Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier: QdhNTt6DbO4rtDRwnXhrr+ureb0OSDKHOCrZfgdjc+A=
Subject key identifier: EC:C9:9E:2A:E4:7B:01:22:C0:BF:23:39:02:48:8E:81:C0:B6:17:20
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 019A6CC8D4E988278A86A48279FD57B9DB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number: 04B5
Signing time: Mon 10 Nov 2025 08:01:32 +0000
Manifest this update: Mon 10 Nov 2025 08:01:32 +0000
Manifest next update: Tue 11 Nov 2025 08:01:32 +0000
Files and hashes: 1: 0eBj-TNfE0NgkAODM9VoPKQnB0E.roa (hash: O8GHZwLzkXmxkB1uIiy9qo5QY14RKmQf2i0WksTve7o=)
2: 3MrTzqXRqi4qw3h6oaqykX6J0kU.roa (hash: +ClOERLFY4P0cwxaW/Im6eS4rQN8CdS+8xi58ep6Alk=)
3: 4is7oarlUlE_cBHOgTitgHxyrkc.roa (hash: qZVlByTSh1XFAvIhseY4HhxihXTQeYS+WUxMcII1cZU=)
4: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: ZDC6Vcz7ik0xhMssTraJYDXKLGHobAcbuxFwOSDJAJ4=)
5: sS98ShuiZY9gamFcZrqcbFzjMbs.roa (hash: BxhyjLfYrjzjXEBjZnGso78ZHOLYRxMopWgqZ0QBVko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 08:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6c:c8:d4:e9:88:27:8a:86:a4:82:79:fd:57:b9:db:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Nov 10 08:01:32 2025 GMT
Not After : Nov 11 08:01:32 2025 GMT
Subject: CN=ecc99e2ae47b0122c0bf233902488e81c0b61720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ab:31:e2:ec:28:92:aa:27:50:73:19:e0:bf:
27:fd:70:ed:b8:15:4c:1a:8a:15:c0:68:c8:1b:8e:
38:16:5b:63:ba:d0:3f:84:a2:bd:cd:46:98:27:62:
3c:e6:d1:65:c1:47:82:72:72:91:5a:ef:1d:90:4c:
7a:ea:35:b1:ff:1b:4f:6c:9c:97:88:77:f2:6f:ed:
5d:f5:82:12:93:e9:75:21:d4:be:b6:1f:d3:16:aa:
8d:37:cc:a8:33:ba:42:f7:28:02:7e:93:8a:c0:f4:
81:e3:57:99:19:c0:ff:53:1d:3b:92:3c:ca:08:5b:
7e:a3:de:9f:c5:52:f0:99:60:e8:41:e1:b6:66:3d:
21:93:57:80:84:b0:a8:a6:29:92:31:f7:69:58:f6:
db:bd:f5:12:47:73:c4:48:7c:09:31:b5:e7:46:ff:
21:34:3d:94:a4:70:56:59:47:57:e3:99:21:bc:f8:
96:46:40:36:59:16:bb:22:5a:09:45:07:35:7e:1b:
ee:b9:98:80:d4:a4:52:ad:60:da:60:b3:4a:d5:bb:
44:69:2a:3a:c2:c2:e2:a4:3a:c2:d2:d1:c6:4d:5b:
24:c2:95:fc:b7:a3:7c:dd:d0:ce:99:5a:47:92:b1:
c9:0e:6f:81:f0:8a:3e:16:60:9b:ba:e2:2a:cc:7a:
01:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C9:9E:2A:E4:7B:01:22:C0:BF:23:39:02:48:8E:81:C0:B6:17:20
