Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
File: XPiK3BnqrRPWhbgew5k1vUssaa0.mft (raw, json)
Hash identifier: nEKvqTUOuqlNFRo+lbbXJXrUN7Ec6ITypYPu8ziiP4Y=
Subject key identifier: 1B:9A:D0:ED:13:ED:7B:26:D1:44:FA:37:9A:AF:E6:15:21:29:1B:C7
Authority key identifier: 5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
Certificate issuer: /CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Certificate serial: 019A7149D3E691D031D2DA5A606F311F2E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
Manifest number: 1624
Signing time: Tue 11 Nov 2025 05:00:54 +0000
Manifest this update: Tue 11 Nov 2025 05:00:54 +0000
Manifest next update: Wed 12 Nov 2025 05:00:54 +0000
Files and hashes: 1: 2m-5sAN7fZLZtnlN4KyM3kDb8rA.roa (hash: GBh4Fs12dTfnHuJfy5lqzt0sICQWCnX0b8Yq+RaFO/k=)
2: XPiK3BnqrRPWhbgew5k1vUssaa0.crl (hash: q4P9PSjnI5aDfg74tWzwfFzSfmRyiN39uv6FP6Kis34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d3:e6:91:d0:31:d2:da:5a:60:6f:31:1f:2e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Validity
Not Before: Nov 11 05:00:54 2025 GMT
Not After : Nov 12 05:00:54 2025 GMT
Subject: CN=1b9ad0ed13ed7b26d144fa379aafe61521291bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cd:55:97:0b:d4:5b:94:39:69:b1:93:96:f9:
1b:3c:64:d5:19:68:09:e5:43:a6:8f:21:e6:23:b2:
17:0f:31:90:d3:0c:2d:cf:c0:f6:86:6f:66:fe:9d:
b9:f3:d4:80:21:2a:65:01:a3:bd:a5:ee:30:26:61:
64:64:0e:7f:8a:84:a8:56:4b:b6:e2:31:ce:09:61:
0f:45:e6:f4:43:36:2f:76:73:3b:dd:18:64:40:9a:
7b:e4:ff:d9:e3:1f:a9:db:41:13:eb:37:ae:9a:2a:
88:95:b2:4d:70:e0:de:af:78:77:45:cc:e6:aa:bf:
0b:80:a0:d9:ba:bf:90:f9:35:93:fb:90:11:ea:ab:
48:08:34:db:29:59:d6:9e:3d:c4:0f:c7:a5:6d:96:
9a:79:03:62:3d:b9:6c:e4:36:b2:93:a8:e4:7e:c1:
c1:dd:62:fb:f6:20:77:7a:c0:29:bf:27:25:5c:40:
46:3e:09:bd:e9:73:05:77:74:4e:70:27:57:a2:de:
a8:dd:5c:ef:17:a4:0b:93:4c:a3:f3:82:f0:39:90:
2d:f5:73:11:52:51:b8:fb:ff:21:e4:a7:74:e6:e4:
fb:c5:87:61:91:f7:3a:40:13:1c:13:70:be:2a:4c:
e6:d8:51:28:59:8f:9e:b2:c5:c4:15:65:ac:fb:60:
cb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9A:D0:ED:13:ED:7B:26:D1:44:FA:37:9A:AF:E6:15:21:29:1B:C7
X509v3 Authority Key Identifier:
keyid:5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f8:85:13:79:c9:b8:d8:04:a2:9a:b6:37:86:43:b9:1e:1b:
b5:1a:5c:45:6b:f8:b8:48:ef:1a:1d:38:df:70:36:55:bc:d9:
