Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
File: X4anFB9vt7TCi84xRGe2FU4Pk3c.mft (raw, json)
Hash identifier: dr7YJuv571TWPtInOfEHOd5kta1Fe5NjkZ0Dn7cw37w=
Subject key identifier: 45:8F:D7:A3:65:09:82:5A:3A:03:6C:1E:EC:1C:6C:33:87:36:DB:27
Authority key identifier: 5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
Certificate issuer: /CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Certificate serial: 019A71EE5DF3258FE1D72382C40982D67EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
Manifest number: 0EB9
Signing time: Tue 11 Nov 2025 08:00:38 +0000
Manifest this update: Tue 11 Nov 2025 08:00:38 +0000
Manifest next update: Wed 12 Nov 2025 08:00:38 +0000
Files and hashes: 1: BR7Kxw4uDHIJjtWZxBN3yY39MEc.roa (hash: NNnpY2dCMdRRtPAK+Xc47po5O7wykSonQcaPlzT/ALM=)
2: X4anFB9vt7TCi84xRGe2FU4Pk3c.crl (hash: XD7aJVkMIPcwMQPnqDL1pXPDL3/lyhbNMnZC3XI+S9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:5d:f3:25:8f:e1:d7:23:82:c4:09:82:d6:7e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Validity
Not Before: Nov 11 08:00:38 2025 GMT
Not After : Nov 12 08:00:38 2025 GMT
Subject: CN=458fd7a36509825a3a036c1eec1c6c338736db27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:69:95:6d:c8:da:22:6c:9a:a9:65:5c:7e:f8:
04:41:e6:55:2c:c7:0a:12:be:76:4d:62:34:db:da:
af:3e:bc:c0:a6:03:4d:5d:1b:d3:3e:fd:5a:3f:bd:
12:ab:9f:17:eb:ae:19:f1:d6:66:43:28:3e:c4:ea:
6c:38:19:8f:cb:19:58:03:4a:fd:c1:65:84:1e:45:
95:ed:fc:cb:a7:ef:70:53:6b:c8:16:ac:72:f0:87:
0b:db:2a:68:d5:4d:1f:f3:cd:08:8c:95:88:b5:ed:
d2:7e:17:91:53:58:9b:56:44:2d:98:9a:79:a4:f4:
ed:94:a4:5a:f1:60:a0:05:6b:64:e8:97:59:cb:4c:
55:eb:c2:d1:0f:5a:c3:b6:6b:e7:51:68:ab:80:a9:
4a:d2:33:f7:11:2f:75:88:c4:17:21:61:2b:85:ec:
fa:23:e6:7e:60:be:3c:0d:bc:07:21:3b:e3:22:07:
fb:97:cb:23:05:d6:59:b1:45:67:ef:88:1b:20:75:
f9:40:53:b6:e3:ed:72:42:2a:32:f2:e2:a3:d1:45:
1c:c0:14:56:e4:7f:03:43:12:99:45:86:90:8d:83:
82:66:8a:4e:9d:6b:3a:6a:2a:64:1f:34:d7:f2:30:
f5:35:81:3c:a9:32:c5:8e:a6:b3:55:49:a4:47:39:
e4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8F:D7:A3:65:09:82:5A:3A:03:6C:1E:EC:1C:6C:33:87:36:DB:27
X509v3 Authority Key Identifier:
keyid:5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:90:c5:4c:24:3a:40:1a:f3:29:25:c0:65:4d:cd:7b:37:ad:
db:07:05:a8:bc:d2:dd:4d:ca:b4:de:a2:83:d4:33:b2:f5:01:
