Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
File: xyIeQCmYq8HwNUdeFYt06MdpIMA.mft (raw, json)
Hash identifier: t0yEWWGAzv/MUUlGArckN6kq4Gcx2qqPlaYUdZmCz4s=
Subject key identifier: D1:36:A5:F7:A6:D2:10:B3:53:1C:C5:15:BC:A1:F7:5E:4E:79:59:22
Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
Certificate issuer: /CN=c7221e402998abc1f035475e158b74e8c76920c0
Certificate serial: 019A2A79E296E00012E2D676320C89695DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
Manifest number: 16FC
Signing time: Tue 28 Oct 2025 11:00:22 +0000
Manifest this update: Tue 28 Oct 2025 11:00:22 +0000
Manifest next update: Wed 29 Oct 2025 11:00:22 +0000
Files and hashes: 1: FIv37bh0ZRTnGv0_RzWoQo8NJHg.roa (hash: 7fKZSi422ANEwoYfgRX2lfWBp8KGEhw9eJL3r9FHZjI=)
2: mWhSvkUBXsFafV4R5CtF1RFCi98.roa (hash: SLf4YYuqQC736cXUt3YUMZMsShhNwZceRr+OVNF0Bxc=)
3: xyIeQCmYq8HwNUdeFYt06MdpIMA.crl (hash: KjEfbjxyXxU7lGkN3AA4yb/vclr5110ZlQ2yTFlh2wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:79:e2:96:e0:00:12:e2:d6:76:32:0c:89:69:5d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0
Validity
Not Before: Oct 28 11:00:22 2025 GMT
Not After : Oct 29 11:00:22 2025 GMT
Subject: CN=d136a5f7a6d210b3531cc515bca1f75e4e795922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:2a:e4:ca:99:07:d2:c9:ca:c5:b5:fd:62:
e6:22:b2:47:7c:d1:ad:3b:61:b7:79:89:7f:e3:09:
7a:4d:f6:1e:25:15:e0:89:da:fb:ba:ff:ca:42:d4:
e3:2c:51:e2:94:a4:98:d1:e4:a0:7c:a8:11:c7:67:
95:ac:63:79:7a:b2:e7:36:b4:fe:9b:42:ae:bb:40:
e2:6b:2c:fa:81:16:f4:ce:7c:9d:23:96:2f:c6:d5:
93:38:bd:4b:ca:35:17:93:09:5b:99:d4:19:85:68:
e9:95:97:40:24:da:33:97:2d:9c:ab:fc:da:06:be:
f8:cb:63:b3:1a:0c:c3:de:82:01:d0:2d:54:63:12:
7c:27:10:00:ba:ae:22:c2:f7:75:4a:c2:2f:02:e3:
a6:c7:53:8d:71:6d:0e:46:00:4b:3d:7c:ff:8f:ed:
29:66:3d:f7:2b:5f:60:33:c7:e5:6a:f0:63:f4:4b:
47:82:ea:f4:6e:83:40:d6:79:d4:f3:fa:01:b8:77:
0f:42:c9:ba:9d:b6:61:b3:7d:7d:9e:0e:f1:80:f1:
d9:44:04:10:3e:0c:0b:28:53:9a:06:4a:7d:5b:05:
de:96:32:ba:4a:f2:7b:74:45:35:72:ce:67:f5:df:
8d:0e:f4:c4:33:0b:6e:4e:f5:ed:ab:46:ae:a3:00:
0f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:36:A5:F7:A6:D2:10:B3:53:1C:C5:15:BC:A1:F7:5E:4E:79:59:22
X509v3 Authority Key Identifier:
keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5b:a7:d3:b5:1b:e0:af:96:05:b8:3c:5e:61:a6:82:cb:72:
c4:be:b7:77:00:49:e4:89:ee:c1:12:53:7d:f2:cb:63:67:5b:
fb:45:f4:b1:a8:97:d6:13:b7:bd:20:a1:b2:35:29:7c:fa:91:
3e:0c:a2:da:5e:23:5c:8d:af:f2:71:52:d9:c4:6d:fc:11:25:
dc:3c:e9:c9:4f:f0:72:dd:2d:2b:56:ad:42:8f:b8:fa:e4:23:
54:26:6b:84:9b:7a:c2:d6:36:68:a1:46:4d:de:f8:32:d5:12:
97:a5:03:fe:ed:11:d4:4d:f4:9e:19:56:26:8f:d8:94:5a:e2:
3d:71:9a:ef:ef:ae:bf:17:98:28:70:a9:9c:db:11:8f:2f:67:
89:03:6e:1f:f3:b9:ae:22:99:f6:21:64:1e:96:9f:69:37:42:
b1:bb:62:82:08:08:3b:eb:6e:28:ba:18:f6:03:15:de:8d:ee:
47:3b:38:d5:33:df:1b:11:c0:48:fd:68:13:5e:48:91:4b:94:
6a:9d:79:5a:98:35:48:65:51:e9:aa:a6:23:b1:b1:b1:a9:66:
45:c9:ea:b7:a7:55:de:f8:a0:aa:68:c2:49:53:b6:4b:6a:b1:
75:ca:75:0b:05:bb:07:bc:60:2e:50:06:8d:5a:fd:99:02:37:
64:65:70:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqeeKW4AAS4tZ2MgyJaV3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MjIxZTQwMjk5OGFiYzFmMDM1NDc1ZTE1OGI3NGU4Yzc2
OTIwYzAwHhcNMjUxMDI4MTEwMDIyWhcNMjUxMDI5MTEwMDIyWjAzMTEwLwYDVQQD
EyhkMTM2YTVmN2E2ZDIxMGIzNTMxY2M1MTViY2ExZjc1ZTRlNzk1OTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz04q5MqZB9LJysW1/WLmIrJHfNGt
O2G3eYl/4wl6TfYeJRXgidr7uv/KQtTjLFHilKSY0eSgfKgRx2eVrGN5erLnNrT+
m0Kuu0Diayz6gRb0znydI5YvxtWTOL1LyjUXkwlbmdQZhWjplZdAJNozly2cq/za
Br74y2OzGgzD3oIB0C1UYxJ8JxAAuq4iwvd1SsIvAuOmx1ONcW0ORgBLPXz/j+0p
Zj33K19gM8flavBj9EtHgur0boNA1nnU8/oBuHcPQsm6nbZhs319ng7xgPHZRAQQ
PgwLKFOaBkp9WwXeljK6SvJ7dEU1cs5n9d+NDvTEMwtuTvXtq0auowAPdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNE2pfem0hCzUxzFFbyh915OeVkiMB8GA1UdIwQY
MBaAFMciHkApmKvB8DVHXhWLdOjHaSDAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHlJZVFDbVlxOEh3TlVkZUZZdDA2TWRwSU1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lOWNhN2EtNDExYy00M2E4LTk1MmYt
Y2M1NDA2MDhjNDFkLzEveHlJZVFDbVlxOEh3TlVkZUZZdDA2TWRwSU1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9lOWNhN2EtNDExYy00M2E4LTk1MmYtY2M1NDA2MDhjNDFk
LzEveHlJZVFDbVlxOEh3TlVkZUZZdDA2TWRwSU1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVun07Ub
4K+WBbg8XmGmgstyxL63dwBJ5InuwRJTffLLY2db+0X0saiX1hO3vSChsjUpfPqR
Pgyi2l4jXI2v8nFS2cRt/BEl3DzpyU/wct0tK1atQo+4+uQjVCZrhJt6wtY2aKFG
Td74MtUSl6UD/u0R1E30nhlWJo/YlFriPXGa7++uvxeYKHCpnNsRjy9niQNuH/O5
riKZ9iFkHpafaTdCsbtigggIO+tuKLoY9gMV3o3uRzs41TPfGxHASP1oE15IkUuU
ap15Wpg1SGVR6aqmI7GxsalmRcnqt6dV3vigqmjCSVO2S2qxdcp1CwW7B7xgLlAG
jVr9mQI3ZGVwLQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 14:14:40 2025 by rpki-client