e5:61:e7:fe:b0:d7:de:7c:74:58:a1:22:7d:46:14:51:c7:40:
64:78:9b:d5:40:78:c5:c6:5c:08:ba:5d:2f:45:0e:46:06:c8:
9c:70:3d:ad:0e:c6:0d:06:2f:67:af:7a:88:f7:9a:f6:fe:51:
3f:d5:5d:cb:4a:9d:34:72:86:e7:10:9d:71:27:61:4b:45:81:
8e:f1:b6:8b:f2:2b:fc:f7:b2:e5:57:6a:16:0f:d9:ab:77:9c:
b4:18:4e:e3:a4:46:7f:77:dc:93:60:9a:ed:fc:cd:b6:2d:41:
20:c3:8a:71:63:43:9d:dd:d2:e3:cc:f5:5d:f7:75:51:c6:c2:
1c:cf:2f:e0:da:0e:cc:37:04:6d:b0:f1:5b:26:d4:40:b4:9e:
0f:9e:28:49:87:8c:a3:e4:99:a6:96:4e:1d:cd:90:b5:7e:0a:
18:fe:98:bf:82:10:14:b4:4d:bd:69:85:83:94:03:87:62:3f:
a5:b8:a0:da:8d:27:d0:e7:52:87:8b:24:96:a1:eb:11:d7:24:
87:10:89:2f:ae:27:d3:6c:9a:1b:c5:00:6d:ad:59:1a:e8:64:
4b:47:51:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSdPmkdAx0tpaYG8xHy4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZjg4YWRjMTllYWFkMTNkNjg1YjgxZWMzOTkzNWJkNGIy
YzY5YWQwHhcNMjUxMTExMDUwMDU0WhcNMjUxMTEyMDUwMDU0WjAzMTEwLwYDVQQD
EygxYjlhZDBlZDEzZWQ3YjI2ZDE0NGZhMzc5YWFmZTYxNTIxMjkxYmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M1VlwvUW5Q5abGTlvkbPGTVGWgJ
5UOmjyHmI7IXDzGQ0wwtz8D2hm9m/p2589SAISplAaO9pe4wJmFkZA5/ioSoVku2
4jHOCWEPReb0QzYvdnM73RhkQJp75P/Z4x+p20ET6zeumiqIlbJNcODer3h3Rczm
qr8LgKDZur+Q+TWT+5AR6qtICDTbKVnWnj3ED8elbZaaeQNiPbls5Dayk6jkfsHB
3WL79iB3esApvyclXEBGPgm96XMFd3ROcCdXot6o3VzvF6QLk0yj84LwOZAt9XMR
UlG4+/8h5Kd05uT7xYdhkfc6QBMcE3C+Kkzm2FEoWY+essXEFWWs+2DLjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBua0O0T7Xsm0UT6N5qv5hUhKRvHMB8GA1UdIwQY
MBaAFFz4itwZ6q0T1oW4HsOZNb1LLGmtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFBpSzNCbnFyUlBXaGJnZXc1azF2VXNzYWEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83YzE2NmMtMjRiMi00YTA3LTkxMTUt
MTdjZTY3YmRhZDdiLzEvWFBpSzNCbnFyUlBXaGJnZXc1azF2VXNzYWEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS83YzE2NmMtMjRiMi00YTA3LTkxMTUtMTdjZTY3YmRhZDdi
LzEvWFBpSzNCbnFyUlBXaGJnZXc1azF2VXNzYWEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPiFE3nJ
uNgEopq2N4ZDuR4btRpcRWv4uEjvGh0433A2VbzZ5WHn/rDX3nx0WKEifUYUUcdA
ZHib1UB4xcZcCLpdL0UORgbInHA9rQ7GDQYvZ696iPea9v5RP9Vdy0qdNHKG5xCd
cSdhS0WBjvG2i/Ir/Pey5VdqFg/Zq3ectBhO46RGf3fck2Ca7fzNti1BIMOKcWND
nd3S48z1Xfd1UcbCHM8v4NoOzDcEbbDxWybUQLSeD54oSYeMo+SZppZOHc2QtX4K
GP6Yv4IQFLRNvWmFg5QDh2I/pbig2o0n0OdSh4sklqHrEdckhxCJL64n02yaG8UA
ba1ZGuhkS0dRyA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:52 2025 by rpki-client