Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
File: xZttw7wi9sNqA5hVU0stQauxJCM.mft (raw, json)
Hash identifier: MTqhsXjf8bvPAoiofCnm0pRKzKQFY7d4IuaAXYyx9sE=
Subject key identifier: 93:DA:72:53:BE:30:C3:2A:78:03:D6:B0:5A:AE:F5:81:31:4C:99:3A
Authority key identifier: C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
Certificate issuer: /CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Certificate serial: 019A4C97F52D409C70F61EDD7DA7C34025F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 02:00:18 +0000
Manifest this update: Tue 04 Nov 2025 02:00:18 +0000
Manifest next update: Wed 05 Nov 2025 02:00:18 +0000
Files and hashes: 1: WOcgzm6uQCs6AkEViYONoq1N374.roa (hash: nQFtl/WwmhlASNmPqjUWZCZ7o+laxk6LEJZG32/xqcY=)
2: xZttw7wi9sNqA5hVU0stQauxJCM.crl (hash: TAPKmxm6tDE25jcqNLecOwCm0s4GZ/7ssOjLcIeZdoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:f5:2d:40:9c:70:f6:1e:dd:7d:a7:c3:40:25:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Validity
Not Before: Nov 4 02:00:18 2025 GMT
Not After : Nov 5 02:00:18 2025 GMT
Subject: CN=93da7253be30c32a7803d6b05aaef581314c993a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a2:ea:b9:ce:7c:bc:82:94:20:61:b7:e0:32:
7d:75:05:83:5c:63:67:cb:4c:2c:2b:ac:b2:01:72:
1f:75:1d:cd:fa:f0:8e:b0:0c:8c:17:42:a3:05:59:
08:95:ab:68:90:a9:bb:64:e3:82:7f:32:80:8e:1a:
81:67:9c:b7:49:56:c3:44:bb:75:5c:31:6a:85:1f:
75:22:82:ce:8c:a7:3e:60:7c:57:6d:89:55:45:66:
35:ae:cb:db:fe:67:9e:6b:5c:4d:00:2a:82:2c:61:
b5:e0:cf:70:a3:55:d8:61:4a:dd:1b:85:d0:bd:8c:
7b:a4:01:08:84:5a:cd:68:79:af:25:95:59:04:97:
6f:c2:18:7f:f1:64:6e:8d:bd:94:db:63:c6:f7:33:
a3:d9:b8:d9:55:e9:66:6f:59:8d:ca:95:db:7b:7c:
fe:32:7e:8c:21:e0:4d:5a:b0:bf:d8:46:b0:55:08:
19:6b:2e:57:1f:f4:42:91:f3:67:21:a0:5c:a7:d8:
fb:e7:e9:8d:56:b7:b5:8a:66:01:4a:b4:9f:aa:61:
2a:12:31:6d:1c:1c:fa:35:f1:4d:88:a5:68:8e:58:
f7:0c:a4:a5:0b:19:46:c0:e7:29:9e:b0:64:a8:54:
53:88:c5:bb:7a:91:15:9e:ce:cd:75:12:ac:a2:fb:
c6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DA:72:53:BE:30:C3:2A:78:03:D6:B0:5A:AE:F5:81:31:4C:99:3A
X509v3 Authority Key Identifier:
keyid:C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a4:96:b6:c4:ad:cd:ff:c5:2b:03:83:bc:1b:ed:21:6c:c1:
5d:31:44:7d:9e:1d:31:41:bd:dc:c5:07:d7:aa:a0:32:16:fc:
17:41:dd:06:0b:46:14:0a:c6:5c:cc:e7:95:bf:2a:c0:6d:07:
bc:2d:67:c3:29:51:c6:a7:18:80:3d:39:65:95:c3:f3:90:0d:
57:fe:5b:ad:4d:27:83:aa:5d:01:0a:3d:19:bd:52:b7:a3:8f:
00:5a:c4:3c:fe:73:f2:7b:19:22:55:48:b4:10:a8:74:3c:4d:
44:8b:68:c3:82:5b:23:af:57:84:e2:c7:a9:cd:fa:c0:3d:12:
3b:83:15:bb:0d:f5:f2:b8:a4:c0:ff:d1:89:f7:05:cf:37:0e:
04:86:74:89:f6:eb:2c:ab:94:bd:80:9d:46:51:07:87:1e:92:
58:c8:3c:b4:bd:3c:48:5a:a9:04:53:f2:bc:cd:65:f7:c5:13:
72:3f:49:e9:94:e3:5c:46:4f:88:ca:9f:e0:0e:de:52:55:df:
d2:61:6a:3a:d2:d4:3e:5f:74:85:d6:7e:43:43:de:bb:f8:c3:
06:ce:db:4a:a7:24:22:81:75:dd:e5:09:cc:1c:bd:9b:ce:af:
5e:75:c1:41:bd:09:f5:47:d0:d3:1f:59:81:d6:1f:ef:c0:10:
2a:29:31:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMl/UtQJxw9h7dfafDQCX5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OWI2ZGMzYmMyMmY2YzM2YTAzOTg1NTUzNGIyZDQxYWJi
MTI0MjMwHhcNMjUxMTA0MDIwMDE4WhcNMjUxMTA1MDIwMDE4WjAzMTEwLwYDVQQD
Eyg5M2RhNzI1M2JlMzBjMzJhNzgwM2Q2YjA1YWFlZjU4MTMxNGM5OTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqLquc58vIKUIGG34DJ9dQWDXGNn
y0wsK6yyAXIfdR3N+vCOsAyMF0KjBVkIlatokKm7ZOOCfzKAjhqBZ5y3SVbDRLt1
XDFqhR91IoLOjKc+YHxXbYlVRWY1rsvb/meea1xNACqCLGG14M9wo1XYYUrdG4XQ
vYx7pAEIhFrNaHmvJZVZBJdvwhh/8WRujb2U22PG9zOj2bjZVelmb1mNypXbe3z+
Mn6MIeBNWrC/2EawVQgZay5XH/RCkfNnIaBcp9j75+mNVre1imYBSrSfqmEqEjFt
HBz6NfFNiKVojlj3DKSlCxlGwOcpnrBkqFRTiMW7epEVns7NdRKsovvGHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPaclO+MMMqeAPWsFqu9YExTJk6MB8GA1UdIwQY
MBaAFMWbbcO8IvbDagOYVVNLLUGrsSQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFp0dHc3d2k5c05xQTVoVlUwc3RRYXV4SkNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mMGVmZTMtNDEzYy00M2QyLWJiNjkt
ZDJmNDBkZTA0OWI3LzEveFp0dHc3d2k5c05xQTVoVlUwc3RRYXV4SkNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mMGVmZTMtNDEzYy00M2QyLWJiNjktZDJmNDBkZTA0OWI3
LzEveFp0dHc3d2k5c05xQTVoVlUwc3RRYXV4SkNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6SWtsSt
zf/FKwODvBvtIWzBXTFEfZ4dMUG93MUH16qgMhb8F0HdBgtGFArGXMznlb8qwG0H
vC1nwylRxqcYgD05ZZXD85ANV/5brU0ng6pdAQo9Gb1St6OPAFrEPP5z8nsZIlVI
tBCodDxNRItow4JbI69XhOLHqc36wD0SO4MVuw318rikwP/RifcFzzcOBIZ0ifbr
LKuUvYCdRlEHhx6SWMg8tL08SFqpBFPyvM1l98UTcj9J6ZTjXEZPiMqf4A7eUlXf
0mFqOtLUPl90hdZ+Q0Peu/jDBs7bSqckIoF13eUJzBy9m86vXnXBQb0J9UfQ0x9Z
gdYf78AQKikxxA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:18:15 2025 by rpki-client