Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
File: xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft (raw, json)
Hash identifier: LPF8//crkWydRQYoiF4VsrN4rRz+6AWFSx3gMgFFkaY=
Subject key identifier: F7:92:8B:2E:F6:9A:06:C8:6D:A2:FF:F5:47:0D:E1:CB:02:C6:5C:B6
Authority key identifier: C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14
Certificate issuer: /CN=c4acc9e2999647d801d4606ec94d6b721f7a6414
Certificate serial: 0199225520890A27E2037058620F5670C0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
Manifest number: 022C
Signing time: Sun 07 Sep 2025 04:00:28 +0000
Manifest this update: Sun 07 Sep 2025 04:00:28 +0000
Manifest next update: Mon 08 Sep 2025 04:00:28 +0000
Files and hashes: 1: DErHItNq7nABZO58YjUcqRebihE.roa (hash: ubfaZz+JuneQdJw4LkjXBWrUt9hJpsUiv6JFIG/nn8s=)
2: xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl (hash: yHW7VFx7vsO2W2+8q8513+nkjGa3wwhOhIUbu59xygA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:20:89:0a:27:e2:03:70:58:62:0f:56:70:c0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4acc9e2999647d801d4606ec94d6b721f7a6414
Validity
Not Before: Sep 7 04:00:28 2025 GMT
Not After : Sep 8 04:00:28 2025 GMT
Subject: CN=f7928b2ef69a06c86da2fff5470de1cb02c65cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ec:5f:c4:99:17:39:ef:9e:ef:9b:28:f1:2b:
5f:a0:10:17:cd:24:eb:bb:7c:04:e4:db:cb:3a:48:
cc:0a:b2:ce:ed:84:78:0e:36:c8:42:8c:77:41:49:
ba:5f:1b:09:45:e9:6b:1c:07:87:ba:83:72:81:fb:
67:d0:4f:99:53:a6:6c:c9:03:9a:fa:4a:24:c0:4b:
4f:86:7d:85:1d:ad:4d:b4:6c:3b:1c:52:b8:04:0f:
a8:6a:98:ad:c3:57:37:5a:57:1a:0e:8e:a0:5e:31:
88:fd:39:bf:31:3f:f1:07:1c:79:cb:10:28:06:cb:
20:01:b4:f6:fb:9c:5e:a5:9f:6e:0d:ee:f3:22:80:
54:ac:b1:a7:94:1b:25:1f:d0:36:73:2a:0c:27:90:
dc:89:07:72:b6:76:31:12:89:a0:76:ac:27:7f:50:
d0:9e:62:c8:18:d8:ad:04:ab:e6:49:40:70:95:0c:
91:1b:aa:50:86:df:fe:a4:a6:8e:65:37:b3:71:89:
9c:11:76:32:c4:46:88:84:a2:fc:ce:b1:70:de:4c:
95:9f:ee:2b:d0:d8:ab:24:3f:3a:90:3a:dd:33:ac:
1d:0b:86:3d:3d:d2:d8:85:e1:24:e0:3c:2a:f5:fe:
ce:b4:19:db:92:c5:84:cc:c2:e9:72:99:ff:77:57:
69:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:92:8B:2E:F6:9A:06:C8:6D:A2:FF:F5:47:0D:E1:CB:02:C6:5C:B6
X509v3 Authority Key Identifier:
keyid:C4:AC:C9:E2:99:96:47:D8:01:D4:60:6E:C9:4D:6B:72:1F:7A:64:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/07e8cc-9cd2-4326-a92a-a04a2c9afdee/1/xKzJ4pmWR9gB1GBuyU1rch96ZBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2e:8f:f7:b6:0a:88:08:1d:78:93:b0:2b:96:67:9a:ed:ca:
