Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: lmn2EupnZ0biV9zKb/j6tWjCFa6zzK1gO0cGPn5DLe4=
Subject key identifier: 28:13:74:A1:06:14:FB:62:A5:3C:85:AA:43:CB:78:C9:6B:2F:39:7C
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 019A706E03A303CDE66C1475F6991C4B77CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 1729
Signing time: Tue 11 Nov 2025 01:00:49 +0000
Manifest this update: Tue 11 Nov 2025 01:00:49 +0000
Manifest next update: Wed 12 Nov 2025 01:00:49 +0000
Files and hashes: 1: X3E9dkrMqWB_DIqFZdVrZbg3e_4.roa (hash: tfPHTT8XE2UFNzu3VKtqQ2wZ9tqFTwpzr3+xuc/NotQ=)
2: ggaujxDkTjz3ur815c8t-PcBT3o.roa (hash: kBi/tXIf057RjeVgxSaejXzvw/f4YkfQil/vCr+FLSM=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: wvfLXQPik9UVH822ltH8tCI+ESyN2QxORuiqrLDJUs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:03:a3:03:cd:e6:6c:14:75:f6:99:1c:4b:77:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Nov 11 01:00:49 2025 GMT
Not After : Nov 12 01:00:49 2025 GMT
Subject: CN=281374a10614fb62a53c85aa43cb78c96b2f397c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:44:17:6b:9c:c7:2d:c6:32:3e:01:a8:57:88:
e9:40:a9:4e:77:00:f0:f2:a4:97:02:e7:dc:c7:35:
d2:cb:1c:d9:01:cf:d2:d0:51:62:b7:32:52:db:36:
d3:12:f4:29:d7:51:5b:da:46:0f:3c:11:56:cf:05:
62:64:57:31:bc:13:23:19:1a:79:4a:43:61:47:0a:
95:01:a7:79:0c:29:96:61:d6:20:06:b0:43:37:3a:
84:eb:89:80:d1:82:84:b1:07:a6:4e:24:fe:be:7c:
91:d0:e4:48:2e:12:a9:56:1f:0a:3c:5f:d9:9a:af:
0d:cf:17:0a:f6:f2:ad:8d:6e:d5:a4:d7:39:18:7b:
c3:db:e3:33:29:02:48:81:8c:9b:af:90:02:7f:94:
f1:3d:02:5b:70:66:58:25:b0:30:8f:07:c8:7c:c4:
0a:9a:a0:b9:bd:d9:33:4b:4a:71:c9:3e:4c:98:36:
ed:de:e9:8e:6e:fd:36:2e:53:4b:1c:67:f6:2e:f1:
ba:4e:9e:5b:aa:05:f0:ad:47:0e:8d:85:f8:cf:e7:
cb:c3:fb:9d:b6:c1:bc:6b:4b:0d:e1:20:34:3d:54:
98:9e:55:e4:11:6a:e1:29:c8:ca:d8:2d:ee:1c:ee:
6e:e5:09:45:99:75:d8:b2:d5:4b:e8:7d:b9:70:bb:
8d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:13:74:A1:06:14:FB:62:A5:3C:85:AA:43:CB:78:C9:6B:2F:39:7C
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7f:a0:11:fe:84:62:b0:d3:d8:c3:35:b8:dd:df:37:ba:0a:
85:01:44:96:67:ee:82:6c:d4:15:64:05:05:d6:02:03:12:69:
8f:d3:ee:85:ae:8b:d9:5a:73:65:e3:ab:c9:b3:9a:16:ab:0a:
05:0e:19:54:a4:b4:98:a8:d0:b8:02:90:c3:d7:7d:47:d0:18:
a2:ce:41:f0:44:ca:6a:f1:ed:23:19:b1:d5:56:67:b0:94:99:
f8:57:75:bf:50:63:7a:03:bc:b5:52:6d:f3:23:8b:ea:51:7b:
cd:59:d1:92:c2:33:e5:19:a6:77:1a:50:33:2d:7d:55:50:29:
9c:db:0c:e5:ce:59:f3:5a:dc:fb:38:ab:ec:a7:71:ba:9b:73:
a8:69:b0:ed:09:28:91:13:87:a1:86:4f:7d:18:b2:3a:ab:7b:
a7:bc:4b:29:a0:17:cc:8f:d3:2e:20:0d:d8:b2:8d:85:49:57:
50:d3:06:05:f2:d5:1e:1c:a7:0b:9c:a3:09:e4:ff:85:e4:eb:
45:5c:7e:5e:c5:b6:c5:83:48:96:22:fc:24:93:ef:c1:5a:55:
90:e3:fd:20:a7:fd:1b:b9:5b:3b:bd:ec:99:e7:40:1b:12:e0:
47:f4:51:df:bb:df:e7:7e:d1:3f:fe:03:62:47:39:4c:a8:ef:
0a:10:a3:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbgOjA83mbBR19pkcS3fOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzBmZGJiNjVjYTQ5MWNiODNjYzA4NWE0M2UwMzQwNTk2
YWU4NzMwHhcNMjUxMTExMDEwMDQ5WhcNMjUxMTEyMDEwMDQ5WjAzMTEwLwYDVQQD
EygyODEzNzRhMTA2MTRmYjYyYTUzYzg1YWE0M2NiNzhjOTZiMmYzOTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0QXa5zHLcYyPgGoV4jpQKlOdwDw
8qSXAufcxzXSyxzZAc/S0FFitzJS2zbTEvQp11Fb2kYPPBFWzwViZFcxvBMjGRp5
SkNhRwqVAad5DCmWYdYgBrBDNzqE64mA0YKEsQemTiT+vnyR0ORILhKpVh8KPF/Z
mq8NzxcK9vKtjW7VpNc5GHvD2+MzKQJIgYybr5ACf5TxPQJbcGZYJbAwjwfIfMQK
mqC5vdkzS0pxyT5MmDbt3umObv02LlNLHGf2LvG6Tp5bqgXwrUcOjYX4z+fLw/ud
tsG8a0sN4SA0PVSYnlXkEWrhKcjK2C3uHO5u5QlFmXXYstVL6H25cLuNHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgTdKEGFPtipTyFqkPLeMlrLzl8MB8GA1UdIwQY
MBaAFMbA/btlykkcuDzAhaQ+A0BZauhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQt
NDlhNjU0NTc4NmU2LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQtNDlhNjU0NTc4NmU2
LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARX+gEf6E
YrDT2MM1uN3fN7oKhQFElmfugmzUFWQFBdYCAxJpj9Puha6L2VpzZeOrybOaFqsK
BQ4ZVKS0mKjQuAKQw9d9R9AYos5B8ETKavHtIxmx1VZnsJSZ+Fd1v1BjegO8tVJt
8yOL6lF7zVnRksIz5RmmdxpQMy19VVApnNsM5c5Z81rc+zir7KdxuptzqGmw7Qko
kROHoYZPfRiyOqt7p7xLKaAXzI/TLiAN2LKNhUlXUNMGBfLVHhynC5yjCeT/heTr
RVx+XsW2xYNIliL8JJPvwVpVkOP9IKf9G7lbO73smedAGxLgR/RR37vf537RP/4D
Ykc5TKjvChCjow==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:17 2025 by rpki-client