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:9f:59:9f:45:15:e2:d7:49:3a:18:9e:cd:6e:2d:54:08:21:
ef:bf:ad:5e:db:cd:48:b0:fd:d3:4b:e5:fb:c3:d5:2d:7f:04:
47:f5:65:e5:5a:ac:5d:b8:e4:20:cc:9c:ec:f3:6e:83:b8:5c:
0c:82:57:4f:22:ec:cd:b0:b8:fa:75:28:17:4e:7a:01:7a:2e:
36:09:cc:40:6a:2e:ca:cb:f4:6e:de:af:9d:2f:82:a4:93:61:
0a:f4:3f:28:9e:12:dd:f8:b6:13:37:c9:6e:6c:2e:b5:a1:bb:
38:8b:32:ee:b6:25:d2:79:5d:fe:8b:a2:6c:47:a2:7b:ac:8c:
39:cb:1c:ca:a3:81:23:22:2a:eb:7e:76:d8:bd:5c:74:01:cc:
22:0b:06:c9:a8:de:4a:45:db:c8:c1:82:8d:5c:97:ed:f8:7b:
5e:ae:fe:7a:58:70:2a:f9:c3:2e:6c:6c:04:54:49:5d:7e:46:
65:2a:20:15:fc:2d:fb:ed:01:b3:ae:d4:b2:ca:a4:de:48:19:
91:88:16:41:d7:08:df:6e:4c:aa:68:60:fa:31:c8:c9:fe:19:
8e:3d:e4:b1:64:66:75:71:40:1b:70:9c:99:c8:de:2f:2f:e9:
ad:ce:42:8c:3a:ca:7c:b7:25:c3:29:4f:20:a4:12:09:27:e0:
56:5c:96:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpsyNTpiCeKhqSCef1XudtUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYzkwNTE4ZGY3MGIxM2Q3MDZiZmUyMzdhYTVhNzY5MjZh
NTc2ZDEwHhcNMjUxMTEwMDgwMTMyWhcNMjUxMTExMDgwMTMyWjAzMTEwLwYDVQQD
EyhlY2M5OWUyYWU0N2IwMTIyYzBiZjIzMzkwMjQ4OGU4MWMwYjYxNzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqsx4uwokqonUHMZ4L8n/XDtuBVM
GooVwGjIG444FltjutA/hKK9zUaYJ2I85tFlwUeCcnKRWu8dkEx66jWx/xtPbJyX
iHfyb+1d9YISk+l1IdS+th/TFqqNN8yoM7pC9ygCfpOKwPSB41eZGcD/Ux07kjzK
CFt+o96fxVLwmWDoQeG2Zj0hk1eAhLCopimSMfdpWPbbvfUSR3PESHwJMbXnRv8h
ND2UpHBWWUdX45khvPiWRkA2WRa7IloJRQc1fhvuuZiA1KRSrWDaYLNK1btEaSo6
wsLipDrC0tHGTVskwpX8t6N83dDOmVpHkrHJDm+B8Io+FmCbuuIqzHoBAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzJnirkewEiwL8jOQJIjoHAthcgMB8GA1UdIwQY
MBaAFF/JBRjfcLE9cGv+I3qlp2kmpXbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEt
YzgzMDJlODJlYTIyLzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEtYzgzMDJlODJlYTIy
LzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI59Zn0UV
4tdJOhiezW4tVAgh77+tXtvNSLD900vl+8PVLX8ER/Vl5VqsXbjkIMyc7PNug7hc
DIJXTyLszbC4+nUoF056AXouNgnMQGouysv0bt6vnS+CpJNhCvQ/KJ4S3fi2EzfJ
bmwutaG7OIsy7rYl0nld/ouibEeie6yMOcscyqOBIyIq63522L1cdAHMIgsGyaje
SkXbyMGCjVyX7fh7Xq7+elhwKvnDLmxsBFRJXX5GZSogFfwt++0Bs67Ussqk3kgZ
kYgWQdcI325Mqmhg+jHIyf4Zjj3ksWRmdXFAG3CcmcjeLy/prc5CjDrKfLclwylP
IKQSCSfgVlyWSA==
-----END CERTIFICATE-----
Generated at Mon Nov 10 15:50:03 2025 by rpki-client