Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json)
Hash identifier: gbljYJQRpz1grQgrwLp082dfFeBALrfeEmFYC5U554U=
Subject key identifier: 80:30:F1:C2:C8:99:8D:B1:88:C4:3D:C2:4D:8C:71:AA:25:2E:90:FE
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 019A251CE2FB4E86144CE94371C0F31826BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
Manifest number: 14D1
Signing time: Mon 27 Oct 2025 10:00:41 +0000
Manifest this update: Mon 27 Oct 2025 10:00:41 +0000
Manifest next update: Tue 28 Oct 2025 10:00:41 +0000
Files and hashes: 1: 1-odAb-HXEiGLPx5y_PADnZMBf0g.roa (hash: 4z0B6lGqXvXr1EDmabK3iy+SlaX1WPh7Y1Hx0zBd0iM=)
2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: 6YG16pQBzgLYz9RS1gn3imk7BFbYnoGA6VmnRnv3IWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:e2:fb:4e:86:14:4c:e9:43:71:c0:f3:18:26:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Oct 27 10:00:41 2025 GMT
Not After : Oct 28 10:00:41 2025 GMT
Subject: CN=8030f1c2c8998db188c43dc24d8c71aa252e90fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f0:0a:cc:82:a4:2a:56:b1:ca:70:94:1a:bc:
df:74:54:d1:b9:cb:98:94:f6:85:83:bc:7b:06:3d:
f5:7e:ae:95:34:5f:8e:af:d9:ad:f1:68:8d:65:d2:
4a:9b:82:ab:e6:55:c5:93:64:8a:73:ec:1d:bc:f2:
c2:c9:02:09:a5:d5:2d:61:91:ef:05:8c:0b:3b:28:
c1:6a:20:a7:66:63:8b:01:9c:5f:7c:0c:f6:9f:98:
b1:36:40:11:ed:8b:7b:50:b5:15:9c:14:77:95:15:
80:e3:a6:54:18:4d:f9:f1:45:f9:ba:b4:2e:16:1f:
ea:13:61:4a:c0:a8:19:f7:63:d4:25:eb:77:fd:2a:
25:a8:04:ba:ff:ec:f8:ae:92:7a:74:ae:03:3b:1d:
6d:eb:3a:82:c9:8e:e3:83:e0:c2:2a:ad:0d:3f:34:
3e:28:cc:69:0b:c6:36:5b:a2:60:b3:bb:39:37:db:
dc:d4:1c:1f:90:d3:dd:e7:f3:4c:10:2a:11:3c:b3:
0f:b1:ab:57:f8:1e:24:f7:4a:68:55:6f:75:f0:34:
33:13:f2:c2:b8:82:3d:a1:12:2e:4f:21:59:b3:82:
d7:6f:21:eb:1c:76:42:b2:52:24:af:3f:10:77:6e:
7f:29:da:45:00:bb:7c:70:97:cb:91:3a:20:18:c1:
04:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:30:F1:C2:C8:99:8D:B1:88:C4:3D:C2:4D:8C:71:AA:25:2E:90:FE
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5f:08:7b:a8:9e:75:63:9d:a6:66:9e:63:36:03:a3:10:0b:
bd:6b:0d:54:56:7e:3f:f1:74:35:67:08:74:47:52:d8:ff:c6:
64:a9:95:42:52:93:86:80:7d:f2:7a:a5:3f:05:e7:a7:48:ee:
16:5b:da:39:5c:b3:de:72:09:22:71:9a:5e:16:f8:d9:6f:c7:
f5:5f:86:83:c1:70:f7:bc:bc:11:ea:c5:9f:e5:55:01:43:aa:
f0:87:ec:60:4d:44:a2:dd:5a:bd:b1:84:d4:f4:95:d5:5b:b6:
df:3f:a9:9d:05:da:28:45:a5:15:fa:de:91:db:0e:d2:73:b6:
08:3d:b1:e7:fe:ec:d6:f7:16:45:25:36:a7:94:5a:0f:16:dd:
75:02:b2:c8:38:30:60:16:a4:b8:27:5e:7f:3e:6f:7e:64:2d:
30:20:08:a3:32:d2:b1:82:f5:c0:3d:5d:58:ce:13:14:f4:95:
ab:f4:7f:78:8d:f9:40:7b:71:50:5b:db:48:15:aa:0b:7b:4c:
09:05:e6:9e:f9:db:d7:62:5d:2c:67:1d:11:f7:47:7b:e9:8c:
00:b5:6e:f1:a2:8e:e2:87:ce:b6:51:f2:ef:e1:39:77:e3:2f:
8a:eb:c5:75:92:4d:f0:fb:0d:aa:3a:b2:99:83:36:98:f8:80:
d2:ca:46:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolHOL7ToYUTOlDccDzGCa9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMzI1YmVmZDhiN2U4NWUzNDcxMDQyMDZkOGMwYWI4YTZl
MGZiNGUwHhcNMjUxMDI3MTAwMDQxWhcNMjUxMDI4MTAwMDQxWjAzMTEwLwYDVQQD
Eyg4MDMwZjFjMmM4OTk4ZGIxODhjNDNkYzI0ZDhjNzFhYTI1MmU5MGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPAKzIKkKlaxynCUGrzfdFTRucuY
lPaFg7x7Bj31fq6VNF+Or9mt8WiNZdJKm4Kr5lXFk2SKc+wdvPLCyQIJpdUtYZHv
BYwLOyjBaiCnZmOLAZxffAz2n5ixNkAR7Yt7ULUVnBR3lRWA46ZUGE358UX5urQu
Fh/qE2FKwKgZ92PUJet3/SolqAS6/+z4rpJ6dK4DOx1t6zqCyY7jg+DCKq0NPzQ+
KMxpC8Y2W6Jgs7s5N9vc1BwfkNPd5/NMECoRPLMPsatX+B4k90poVW918DQzE/LC
uII9oRIuTyFZs4LXbyHrHHZCslIkrz8Qd25/KdpFALt8cJfLkTogGMEECQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAw8cLImY2xiMQ9wk2McaolLpD+MB8GA1UdIwQY
MBaAFF0yW+/Yt+heNHEEIG2MCrim4PtOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFRKYjc5aTM2RjQwY1FRZ2JZd0t1S2JnLTA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81MTQ2ZDAtM2U3NC00N2ExLWFhM2Ut
Zjk5OTViNzhhODVmLzEvWFRKYjc5aTM2RjQwY1FRZ2JZd0t1S2JnLTA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC81MTQ2ZDAtM2U3NC00N2ExLWFhM2UtZjk5OTViNzhhODVm
LzEvWFRKYjc5aTM2RjQwY1FRZ2JZd0t1S2JnLTA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB18Ie6ie
dWOdpmaeYzYDoxALvWsNVFZ+P/F0NWcIdEdS2P/GZKmVQlKThoB98nqlPwXnp0ju
FlvaOVyz3nIJInGaXhb42W/H9V+Gg8Fw97y8EerFn+VVAUOq8IfsYE1Eot1avbGE
1PSV1Vu23z+pnQXaKEWlFfrekdsO0nO2CD2x5/7s1vcWRSU2p5RaDxbddQKyyDgw
YBakuCdefz5vfmQtMCAIozLSsYL1wD1dWM4TFPSVq/R/eI35QHtxUFvbSBWqC3tM
CQXmnvnb12JdLGcdEfdHe+mMALVu8aKO4ofOtlHy7+E5d+MviuvFdZJN8PsNqjqy
mYM2mPiA0spGjg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 17:28:09 2025 by rpki-client