Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
File: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft (raw, json)
Hash identifier: 1QTVG6M7ApWOe/RVKQjQcjv3CzQQgdsEodWyRm2Zs3I=
Subject key identifier: EA:6C:80:64:43:B3:EE:36:CB:5B:65:EB:E3:5A:E2:8D:72:A7:7B:B6
Authority key identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
Certificate issuer: /CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Certificate serial: 019A71B7C738183F8DBF4912C440AAD8951C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 07:01:00 +0000
Manifest this update: Tue 11 Nov 2025 07:01:00 +0000
Manifest next update: Wed 12 Nov 2025 07:01:00 +0000
Files and hashes: 1: 6CdL4NVEnOP6dX0O4aaaSJqjuEw.roa (hash: opstI2GGEuXqVjNMZSKfqsaiPjOYL/Qa7H9RA+r+awI=)
2: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl (hash: DLQNi7lH0i2XoJ3z8c5RVgFkoc5W6Xu6prN6gmH/1vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c7:38:18:3f:8d:bf:49:12:c4:40:aa:d8:95:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Validity
Not Before: Nov 11 07:01:00 2025 GMT
Not After : Nov 12 07:01:00 2025 GMT
Subject: CN=ea6c806443b3ee36cb5b65ebe35ae28d72a77bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:35:c1:f1:3d:16:5d:1e:78:e7:f5:9b:cb:
86:8a:80:a9:6f:4b:af:d7:e7:28:28:7f:39:0a:68:
2c:72:9f:4e:d7:6b:52:83:6a:1c:f0:32:0a:c5:7b:
66:aa:29:4f:32:33:8e:69:0c:a6:da:af:68:3d:9e:
25:5a:bc:80:cf:43:db:3f:4d:7a:36:71:49:7a:b2:
8e:3f:13:f3:c2:ab:33:4a:3a:2e:58:96:f8:42:56:
65:16:59:c8:6d:28:3a:64:6d:9a:d1:a5:8b:88:f5:
74:23:e0:8c:1b:cb:4c:aa:a3:e6:5b:d6:88:a2:f4:
23:d0:fd:8a:ff:25:0d:38:e0:00:d0:74:2a:19:d0:
06:6e:51:fc:e9:94:5b:3b:53:24:21:71:f8:fc:fb:
4f:f3:2e:a7:4e:1d:71:c5:82:be:37:eb:05:e4:02:
3d:ae:7b:5e:48:d9:d0:cb:ba:77:49:64:b6:cf:a3:
cb:82:41:61:e2:41:ad:ab:d0:15:98:43:df:de:bf:
56:38:cb:d1:ab:21:98:d0:8b:bd:52:af:01:c5:4e:
27:c9:3b:2d:14:e5:82:ef:94:b5:4b:71:7b:38:07:
8a:c0:8b:4a:ee:d2:ff:5d:f8:29:65:e4:60:17:9f:
70:bd:c8:a3:f3:6b:3a:56:c7:b0:7c:4d:bb:3b:ad:
c3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6C:80:64:43:B3:EE:36:CB:5B:65:EB:E3:5A:E2:8D:72:A7:7B:B6
X509v3 Authority Key Identifier:
keyid:C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:87:2a:04:61:1d:e5:d5:53:9c:78:65:7e:e3:73:64:00:d2:
db:22:fd:9c:92:02:01:02:4e:6f:28:38:5e:f3:10:35:24:d7:
de:03:40:14:df:4f:45:14:9e:c2:7c:80:08:1c:35:95:3d:27:
ef:5a:48:31:e7:9a:ee:ee:e6:ce:9d:b6:8f:f1:71:eb:3a:25:
d3:5c:40:92:d0:6d:a2:10:ab:b8:98:9c:2f:0e:f7:a5:ce:65:
56:eb:be:fe:03:da:8b:cd:23:68:b7:80:10:6e:7a:7c:ea:c9:
10:54:c9:6c:c7:1b:37:14:7f:3d:ee:2d:2b:38:21:f1:39:b7:
c9:5b:7e:e5:18:6b:c0:3b:d4:7a:e4:b1:bb:d5:d5:60:4a:55:
db:23:40:06:69:21:8e:44:06:b9:cc:85:ea:5d:2c:cb:95:03:
41:3f:96:d7:47:4b:15:d6:00:15:24:de:17:3f:c1:9b:7e:b9:
a7:16:60:03:ae:60:0c:60:cd:80:7c:9a:f7:6a:6e:19:b6:e6:
2e:e3:3d:cc:4c:a1:4b:97:f1:17:10:ed:74:14:d4:91:ce:75:
b2:38:14:70:59:22:66:12:83:3c:bb:19:d1:d3:0b:ef:86:4a:
60:73:4e:a3:fd:25:4b:d2:60:d8:9e:59:82:15:b7:08:5e:ee:
28:4d:23:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt8c4GD+Nv0kSxECq2JUcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YjExODJkMzE3OTZmYTYzZWMzYzFkOWI5N2NiNmFhYWMz
NGZkZDkwHhcNMjUxMTExMDcwMTAwWhcNMjUxMTEyMDcwMTAwWjAzMTEwLwYDVQQD
EyhlYTZjODA2NDQzYjNlZTM2Y2I1YjY1ZWJlMzVhZTI4ZDcyYTc3YmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhw1wfE9Fl0eeOf1m8uGioCpb0uv
1+coKH85Cmgscp9O12tSg2oc8DIKxXtmqilPMjOOaQym2q9oPZ4lWryAz0PbP016
NnFJerKOPxPzwqszSjouWJb4QlZlFlnIbSg6ZG2a0aWLiPV0I+CMG8tMqqPmW9aI
ovQj0P2K/yUNOOAA0HQqGdAGblH86ZRbO1MkIXH4/PtP8y6nTh1xxYK+N+sF5AI9
rnteSNnQy7p3SWS2z6PLgkFh4kGtq9AVmEPf3r9WOMvRqyGY0Iu9Uq8BxU4nyTst
FOWC75S1S3F7OAeKwItK7tL/XfgpZeRgF59wvcij82s6VsewfE27O63DpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpsgGRDs+42y1tl6+Na4o1yp3u2MB8GA1UdIwQY
MBaAFMWxGC0xeW+mPsPB2bl8tqqsNP3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wZDMwMzItYmRhNC00YzZiLTgxYzkt
OTI0MTYwMDcxNThlLzEveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8wZDMwMzItYmRhNC00YzZiLTgxYzktOTI0MTYwMDcxNThl
LzEveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYcqBGEd
5dVTnHhlfuNzZADS2yL9nJICAQJObyg4XvMQNSTX3gNAFN9PRRSewnyACBw1lT0n
71pIMeea7u7mzp22j/Fx6zol01xAktBtohCruJicLw73pc5lVuu+/gPai80jaLeA
EG56fOrJEFTJbMcbNxR/Pe4tKzgh8Tm3yVt+5RhrwDvUeuSxu9XVYEpV2yNABmkh
jkQGucyF6l0sy5UDQT+W10dLFdYAFSTeFz/Bm365pxZgA65gDGDNgHya92puGbbm
LuM9zEyhS5fxFxDtdBTUkc51sjgUcFkiZhKDPLsZ0dML74ZKYHNOo/0lS9Jg2J5Z
ghW3CF7uKE0jrQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:39 2025 by rpki-client