Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
File: x6trIlTkVzCq-kWrUZcyA2FLtsw.mft (raw, json)
Hash identifier: WrOndqeHeJsT0G7idJvHr9+GN1UvFcZwEoiFcHd7LEg=
Subject key identifier: B2:43:2C:B8:A0:FD:46:21:30:0D:50:68:08:17:5C:39:06:0C:D1:29
Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
Certificate issuer: /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Certificate serial: 019A7225BD52486CDF47E8CA2077C190D8F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
Manifest number: 1462
Signing time: Tue 11 Nov 2025 09:01:07 +0000
Manifest this update: Tue 11 Nov 2025 09:01:07 +0000
Manifest next update: Wed 12 Nov 2025 09:01:07 +0000
Files and hashes: 1: 1-nvEOeF_8-seqo32QYrx6ZTVBbQ.roa (hash: wVf2ruzd40pFbTR8RI0Ob3qelEQ26yizyOMJb6WWHNQ=)
2: G0WvFuc_CxaN6eARB2yClzaX2KQ.roa (hash: OXBzj+MAAD5v1p61n5nSRmMEjnNH86aTtUDpVIx76+o=)
3: x6trIlTkVzCq-kWrUZcyA2FLtsw.crl (hash: CiiqpTK+162lJ+mJXMzGxhEUQ4MxH0HdpP1V2e7nwfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:bd:52:48:6c:df:47:e8:ca:20:77:c1:90:d8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Validity
Not Before: Nov 11 09:01:07 2025 GMT
Not After : Nov 12 09:01:07 2025 GMT
Subject: CN=b2432cb8a0fd4621300d506808175c39060cd129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c3:2d:74:cc:45:ca:ec:e9:2d:3c:1f:d5:8c:
79:58:df:ac:e9:ba:55:86:40:4f:d9:58:50:86:74:
65:07:92:97:39:18:e9:3c:60:a6:a5:9e:bd:85:1c:
29:7c:34:75:63:6a:f7:aa:61:af:82:c2:bc:61:bc:
bf:45:76:5a:ca:cc:af:8a:81:23:0c:90:1c:8a:43:
86:2d:93:0b:f1:16:c6:a9:fa:d5:33:25:66:32:a0:
29:10:b5:0b:5c:17:2e:bf:b7:a9:6d:48:b1:01:6f:
7a:30:84:28:42:66:b2:2d:c4:80:0a:db:f6:89:66:
57:fd:ea:9b:47:3b:2e:db:9a:e8:0d:cc:6c:8b:85:
e2:80:55:fc:f6:59:b4:79:ac:f7:5d:d8:9c:02:12:
d4:fa:60:35:95:18:cd:7f:b6:e4:cf:df:d5:e0:a6:
57:ea:dd:17:2c:18:35:4a:3d:ef:a4:66:85:18:66:
74:a1:b6:e9:01:06:6f:d6:32:7a:e0:cd:07:7d:dd:
3b:e5:5b:6c:18:f9:20:3c:70:85:be:87:65:19:2a:
46:0d:49:9a:09:34:d6:d4:68:f3:1c:1e:91:8b:0c:
57:2e:33:a4:cf:65:cb:2f:ce:d8:9d:0f:54:69:ad:
85:4f:ee:65:37:79:15:ef:51:3d:22:e2:84:53:86:
3d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:43:2C:B8:A0:FD:46:21:30:0D:50:68:08:17:5C:39:06:0C:D1:29
X509v3 Authority Key Identifier:
keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d3:d7:87:fb:fb:e5:67:82:27:d2:64:e1:e0:bd:df:8d:7a:
