Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
File: xpHzRaUDy4yKneQn6IEu__IbIrU.mft (raw, json)
Hash identifier: adu/CxCMmGdB1/bMABAalsIEP/XQEyf1HGYSXBPDG8c=
Subject key identifier: 27:E3:A1:BD:BE:D2:F3:BB:D2:A7:DB:2E:AE:31:4E:F1:3E:60:AB:17
Authority key identifier: C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5
Certificate issuer: /CN=c691f345a503cb8c8a9de427e8812efff21b22b5
Certificate serial: 019A09A519B062836A1F3A6C275D7ACA52B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
Manifest number: 0530
Signing time: Wed 22 Oct 2025 02:00:06 +0000
Manifest this update: Wed 22 Oct 2025 02:00:06 +0000
Manifest next update: Thu 23 Oct 2025 02:00:06 +0000
Files and hashes: 1: 3Gbnet98ld2uF50D7YCjLTfkMpA.roa (hash: VXqXm4z6E41hAlJYaZsYhRtFw5yW6/XPRFTdwUW8xG4=)
2: sE_yBIBHGOP00_8ICipXACLmvpc.roa (hash: FyBE1dNPqJ1LeCxUv53xtEACyPL7Fifk2VrXCbMm6MU=)
3: xpHzRaUDy4yKneQn6IEu__IbIrU.crl (hash: eH3uLERNOym2cpLA6r/aINKRZmT4r4wHaeedfIO50s8=)
4: y8rUqaqv7ENTk3dMoJ53cbPWsS4.roa (hash: xuqlNaZw0JfK1zeCz1wuG1Q98hbdJatlBMg2l2xV/d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 02:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:a5:19:b0:62:83:6a:1f:3a:6c:27:5d:7a:ca:52:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c691f345a503cb8c8a9de427e8812efff21b22b5
Validity
Not Before: Oct 22 02:00:06 2025 GMT
Not After : Oct 23 02:00:06 2025 GMT
Subject: CN=27e3a1bdbed2f3bbd2a7db2eae314ef13e60ab17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:43:39:39:93:b2:97:8c:d8:6c:0a:1e:ec:45:
3a:78:3d:5c:b8:fd:bf:0e:35:7e:0d:90:ee:04:fc:
ba:97:ae:35:11:c9:92:a7:74:ee:fe:41:f7:71:2a:
be:05:f2:dc:3e:3d:c6:2b:c2:c7:d2:1e:38:03:4d:
8f:01:9e:83:47:a1:71:17:54:3b:19:e5:16:44:31:
6d:77:09:ea:cb:a5:c8:b6:92:89:5c:85:1e:59:97:
10:6b:2f:9d:eb:d9:98:e9:29:34:0d:23:c4:76:76:
e5:48:ed:b7:33:bc:71:fb:5c:74:4c:de:ec:57:6d:
cf:02:81:9f:6f:fc:d7:20:c4:a0:6b:fd:af:03:85:
ce:22:9f:1e:7c:c4:b5:70:99:0c:6f:31:1b:64:69:
f7:c9:e9:a1:70:8d:fa:32:ed:4b:29:5e:eb:2e:26:
bb:47:f3:31:8e:f7:29:c8:a5:ba:50:4c:7f:76:18:
8d:5a:81:a2:a3:b1:ce:ef:9c:b0:87:80:5c:40:bd:
cb:03:88:90:fd:c7:c3:bb:15:06:b9:12:25:68:d3:
80:8c:39:49:31:73:79:ba:fe:49:62:04:bb:c6:f1:
0d:87:9f:49:a7:ad:7c:3b:d8:39:45:79:c7:b2:78:
e6:34:48:bd:95:92:e4:07:0b:e1:5f:88:fb:08:4d:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E3:A1:BD:BE:D2:F3:BB:D2:A7:DB:2E:AE:31:4E:F1:3E:60:AB:17
X509v3 Authority Key Identifier:
keyid:C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5a:9b:c4:35:8c:47:12:c3:a7:ea:da:84:d4:f3:ec:e9:7b:
44:23:65:28:64:74:62:98:29:d2:12:02:2d:4b:9b:0f:61:d7:
b3:59:aa:8d:f0:26:a9:13:3c:69:d1:eb:b3:af:43:ce:bb:53:
6b:02:02:3c:45:24:4d:ea:8d:1b:e5:8b:9d:61:f5:c1:0a:0f:
ee:0c:52:c2:74:16:1e:f8:c0:cf:67:bc:e6:0f:66:7a:e5:35:
aa:4f:14:3a:22:3b:f6:26:cd:a8:e4:7f:c7:33:15:27:15:4d:
27:cb:16:00:25:98:4c:e1:7b:d6:68:fa:4e:b7:06:93:04:93:
a9:22:f1:d4:87:ef:1f:9a:76:99:ed:1b:1a:ec:fa:80:66:cd:
b5:da:ee:f7:8e:f5:1c:1c:5e:1e:81:9e:cc:79:35:40:9f:11:
54:b7:1d:03:b9:49:86:6f:a3:3a:f0:a1:5c:88:50:84:09:65:
5d:e2:4a:b7:4a:7f:2d:04:c5:da:2e:a9:b2:04:5d:9c:98:ea:
31:b7:a5:27:4c:a4:94:0d:a9:fe:0c:27:5f:04:1d:c5:23:7f:
d9:59:35:46:f6:c6:a7:69:df:3e:b0:8d:c6:41:33:2f:3a:3c:
c4:38:70:a3:ca:2d:ef:3a:d8:85:04:10:15:ee:db:1e:ce:64:
31:9d:74:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoJpRmwYoNqHzpsJ116ylK0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OTFmMzQ1YTUwM2NiOGM4YTlkZTQyN2U4ODEyZWZmZjIx
YjIyYjUwHhcNMjUxMDIyMDIwMDA2WhcNMjUxMDIzMDIwMDA2WjAzMTEwLwYDVQQD
EygyN2UzYTFiZGJlZDJmM2JiZDJhN2RiMmVhZTMxNGVmMTNlNjBhYjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EM5OZOyl4zYbAoe7EU6eD1cuP2/
DjV+DZDuBPy6l641EcmSp3Tu/kH3cSq+BfLcPj3GK8LH0h44A02PAZ6DR6FxF1Q7
GeUWRDFtdwnqy6XItpKJXIUeWZcQay+d69mY6Sk0DSPEdnblSO23M7xx+1x0TN7s
V23PAoGfb/zXIMSga/2vA4XOIp8efMS1cJkMbzEbZGn3yemhcI36Mu1LKV7rLia7
R/MxjvcpyKW6UEx/dhiNWoGio7HO75ywh4BcQL3LA4iQ/cfDuxUGuRIlaNOAjDlJ
MXN5uv5JYgS7xvENh59Jp618O9g5RXnHsnjmNEi9lZLkBwvhX4j7CE23VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfjob2+0vO70qfbLq4xTvE+YKsXMB8GA1UdIwQY
MBaAFMaR80WlA8uMip3kJ+iBLv/yGyK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHBIelJhVUR5NHlLbmVRbjZJRXVfX0liSXJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xOWU2ZTItYzJhMS00ZWJjLWJhNWEt
ZTdjYWY1ZTViY2JhLzEveHBIelJhVUR5NHlLbmVRbjZJRXVfX0liSXJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8xOWU2ZTItYzJhMS00ZWJjLWJhNWEtZTdjYWY1ZTViY2Jh
LzEveHBIelJhVUR5NHlLbmVRbjZJRXVfX0liSXJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFqbxDWM
RxLDp+rahNTz7Ol7RCNlKGR0Ypgp0hICLUubD2HXs1mqjfAmqRM8adHrs69DzrtT
awICPEUkTeqNG+WLnWH1wQoP7gxSwnQWHvjAz2e85g9meuU1qk8UOiI79ibNqOR/
xzMVJxVNJ8sWACWYTOF71mj6TrcGkwSTqSLx1IfvH5p2me0bGuz6gGbNtdru9471
HBxeHoGezHk1QJ8RVLcdA7lJhm+jOvChXIhQhAllXeJKt0p/LQTF2i6psgRdnJjq
MbelJ0yklA2p/gwnXwQdxSN/2Vk1RvbGp2nfPrCNxkEzLzo8xDhwo8ot7zrYhQQQ
Fe7bHs5kMZ104w==
-----END CERTIFICATE-----
Generated at Wed Oct 22 11:31:00 2025 by rpki-client