Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File: xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier: OJlkNCQ3xS9BYy0o0EhsFyAOFXyvTrD9Xf5LKhMafNA=
Subject key identifier: BB:9C:4D:65:B2:8E:84:43:5A:F3:B0:86:41:67:82:39:DD:6A:EE:B5
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial: 019A1F51BE13D1EE6090CF80021B35EC0BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number: 1705
Signing time: Sun 26 Oct 2025 07:00:42 +0000
Manifest this update: Sun 26 Oct 2025 07:00:42 +0000
Manifest next update: Mon 27 Oct 2025 07:00:42 +0000
Files and hashes: 1: CxW9CMhkxVrayKYNgSlraHOeOQM.roa (hash: Pd98lEBP8p/URa6hKL85tikarNFnXac6Jxt7ytM5JK0=)
2: exq4u1SZfA7x1zIrKqzjzge4W3E.roa (hash: 6hKC5aSxn1eYqBHCVJ0qgpvsfeNY0GeupedGw9IKcyA=)
3: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: TXXtSeNgmAPUDs9w5/JfcZb1w4VKV1tf/uH/ODnJWqY=)
4: zIANn_XjTHpNl_tFmNq6MbPyZNE.roa (hash: b1/JePGfEJmKChck6onI1sptZi1SnAwXlnetMtXFNvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:51:be:13:d1:ee:60:90:cf:80:02:1b:35:ec:0b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Validity
Not Before: Oct 26 07:00:42 2025 GMT
Not After : Oct 27 07:00:42 2025 GMT
Subject: CN=bb9c4d65b28e84435af3b08641678239dd6aeeb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:77:60:e7:c9:9b:72:0e:dc:f2:b8:6a:d0:
8e:e1:a4:ca:2b:11:f4:7e:2f:a4:02:ab:d4:0a:72:
71:ae:b7:58:8d:e5:98:14:fd:33:9c:3a:10:3c:1c:
cc:60:69:d5:8b:bb:60:eb:22:71:e2:e2:f2:59:d6:
43:d7:58:f7:5a:b5:1e:58:2f:ca:96:27:d1:8e:fd:
01:b5:7a:5c:65:a5:44:59:5a:f4:a1:72:74:ca:bb:
76:c3:97:fb:d6:87:00:ef:76:41:f2:c5:c3:6d:06:
9e:b3:ef:4a:ea:4e:6c:99:ab:ae:10:a2:65:d3:62:
b2:ae:57:57:24:d6:44:1f:ca:8b:6d:93:cc:4a:5c:
11:0f:ae:c9:c1:80:80:9f:27:e1:b9:0b:f7:bc:45:
16:08:49:96:8e:f9:f6:b3:15:85:5a:df:ce:51:fe:
e2:30:1f:68:cc:ec:08:dc:7f:d2:9b:75:5a:b9:6d:
d5:5e:c4:46:bb:76:c7:4d:92:8a:4d:9f:6f:1b:49:
e4:b6:a2:34:8e:c1:79:9e:20:5a:2f:be:51:41:1d:
88:dc:db:a5:87:b9:d1:fe:a9:99:41:14:e0:7d:4c:
62:86:40:9b:da:5b:ee:20:f8:c6:1a:20:94:59:cb:
69:f0:58:ad:ec:fd:87:4f:f1:c3:ae:30:64:b5:6e:
dc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9C:4D:65:B2:8E:84:43:5A:F3:B0:86:41:67:82:39:DD:6A:EE:B5
X509v3 Authority Key Identifier:
keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:68:cc:da:d9:86:f5:38:8f:e5:af:75:d9:48:bd:49:22:e3:
31:60:4c:f3:8e:ed:0d:a2:ef:5d:f3:33:96:64:31:ed:29:c5:
e0:8e:a3:b8:fe:a1:51:24:05:0d:3b:99:70:d4:7f:9b:78:c0:
06:00:f1:e3:b2:5d:c8:cc:bc:29:3c:ae:e0:29:38:13:c6:48:
8c:1c:5d:6b:69:77:9a:d0:14:e8:e7:63:79:77:bf:f3:a2:b0:
bf:1b:c4:2d:9c:b5:ba:fe:e7:5a:a9:88:4c:45:a2:b9:b8:2a:
e9:03:32:c3:92:e1:9a:5b:10:da:59:6b:f6:83:ed:40:c2:b9:
bc:d6:3f:be:62:fb:5b:93:55:70:f6:4b:49:a4:f8:e9:46:de:
21:4b:6e:c9:8e:4a:cd:59:e5:9c:0b:88:14:14:ea:78:b7:8a:
01:30:03:d8:f0:00:67:32:ac:60:eb:ce:e3:2d:f3:9b:87:a0:
9a:c1:13:d7:29:c7:c9:89:a3:d4:ab:42:b9:1e:f0:40:4e:c9:
ca:3c:ce:0b:ab:d1:b4:60:aa:15:1d:4e:d6:0a:73:07:97:d7:
1c:aa:24:86:7e:64:94:8b:4c:ca:8d:ed:e8:8f:b5:3e:57:2d:
ef:2c:3b:f1:fb:f5:5f:67:17:e3:35:02:c7:1e:c4:51:7d:be:
96:c6:b4:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofUb4T0e5gkM+AAhs17Av/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OTI3ODZjZWQ2Y2U1OTc1ODU0NjhiYjRmMzZiMzFjZjZh
Y2VjNmUwHhcNMjUxMDI2MDcwMDQyWhcNMjUxMDI3MDcwMDQyWjAzMTEwLwYDVQQD
EyhiYjljNGQ2NWIyOGU4NDQzNWFmM2IwODY0MTY3ODIzOWRkNmFlZWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEB3YOfJm3IO3PK4atCO4aTKKxH0
fi+kAqvUCnJxrrdYjeWYFP0znDoQPBzMYGnVi7tg6yJx4uLyWdZD11j3WrUeWC/K
lifRjv0BtXpcZaVEWVr0oXJ0yrt2w5f71ocA73ZB8sXDbQaes+9K6k5smauuEKJl
02KyrldXJNZEH8qLbZPMSlwRD67JwYCAnyfhuQv3vEUWCEmWjvn2sxWFWt/OUf7i
MB9ozOwI3H/Sm3VauW3VXsRGu3bHTZKKTZ9vG0nktqI0jsF5niBaL75RQR2I3Nul
h7nR/qmZQRTgfUxihkCb2lvuIPjGGiCUWctp8Fit7P2HT/HDrjBktW7c+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLucTWWyjoRDWvOwhkFngjndau61MB8GA1UdIwQY
MBaAFMWSeGztbOWXWFRou082sxz2rOxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQt
YmEzNzUxMTQwNGMyLzEveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQtYmEzNzUxMTQwNGMy
LzEveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2jM2tmG
9TiP5a912Ui9SSLjMWBM847tDaLvXfMzlmQx7SnF4I6juP6hUSQFDTuZcNR/m3jA
BgDx47JdyMy8KTyu4Ck4E8ZIjBxda2l3mtAU6OdjeXe/86KwvxvELZy1uv7nWqmI
TEWiubgq6QMyw5LhmlsQ2llr9oPtQMK5vNY/vmL7W5NVcPZLSaT46UbeIUtuyY5K
zVnlnAuIFBTqeLeKATAD2PAAZzKsYOvO4y3zm4egmsET1ynHyYmj1KtCuR7wQE7J
yjzOC6vRtGCqFR1O1gpzB5fXHKokhn5klItMyo3t6I+1Plct7yw78fv1X2cX4zUC
xx7EUX2+lsa0WA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 12:33:19 2025 by rpki-client