Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
File: Xhv2oxnaJImBau26G0_QzH3fPh4.mft (raw, json)
Hash identifier: SNptZb8e3BOHm2jgtTSt593aaaxX6F31t448cz/YP3Q=
Subject key identifier: F8:72:CB:2D:10:AF:8C:04:F2:63:5C:CE:EB:7F:7E:D5:64:36:C4:6A
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial: 019A1FF692A22F03DBF3451648E99842463B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
Manifest number: 1A07
Signing time: Sun 26 Oct 2025 10:00:44 +0000
Manifest this update: Sun 26 Oct 2025 10:00:44 +0000
Manifest next update: Mon 27 Oct 2025 10:00:44 +0000
Files and hashes: 1: 4CoVMMKw0iAY2WbvgdHQblv-YLI.roa (hash: bPGOSQ6fTh78RE8OIALZzzCGD5F7zJ/rcPqgSt70E8I=)
2: Xhv2oxnaJImBau26G0_QzH3fPh4.crl (hash: uTO+1y2v5phdTPfL0DKpKWRu1Uy9imPMq+m5/lpAA5k=)
3: _rHdTB1w3IVbdvYkebZX-RAgJzw.roa (hash: 9exGCBj3padOfvBxjqdHrZuFxy2/cAMnlYBWmuCVQVo=)
4: iqMWrdYjQE7-0EAs-UJD3ECPr_w.roa (hash: FMsouH+BVF8KZzVVUNWdEHgvx7uvSHfCw/ya9vRwpvo=)
5: jPPJRlQHOW3Bdo3Xffl1cKS8yYI.roa (hash: +QHKisnDpujXyoJyM4AGTUHFPfJzBO245kYgUJWvE8Q=)
6: s6nYW-wwFY4e4FliH1slATjjkcI.roa (hash: IaJM9j4ERldNW3bqfwmZZck2Nh3sfZGgvyUZuPD1Rqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:f6:92:a2:2f:03:db:f3:45:16:48:e9:98:42:46:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Validity
Not Before: Oct 26 10:00:44 2025 GMT
Not After : Oct 27 10:00:44 2025 GMT
Subject: CN=f872cb2d10af8c04f2635cceeb7f7ed56436c46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:36:a5:aa:de:aa:e4:21:f4:01:71:f0:4c:
ce:dd:d9:81:1e:87:b4:c5:4a:05:8a:3c:68:b1:46:
27:80:2b:ea:79:29:af:5c:43:f1:6e:7e:ee:e8:0e:
88:0a:93:8a:d4:6f:25:2c:cc:da:db:52:58:95:34:
22:bf:b2:f4:68:b0:04:f0:04:50:17:60:4b:01:bc:
e1:13:30:13:c0:69:67:74:28:78:1f:a1:95:d9:2b:
80:5f:d5:5d:13:6e:d7:d3:e8:7c:32:da:55:2a:c4:
a6:a7:a5:1e:ec:99:33:4b:e8:40:c0:45:bb:5a:83:
1f:eb:74:5f:25:03:3f:8e:3c:8b:9e:64:ba:31:a4:
b7:9a:c9:60:3d:77:ad:d8:ec:8d:1e:e5:5e:50:87:
c6:9c:4c:7b:b5:aa:99:8f:c7:02:24:60:65:6a:c5:
38:91:6a:5d:de:e7:6b:18:43:db:76:09:6b:11:b0:
81:a3:77:ea:95:be:13:e4:da:2b:b1:c1:f1:07:09:
29:d7:08:74:9b:c7:37:be:e3:f5:45:cc:f9:48:c2:
82:05:97:18:8a:65:ac:40:7b:46:ab:8e:93:1f:17:
33:2d:37:c8:fb:9f:73:06:5f:bb:41:b3:55:b2:b6:
d8:2e:2c:e6:a9:ca:46:21:33:e8:b6:f6:82:b2:ff:
c2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:72:CB:2D:10:AF:8C:04:F2:63:5C:CE:EB:7F:7E:D5:64:36:C4:6A
