Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
File: XOsOvYeLd9QvLKndCPcMMjxdA9s.mft (raw, json)
Hash identifier: APDCQqs7Au7qZsVGrWD1xo/PLoL//yjGrq6gGv+jFC4=
Subject key identifier: EA:50:DC:22:30:BA:05:AE:63:01:DE:17:7D:BD:5B:4F:55:26:26:C4
Authority key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
Certificate issuer: /CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Certificate serial: 019A70A596F34EA6187BA0E3C8E0DD2D8C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
Manifest number: 103D
Signing time: Tue 11 Nov 2025 02:01:31 +0000
Manifest this update: Tue 11 Nov 2025 02:01:31 +0000
Manifest next update: Wed 12 Nov 2025 02:01:31 +0000
Files and hashes: 1: RACkLgbLLbmOoJBt91BZdfyl6A0.roa (hash: MZ4vzxaGNc7jn7F682fp+i7yjq4zVlNk1kc4N8fk1T0=)
2: XOsOvYeLd9QvLKndCPcMMjxdA9s.crl (hash: W1Crmn3dXl202/LI/glW3oOCkUFV0DY0q1o0W+Mrkv0=)
3: zR84EUjuhaa5ivFSjib2H6uqTAI.roa (hash: OvGw4b3tIigD4ZAweUVrQghHKdITbbX+aX8uLk9vlAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:96:f3:4e:a6:18:7b:a0:e3:c8:e0:dd:2d:8c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Validity
Not Before: Nov 11 02:01:31 2025 GMT
Not After : Nov 12 02:01:31 2025 GMT
Subject: CN=ea50dc2230ba05ae6301de177dbd5b4f552626c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:38:d1:1c:5b:1d:de:c4:c9:83:27:38:84:
d4:fa:98:7e:b2:fe:7e:2b:ab:6b:82:b3:d5:06:d0:
da:c4:d3:b8:87:9a:66:91:0d:9d:1f:77:26:aa:d1:
86:8f:bb:88:07:75:06:1b:50:4d:4c:1f:16:5b:6a:
98:c9:fe:eb:4b:18:9d:23:c6:18:09:31:14:9b:82:
2d:a0:12:6d:c9:7c:43:51:8c:f9:ee:67:c7:27:62:
e2:68:d9:4c:36:88:b1:c7:16:bc:c2:0d:4e:5b:98:
52:da:72:88:1b:97:74:f2:d8:e3:2b:a1:7d:70:54:
11:31:ad:7a:91:4f:51:04:bb:62:70:a7:71:19:5e:
f8:3b:54:07:f4:b6:c6:73:42:19:53:40:26:5c:37:
d6:10:d9:69:a7:5a:ee:0c:b9:cf:43:fc:87:c5:c8:
bb:25:2c:fb:e3:a0:8e:51:44:f5:94:28:82:08:a5:
85:e9:da:66:a5:a7:92:c7:94:f0:e3:e0:4a:9f:f1:
6b:8b:37:e9:fd:dd:72:fd:96:c5:54:76:89:25:91:
e9:df:bf:64:63:eb:28:e5:b5:84:7f:62:82:f7:b4:
01:b5:52:ad:73:4f:fb:ad:aa:df:57:e3:6f:fa:3e:
98:f4:39:d6:20:49:35:8a:a1:fd:ad:5b:6a:a9:25:
aa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:50:DC:22:30:BA:05:AE:63:01:DE:17:7D:BD:5B:4F:55:26:26:C4
X509v3 Authority Key Identifier:
keyid:5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:28:a7:bb:e7:5b:58:87:c9:dc:3d:ef:1d:ad:63:f5:ea:61:
97:71:ce:18:18:ef:99:1b:3a:ef:f5:4a:9f:59:5e:27:22:1c:
f8:1c:58:9c:eb:67:30:61:66:a0:94:cd:4c:f8:5e:4f:b8:be:
d4:93:ec:4a:b4:0f:a8:62:3c:69:26:3e:e4:f7:22:86:28:ba:
e8:08:30:ce:96:65:cd:46:05:5b:0e:e6:8e:ee:30:01:40:84:
27:7f:b7:86:d2:ba:59:a0:d3:e7:07:52:e7:4c:f1:f0:da:31:
95:f1:3b:61:9a:52:bb:82:aa:90:12:86:31:ee:e3:d7:7d:ee:
c2:87:f0:66:22:e8:48:d6:98:a2:6a:66:8a:7c:f7:60:74:f1:
a3:6c:d8:3f:0a:40:96:2f:4e:03:66:49:f0:32:6f:7b:b0:94:
d8:a2:91:c7:3b:9a:32:6d:33:f4:d9:7e:31:cd:dc:65:59:23:
51:4f:4c:da:65:90:5d:20:57:cb:6f:c2:ec:b5:80:1e:38:62:
e4:d4:b0:25:4d:b7:31:6d:a8:6b:da:78:fa:75:45:92:88:c1:
a6:7c:82:c5:33:0f:9a:4b:80:da:9c:b3:ff:b0:ac:05:29:c6:
5e:a3:df:76:65:70:9e:ef:d0:82:8b:10:f5:09:eb:8b:b3:e5:
3c:fc:3e:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpZbzTqYYe6DjyODdLYx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZWIwZWJkODc4Yjc3ZDQyZjJjYTlkZDA4ZjcwYzMyM2M1
ZDAzZGIwHhcNMjUxMTExMDIwMTMxWhcNMjUxMTEyMDIwMTMxWjAzMTEwLwYDVQQD
EyhlYTUwZGMyMjMwYmEwNWFlNjMwMWRlMTc3ZGJkNWI0ZjU1MjYyNmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0040RxbHd7EyYMnOITU+ph+sv5+
K6trgrPVBtDaxNO4h5pmkQ2dH3cmqtGGj7uIB3UGG1BNTB8WW2qYyf7rSxidI8YY
CTEUm4ItoBJtyXxDUYz57mfHJ2LiaNlMNoixxxa8wg1OW5hS2nKIG5d08tjjK6F9
cFQRMa16kU9RBLticKdxGV74O1QH9LbGc0IZU0AmXDfWENlpp1ruDLnPQ/yHxci7
JSz746COUUT1lCiCCKWF6dpmpaeSx5Tw4+BKn/Frizfp/d1y/ZbFVHaJJZHp379k
Y+so5bWEf2KC97QBtVKtc0/7rarfV+Nv+j6Y9DnWIEk1iqH9rVtqqSWqqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpQ3CIwugWuYwHeF329W09VJibEMB8GA1UdIwQY
MBaAFFzrDr2Hi3fULyyp3Qj3DDI8XQPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8zZTcyZWQtMWQ2NS00OTgyLWFkOWEt
OWMzNzQ3OGE1OTNmLzEvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8zZTcyZWQtMWQ2NS00OTgyLWFkOWEtOWMzNzQ3OGE1OTNm
LzEvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuCinu+db
WIfJ3D3vHa1j9ephl3HOGBjvmRs67/VKn1leJyIc+BxYnOtnMGFmoJTNTPheT7i+
1JPsSrQPqGI8aSY+5Pcihii66AgwzpZlzUYFWw7mju4wAUCEJ3+3htK6WaDT5wdS
50zx8NoxlfE7YZpSu4KqkBKGMe7j133uwofwZiLoSNaYompminz3YHTxo2zYPwpA
li9OA2ZJ8DJve7CU2KKRxzuaMm0z9Nl+Mc3cZVkjUU9M2mWQXSBXy2/C7LWAHjhi
5NSwJU23MW2oa9p4+nVFkojBpnyCxTMPmkuA2pyz/7CsBSnGXqPfdmVwnu/QgosQ
9Qnri7PlPPw+Lg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:13 2025 by rpki-client