Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
File: XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft (raw, json)
Hash identifier: FYxjgY8NzeFZ7l1s/VfoRkJ80ecYWbrrZe014GZW9g4=
Subject key identifier: 6A:AD:BC:E6:F8:FD:84:20:F6:13:66:5D:46:AB:5B:B7:F8:29:72:78
Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Certificate serial: 019A72264690E2FAB7414DE58DFCD452731D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
Manifest number: 021D
Signing time: Tue 11 Nov 2025 09:01:42 +0000
Manifest this update: Tue 11 Nov 2025 09:01:42 +0000
Manifest next update: Wed 12 Nov 2025 09:01:42 +0000
Files and hashes: 1: XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl (hash: RNv5JCRMxqyQUsqlWUdjYgEyHHvaixQaCczMCxDDR8M=)
2: Zwspllzg46eGGBAmk75fKGUNIMs.roa (hash: SP7acjr2fc/Seb508pgEvQAcmNKQjk7dz5FLGa5z8Eg=)
3: lWrjnOhkdLngH_rNw8_j4YqaRQo.roa (hash: K4bxS+l7j2oByKFzgDdI5RTjLvC4BrOSJXUtlpmQdfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:46:90:e2:fa:b7:41:4d:e5:8d:fc:d4:52:73:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Validity
Not Before: Nov 11 09:01:42 2025 GMT
Not After : Nov 12 09:01:42 2025 GMT
Subject: CN=6aadbce6f8fd8420f613665d46ab5bb7f8297278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:df:36:bc:1d:4c:c8:2f:ae:5b:ee:18:db:
c9:ba:10:bc:cb:9a:9f:ca:b6:a3:35:7b:40:1b:c0:
ca:1a:a9:6c:1e:37:98:3b:47:11:61:20:3f:c6:4a:
5b:71:11:70:32:bd:d6:0d:99:d2:9d:3d:2b:f5:5d:
1d:65:10:4d:c8:3f:32:cb:de:ee:c5:8d:9e:87:7b:
40:8f:0b:ea:1c:d4:94:a5:8d:2a:aa:a5:5f:87:22:
39:3c:89:83:16:76:9c:99:58:d7:2b:50:be:9f:b9:
0f:dc:1e:91:e2:27:71:99:92:0f:46:5a:7d:75:80:
2c:32:f3:60:17:c5:c3:3c:12:20:dd:ac:91:dd:2f:
ab:bd:1f:a6:31:4c:6a:14:a2:21:ee:70:85:d2:70:
f4:1a:c6:fb:d0:bc:10:a0:bb:ca:a5:f8:c6:5b:a3:
41:24:8c:84:01:4f:90:53:76:47:52:99:ab:d2:17:
22:22:f0:35:5b:2d:24:6e:75:2a:81:3c:4c:47:d0:
8d:63:12:88:8a:8d:1d:dd:81:ed:ae:25:91:f1:56:
f0:8e:da:49:04:a6:83:ba:7f:4d:30:d9:05:c3:e5:
85:ff:49:28:4f:9d:b7:2a:4e:54:5b:f0:09:09:ef:
ae:25:2e:4d:28:17:11:c5:bf:04:27:c3:df:bb:3c:
e6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AD:BC:E6:F8:FD:84:20:F6:13:66:5D:46:AB:5B:B7:F8:29:72:78
X509v3 Authority Key Identifier:
keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f4:fe:4d:4f:9b:82:54:56:4b:66:a4:78:bb:d4:98:49:6d:
fb:b3:cb:27:94:e3:d8:b8:3b:7e:50:33:b3:57:e7:3c:e8:b9:
9c:d9:e0:d9:f6:a2:94:b0:67:6f:0e:af:3a:f0:4e:17:fc:fa:
e9:19:8f:42:93:99:a1:3b:8e:5e:94:14:dd:6a:75:54:f3:36:
49:3c:d7:0a:4c:89:92:f7:bb:6b:f8:82:de:08:3c:83:1d:b8:
de:43:f5:1d:c5:54:6a:82:91:fd:98:83:65:2d:fa:d5:19:92:
be:bb:54:d7:12:24:cd:3a:31:72:20:17:64:10:a6:5c:39:11:
af:a1:1e:fd:91:9a:e8:d7:1b:f5:e8:cf:4f:7b:a0:42:b0:ca:
2d:f1:3a:cb:91:a5:53:5c:a7:dd:88:30:2e:4c:6f:13:39:06:
67:39:5b:2b:fb:58:5f:67:9f:6c:50:81:77:a7:9e:d3:04:28:
3a:fc:23:bd:e2:fd:3b:a8:fe:a6:61:06:2a:7c:79:0a:16:cb:
1d:e4:02:a5:3e:3e:be:76:c9:62:63:2d:a3:d5:ee:ac:14:ab:
c6:3d:1f:00:ae:c0:98:47:30:c4:a3:d5:7a:a3:2d:7d:f1:db:
3f:30:1f:e0:62:ce:9e:3b:e7:7c:64:67:67:14:a6:77:a6:a6:
a8:ca:95:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJkaQ4vq3QU3ljfzUUnMdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMDIxMWM5MWU5ZTBkMzVjYjUxMzM0NTkxM2UwYTFhNjFi
ZmQyNDkwHhcNMjUxMTExMDkwMTQyWhcNMjUxMTEyMDkwMTQyWjAzMTEwLwYDVQQD
Eyg2YWFkYmNlNmY4ZmQ4NDIwZjYxMzY2NWQ0NmFiNWJiN2Y4Mjk3Mjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquffNrwdTMgvrlvuGNvJuhC8y5qf
yrajNXtAG8DKGqlsHjeYO0cRYSA/xkpbcRFwMr3WDZnSnT0r9V0dZRBNyD8yy97u
xY2eh3tAjwvqHNSUpY0qqqVfhyI5PImDFnacmVjXK1C+n7kP3B6R4idxmZIPRlp9
dYAsMvNgF8XDPBIg3ayR3S+rvR+mMUxqFKIh7nCF0nD0Gsb70LwQoLvKpfjGW6NB
JIyEAU+QU3ZHUpmr0hciIvA1Wy0kbnUqgTxMR9CNYxKIio0d3YHtriWR8VbwjtpJ
BKaDun9NMNkFw+WF/0koT523Kk5UW/AJCe+uJS5NKBcRxb8EJ8PfuzzmeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqtvOb4/YQg9hNmXUarW7f4KXJ4MB8GA1UdIwQY
MBaAFF8CEckeng01y1EzRZE+Chphv9JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82NmQwNTctNzdlNS00MjQxLTgwYWEt
MjFmZDM1Y2Y0YmI5LzEvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny82NmQwNTctNzdlNS00MjQxLTgwYWEtMjFmZDM1Y2Y0YmI5
LzEvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/T+TU+b
glRWS2akeLvUmElt+7PLJ5Tj2Lg7flAzs1fnPOi5nNng2failLBnbw6vOvBOF/z6
6RmPQpOZoTuOXpQU3Wp1VPM2STzXCkyJkve7a/iC3gg8gx243kP1HcVUaoKR/ZiD
ZS361RmSvrtU1xIkzToxciAXZBCmXDkRr6Ee/ZGa6Ncb9ejPT3ugQrDKLfE6y5Gl
U1yn3YgwLkxvEzkGZzlbK/tYX2efbFCBd6ee0wQoOvwjveL9O6j+pmEGKnx5ChbL
HeQCpT4+vnbJYmMto9XurBSrxj0fAK7AmEcwxKPVeqMtffHbPzAf4GLOnjvnfGRn
ZxSmd6amqMqVOA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:21 2025 by rpki-client