
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
File: xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json)
Hash identifier: nqU1F9W27zMP+W/s+E20eIouxBrJY5d0zxkhDHmilpY=
Subject key identifier: E0:C7:BE:EA:56:A6:F2:9F:A7:63:EE:28:36:6D:8E:C7:E0:68:6D:D1
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019A13F1E64C0C4247487A490E7D208A5899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
Manifest number: 1730
Signing time: Fri 24 Oct 2025 02:00:11 +0000
Manifest this update: Fri 24 Oct 2025 02:00:11 +0000
Manifest next update: Sat 25 Oct 2025 02:00:11 +0000
Files and hashes: 1: 1G4hJtK-Q6kU7icYScQRC5-Be-s.roa (hash: dMz2je+c/O1VWWnftEtGiGhh3+EYMNwffk18Dr9qsq8=)
2: 48lDGC9bYCTuSM8HwQhmLCbmZus.roa (hash: NHmuOU8Cy9kJ9mGcVBS8Mv1uoHjoSm8ONFcGWnM3sBI=)
3: 5XmJB8L9LQKzWCvnzU0no13nSW0.roa (hash: T9GOvhBZ+sI1Yn9j42OnP6O/5jv10olowsyPXKbQ3qs=)
4: 7hWCsPelXMQmpESwr4GWvxzkq98.roa (hash: oD7zlhvzmlTWXnuOdQmMdbtoa//UwgMcOCLQqr4S1S8=)
5: 8wmzxLkSyC63kJ8KsfaDTFp3590.roa (hash: yPTonCp/pr9ZtUUWsN3hsTJ0gebdbrNTrrkzT5j7S00=)
6: Am-SSkYzBGNOVD5iZuCxEBeUzyE.roa (hash: mvoXPLstsggjeVFKeI+JEtzXmHTtkfMv+mllobMchjw=)
7: Bm5srVh_81xtwsDQZjL_phr1EiE.roa (hash: 7fmqR7TnR8pgOLrtjSSrB/cFA86aEz/WfgUxvDNNZKU=)
8: I0AFm-vc4rf4QsaVWhj5NHyb11w.roa (hash: BGbcWwHIrmn5ZBCCyfBSP0+HfpIO8Xl9K0FKbiZmvI8=)
9: IqmCKhj0YirWDztKQKxV-Tkp8wA.roa (hash: PBdp+ZbHGedan6tJHhjQF/VqDVDnpQuJLH8duAyClhY=)
10: LLhwUpHqz22GnC5TEmimdFlrtqk.roa (hash: fvLKEFRwIYrK/dNIazKMMzJzXGAsDgMXq4phPeziOkU=)
11: LxDX7O3eQGaJYExU85kcexK4__Q.roa (hash: rErxx7Om3Ta/mvJcqv+K5/2MJQzhGaZ1sKgBE7WSm3c=)
12: MqhH7LZrBnXXGBOARTaALjBOu0k.roa (hash: eb5e3IYtX1JLVkPpTH90MSfTGSJlQRW4w6AkJQsqHDE=)
13: NznSTmaNmRlH_azHj2PejtUv32Y.roa (hash: vqJasZBwevHspmBMCQpj1DtVpKmfJrLVqU+PRrcMqfM=)
14: SQq8_rpvdfY7BXFUyrphnnlL84o.roa (hash: vSJi9Ykpxa0TPPtAkLzqMYrT9acxNfMsWIZzD/ELaTo=)
15: Z2dSkQ6PASRngm_2ArTJe9mzGwQ.roa (hash: 2dzsM88NRUyjmGplJFA3j8lI1oArTGFKZ1kC35f7j6Y=)
16: _8zCTGBJxw-u7lVEsPTjCM3nWwA.roa (hash: LjXxLmtwWhA2Mlf9B9WEsLpzMalKSd7C+ucRfQqnP4k=)
17: _CZTuF6DCgR7hWjr3imC3BuUGco.roa (hash: otj+SUgUnYev14Hu3/FWe/Yz8NTcHKr89T8ufOfcyxo=)
