Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
File: xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json)
Hash identifier: Yf/znABcRrolyoSr4a9oiQ4fdAwQlnh48W2YlwhSNDc=
Subject key identifier: 62:31:31:11:CB:AF:F8:59:EE:E3:9E:CE:30:C6:95:F4:3A:B4:3D:5C
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial: 019A00DA10763A571E611E430113032CAC0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
Manifest number: 13EC
Signing time: Mon 20 Oct 2025 09:01:22 +0000
Manifest this update: Mon 20 Oct 2025 09:01:22 +0000
Manifest next update: Tue 21 Oct 2025 09:01:22 +0000
Files and hashes: 1: 2O7hTeTBTYQlXrHUGjT-esuiTyY.roa (hash: DN3/NgDDrumPZHYXXX/T0l7uMFZxt8+Z9FjDhPflTwg=)
2: EnujZTa_xifqO1ApuBtNO607PMQ.roa (hash: lVv7SmdnXwh0GWr+88AXWNM4yuVtWqv+5v4P4182pMI=)
3: QsHNthgc9L7fJ_2Fo_g-CqUIr74.roa (hash: 9xya8h6lnbe7gVjWBZEopxxvdjqjl2fFO+ULpdjenyw=)
4: kSQmmeExWfprcCDLfHI_OYJk0ms.roa (hash: 4gXw5KLNPGHoJR1QDpTIZ93gsLn9MiktkPpQtwbbYxQ=)
5: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: caTHT3Zgzg7L6f4wTs8Pvqm6qt5nXgk+52cBdprChTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:10:76:3a:57:1e:61:1e:43:01:13:03:2c:ac:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Validity
Not Before: Oct 20 09:01:22 2025 GMT
Not After : Oct 21 09:01:22 2025 GMT
Subject: CN=62313111cbaff859eee39ece30c695f43ab43d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6d:ea:2d:2a:be:d0:79:b9:a3:88:88:b6:5b:
29:05:d4:4d:ba:4c:3a:07:32:64:79:f2:8b:87:dc:
b1:63:05:af:58:0d:e0:92:5f:00:82:9d:bb:e4:c1:
8a:df:44:43:af:bd:1e:2d:cd:09:7c:62:70:09:a0:
61:12:ab:ca:9a:39:92:6a:b0:aa:1e:80:0c:b4:81:
be:13:e1:c1:01:93:56:fe:32:a7:20:ad:86:20:56:
5b:43:06:b4:fd:2d:d9:fb:63:fa:60:f5:e8:c9:b2:
51:c5:97:a6:38:f2:c0:64:64:42:bd:d1:a3:fa:fd:
b1:a6:cf:f0:9f:4e:00:f2:57:2f:26:aa:29:47:41:
05:db:33:83:f3:eb:37:72:f1:d5:c3:f5:3b:ef:ad:
fb:4d:e7:db:7d:67:00:7e:1e:0e:c6:d6:ee:c8:27:
95:84:d7:10:56:3b:44:3a:1c:1b:1c:ae:77:e6:13:
38:fa:65:d6:4f:6a:3b:10:6a:2b:2a:8f:68:7f:9c:
74:94:b6:27:83:75:92:fd:86:da:43:e4:fc:b1:7c:
1c:52:3c:1f:b0:90:b6:8d:9a:f4:c2:96:4f:53:62:
7f:16:1f:0f:24:6c:3a:35:4c:cf:04:06:98:ab:ff:
26:ce:73:f5:7d:0c:b6:aa:f0:a5:a8:75:5d:27:41:
38:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:31:31:11:CB:AF:F8:59:EE:E3:9E:CE:30:C6:95:F4:3A:B4:3D:5C
X509v3 Authority Key Identifier:
keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ab:46:5f:ab:78:f3:81:20:58:b3:eb:61:e0:c7:59:cd:6c:
1b:20:0d:7b:a1:ca:79:64:ea:0c:34:7b:08:f4:be:d4:2c:ca:
82:d8:4f:31:bf:25:17:d2:9d:0f:ec:9c:9f:48:1e:17:eb:49:
88:a6:9a:42:48:62:b7:68:b5:0c:86:23:8d:8c:a4:96:3f:f1:
b3:71:aa:2b:2d:61:8a:03:e9:a4:15:0a:7a:2d:1f:c6:9e:0f:
3c:1f:22:2a:d2:ef:7c:8a:98:e7:84:0f:ca:ef:2f:83:49:27:
e6:57:e4:01:a9:2c:07:cb:1b:f6:b0:bd:1b:3a:d4:30:3f:e0:
49:6b:91:53:26:d2:4d:54:c8:ff:3e:c8:b3:f5:23:a7:9d:fc:
47:11:85:55:f5:2e:b2:8c:64:73:e6:6a:68:c8:bf:e8:6c:72:
6d:87:f4:f0:df:ef:a9:26:f5:14:ab:48:8f:6d:6b:35:91:b0:
e9:28:a6:06:15:fb:1e:43:cb:6c:21:b7:a9:8d:94:cb:a6:7c:
7b:71:04:94:86:5a:a9:d8:8a:69:a3:89:e2:de:02:7b:17:3f:
6b:fe:18:4d:f8:53:61:e2:e4:86:d1:17:83:40:97:11:5f:24:
b4:dc:1a:f1:d0:0d:86:39:c6:c9:93:ce:39:d7:d3:b9:68:b6:
a2:1a:97:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoA2hB2OlceYR5DARMDLKwNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjFiNDU4YWJmNzk3ZGVkY2M2NjFlNTRhNjg1ZjY1MTgz
NGI1ZDEwHhcNMjUxMDIwMDkwMTIyWhcNMjUxMDIxMDkwMTIyWjAzMTEwLwYDVQQD
Eyg2MjMxMzExMWNiYWZmODU5ZWVlMzllY2UzMGM2OTVmNDNhYjQzZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2G3qLSq+0Hm5o4iItlspBdRNukw6
BzJkefKLh9yxYwWvWA3gkl8Agp275MGK30RDr70eLc0JfGJwCaBhEqvKmjmSarCq
HoAMtIG+E+HBAZNW/jKnIK2GIFZbQwa0/S3Z+2P6YPXoybJRxZemOPLAZGRCvdGj
+v2xps/wn04A8lcvJqopR0EF2zOD8+s3cvHVw/U77637TefbfWcAfh4OxtbuyCeV
hNcQVjtEOhwbHK535hM4+mXWT2o7EGorKo9of5x0lLYng3WS/YbaQ+T8sXwcUjwf
sJC2jZr0wpZPU2J/Fh8PJGw6NUzPBAaYq/8mznP1fQy2qvClqHVdJ0E4tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIxMRHLr/hZ7uOezjDGlfQ6tD1cMB8GA1UdIwQY
MBaAFMSxtFir95fe3MZh5UpoX2UYNLXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNjBlMjQtMjA0MC00YTVjLTkyY2Yt
ZWM1OGEzMTI1ZWU1LzEveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yNjBlMjQtMjA0MC00YTVjLTkyY2YtZWM1OGEzMTI1ZWU1
LzEveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu6tGX6t4
84EgWLPrYeDHWc1sGyANe6HKeWTqDDR7CPS+1CzKgthPMb8lF9KdD+ycn0geF+tJ
iKaaQkhit2i1DIYjjYyklj/xs3GqKy1higPppBUKei0fxp4PPB8iKtLvfIqY54QP
yu8vg0kn5lfkAaksB8sb9rC9GzrUMD/gSWuRUybSTVTI/z7Is/Ujp538RxGFVfUu
soxkc+ZqaMi/6GxybYf08N/vqSb1FKtIj21rNZGw6SimBhX7HkPLbCG3qY2Uy6Z8
e3EElIZaqdiKaaOJ4t4Cexc/a/4YTfhTYeLkhtEXg0CXEV8ktNwa8dANhjnGyZPO
OdfTuWi2ohqXAw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:37:41 2025 by rpki-client