90:f4:01:4d:15:d4:f8:63:58:3c:56:bc:5c:95:b6:38:a4:c2:
0a:f5:e8:6d:e7:2b:ce:f3:87:d8:92:9d:49:56:59:00:43:71:
1e:33:37:fc:c5:e5:2e:ab:0d:4b:0f:6b:98:18:95:bd:43:d9:
9e:4e:2b:e1:f7:d4:d2:cc:93:ae:c5:c6:24:cf:31:3d:3a:61:
ce:82:ce:44:2f:df:68:d2:a7:5a:7f:6b:a9:2b:c3:47:4b:b7:
f8:64:ec:f7:d1:14:d8:4a:6f:01:ed:83:50:11:13:ff:40:b2:
15:80:12:8d:a5:e9:77:5a:b2:8e:0f:3a:db:4f:7d:e2:f3:c1:
12:ad:3c:2a:e3:7f:24:64:51:5e:b8:b3:08:23:fd:c9:dc:70:
08:f7:c3:a3:8a:f1:0d:d5:64:74:cb:ec:6e:07:5f:f5:b2:5c:
72:78:70:9a:8d:fe:73:96:c2:c4:00:8e:88:7f:2a:b3:18:fc:
df:2f:88:da:df:e6:5d:87:13:16:17:c8:d6:a2:b8:8b:c2:8a:
12:e5:7b:67:e9:31:65:8d:ec:ef:e4:75:75:45:b9:29:6f:e4:
c1:6d:fe:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7l3zJY/h1yOCxAmC1n6hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmODZhNzE0MWY2ZmI3YjRjMjhiY2UzMTQ0NjdiNjE1NGUw
ZjkzNzcwHhcNMjUxMTExMDgwMDM4WhcNMjUxMTEyMDgwMDM4WjAzMTEwLwYDVQQD
Eyg0NThmZDdhMzY1MDk4MjVhM2EwMzZjMWVlYzFjNmMzMzg3MzZkYjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GmVbcjaImyaqWVcfvgEQeZVLMcK
Er52TWI029qvPrzApgNNXRvTPv1aP70Sq58X664Z8dZmQyg+xOpsOBmPyxlYA0r9
wWWEHkWV7fzLp+9wU2vIFqxy8IcL2ypo1U0f880IjJWIte3SfheRU1ibVkQtmJp5
pPTtlKRa8WCgBWtk6JdZy0xV68LRD1rDtmvnUWirgKlK0jP3ES91iMQXIWErhez6
I+Z+YL48DbwHITvjIgf7l8sjBdZZsUVn74gbIHX5QFO24+1yQioy8uKj0UUcwBRW
5H8DQxKZRYaQjYOCZopOnWs6aipkHzTX8jD1NYE8qTLFjqazVUmkRznkzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWP16NlCYJaOgNsHuwcbDOHNtsnMB8GA1UdIwQY
MBaAFF+GpxQfb7e0wovOMURnthVOD5N3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDRhbkZCOXZ0N1RDaTg0eFJHZTJGVTRQazNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wOWI2YzctNTJlZi00ODk3LWJmYTYt
NWUwZTI4MWQ3ZGEzLzEvWDRhbkZCOXZ0N1RDaTg0eFJHZTJGVTRQazNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8wOWI2YzctNTJlZi00ODk3LWJmYTYtNWUwZTI4MWQ3ZGEz
LzEvWDRhbkZCOXZ0N1RDaTg0eFJHZTJGVTRQazNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz5DFTCQ6
QBrzKSXAZU3Nezet2wcFqLzS3U3KtN6ig9QzsvUBkPQBTRXU+GNYPFa8XJW2OKTC
CvXobecrzvOH2JKdSVZZAENxHjM3/MXlLqsNSw9rmBiVvUPZnk4r4ffU0syTrsXG
JM8xPTphzoLORC/faNKnWn9rqSvDR0u3+GTs99EU2EpvAe2DUBET/0CyFYASjaXp
d1qyjg8620994vPBEq08KuN/JGRRXrizCCP9ydxwCPfDo4rxDdVkdMvsbgdf9bJc
cnhwmo3+c5bCxACOiH8qsxj83y+I2t/mXYcTFhfI1qK4i8KKEuV7Z+kxZY3s7+R1
dUW5KW/kwW3+rg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:41 2025 by rpki-client