9V/4ltlzNLEPTPK6cE0iSA/aHroKUUkHcG7xO4F371
wSGD1JTPHgEbOVDGo3kqeKbhMu6RKJIJaYjfOFJUxIhUSTG78kzeVbTnCoVs82z0
FfJIyQbGkwcEo8Hpw7xAOQInHkWLrLfumLOrE7YEfMm9MThYh+nXwYlAqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIEUPdYh04wCsCrAqo88j5PxRHNMB8GA1UdIwQY
MBaAFF0LvreDO9yb5yUGEVfAOfKhDxqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFF1LXQ0TTczSnZuSlFZUlY4QTU4cUVQR29BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kMmMwOGYtNWZmMy00OTgyLWI1N2It
NjMxYzZkMDllODQ1LzEvWFF1LXQ0TTczSnZuSlFZUlY4QTU4cUVQR29BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9kMmMwOGYtNWZmMy00OTgyLWI1N2ItNjMxYzZkMDllODQ1
LzEvWFF1LXQ0TTczSnZuSlFZUlY4QTU4cUVQR29BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnnJOt8H
zU5ND/EYJaj2INriykAH1ocRPF5A9BwX46V8L6gptkRdaUnsy1xxYZGbMbUN3LbW
gLMDeCDtTmuZeyCSaWQ3M3gFRnpmTDMim4xTOZSPSK+0k0i/ez+yc+yVv4EyyJBk
WqfJUOS2+41J0v8vKkcCZPvCVd3K96hpWMhpCM9DD3kM7ng75otQcezMbB6H0SdL
AWADw2Dina94D8UFmK+heS+TP3dkzTMXcUISd/qNf9to0b8gj6b7SIaDERuc8+nW
d4oC+xkLsDkpwrSuh6oIiQ01s+u+ui+NsFixx+vGJ7CDaE+4CJ5Cvc8WaJyx2kLU
ZXL85cOhh+2dfA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:48 2025 by rpki-client