X509v3 Authority Key Identifier:
keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:3c:ba:89:ce:c8:a4:1a:fd:6a:bd:a0:91:2d:0e:2a:83:ab:
66:48:18:05:7a:f6:3b:a5:ed:c6:15:b9:9f:d9:53:e5:d1:f7:
6b:14:7b:2e:09:45:46:d0:b9:65:13:5e:69:56:dc:08:9d:b0:
75:6a:26:96:0a:46:fe:10:4b:9a:60:7e:62:d5:65:f2:98:e8:
40:25:09:07:d2:43:c9:91:c9:88:31:27:05:b1:1d:6d:35:97:
df:c6:76:22:96:92:9d:96:d4:40:86:eb:3b:c9:d5:36:37:ae:
3d:02:77:c8:65:89:7d:2b:c4:3d:c5:ec:d0:4f:70:6b:2d:f9:
5b:40:6c:53:01:71:38:e5:6d:21:ac:0f:cf:1d:1e:38:f8:c5:
ac:a4:92:fd:8f:f8:d9:27:07:d3:51:20:08:90:29:9b:09:d1:
43:ca:6f:95:bd:6c:73:43:39:2d:5a:51:f9:bb:85:19:2f:0a:
a7:f1:d5:73:06:62:45:16:1f:e5:8d:db:e5:75:e3:2d:53:5c:
db:fd:0d:8d:da:62:f3:8b:12:af:66:aa:77:75:38:0f:b7:e5:
cc:b5:3b:31:ef:0d:0e:7c:41:23:ac:65:a0:6f:db:48:e1:b2:
fa:b0:04:0a:43:a6:a5:ea:df:48:51:53:2a:0b:28:94:82:3e:
44:ef:54:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZof9pKiLwPb80UWSOmYQkY7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMWJmNmEzMTlkYTI0ODk4MTZhZWRiYTFiNGZkMGNjN2Rk
ZjNlMWUwHhcNMjUxMDI2MTAwMDQ0WhcNMjUxMDI3MTAwMDQ0WjAzMTEwLwYDVQQD
EyhmODcyY2IyZDEwYWY4YzA0ZjI2MzVjY2VlYjdmN2VkNTY0MzZjNDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNM2parequQh9AFx8EzO3dmBHoe0
xUoFijxosUYngCvqeSmvXEPxbn7u6A6ICpOK1G8lLMza21JYlTQiv7L0aLAE8ARQ
F2BLAbzhEzATwGlndCh4H6GV2SuAX9VdE27X0+h8MtpVKsSmp6Ue7JkzS+hAwEW7
WoMf63RfJQM/jjyLnmS6MaS3mslgPXet2OyNHuVeUIfGnEx7taqZj8cCJGBlasU4
kWpd3udrGEPbdglrEbCBo3fqlb4T5NorscHxBwkp1wh0m8c3vuP1Rcz5SMKCBZcY
imWsQHtGq46THxczLTfI+59zBl+7QbNVsrbYLizmqcpGITPotvaCsv/ChQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhyyy0Qr4wE8mNczut/ftVkNsRqMB8GA1UdIwQY
MBaAFF4b9qMZ2iSJgWrtuhtP0Mx93z4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84OGZkZDEtOGI3Yi00MTAxLWFjNjYt
YjU5MDk1N2Q5NDE1LzEvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84OGZkZDEtOGI3Yi00MTAxLWFjNjYtYjU5MDk1N2Q5NDE1
LzEvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzy6ic7I
pBr9ar2gkS0OKoOrZkgYBXr2O6XtxhW5n9lT5dH3axR7LglFRtC5ZRNeaVbcCJ2w
dWomlgpG/hBLmmB+YtVl8pjoQCUJB9JDyZHJiDEnBbEdbTWX38Z2IpaSnZbUQIbr
O8nVNjeuPQJ3yGWJfSvEPcXs0E9way35W0BsUwFxOOVtIawPzx0eOPjFrKSS/Y/4
2ScH01EgCJApmwnRQ8pvlb1sc0M5LVpR+buFGS8Kp/HVcwZiRRYf5Y3b5XXjLVNc
2/0Njdpi84sSr2aqd3U4D7flzLU7Me8NDnxBI6xloG/bSOGy+rAECkOmperfSFFT
KgsolII+RO9U1w==
-----END CERTIFICATE-----
Generated at Sun Oct 26 17:05:53 2025 by rpki-client