18: _U2iLKvuzlqwilJSzER831z98M8.roa (hash: okZmcDXPqmxDEhwwoZbqsUwyHhANmRv1gbDLhJFifeM=)
19: _YRU7gsUw7AnTGw-h2hVshCcJZw.roa (hash: UcrlnWWaVRHvoC0MHPAo0D7Go62USxqpkzcfjfXtLfc=)
20: asGcSQns56fV1692zV3Ch_oG4Kg.roa (hash: 5dHMVFt5oYiYTS73IJtgkzio0zBGi60UjdzaO/dGRQI=)
21: c-YB5zSc0c1xWdOauA62tbaTi7U.roa (hash: OX0Hi6BRKnvgV0Q4TqYGzIGBa5g+sChYvpN4EKEAkSc=)
22: ohVU4yVmd-OijruvfZC34wLcjwg.roa (hash: yjaz/vvh2Eiz0xB2wMJcJT1niuvKwNPERYNbxNIkKUo=)
23: qCsYweWkxuS1CwD2zyFdFhQWWJI.roa (hash: zk6ER/z9n6g2vt5vWV2cOhGUTBILSOCBZoubvC6AkoU=)
24: r1CV8D1_y4TguGkYqv-ggeXr4c0.roa (hash: jDk4rmD0Q4dKvEGvkXrnmVvHn/m5l4R7RawW2v9/HZc=)
25: tVkzOGYvm9Ue0p1DtZsOv0Qo5ww.roa (hash: 1l4DY4og67nsoecheqcUHwFJJl1I+VZAOse9iPXrkJI=)
26: uFUEGSfPHjgulVJP0gmjr5Io5BE.roa (hash: N+zSHr/8E6EDAHMdhe9NDa8SXOzYh6T68xumfpCPwis=)
27: uH80Eiiaft3lL2JNSBJK4vprMmE.roa (hash: vDDRb77ZSje6Mi35F5Bp/wnrEb7HYmMVlt3kX82ZuxQ=)
28: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: rNSnuryYwyJDeOjocCyz+4/jK47+4JTeJL4Ynd5BPLM=)
29: zKC6n_t_VgG-LjOI7EZyAWxbwfA.roa (hash: xTXsk3AHK3+UMeTc89XGRCu0j4laHeIShFJJ2s+vJRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:f1:e6:4c:0c:42:47:48:7a:49:0e:7d:20:8a:58:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Oct 24 02:00:11 2025 GMT
Not After : Oct 25 02:00:11 2025 GMT
Subject: CN=e0c7beea56a6f29fa763ee28366d8ec7e0686dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:76:52:fc:88:01:86:81:b4:8d:dd:96:06:
13:d6:41:82:52:b3:99:dc:71:3e:c5:da:6c:e7:34:
6e:f8:8f:9b:ee:eb:28:00:1e:49:2f:6b:fd:45:09:
8e:bc:61:fd:10:63:da:76:04:e1:b3:7c:04:f4:26:
58:e3:30:27:9f:d4:b0:06:41:5b:fb:99:2f:64:d4:
87:49:da:67:41:16:d8:86:79:ed:64:29:6d:26:f7:
6b:ff:b9:a2:41:b9:e4:df:f7:e2:8f:8b:3e:c0:cf:
f0:e4:45:15:91:f4:64:17:fb:59:4c:b3:cf:36:21:
5b:07:4d:c4:2e:a5:59:cc:66:33:9f:4a:3f:9e:b2:
fc:48:ea:b6:59:50:e7:55:40:29:8a:2e:60:06:29:
87:f5:b6:53:7f:12:e1:32:d9:f1:ae:58:2d:17:47:
27:a5:6a:3d:ac:ac:b0:68:ee:84:27:15:d2:42:66:
75:0b:4f:5a:a7:ca:a1:09:13:a8:a7:3d:52:c7:25:
e5:36:36:e0:15:ec:4a:5d:93:73:d9:cf:53:1b:a8:
b6:c1:3a:58:0b:e8:35:41:f9:96:0d:98:cc:e0:ed:
fa:30:5b:50:0d:80:a7:75:58:e3:32:85:45:5b:4e:
1e:c6:28:bf:4d:88:2c:1e:c2:51:54:c9:cc:be:a9:
c1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C7:BE:EA:56:A6:F2:9F:A7:63:EE:28:36:6D:8E:C7:E0:68:6D:D1
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fc:67:c3:4e:05:56:81:29:d4:0c:26:84:a0:83:e2:fe:a9:
9e:34:8a:2e:ba:bb:3c:94:f7:0e:57:9a:42:e7:c1:3e:42:9a:
3b:29:24:8b:c8:bb:9b:c3:95:1d:5c:d7:04:ec:ec:32:d2:d3:
ff:78:7c:1c:c6:d4:f2:97:1f:cd:e4:38:fd:ae:49:29:c5:83:
eb:ee:12:0e:dd:a8:f3:d8:f9:0c:4b:e9:96:0b:ec:f1:3b:bf:
fd:02:3e:4e:8c:7b:ba:86:7f:e5:f1:12:c3:e2:1a:44:1f:74:
67:40:32:ec:9f:e5:62:d5:c9:64:3e:a7:04:8d:e4:3e:22:ef:
21:f7:2c:4b:9c:18:4a:42:87:8c:33:04:0b:d4:b9:30:cd:6b:
cd:3a:1a:ff:39:0a:3f:3f:3d:f7:35:3d:da:f5:7f:d3:16:37:
d1:1a:4d:65:09:92:5b:bc:63:6d:00:a6:37:b8:67:73:fa:6d:
05:9f:75:a6:fc:4a:05:94:4d:ab:54:10:56:21:29:98:d2:37:
c6:11:46:4f:26:67:23:ec:f5:e5:8d:91:4e:52:9f:b9:44:51:
90:55:e5:84:39:d9:51:4a:7e:07:e8:82:83:0d:88:02:4c:49:
0b:25:46:06:ab:64:ea:1f:ca:7c:56:9c:36:ff:93:f7:be:66:
b5:04:22:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoT8eZMDEJHSHpJDn0giliZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjUxMDI0MDIwMDExWhcNMjUxMDI1MDIwMDExWjAzMTEwLwYDVQQD
EyhlMGM3YmVlYTU2YTZmMjlmYTc2M2VlMjgzNjZkOGVjN2UwNjg2ZGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5N2UvyIAYaBtI3dlgYT1kGCUrOZ
3HE+xdps5zRu+I+b7usoAB5JL2v9RQmOvGH9EGPadgThs3wE9CZY4zAnn9SwBkFb
+5kvZNSHSdpnQRbYhnntZCltJvdr/7miQbnk3/fij4s+wM/w5EUVkfRkF/tZTLPP
NiFbB03ELqVZzGYzn0o/nrL8SOq2WVDnVUApii5gBimH9bZTfxLhMtnxrlgtF0cn
pWo9rKywaO6EJxXSQmZ1C09ap8qhCROopz1SxyXlNjbgFexKXZNz2c9TG6i2wTpY
C+g1QfmWDZjM4O36MFtQDYCndVjjMoVFW04exii/TYgsHsJRVMnMvqnB1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODHvupWpvKfp2PuKDZtjsfgaG3RMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/xnw04F
VoEp1AwmhKCD4v6pnjSKLrq7PJT3DleaQufBPkKaOykki8i7m8OVHVzXBOzsMtLT
/3h8HMbU8pcfzeQ4/a5JKcWD6+4SDt2o89j5DEvplgvs8Tu//QI+Tox7uoZ/5fES
w+IaRB90Z0Ay7J/lYtXJZD6nBI3kPiLvIfcsS5wYSkKHjDMEC9S5MM1rzToa/zkK
Pz899zU92vV/0xY30RpNZQmSW7xjbQCmN7hnc/ptBZ91pvxKBZRNq1QQViEpmNI3
xhFGTyZnI+z15Y2RTlKfuURRkFXlhDnZUUp+B+iCgw2IAkxJCyVGBqtk6h/KfFac
Nv+T975mtQQiZQ==
-----END CERTIFICATE-----
Generated at Fri Oct 24 09:11:42 2025 by rpki-client