Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
File: xm3GDRbf4WSdhsFpPheFjCMGOH8.mft (raw, json)
Hash identifier: irx68X9PbVEZpJYr1kXOsIx3/au5eBAZoIcS8lkPUkQ=
Subject key identifier: 8C:90:96:C1:95:C8:0C:54:85:BD:06:5E:DB:08:04:7B:66:58:A1:0D
Authority key identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
Certificate issuer: /CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Certificate serial: 019A71B91CA5040D8D8F7EF5FC5F7DB10D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
Manifest number: 1507
Signing time: Tue 11 Nov 2025 07:02:28 +0000
Manifest this update: Tue 11 Nov 2025 07:02:28 +0000
Manifest next update: Wed 12 Nov 2025 07:02:28 +0000
Files and hashes: 1: 9wllcBQptpahKiXvdA8fp8dAnd4.roa (hash: EZriZJeJYlorIY+q2d7CpiKRv59NpOmz9CDJjivHJGw=)
2: JehPYERpWNPyZpbjXvQLka1W0tc.roa (hash: lTB81sn8qz5yoT+HG2SJwj2/2HvuYhBId4lkI/gSD6M=)
3: xm3GDRbf4WSdhsFpPheFjCMGOH8.crl (hash: CK2wzUZdOvjMmKdbMs+3K7UncMpC4casWQl8AZbmXVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:1c:a5:04:0d:8d:8f:7e:f5:fc:5f:7d:b1:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Validity
Not Before: Nov 11 07:02:28 2025 GMT
Not After : Nov 12 07:02:28 2025 GMT
Subject: CN=8c9096c195c80c5485bd065edb08047b6658a10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8d:72:00:ce:cd:48:10:5f:df:3e:bb:71:48:
4c:55:20:be:c8:2c:38:0b:f7:ed:bd:0c:bc:36:bf:
47:f6:de:f5:60:63:50:f1:ae:6c:65:32:6c:e2:22:
95:b5:3c:41:7f:c5:85:44:b5:5b:66:af:76:38:bb:
3a:b5:83:c9:68:af:9a:1c:18:3d:6f:9b:2a:32:42:
a4:e2:04:83:a4:aa:1b:12:ae:d1:cf:da:22:d5:9a:
b8:9e:79:da:7b:25:17:0f:a7:99:b2:05:94:f1:e6:
7d:55:6a:42:f3:1a:63:f5:7f:60:ee:a6:8b:41:ca:
3a:ed:b0:1b:64:7e:46:89:dc:42:cb:9d:d1:35:61:
c1:d4:01:cf:69:0b:0c:18:d3:46:a8:09:e6:c1:77:
e6:e4:5c:0c:7b:f7:1d:bb:02:9f:3d:27:15:d7:57:
5f:47:09:d0:0d:68:cf:d6:9f:96:8f:d9:da:78:16:
64:f6:40:db:57:21:5d:ab:54:7f:a3:77:fb:6d:57:
45:ed:a8:34:4f:f9:bb:42:81:68:76:9e:95:73:30:
ea:4e:4c:5b:06:db:ee:e9:af:37:84:47:5d:72:44:
cd:da:63:a3:dc:e2:af:8a:de:c7:5b:be:e3:d0:5e:
e9:b7:2b:71:51:2a:dc:53:54:cf:04:73:9f:78:a4:
43:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:90:96:C1:95:C8:0C:54:85:BD:06:5E:DB:08:04:7B:66:58:A1:0D
X509v3 Authority Key Identifier:
keyid:C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5e:4f:48:e3:75:50:b9:a7:80:9d:a2:f1:aa:7e:e0:6c:23:
73:06:22:5a:23:a7:de:a1:15:ea:e2:f8:d3:eb:14:14:9c:69:
47:04:2e:60:31:a9:52:92:18:41:0c:3f:86:86:ae:6d:52:b6:
30:a8:fb:ee:d0:b8:29:44:ca:bd:b3:a2:62:ab:b8:c3:ce:91:
8f:54:24:fc:ea:7f:ae:63:24:70:31:b9:7a:5d:c8:c0:6d:9c:
59:b0:2d:42:92:a8:24:4c:54:8b:b1:1c:77:45:94:ea:0c:cb:
09:b6:0d:73:8c:8a:9b:a8:92:3d:a1:58:a6:90:d7:2c:35:ca:
4b:40:3f:ea:81:98:e6:49:8f:d4:e1:c3:0e:e7:67:a1:af:21:
c0:d8:f0:44:5b:2c:c2:87:2c:da:26:90:f4:ed:29:1f:65:bb:
bd:41:17:61:51:91:90:7b:a2:e0:07:d1:3f:dc:48:a3:17:3a:
b7:aa:e9:f5:61:55:f0:dd:d6:27:e5:15:16:64:db:c8:5b:00:
17:34:54:0e:f8:fd:9d:8e:fb:db:86:d3:f3:8b:2c:62:52:69:
a9:db:6f:06:4c:d4:4c:4b:d3:f5:81:f2:4b:1c:f2:4d:33:23:
42:92:29:38:0d:39:2c:24:bb:95:b8:ac:43:7d:fe:78:e5:0a:
d1:66:51:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuRylBA2Nj371/F99sQ2AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NmRjNjBkMTZkZmUxNjQ5ZDg2YzE2OTNlMTc4NThjMjMw
NjM4N2YwHhcNMjUxMTExMDcwMjI4WhcNMjUxMTEyMDcwMjI4WjAzMTEwLwYDVQQD
Eyg4YzkwOTZjMTk1YzgwYzU0ODViZDA2NWVkYjA4MDQ3YjY2NThhMTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y1yAM7NSBBf3z67cUhMVSC+yCw4
C/ftvQy8Nr9H9t71YGNQ8a5sZTJs4iKVtTxBf8WFRLVbZq92OLs6tYPJaK+aHBg9
b5sqMkKk4gSDpKobEq7Rz9oi1Zq4nnnaeyUXD6eZsgWU8eZ9VWpC8xpj9X9g7qaL
Qco67bAbZH5GidxCy53RNWHB1AHPaQsMGNNGqAnmwXfm5FwMe/cduwKfPScV11df
RwnQDWjP1p+Wj9naeBZk9kDbVyFdq1R/o3f7bVdF7ag0T/m7QoFodp6VczDqTkxb
Btvu6a83hEddckTN2mOj3OKvit7HW77j0F7ptytxUSrcU1TPBHOfeKRDcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyQlsGVyAxUhb0GXtsIBHtmWKENMB8GA1UdIwQY
MBaAFMZtxg0W3+FknYbBaT4XhYwjBjh/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mMGUxNjEtYTQzYy00ZDMxLWI2NWQt
ZDRmZWQ1MDg1MzkyLzEveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mMGUxNjEtYTQzYy00ZDMxLWI2NWQtZDRmZWQ1MDg1Mzky
LzEveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcF5PSON1
ULmngJ2i8ap+4GwjcwYiWiOn3qEV6uL40+sUFJxpRwQuYDGpUpIYQQw/hoaubVK2
MKj77tC4KUTKvbOiYqu4w86Rj1Qk/Op/rmMkcDG5el3IwG2cWbAtQpKoJExUi7Ec
d0WU6gzLCbYNc4yKm6iSPaFYppDXLDXKS0A/6oGY5kmP1OHDDudnoa8hwNjwRFss
wocs2iaQ9O0pH2W7vUEXYVGRkHui4AfRP9xIoxc6t6rp9WFV8N3WJ+UVFmTbyFsA
FzRUDvj9nY7724bT84ssYlJpqdtvBkzUTEvT9YHySxzyTTMjQpIpOA05LCS7lbis
Q33+eOUK0WZR8g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:51 2025 by rpki-client