b4:3e:70:35:8f:ff:3c:10:c4:9f:49:4a:88:35:48:cb:0b:d2:
53:db:5b:34:d1:1b:c1:21:8c:6d:0e:7d:e8:74:84:d4:99:88:
cd:ad:ce:05:ef:47:a3:d0:f9:25:51:36:cf:10:7c:30:a5:d2:
7f:94:4c:88:ae:93:4d:a1:e7:b4:f8:59:85:b5:cf:6d:29:83:
31:18:c9:f8:8a:1a:a9:af:8b:d6:18:a5:3f:19:09:38:ed:d5:
dc:34:bf:55:72:48:0a:b5:a9:c3:98:ed:38:b4:b6:9d:5f:c9:
d8:e5:50:2c:bd:a5:c1:ab:7c:a1:43:0c:67:c7:b2:32:b6:20:
86:80:50:58:18:d5:8d:10:70:be:28:8e:2c:4e:8d:1f:85:30:
63:9d:d7:17:87:11:c5:c1:1b:26:55:bc:2f:20:1b:bd:48:e3:
4c:39:8a:6d:00:1f:51:31:ba:ea:da:46:16:84:4f:88:e1:b1:
73:42:b9:00:49:55:d6:bd:d9:74:6e:db:54:b0:ed:d1:3a:97:
09:82:82:03:b1:b8:b8:7c:f5:6d:b0:ee:01:00:e8:c7:92:78:
d9:e8:1e:c9:b3:71:83:5c:2c:15:53:35:fa:d9:1c:2b:a9:83:
13:37:de:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJb1SSGzfR+jKIHfBkNj0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YWI2YjIyNTRlNDU3MzBhYWZhNDVhYjUxOTczMjAzNjE0
YmI2Y2MwHhcNMjUxMTExMDkwMTA3WhcNMjUxMTEyMDkwMTA3WjAzMTEwLwYDVQQD
EyhiMjQzMmNiOGEwZmQ0NjIxMzAwZDUwNjgwODE3NWMzOTA2MGNkMTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MMtdMxFyuzpLTwf1Yx5WN+s6bpV
hkBP2VhQhnRlB5KXORjpPGCmpZ69hRwpfDR1Y2r3qmGvgsK8Yby/RXZaysyvioEj
DJAcikOGLZML8RbGqfrVMyVmMqApELULXBcuv7epbUixAW96MIQoQmayLcSACtv2
iWZX/eqbRzsu25roDcxsi4XigFX89lm0eaz3XdicAhLU+mA1lRjNf7bkz9/V4KZX
6t0XLBg1Sj3vpGaFGGZ0obbpAQZv1jJ64M0Hfd075VtsGPkgPHCFvodlGSpGDUma
CTTW1GjzHB6RiwxXLjOkz2XLL87YnQ9Uaa2FT+5lN3kV71E9IuKEU4Y9KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJDLLig/UYhMA1QaAgXXDkGDNEpMB8GA1UdIwQY
MBaAFMerayJU5FcwqvpFq1GXMgNhS7bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zM2I2OWQtZjRjYS00M2FhLTk3ODAt
MWQ1NWQ1OTI5Y2VjLzEveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8zM2I2OWQtZjRjYS00M2FhLTk3ODAtMWQ1NWQ1OTI5Y2Vj
LzEveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdPXh/v7
5WeCJ9Jk4eC93416tD5wNY//PBDEn0lKiDVIywvSU9tbNNEbwSGMbQ596HSE1JmI
za3OBe9Ho9D5JVE2zxB8MKXSf5RMiK6TTaHntPhZhbXPbSmDMRjJ+Ioaqa+L1hil
PxkJOO3V3DS/VXJICrWpw5jtOLS2nV/J2OVQLL2lwat8oUMMZ8eyMrYghoBQWBjV
jRBwviiOLE6NH4UwY53XF4cRxcEbJlW8LyAbvUjjTDmKbQAfUTG66tpGFoRPiOGx
c0K5AElV1r3ZdG7bVLDt0TqXCYKCA7G4uHz1bbDuAQDox5J42egeybNxg1wsFVM1
+tkcK6mDEzfe0A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:48 2025 by rpki-client