Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier: NnrnaQdZKqqwdQrfa5W0MXR7UmPcp7ZHh2qZLZNsYfk=
Subject key identifier: 2A:C1:4C:60:74:93:CE:98:21:B1:5F:50:0A:32:FE:6F:AE:35:21:34
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial: 019A2478BBB7569538A789B6BB9CC44D5D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number: 168B
Signing time: Mon 27 Oct 2025 07:01:23 +0000
Manifest this update: Mon 27 Oct 2025 07:01:23 +0000
Manifest next update: Tue 28 Oct 2025 07:01:23 +0000
Files and hashes: 1: MPJbxNfI4E3-o9R3b5LoavuNf_M.roa (hash: YmpwW40yFr+eOmaR9up2PE3Zd5XCNeKEz4dO44qxY0o=)
2: dRZw3Usb2yz3p3d9m-6XMO158wI.roa (hash: JliEihs4bCSiKbM0gL/JHcl4AanPExI+3YUAO/UsNWk=)
3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: cynhYH8lDh0mASA3sp88Phz90netYdQjXC3RvyF7+/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:bb:b7:56:95:38:a7:89:b6:bb:9c:c4:4d:5d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Validity
Not Before: Oct 27 07:01:23 2025 GMT
Not After : Oct 28 07:01:23 2025 GMT
Subject: CN=2ac14c607493ce9821b15f500a32fe6fae352134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:8a:b6:d9:7f:4c:4d:91:44:60:0d:a0:8b:d0:
f3:57:05:77:3a:ee:68:54:ab:8a:98:b0:24:9c:78:
87:15:e6:32:fe:63:f7:e5:65:f3:7f:c3:77:61:63:
07:3e:69:16:32:26:2d:bd:1a:da:2b:df:ff:2d:8e:
78:a3:3e:bf:f9:43:3e:91:9b:0c:39:f7:f0:c8:dc:
ef:69:9f:9e:30:8b:ca:3e:c1:c2:a9:5d:b2:b0:ca:
b5:d2:4d:c8:ea:d8:fe:d4:8c:23:b0:83:fb:1d:ae:
ac:55:ff:c0:e0:97:5b:7a:b0:82:e0:e7:d0:30:00:
6d:d8:56:2b:92:f8:68:83:89:35:6e:38:f8:b7:8d:
34:09:d6:f6:66:da:58:02:7c:15:f3:bd:41:b7:d5:
b6:73:0d:d0:b8:0f:aa:58:52:67:29:d0:c2:db:91:
c6:5e:a2:29:e7:4f:0f:56:86:cf:28:e3:1f:40:dd:
5d:41:83:0e:71:f6:7c:21:9a:c9:6f:6c:4a:9b:22:
be:fa:ce:d0:e4:a0:54:ea:0e:83:ff:67:e8:51:fd:
7b:79:2f:36:58:aa:c8:91:c0:d9:26:7f:ba:1e:e4:
9c:d4:0c:68:60:a8:0e:86:ff:66:b9:a2:e4:34:f9:
f8:1a:0f:63:9f:7b:77:14:bf:08:c6:f7:35:70:46:
b6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C1:4C:60:74:93:CE:98:21:B1:5F:50:0A:32:FE:6F:AE:35:21:34
X509v3 Authority Key Identifier:
keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:fe:8d:e7:c6:f3:e1:2e:1c:0d:1d:83:90:11:7a:ab:61:7c:
c8:7d:23:6e:11:bb:d3:66:ae:a9:da:6c:77:fc:b3:e4:16:43:
1f:b9:88:83:71:41:b5:1a:46:14:97:d1:68:32:d3:20:8b:28:
3a:db:62:63:74:67:57:14:bf:90:a1:51:fa:6e:b7:18:7b:8b:
69:cf:22:5c:9c:ce:93:c7:70:c0:5a:f2:39:3e:4e:2e:32:3f:
91:5c:04:6a:00:b9:a2:88:82:b2:eb:cb:ff:e2:07:37:99:bd:
39:79:5f:45:de:6a:fb:4c:e4:90:f4:15:20:a7:39:18:1d:2e:
99:89:53:b6:a1:d1:20:6e:e9:79:b5:2c:ec:85:cc:0e:97:b7:
9d:b9:ec:51:39:85:0a:01:d8:cd:db:fb:1d:14:0e:41:bb:e2:
61:19:c6:32:99:64:2c:eb:63:76:76:a5:33:51:fa:10:7d:59:
5d:52:85:81:ac:0f:2d:97:e2:b1:44:70:e4:93:a4:0f:47:63:
6f:bf:fe:56:0d:8e:b2:bc:e0:54:ca:71:61:cf:a2:b7:df:cc:
49:87:ce:ac:09:ee:5f:6e:23:e0:54:ed:c8:f6:39:d5:f7:ad:
d8:05:32:de:98:d1:c2:7f:3c:28:5f:ee:b5:76:d7:89:15:cd:
3b:28:41:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokeLu3VpU4p4m2u5zETV1oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OGFmYTIyZjk4YTM3ZjZkOGQwMjkzYTliMzE5NDE2ZWM5
NGQzODYwHhcNMjUxMDI3MDcwMTIzWhcNMjUxMDI4MDcwMTIzWjAzMTEwLwYDVQQD
EygyYWMxNGM2MDc0OTNjZTk4MjFiMTVmNTAwYTMyZmU2ZmFlMzUyMTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+oq22X9MTZFEYA2gi9DzVwV3Ou5o
VKuKmLAknHiHFeYy/mP35WXzf8N3YWMHPmkWMiYtvRraK9//LY54oz6/+UM+kZsM
OffwyNzvaZ+eMIvKPsHCqV2ysMq10k3I6tj+1IwjsIP7Ha6sVf/A4JdberCC4OfQ
MABt2FYrkvhog4k1bjj4t400Cdb2ZtpYAnwV871Bt9W2cw3QuA+qWFJnKdDC25HG
XqIp508PVobPKOMfQN1dQYMOcfZ8IZrJb2xKmyK++s7Q5KBU6g6D/2foUf17eS82
WKrIkcDZJn+6HuSc1AxoYKgOhv9muaLkNPn4Gg9jn3t3FL8Ixvc1cEa2dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrBTGB0k86YIbFfUAoy/m+uNSE0MB8GA1UdIwQY
MBaAFMWK+iL5ijf22NApOpsxlBbslNOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFlyNkl2bUtOX2JZMENrNm16R1VGdXlVMDRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NThjOGEtNjEzZS00ZTJhLThmZTEt
OTEyMjg2MjA1NzBlLzEveFlyNkl2bUtOX2JZMENrNm16R1VGdXlVMDRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NThjOGEtNjEzZS00ZTJhLThmZTEtOTEyMjg2MjA1NzBl
LzEveFlyNkl2bUtOX2JZMENrNm16R1VGdXlVMDRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmv6N58bz
4S4cDR2DkBF6q2F8yH0jbhG702auqdpsd/yz5BZDH7mIg3FBtRpGFJfRaDLTIIso
OttiY3RnVxS/kKFR+m63GHuLac8iXJzOk8dwwFryOT5OLjI/kVwEagC5ooiCsuvL
/+IHN5m9OXlfRd5q+0zkkPQVIKc5GB0umYlTtqHRIG7pebUs7IXMDpe3nbnsUTmF
CgHYzdv7HRQOQbviYRnGMplkLOtjdnalM1H6EH1ZXVKFgawPLZfisURw5JOkD0dj
b7/+Vg2OsrzgVMpxYc+it9/MSYfOrAnuX24j4FTtyPY51fet2AUy3pjRwn88KF/u
tXbXiRXNOyhBbA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:10:48 2025 by rpki-client