7a:d8:dd:ac:4f:5c:af:a5:aa:41:05:88:5a:ca:69:40:47:44:
82:0b:5d:08:fb:21:56:b0:d5:ac:15:b9:a0:de:ec:7e:2c:a9:
f9:07:1a:99:b1:73:e5:c7:8d:bb:9d:12:10:da:3a:25:c4:60:
49:a1:4b:e8:8b:7e:3b:d5:ce:1e:b7:eb:5b:3e:bf:26:7e:30:
58:dc:2e:b9:75:94:5c:ee:07:c1:63:25:83:fa:0b:ec:e1:66:
0e:e4:86:9e:bf:40:0d:f8:4a:d9:eb:86:db:1e:d6:b8:0a:c2:
b1:72:ce:aa:59:4d:10:75:b3:73:62:a7:3b:d2:a3:2a:33:a8:
06:cf:08:71:b1:ac:e5:a7:20:8d:f8:3a:d3:d6:14:64:92:c5:
a9:70:1b:7c:e7:8b:13:5b:05:08:e1:cd:11:b0:9e:ca:45:56:
bb:19:7a:ec:42:d7:78:87:30:3c:76:6a:68:dd:0b:ca:c6:e4:
13:bc:a4:14:9d:cf:45:59:5b:c0:bf:3b:4f:18:10:4e:c8:28:
4a:3a:70:9a:a1:1a:02:fd:9c:75:35:1a:2b:39:e9:a5:b4:2d:
f6:94:ea:ae:70:86:d2:d7:44:4f:db:51:57:e1:8e:23:33:38:
59:01:66:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVSCJCifiA3BYYg9WcMDIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YWNjOWUyOTk5NjQ3ZDgwMWQ0NjA2ZWM5NGQ2YjcyMWY3
YTY0MTQwHhcNMjUwOTA3MDQwMDI4WhcNMjUwOTA4MDQwMDI4WjAzMTEwLwYDVQQD
EyhmNzkyOGIyZWY2OWEwNmM4NmRhMmZmZjU0NzBkZTFjYjAyYzY1Y2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+xfxJkXOe+e75so8StfoBAXzSTr
u3wE5NvLOkjMCrLO7YR4DjbIQox3QUm6XxsJRelrHAeHuoNygftn0E+ZU6ZsyQOa
+kokwEtPhn2FHa1NtGw7HFK4BA+oapitw1c3WlcaDo6gXjGI/Tm/MT/xBxx5yxAo
BssgAbT2+5xepZ9uDe7zIoBUrLGnlBslH9A2cyoMJ5DciQdytnYxEomgdqwnf1DQ
nmLIGNitBKvmSUBwlQyRG6pQht/+pKaOZTezcYmcEXYyxEaIhKL8zrFw3kyVn+4r
0NirJD86kDrdM6wdC4Y9PdLYheEk4Dwq9f7OtBnbksWEzMLpcpn/d1dp8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeSiy72mgbIbaL/9UcN4csCxly2MB8GA1UdIwQY
MBaAFMSsyeKZlkfYAdRgbslNa3IfemQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEt6SjRwbVdSOWdCMUdCdXlVMXJjaDk2WkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wN2U4Y2MtOWNkMi00MzI2LWE5MmEt
YTA0YTJjOWFmZGVlLzEveEt6SjRwbVdSOWdCMUdCdXlVMXJjaDk2WkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wN2U4Y2MtOWNkMi00MzI2LWE5MmEtYTA0YTJjOWFmZGVl
LzEveEt6SjRwbVdSOWdCMUdCdXlVMXJjaDk2WkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADy6P97YK
iAgdeJOwK5Znmu3KetjdrE9cr6WqQQWIWsppQEdEggtdCPshVrDVrBW5oN7sfiyp
+QcambFz5ceNu50SENo6JcRgSaFL6It+O9XOHrfrWz6/Jn4wWNwuuXWUXO4HwWMl
g/oL7OFmDuSGnr9ADfhK2euG2x7WuArCsXLOqllNEHWzc2KnO9KjKjOoBs8IcbGs
5acgjfg609YUZJLFqXAbfOeLE1sFCOHNEbCeykVWuxl67ELXeIcwPHZqaN0Lysbk
E7ykFJ3PRVlbwL87TxgQTsgoSjpwmqEaAv2cdTUaKznppbQt9pTqrnCG0tdET9tR
V+GOIzM4WQFm/g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:16 2025 by rpki-client