Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
File: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json)
Hash identifier: 4O2V4mbCPJwujfxVU74nJFFN7QeOEQfqmAvEu/YmU8o=
Subject key identifier: 53:51:32:07:69:AD:99:54:6F:01:10:69:76:31:3A:61:0A:81:BB:9A
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial: 019A269D623FCA979F6D60FD534A77F9FC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
Manifest number: 0AE3
Signing time: Mon 27 Oct 2025 17:00:39 +0000
Manifest this update: Mon 27 Oct 2025 17:00:39 +0000
Manifest next update: Tue 28 Oct 2025 17:00:39 +0000
Files and hashes: 1: Rzw-FEYLvNzmn8z8pXMnNIdiuzY.roa (hash: 73aotFl5RqbhDVi5JA90kJT8GvN6s6DMcTXSbB1f0hU=)
2: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: P2PDUyOlW4e7RtGxGjRfW1uT6DBcI/HaQx6bxvpM4eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:9d:62:3f:ca:97:9f:6d:60:fd:53:4a:77:f9:fc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Validity
Not Before: Oct 27 17:00:39 2025 GMT
Not After : Oct 28 17:00:39 2025 GMT
Subject: CN=5351320769ad99546f01106976313a610a81bb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:13:c1:9c:7a:e4:b5:b4:ce:b9:48:d0:cb:dd:
30:39:81:5b:f8:ed:e9:d1:5b:d6:46:27:50:e3:7e:
7a:d6:cb:70:d2:be:e6:51:45:3f:2d:e0:b8:a8:0d:
ec:0d:bb:98:b5:c6:55:f6:9b:8d:9f:2a:37:2f:82:
70:09:9e:d7:58:8b:90:ae:f7:62:3c:ce:f6:04:36:
68:ff:32:df:87:5a:28:66:63:35:d5:54:60:53:62:
b3:b2:27:b6:1c:0f:e8:77:66:4a:26:2f:3d:d5:6d:
18:3e:8b:0f:65:d6:2a:9b:e0:40:40:35:e8:76:67:
0e:5e:77:f6:d0:d8:96:39:4b:3e:bc:ec:38:7f:ca:
78:09:dc:9a:ab:ef:80:d5:94:41:74:f2:fa:93:42:
7d:2b:e9:e7:ee:97:03:15:a2:96:13:0c:11:6a:1d:
bf:a8:32:74:c0:af:d5:2d:7e:4b:66:10:c2:d5:e1:
3c:98:84:65:3e:0d:ac:a0:0a:f7:7d:ff:2f:76:cb:
ba:4c:93:c9:66:42:4d:7c:a4:6c:2d:f8:7a:09:0b:
55:94:a4:9a:40:95:d5:30:53:3f:ca:13:fc:4d:f6:
11:be:56:52:73:62:e4:b9:d1:54:96:e1:79:65:58:
15:97:80:44:5b:7c:84:21:ea:0c:12:58:f4:a8:81:
07:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:51:32:07:69:AD:99:54:6F:01:10:69:76:31:3A:61:0A:81:BB:9A
X509v3 Authority Key Identifier:
keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f1:58:5a:e5:9f:bf:5a:5d:e6:0b:a1:9c:08:11:8c:3b:5a:
f0:fe:b3:77:9b:1a:98:7a:fd:7d:de:0e:75:d3:c7:50:5e:ed:
13:c2:b2:a5:51:97:e8:a0:25:0d:e2:92:22:23:7b:f0:02:8c:
bf:b6:25:7f:3f:16:c3:43:fd:45:28:6d:87:7f:a3:86:c2:26:
66:4b:b7:b7:df:0f:c3:bf:59:0f:9d:0b:26:4f:91:2d:bb:d2:
23:05:dc:e1:17:93:84:69:92:53:2e:5c:7f:92:7b:35:14:93:
97:ad:bd:33:65:a1:d8:af:50:58:92:61:59:31:62:f5:4a:47:
60:b8:0e:cc:bd:38:ab:20:7a:a3:61:5e:49:fe:26:b3:f5:76:
88:39:ad:36:b7:f4:26:e6:92:9c:5f:86:19:13:6f:75:7c:29:
96:67:00:c1:cc:e3:60:d1:41:e8:8f:5d:95:f6:ae:b0:93:60:
b5:d4:78:49:1f:1d:28:48:53:1a:ec:ab:fc:91:4d:91:cd:54:
8d:9c:15:b5:5a:e0:61:00:76:6f:7d:f9:a0:56:0e:0e:d3:3d:
8f:ee:20:4c:7c:09:de:95:20:77:f2:ce:4e:24:98:ff:80:b7:
13:37:96:34:05:49:cd:74:83:7f:78:64:a4:f8:39:21:e6:7c:
9a:98:17:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZomnWI/ypefbWD9U0p3+fwZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1M2IyOTE3MGI1NmE4NDI0MWY0Yjg0ZmQ0ZGFmZjA4MzZk
NTAzYzYwHhcNMjUxMDI3MTcwMDM5WhcNMjUxMDI4MTcwMDM5WjAzMTEwLwYDVQQD
Eyg1MzUxMzIwNzY5YWQ5OTU0NmYwMTEwNjk3NjMxM2E2MTBhODFiYjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxPBnHrktbTOuUjQy90wOYFb+O3p
0VvWRidQ43561stw0r7mUUU/LeC4qA3sDbuYtcZV9puNnyo3L4JwCZ7XWIuQrvdi
PM72BDZo/zLfh1ooZmM11VRgU2Kzsie2HA/od2ZKJi891W0YPosPZdYqm+BAQDXo
dmcOXnf20NiWOUs+vOw4f8p4Cdyaq++A1ZRBdPL6k0J9K+nn7pcDFaKWEwwRah2/
qDJ0wK/VLX5LZhDC1eE8mIRlPg2soAr3ff8vdsu6TJPJZkJNfKRsLfh6CQtVlKSa
QJXVMFM/yhP8TfYRvlZSc2LkudFUluF5ZVgVl4BEW3yEIeoMElj0qIEHiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNRMgdprZlUbwEQaXYxOmEKgbuaMB8GA1UdIwQY
MBaAFMU7KRcLVqhCQfS4T9Ta/wg21QPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTkt
N2RmYmJhZTAzNjhlLzEveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTktN2RmYmJhZTAzNjhl
LzEveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/FYWuWf
v1pd5guhnAgRjDta8P6zd5samHr9fd4OddPHUF7tE8KypVGX6KAlDeKSIiN78AKM
v7Ylfz8Ww0P9RShth3+jhsImZku3t98Pw79ZD50LJk+RLbvSIwXc4ReThGmSUy5c
f5J7NRSTl629M2Wh2K9QWJJhWTFi9UpHYLgOzL04qyB6o2FeSf4ms/V2iDmtNrf0
JuaSnF+GGRNvdXwplmcAwczjYNFB6I9dlfausJNgtdR4SR8dKEhTGuyr/JFNkc1U
jZwVtVrgYQB2b335oFYODtM9j+4gTHwJ3pUgd/LOTiSY/4C3EzeWNAVJzXSDf3hk
pPg5IeZ8mpgXrg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 02:59:50 2025 by rpki-client