Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier: /4g1w7xVleWpjXxkcuwayU+fAJfLIwKZ/QwNlkREfsY=
Subject key identifier: 09:7B:54:9A:47:CF:80:C7:F6:84:0F:79:9E:73:43:DF:4A:5A:90:C8
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 019A52D27CC36882E487EEC0741DC26856BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 07:01:57 +0000
Manifest this update: Wed 05 Nov 2025 07:01:57 +0000
Manifest next update: Thu 06 Nov 2025 07:01:57 +0000
Files and hashes: 1: Q0ZblCsN6JQUnX3udQDuap6c2-I.roa (hash: I2xlD4uVVWvOFoGpUCm96IHEkG1bjZkLPW0exqxVsw0=)
2: TlDCQOh10UlQ796GS1cAAc1JE1M.roa (hash: pcd2lbTTd2y5ARZY73OsqPA+0niqtCAf82HtT92KDWw=)
3: UvT-ik743JDt1vdojO7D5Hy8riI.roa (hash: w83cJePf0jK45fQwHEKQOjcAlugYhfHD/eFh3NZpxgs=)
4: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: xJKVSNioQPkqHmWbYDdu1K7KYIhNzc09vK6OE5PAJus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:7c:c3:68:82:e4:87:ee:c0:74:1d:c2:68:56:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Nov 5 07:01:57 2025 GMT
Not After : Nov 6 07:01:57 2025 GMT
Subject: CN=097b549a47cf80c7f6840f799e7343df4a5a90c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b4:fc:58:f6:48:e8:f5:23:f6:c3:92:80:f4:
c4:a6:32:d4:e3:75:b3:54:07:88:b3:fb:6d:84:09:
0e:91:de:4e:ec:bc:ca:1c:8b:21:7e:b5:63:ca:f0:
c0:ec:4c:52:c8:e5:4d:7e:71:6e:9a:35:cf:2a:02:
a9:47:07:da:2b:66:e8:93:fa:80:e3:0c:2f:4f:6a:
3b:50:8a:34:27:d1:db:83:b5:d6:fe:69:40:b2:65:
c7:a1:4c:36:c1:eb:05:6e:a6:2c:68:ea:7f:d0:1b:
77:92:c7:0b:50:b2:ee:50:e9:f9:b4:68:01:21:a0:
62:1e:1d:17:07:16:0c:e8:07:34:c5:43:1d:7f:42:
59:71:61:69:4a:35:88:6c:12:94:72:c1:97:40:5f:
18:40:e5:3b:9e:f3:1b:f1:42:dd:01:2a:b8:d9:72:
b8:24:55:6f:e3:1e:db:1e:4f:e9:3e:a5:66:3c:66:
d7:37:1c:23:10:55:55:a3:5f:92:af:c9:c9:4c:a1:
e1:ea:2b:cc:da:56:95:da:ae:26:8d:b6:db:15:9d:
9b:d7:3f:f5:81:88:4c:dc:6e:4e:3d:88:e1:ee:8f:
d4:d4:4f:34:f8:1b:d8:68:20:50:ae:fe:38:8e:d1:
cb:28:ba:8e:0b:f0:ff:30:50:91:8f:04:f9:b7:b4:
44:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7B:54:9A:47:CF:80:C7:F6:84:0F:79:9E:73:43:DF:4A:5A:90:C8
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:55:ac:dc:38:9e:35:ec:3e:b9:ed:b2:77:9a:ff:da:43:a5:
a2:2e:4c:2a:fc:35:c1:23:87:e7:1f:72:5d:42:bd:48:a1:c3:
db:a3:4a:ae:63:08:65:28:a4:34:68:27:fe:30:f8:f5:c2:26:
ea:46:a4:fe:07:83:98:9f:8e:3a:a2:ee:2f:33:23:b2:45:0e:
91:6c:5d:ef:71:99:10:9c:cf:e5:07:91:23:90:24:be:94:e0:
51:df:39:a3:19:c9:ce:f3:7f:01:fd:1c:38:bf:bb:10:d0:19:
da:19:68:ea:64:0a:f4:ef:db:4c:68:23:9a:85:bd:25:2b:d0:
bf:18:7f:60:17:65:e3:92:98:f6:06:60:10:4d:8c:70:20:73:
e0:b6:27:81:28:dd:33:7a:cd:b2:0b:56:2a:22:f2:6a:7e:16:
91:b0:f4:bd:38:d0:94:93:cf:e2:4e:05:9e:f7:fa:55:5b:7e:
cc:5e:2a:3b:11:01:d2:7a:4f:66:4e:57:11:c0:f6:b7:bb:0c:
4e:43:80:8e:94:39:06:43:bb:11:7e:b6:98:1d:09:08:52:14:
cf:77:92:16:30:2e:08:66:21:3f:88:0a:c0:29:b5:26:5e:00:
2b:5f:66:7e:ab:7e:3a:d0:c4:12:61:63:bd:a0:e1:e9:b8:3a:
73:28:d6:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0nzDaILkh+7AdB3CaFa6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDIzYzdhYzZlNjgyZmJjNTNiZTFhMGU5MzE4ZjZjY2Fl
NzE5M2QwHhcNMjUxMTA1MDcwMTU3WhcNMjUxMTA2MDcwMTU3WjAzMTEwLwYDVQQD
EygwOTdiNTQ5YTQ3Y2Y4MGM3ZjY4NDBmNzk5ZTczNDNkZjRhNWE5MGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7T8WPZI6PUj9sOSgPTEpjLU43Wz
VAeIs/tthAkOkd5O7LzKHIshfrVjyvDA7ExSyOVNfnFumjXPKgKpRwfaK2bok/qA
4wwvT2o7UIo0J9Hbg7XW/mlAsmXHoUw2wesFbqYsaOp/0Bt3kscLULLuUOn5tGgB
IaBiHh0XBxYM6Ac0xUMdf0JZcWFpSjWIbBKUcsGXQF8YQOU7nvMb8ULdASq42XK4
JFVv4x7bHk/pPqVmPGbXNxwjEFVVo1+Sr8nJTKHh6ivM2laV2q4mjbbbFZ2b1z/1
gYhM3G5OPYjh7o/U1E80+BvYaCBQrv44jtHLKLqOC/D/MFCRjwT5t7REOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAl7VJpHz4DH9oQPeZ5zQ99KWpDIMB8GA1UdIwQY
MBaAFF3SPHrG5oL7xTvhoOkxj2zK5xk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRJOGVzYm1ndnZGTy1HZzZUR1BiTXJuR1QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hNDJlOWMtZDkyZC00YjIwLWE1ZWIt
ZWJlMjMzMmNhZjFjLzEvWGRJOGVzYm1ndnZGTy1HZzZUR1BiTXJuR1QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hNDJlOWMtZDkyZC00YjIwLWE1ZWItZWJlMjMzMmNhZjFj
LzEvWGRJOGVzYm1ndnZGTy1HZzZUR1BiTXJuR1QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVWs3Die
New+ue2yd5r/2kOloi5MKvw1wSOH5x9yXUK9SKHD26NKrmMIZSikNGgn/jD49cIm
6kak/geDmJ+OOqLuLzMjskUOkWxd73GZEJzP5QeRI5AkvpTgUd85oxnJzvN/Af0c
OL+7ENAZ2hlo6mQK9O/bTGgjmoW9JSvQvxh/YBdl45KY9gZgEE2McCBz4LYngSjd
M3rNsgtWKiLyan4WkbD0vTjQlJPP4k4Fnvf6VVt+zF4qOxEB0npPZk5XEcD2t7sM
TkOAjpQ5BkO7EX62mB0JCFIUz3eSFjAuCGYhP4gKwCm1Jl4AK19mfqt+OtDEEmFj
vaDh6bg6cyjWyA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:14:49 2025 by rpki-client