Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier: LjQSKVaaR1WdiwDbFYtOzClnp2n2crxCIhGwFTXeSes=
Subject key identifier: B7:D7:F8:F1:9E:C8:55:83:15:0A:6C:B2:B8:83:9D:CE:A6:CA:B4:43
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial: 0199239EF1F51B072B2BFD8257B2864C1818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 10:00:43 +0000
Manifest this update: Sun 07 Sep 2025 10:00:43 +0000
Manifest next update: Mon 08 Sep 2025 10:00:43 +0000
Files and hashes: 1: nywPQh9QP-OhqhIRdI1AR086REo.roa (hash: fyTq9cJsDKGICMb+AhPPiPfngZOBuqPjdSV/9OfNj10=)
2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: bG/L3UIrr66lAdCIzS49tSa5YP0FEeJLtVTF/rHc/KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:f1:f5:1b:07:2b:2b:fd:82:57:b2:86:4c:18:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Validity
Not Before: Sep 7 10:00:43 2025 GMT
Not After : Sep 8 10:00:43 2025 GMT
Subject: CN=b7d7f8f19ec85583150a6cb2b8839dcea6cab443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1d:fe:73:f5:a2:ee:d9:38:d8:33:c6:4c:b4:
cd:bf:45:f9:d4:88:c4:44:d2:8d:b5:ac:2f:18:c9:
a3:ac:46:9f:a7:71:9d:36:b8:dc:9f:d2:b5:88:f9:
c7:85:20:01:ba:cc:77:60:9c:e0:e7:6e:bd:7f:70:
a3:cf:e8:d1:2e:d9:99:79:a8:b8:b7:ea:79:35:6d:
83:b5:8d:19:ce:d1:a8:fa:88:f3:a7:60:30:e2:1a:
88:69:cc:50:13:82:0d:14:a0:78:98:a8:28:f7:de:
ad:16:94:35:c9:ca:83:7b:0e:56:67:2e:f6:0b:96:
4b:7b:5c:1d:7f:73:ba:fc:1e:bc:4f:75:57:60:f0:
97:80:67:cd:1b:41:75:35:e8:7f:2e:6a:da:b6:7e:
31:4b:fa:21:44:85:22:a0:36:f0:60:c5:75:d3:1e:
16:39:ea:0f:6a:e1:43:77:66:51:ef:4f:be:88:a1:
36:62:db:2d:bf:50:de:11:cc:d2:9b:77:0d:1b:a5:
12:3c:72:ee:87:27:3e:fb:81:6f:e8:96:0a:0e:d2:
fd:6d:d6:7f:57:06:78:03:8a:d8:0e:26:18:1d:71:
0f:ae:71:06:fb:26:e6:48:97:9a:58:a5:0e:7a:d4:
10:cb:19:63:f8:19:ee:c8:c4:9a:2b:78:b9:08:49:
e8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D7:F8:F1:9E:C8:55:83:15:0A:6C:B2:B8:83:9D:CE:A6:CA:B4:43
X509v3 Authority Key Identifier:
keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:43:b0:2f:6d:15:10:39:91:cc:d0:68:dc:bc:9e:93:85:cd:
b9:ae:36:86:fc:4a:41:b0:b7:2a:15:92:09:b2:88:0b:02:a7:
14:20:6d:0b:2c:74:9a:e2:aa:ac:4f:0e:55:7c:c7:ab:5a:59:
e1:63:2d:aa:3c:9d:f6:75:66:7c:45:fa:b6:52:9e:ca:ca:5e:
ac:7c:ac:bf:f7:78:45:1d:01:f9:af:e8:64:36:6e:5f:c7:ff:
56:b6:1e:16:5d:90:81:71:2e:eb:ea:b9:9b:27:36:15:66:ff:
f9:26:cf:0e:3e:8b:17:58:7b:f8:7b:75:36:04:4e:01:e6:ab:
c6:6c:a2:8e:e7:07:a0:23:b6:cb:19:ba:55:d7:ff:42:44:55:
57:37:dc:c2:6d:91:6e:1d:df:f9:53:95:ea:76:b3:3e:de:bd:
b5:b9:77:0e:e1:4f:08:cf:8e:ae:e2:d4:b8:7c:46:29:07:4f:
62:c3:25:2e:f6:46:a8:66:64:5c:80:c1:79:fd:d6:7f:34:f7:
a1:21:97:29:61:ef:44:39:37:11:85:b4:49:ae:aa:14:96:be:
e6:b6:36:cf:e4:cd:31:c2:3a:26:a6:94:ef:6c:74:d2:b6:ab:
43:d1:cd:aa:ad:90:e1:a7:b7:b5:a9:52:29:92:21:e9:24:03:
df:45:ae:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnvH1GwcrK/2CV7KGTBgYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZGZlYmFjOGI3NTQ1MTEyMmY5MTRmY2EwMjRlZTFmNTQx
N2NhYmIwHhcNMjUwOTA3MTAwMDQzWhcNMjUwOTA4MTAwMDQzWjAzMTEwLwYDVQQD
EyhiN2Q3ZjhmMTllYzg1NTgzMTUwYTZjYjJiODgzOWRjZWE2Y2FiNDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB3+c/Wi7tk42DPGTLTNv0X51IjE
RNKNtawvGMmjrEafp3GdNrjcn9K1iPnHhSABusx3YJzg5269f3Cjz+jRLtmZeai4
t+p5NW2DtY0ZztGo+ojzp2Aw4hqIacxQE4INFKB4mKgo996tFpQ1ycqDew5WZy72
C5ZLe1wdf3O6/B68T3VXYPCXgGfNG0F1Neh/Lmratn4xS/ohRIUioDbwYMV10x4W
OeoPauFDd2ZR70++iKE2Ytstv1DeEczSm3cNG6USPHLuhyc++4Fv6JYKDtL9bdZ/
VwZ4A4rYDiYYHXEPrnEG+ybmSJeaWKUOetQQyxlj+BnuyMSaK3i5CEnonQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfX+PGeyFWDFQpssriDnc6myrRDMB8GA1UdIwQY
MBaAFMbf66yLdUURIvkU/KAk7h9UF8q7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hNjVhNDgtMDkzNS00YTc5LWFjMGYt
MzgwOTFiMTk3NjRiLzEveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hNjVhNDgtMDkzNS00YTc5LWFjMGYtMzgwOTFiMTk3NjRi
LzEveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkOwL20V
EDmRzNBo3Lyek4XNua42hvxKQbC3KhWSCbKICwKnFCBtCyx0muKqrE8OVXzHq1pZ
4WMtqjyd9nVmfEX6tlKeysperHysv/d4RR0B+a/oZDZuX8f/VrYeFl2QgXEu6+q5
myc2FWb/+SbPDj6LF1h7+Ht1NgROAearxmyijucHoCO2yxm6Vdf/QkRVVzfcwm2R
bh3f+VOV6nazPt69tbl3DuFPCM+OruLUuHxGKQdPYsMlLvZGqGZkXIDBef3WfzT3
oSGXKWHvRDk3EYW0Sa6qFJa+5rY2z+TNMcI6JqaU72x00rarQ9HNqq2Q4ae3talS
KZIh6SQD30WuVg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:26 2025 by rpki-client