Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
File: XatFagUdSpN4i-9PrA0HvcDJ8M8.mft (raw, json)
Hash identifier: BO8nmEx7X2fm+D4cIKx+XGICMZciuOgiQNxVudKUEbE=
Subject key identifier: 9F:8F:F5:AE:FC:F6:AC:03:8B:B0:B6:B1:65:3A:67:58:8F:99:6B:F8
Authority key identifier: 5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
Certificate issuer: /CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Certificate serial: 019A722629CB99C0076A7E3306AA08325439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
Manifest number: 1728
Signing time: Tue 11 Nov 2025 09:01:34 +0000
Manifest this update: Tue 11 Nov 2025 09:01:34 +0000
Manifest next update: Wed 12 Nov 2025 09:01:34 +0000
Files and hashes: 1: XatFagUdSpN4i-9PrA0HvcDJ8M8.crl (hash: SrBTeFUqAfwnZt/mDvV7HTHusBrEvFLxTbTVWYM6GJU=)
2: YkgHQRkVRrWyQ2p2wgLse2qkaoY.roa (hash: p9EN6Inc80zOT2cHk5ltmrKNAtRT7MPUi50PrYUILc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:29:cb:99:c0:07:6a:7e:33:06:aa:08:32:54:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Validity
Not Before: Nov 11 09:01:34 2025 GMT
Not After : Nov 12 09:01:34 2025 GMT
Subject: CN=9f8ff5aefcf6ac038bb0b6b1653a67588f996bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c3:fc:ed:ab:b2:d6:0c:ca:ee:1b:1a:7c:1a:
89:99:3f:f1:e0:89:c1:4f:39:f0:64:ff:33:cc:32:
73:71:c4:d2:5d:9f:a8:32:dc:9c:d4:ae:14:7e:d5:
20:b0:02:17:78:6e:9f:7c:41:9e:eb:19:1d:6c:f3:
02:c3:63:5b:cb:80:0d:a0:b2:31:65:4d:3f:58:46:
be:22:eb:c6:dc:58:76:40:66:2f:83:fb:8c:c4:30:
d9:dd:c2:64:25:43:df:9b:b8:72:66:6c:13:9a:0f:
7b:8d:5c:3e:a8:c5:f5:a0:7d:06:bd:87:61:5d:29:
0c:fc:18:d8:6e:da:90:c0:46:06:a9:ca:72:dc:4e:
0b:54:f9:56:60:12:a5:23:31:9d:12:a6:22:21:0b:
bd:df:eb:42:5a:16:85:01:0d:05:e9:15:b4:9a:2c:
aa:d0:9d:2e:cf:00:58:6a:e9:44:b1:54:ac:8a:b5:
09:02:0d:1f:ff:a6:52:fc:3d:98:77:04:f1:e6:13:
c5:ad:86:06:f5:eb:09:0c:a6:45:0b:d3:22:9f:30:
ca:01:56:e6:9d:a3:73:d6:df:ce:1d:59:48:28:1f:
89:da:4d:e8:5f:ef:ba:33:9a:ef:99:3c:e0:d4:c3:
b6:ba:90:03:23:8b:30:93:3c:3f:35:ae:45:e3:d9:
e4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8F:F5:AE:FC:F6:AC:03:8B:B0:B6:B1:65:3A:67:58:8F:99:6B:F8
X509v3 Authority Key Identifier:
keyid:5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:30:0c:17:9f:5f:e0:3e:f9:a7:32:bc:b2:30:56:36:8d:13:
db:03:7f:f5:36:23:b0:72:10:8b:ac:99:e5:fc:ea:f5:24:83:
85:94:8e:6d:cd:51:90:77:91:06:66:d9:fe:72:e6:da:a5:ac:
21:49:d1:8d:aa:01:14:f8:b3:c1:82:24:c6:07:d6:e7:27:7d:
52:ec:ce:23:c1:05:0e:d7:7c:bb:40:2b:cb:89:d1:ef:10:31:
43:e3:a8:9a:93:3f:fa:69:42:22:ad:d8:6b:c7:d3:91:10:e3:
17:03:47:ba:95:61:d0:df:48:92:8c:f6:3e:c1:c2:82:0e:bb:
83:d7:2e:0f:5a:f3:b4:3e:1f:e7:f9:07:b7:94:59:fc:31:09:
3e:aa:96:27:2d:ce:98:25:fe:e7:07:d4:84:86:92:4a:53:c6:
ff:92:c7:ae:42:73:99:42:ba:16:ea:f1:28:28:ac:aa:6f:81:
60:69:6a:6a:1c:8e:de:1c:73:e4:f3:21:3c:af:08:b3:ff:20:
c9:bb:1b:4b:5b:d1:74:44:01:d1:60:f1:d0:59:72:3e:91:2c:
1b:7a:7f:7e:7d:79:51:70:55:c1:71:fc:8a:50:9b:f6:55:14:
f6:9a:ff:b7:04:3d:88:4d:81:ac:99:46:02:74:5f:db:76:43:
b8:a4:c5:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJinLmcAHan4zBqoIMlQ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYWI0NTZhMDUxZDRhOTM3ODhiZWY0ZmFjMGQwN2JkYzBj
OWYwY2YwHhcNMjUxMTExMDkwMTM0WhcNMjUxMTEyMDkwMTM0WjAzMTEwLwYDVQQD
Eyg5ZjhmZjVhZWZjZjZhYzAzOGJiMGI2YjE2NTNhNjc1ODhmOTk2YmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sP87auy1gzK7hsafBqJmT/x4InB
TznwZP8zzDJzccTSXZ+oMtyc1K4UftUgsAIXeG6ffEGe6xkdbPMCw2Nby4ANoLIx
ZU0/WEa+IuvG3Fh2QGYvg/uMxDDZ3cJkJUPfm7hyZmwTmg97jVw+qMX1oH0GvYdh
XSkM/BjYbtqQwEYGqcpy3E4LVPlWYBKlIzGdEqYiIQu93+tCWhaFAQ0F6RW0miyq
0J0uzwBYaulEsVSsirUJAg0f/6ZS/D2YdwTx5hPFrYYG9esJDKZFC9MinzDKAVbm
naNz1t/OHVlIKB+J2k3oX++6M5rvmTzg1MO2upADI4swkzw/Na5F49nkTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+P9a789qwDi7C2sWU6Z1iPmWv4MB8GA1UdIwQY
MBaAFF2rRWoFHUqTeIvvT6wNB73AyfDPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGF0RmFnVWRTcE40aS05UHJBMEh2Y0RKOE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84ZDM4OTUtNjVjMi00YjhlLWE1NDct
OGFkNzRjYzZhNmI5LzEvWGF0RmFnVWRTcE40aS05UHJBMEh2Y0RKOE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84ZDM4OTUtNjVjMi00YjhlLWE1NDctOGFkNzRjYzZhNmI5
LzEvWGF0RmFnVWRTcE40aS05UHJBMEh2Y0RKOE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDAMF59f
4D75pzK8sjBWNo0T2wN/9TYjsHIQi6yZ5fzq9SSDhZSObc1RkHeRBmbZ/nLm2qWs
IUnRjaoBFPizwYIkxgfW5yd9UuzOI8EFDtd8u0Ary4nR7xAxQ+OompM/+mlCIq3Y
a8fTkRDjFwNHupVh0N9Ikoz2PsHCgg67g9cuD1rztD4f5/kHt5RZ/DEJPqqWJy3O
mCX+5wfUhIaSSlPG/5LHrkJzmUK6FurxKCisqm+BYGlqahyO3hxz5PMhPK8Is/8g
ybsbS1vRdEQB0WDx0FlyPpEsG3p/fn15UXBVwXH8ilCb9lUU9pr/twQ9iE2BrJlG
AnRf23ZDuKTF4g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:51 2025 by rpki-client