Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
File: xNN466ZI9D5TpKQeE0uQExypPNg.mft (raw, json)
Hash identifier: VMPy0uDs72bFVSnkcl5YGD7OqejjGQBbIUVZ2/Jtw98=
Subject key identifier: 0C:35:95:50:4D:22:F5:A8:62:53:32:9F:72:71:03:E7:41:A7:5A:ED
Authority key identifier: C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
Certificate issuer: /CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Certificate serial: 019A7226483084B25106DA835CC24E9AF86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
Manifest number: 0C60
Signing time: Tue 11 Nov 2025 09:01:42 +0000
Manifest this update: Tue 11 Nov 2025 09:01:42 +0000
Manifest next update: Wed 12 Nov 2025 09:01:42 +0000
Files and hashes: 1: gsd0lN6ZnIrIQD5lIwOejLd2Dv0.roa (hash: n34ueBlgPlEEtyoifu0C2ju9FVvPJQshh3AnTXlwP14=)
2: xNN466ZI9D5TpKQeE0uQExypPNg.crl (hash: BuIdZU3sveGefscN7H/hBktOkM/wKge6qo7enxG4w5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:48:30:84:b2:51:06:da:83:5c:c2:4e:9a:f8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d378eba648f43e53a4a41e134b90131ca93cd8
Validity
Not Before: Nov 11 09:01:42 2025 GMT
Not After : Nov 12 09:01:42 2025 GMT
Subject: CN=0c3595504d22f5a86253329f727103e741a75aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:0c:f2:eb:24:e5:d7:1f:f1:41:86:06:76:
4e:3b:48:98:f0:86:f6:e0:e5:c3:83:ed:e8:c1:17:
79:fe:a3:2d:c0:7d:f5:18:34:41:e4:ab:6f:bd:48:
a5:c8:6b:3f:57:3b:68:88:e6:2b:d9:8d:fb:bb:c5:
a0:c3:63:b0:e7:1e:c2:9d:d5:63:ae:09:b1:2c:03:
2f:ab:fc:79:26:c1:3a:3f:8b:43:c5:34:fb:77:92:
89:1d:d1:69:d5:7a:d8:9a:68:c3:32:cb:47:ff:b3:
a9:7c:5c:25:a6:0d:4c:29:31:b2:89:86:08:61:4a:
b8:12:51:5c:3a:6a:25:59:b6:d3:d9:e8:e8:cb:2e:
83:83:b1:19:d6:7b:6f:b6:61:8f:f0:a6:a8:56:48:
e5:a7:db:00:c9:15:a4:34:f6:6c:db:91:90:c5:88:
f7:05:df:ca:3f:d7:2d:87:d7:42:84:3c:53:1c:b6:
55:af:d8:23:a8:16:a1:25:d0:94:e9:e4:bb:a9:46:
7a:5a:89:83:91:41:fb:7c:58:ab:08:39:00:67:aa:
04:6f:4f:66:30:d1:8c:cb:39:95:85:8b:11:55:96:
17:66:ea:ca:0c:fe:36:37:9d:bd:34:1d:b2:25:f8:
27:67:ca:71:ec:89:cb:18:26:03:a4:bb:45:91:07:
26:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:35:95:50:4D:22:F5:A8:62:53:32:9F:72:71:03:E7:41:A7:5A:ED
X509v3 Authority Key Identifier:
keyid:C4:D3:78:EB:A6:48:F4:3E:53:A4:A4:1E:13:4B:90:13:1C:A9:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNN466ZI9D5TpKQeE0uQExypPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5164ad-9158-48f2-a4e3-dd55a8056303/1/xNN466ZI9D5TpKQeE0uQExypPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e7:47:f5:dd:49:14:60:a0:6f:2c:42:db:80:6f:52:37:69:
53:e7:e6:ab:03:83:6b:14:df:88:ab:f6:06:19:08:99:55:15:
48:d7:20:04:62:78:8d:6f:88:09:72:c8:32:2d:8c:92:0e:fa:
88:7d:e7:69:34:74:c3:cc:c2:30:17:73:45:00:bd:9f:9e:b9:
a7:99:63:0a:05:43:a1:44:7d:82:4c:1b:09:63:d1:a5:c8:9b:
07:7c:a1:fb:a8:24:ce:e3:c3:ca:4f:4b:e5:bb:a3:01:88:03:
05:f9:e8:63:14:e0:87:45:b2:e9:f2:25:aa:58:3c:5e:eb:cb:
0b:15:89:5d:51:e1:9d:ae:58:2f:60:96:52:fc:b4:71:75:fb:
49:ab:cf:73:52:c2:82:82:5c:55:e7:67:94:1c:be:dc:97:2c:
11:da:8d:ba:69:9a:e5:61:96:d4:12:46:f1:eb:d4:44:ac:9b:
73:57:b0:ed:4b:34:2b:4c:17:53:0e:63:b1:f8:32:1f:0a:ed:
d5:e5:d9:1e:41:40:a5:0f:b8:3d:f6:45:42:dc:cc:19:79:cb:
ae:46:06:31:38:a0:8d:3d:67:d0:11:67:b3:fe:67:d8:2e:2f:
b7:00:b6:6f:02:ec:c7:e6:2f:76:b7:89:82:6e:41:75:fb:e8:
e3:33:98:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJkgwhLJRBtqDXMJOmvhtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZDM3OGViYTY0OGY0M2U1M2E0YTQxZTEzNGI5MDEzMWNh
OTNjZDgwHhcNMjUxMTExMDkwMTQyWhcNMjUxMTEyMDkwMTQyWjAzMTEwLwYDVQQD
EygwYzM1OTU1MDRkMjJmNWE4NjI1MzMyOWY3MjcxMDNlNzQxYTc1YWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pEM8usk5dcf8UGGBnZOO0iY8Ib2
4OXDg+3owRd5/qMtwH31GDRB5KtvvUilyGs/VztoiOYr2Y37u8Wgw2Ow5x7CndVj
rgmxLAMvq/x5JsE6P4tDxTT7d5KJHdFp1XrYmmjDMstH/7OpfFwlpg1MKTGyiYYI
YUq4ElFcOmolWbbT2ejoyy6Dg7EZ1ntvtmGP8KaoVkjlp9sAyRWkNPZs25GQxYj3
Bd/KP9cth9dChDxTHLZVr9gjqBahJdCU6eS7qUZ6WomDkUH7fFirCDkAZ6oEb09m
MNGMyzmVhYsRVZYXZurKDP42N529NB2yJfgnZ8px7InLGCYDpLtFkQcmkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAw1lVBNIvWoYlMyn3JxA+dBp1rtMB8GA1UdIwQY
MBaAFMTTeOumSPQ+U6SkHhNLkBMcqTzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81MTY0YWQtOTE1OC00OGYyLWE0ZTMt
ZGQ1NWE4MDU2MzAzLzEveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy81MTY0YWQtOTE1OC00OGYyLWE0ZTMtZGQ1NWE4MDU2MzAz
LzEveE5ONDY2Wkk5RDVUcEtRZUUwdVFFeHlwUE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHudH9d1J
FGCgbyxC24BvUjdpU+fmqwODaxTfiKv2BhkImVUVSNcgBGJ4jW+ICXLIMi2Mkg76
iH3naTR0w8zCMBdzRQC9n565p5ljCgVDoUR9gkwbCWPRpcibB3yh+6gkzuPDyk9L
5bujAYgDBfnoYxTgh0Wy6fIlqlg8XuvLCxWJXVHhna5YL2CWUvy0cXX7SavPc1LC
goJcVednlBy+3JcsEdqNumma5WGW1BJG8evURKybc1ew7Us0K0wXUw5jsfgyHwrt
1eXZHkFApQ+4PfZFQtzMGXnLrkYGMTigjT1n0BFns/5n2C4vtwC2bwLsx+YvdreJ
gm5Bdfvo4zOY5Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:44 2025 by rpki-client