Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: rNUW8Cd+Z77LJCxpwppCEoFSj78i/KZ8pfD41S+/VIk=
Subject key identifier: 63:99:F6:62:C9:A4:7E:35:86:E7:7D:78:ED:D7:C2:C1:70:BF:9E:A2
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 019A6C5A24BE7BFF39BCC92FE6C177DDE97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 171C
Signing time: Mon 10 Nov 2025 06:00:38 +0000
Manifest this update: Mon 10 Nov 2025 06:00:38 +0000
Manifest next update: Tue 11 Nov 2025 06:00:38 +0000
Files and hashes: 1: AwF9Po4WusYXHbCN28Vi4N0vdXM.roa (hash: BrxeSv8ZT8qhQ9aNAuI1FMulPWTfztWj80JkUewf8Ps=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: so5NMMfF+Kv97udt3aga45rZkIYV5HGYvWOro0ZVj3I=)
3: jsLjY2Dc2S2O7jwfLML6nOsBS0o.roa (hash: /a3bkiLEbNmaSUeq8MEDshih5vZMuYoOiChrBF9mx2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6c:5a:24:be:7b:ff:39:bc:c9:2f:e6:c1:77:dd:e9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: Nov 10 06:00:38 2025 GMT
Not After : Nov 11 06:00:38 2025 GMT
Subject: CN=6399f662c9a47e3586e77d78edd7c2c170bf9ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:42:18:60:be:42:6c:23:7c:99:e9:5d:6d:
35:2d:3f:65:9d:55:f8:6e:90:6e:3c:e3:03:83:30:
f7:77:2c:a7:32:ad:0f:6a:26:50:e6:f1:86:45:f3:
92:10:c3:81:ee:34:51:9a:d2:38:79:c3:1e:59:91:
59:53:37:31:8f:f1:73:77:35:50:d7:a0:58:34:46:
d3:3d:d3:e4:f5:00:ee:01:ee:bf:a8:03:b9:96:6f:
d6:44:3c:26:55:b2:98:bb:11:54:bb:fb:09:1c:c8:
f3:4f:20:27:5a:e9:97:de:ad:88:f2:65:48:2b:f6:
cf:e6:73:a3:f2:9c:17:e4:2b:0b:8f:21:8d:18:da:
cf:78:a7:85:99:98:bc:77:3a:b2:17:6d:65:b8:5e:
74:ca:80:78:af:d9:02:96:b7:f1:ad:5c:fd:5c:93:
c8:d9:5e:55:29:57:82:0b:b2:b5:09:3b:fe:53:d9:
0d:ce:e1:43:34:4c:8f:1a:f1:81:c7:c4:df:3b:a9:
80:db:db:b1:29:68:ca:4b:70:40:1a:55:f6:07:91:
31:30:c4:60:5b:34:48:29:f6:13:23:52:f5:82:db:
9f:b6:e7:86:48:91:3f:f8:df:a1:d8:8a:dc:13:81:
d0:1b:d4:84:e0:5c:e4:a3:1d:a5:dd:cc:ad:62:a3:
a3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:99:F6:62:C9:A4:7E:35:86:E7:7D:78:ED:D7:C2:C1:70:BF:9E:A2
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:80:35:e0:22:24:14:0b:95:71:6f:53:ae:98:87:ba:8b:04:
7b:aa:5b:df:5c:3e:f7:ba:ec:32:7f:05:08:74:20:1f:3f:4d:
40:d6:28:71:78:44:b6:a6:57:3f:7f:b1:3d:b7:a6:15:e6:57:
7d:63:97:47:f9:23:02:d2:fb:da:60:a1:f4:14:35:de:11:01:
18:23:6e:fc:c9:f6:3a:57:1b:40:45:5e:2c:2e:6e:de:dd:dd:
39:56:b5:38:d2:51:87:21:8d:11:76:28:b3:76:40:18:13:e4:
7c:db:7c:c5:23:2b:9f:9d:e1:75:32:e9:9b:bd:24:6f:a2:95:
4f:6a:00:c0:8b:3f:2e:d2:ce:3d:9e:c1:7c:da:ff:23:78:b2:
ee:06:f2:e2:2e:d9:10:2c:8e:f1:8e:d3:a1:8a:f4:e3:5e:bc:
e4:51:d8:67:9c:4e:5d:8e:1b:19:b9:47:61:20:f2:65:39:9f:
77:39:70:dd:00:f8:5f:c5:ba:a1:f3:57:02:50:4d:16:4f:c8:
a7:f5:77:86:24:3f:83:31:ff:9e:48:13:43:41:82:e3:94:8c:
76:23:e6:ba:ac:0e:26:71:54:c4:d1:32:f6:6c:12:23:36:b3:
f8:3d:7c:7f:1b:bc:ba:14:56:8d:25:65:f7:f8:30:c9:30:67:
45:b1:22:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpsWiS+e/85vMkv5sF33el8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDM5ZTFkZTE4NTE0YmFjMmY1YTIzOTEwZjhjN2Q0Njcy
YTBmZDgwHhcNMjUxMTEwMDYwMDM4WhcNMjUxMTExMDYwMDM4WjAzMTEwLwYDVQQD
Eyg2Mzk5ZjY2MmM5YTQ3ZTM1ODZlNzdkNzhlZGQ3YzJjMTcwYmY5ZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVpCGGC+QmwjfJnpXW01LT9lnVX4
bpBuPOMDgzD3dyynMq0PaiZQ5vGGRfOSEMOB7jRRmtI4ecMeWZFZUzcxj/FzdzVQ
16BYNEbTPdPk9QDuAe6/qAO5lm/WRDwmVbKYuxFUu/sJHMjzTyAnWumX3q2I8mVI
K/bP5nOj8pwX5CsLjyGNGNrPeKeFmZi8dzqyF21luF50yoB4r9kClrfxrVz9XJPI
2V5VKVeCC7K1CTv+U9kNzuFDNEyPGvGBx8TfO6mA29uxKWjKS3BAGlX2B5ExMMRg
WzRIKfYTI1L1gtuftueGSJE/+N+h2IrcE4HQG9SE4Fzkox2l3cytYqOjRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOZ9mLJpH41hud9eO3XwsFwv56iMB8GA1UdIwQY
MBaAFF3Tnh3hhRS6wvWiORD4x9RnKg/YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMt
OWMyNmIwN2I3MThiLzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS85Njg2NWUtYzE3Ny00ODQ0LThkYzMtOWMyNmIwN2I3MThi
LzEvWGRPZUhlR0ZGTHJDOWFJNUVQakgxR2NxRDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYA14CIk
FAuVcW9TrpiHuosEe6pb31w+97rsMn8FCHQgHz9NQNYocXhEtqZXP3+xPbemFeZX
fWOXR/kjAtL72mCh9BQ13hEBGCNu/Mn2OlcbQEVeLC5u3t3dOVa1ONJRhyGNEXYo
s3ZAGBPkfNt8xSMrn53hdTLpm70kb6KVT2oAwIs/LtLOPZ7BfNr/I3iy7gby4i7Z
ECyO8Y7ToYr041685FHYZ5xOXY4bGblHYSDyZTmfdzlw3QD4X8W6ofNXAlBNFk/I
p/V3hiQ/gzH/nkgTQ0GC45SMdiPmuqwOJnFUxNEy9mwSIzaz+D18fxu8uhRWjSVl
9/gwyTBnRbEifQ==
-----END CERTIFICATE-----
Generated at Mon Nov 10 15:49:16 2025 by rpki-client