Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
File: XE_B5N78Rxyf23_a25iVVj2vmZw.mft (raw, json)
Hash identifier: EN+7UYvLhbXLVbf+45Kgys2JVkX1bqXrEPmEJ6qwjjY=
Subject key identifier: 6D:D1:2C:4E:D7:AA:70:D5:98:DB:5C:2F:3D:E1:C2:6A:70:F7:75:74
Authority key identifier: 5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
Certificate issuer: /CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Certificate serial: 019A52D27C56678ADCC763055B03B162D285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
Manifest number: 132E
Signing time: Wed 05 Nov 2025 07:01:57 +0000
Manifest this update: Wed 05 Nov 2025 07:01:57 +0000
Manifest next update: Thu 06 Nov 2025 07:01:57 +0000
Files and hashes: 1: XE_B5N78Rxyf23_a25iVVj2vmZw.crl (hash: 1yH2wyNbIvGaxheeQkr1Rsb00tNPIfLVTiHnCWs7jP0=)
2: lvOtY--5ta_q9u7-uCq8vanMR-o.roa (hash: IsaauvQSGX/KNFnK0CxHU+He7cfzl6r9rUGogp/cJBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:7c:56:67:8a:dc:c7:63:05:5b:03:b1:62:d2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Validity
Not Before: Nov 5 07:01:57 2025 GMT
Not After : Nov 6 07:01:57 2025 GMT
Subject: CN=6dd12c4ed7aa70d598db5c2f3de1c26a70f77574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:9e:0a:58:6e:1f:0a:72:c9:3e:40:46:06:
47:08:0a:da:2f:f6:61:b5:89:61:ac:18:65:79:d8:
ca:b4:a4:dc:bf:7b:c9:19:fe:e9:e1:a7:35:c0:33:
a9:a1:df:56:f1:bb:56:6e:0b:f0:f4:d3:2f:08:b9:
de:00:bc:27:6f:a4:74:01:f9:64:11:6a:8e:a5:7d:
b6:16:42:48:10:a9:49:91:8f:b4:f7:74:ff:21:d8:
3a:1b:de:01:84:12:e1:56:2b:a4:80:59:83:0f:17:
bc:0e:06:51:97:c3:55:4a:70:dd:a9:ca:05:d2:fa:
39:8f:0d:12:28:d6:1c:72:08:d7:00:59:4d:de:dc:
75:81:2f:77:a4:6b:a5:b3:ed:a0:04:2a:89:1c:85:
df:dc:35:a3:56:91:9d:43:b6:5c:1c:09:19:95:07:
94:e5:ef:20:f9:17:75:18:4a:db:33:76:99:d5:e6:
b7:2c:05:43:da:5a:5b:4a:4c:ca:9b:c0:97:3f:2a:
6d:8c:d4:4f:66:a6:7d:04:33:3c:27:b1:a3:a3:77:
01:d7:99:4e:c4:50:a3:14:e2:77:a9:d0:4e:36:94:
cb:cf:76:b7:60:e7:9d:b0:88:1d:4d:f4:bd:71:e9:
9a:64:e0:55:9a:72:92:b0:d0:f7:a7:76:b0:d7:f7:
a5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D1:2C:4E:D7:AA:70:D5:98:DB:5C:2F:3D:E1:C2:6A:70:F7:75:74
X509v3 Authority Key Identifier:
keyid:5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8f:07:93:8b:2e:65:40:ce:dc:fc:cc:96:01:93:84:ac:d2:
ef:a8:03:9e:88:3a:fa:6b:54:fa:c2:00:ce:b7:37:bb:27:35:
37:66:e9:91:94:f7:9b:63:02:56:88:49:d5:e7:38:82:fa:ba:
e2:2a:cf:33:1b:6f:81:82:b9:fd:0e:62:9d:e0:b5:91:12:2b:
c6:f5:50:df:ee:d5:ad:fa:48:bd:82:9c:0d:67:cb:cf:53:e1:
af:24:45:52:58:fc:e5:9c:9f:af:f8:2a:04:db:dc:fc:7d:8d:
75:97:0b:34:92:48:be:04:02:82:9b:61:e2:6d:26:f7:54:ba:
79:02:a7:31:65:e9:0e:66:ff:8d:12:2c:36:9f:9a:92:ff:bd:
4c:cb:3a:9f:87:be:b8:87:3e:91:8e:7c:a6:c6:d7:eb:7a:f5:
73:d3:be:1e:37:6b:8c:12:46:32:56:c8:f9:f9:3c:7b:10:34:
df:53:aa:98:c1:c1:75:70:1d:6e:9d:80:a9:3b:d1:78:a9:e8:
03:64:fd:15:d6:44:73:c3:77:47:98:4e:96:bc:3d:0f:f4:72:
bf:03:4a:ec:71:53:72:85:17:94:99:54:92:9b:a3:d6:62:8c:
ea:9e:00:7f:3e:69:b5:a0:19:28:14:7a:f4:ad:02:78:91:8f:
35:d3:f7:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0nxWZ4rcx2MFWwOxYtKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNGZjMWU0ZGVmYzQ3MWM5ZmRiN2ZkYWRiOTg5NTU2M2Rh
Zjk5OWMwHhcNMjUxMTA1MDcwMTU3WhcNMjUxMTA2MDcwMTU3WjAzMTEwLwYDVQQD
Eyg2ZGQxMmM0ZWQ3YWE3MGQ1OThkYjVjMmYzZGUxYzI2YTcwZjc3NTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw66eClhuHwpyyT5ARgZHCAraL/Zh
tYlhrBhledjKtKTcv3vJGf7p4ac1wDOpod9W8btWbgvw9NMvCLneALwnb6R0Aflk
EWqOpX22FkJIEKlJkY+093T/Idg6G94BhBLhViukgFmDDxe8DgZRl8NVSnDdqcoF
0vo5jw0SKNYccgjXAFlN3tx1gS93pGuls+2gBCqJHIXf3DWjVpGdQ7ZcHAkZlQeU
5e8g+Rd1GErbM3aZ1ea3LAVD2lpbSkzKm8CXPyptjNRPZqZ9BDM8J7Gjo3cB15lO
xFCjFOJ3qdBONpTLz3a3YOedsIgdTfS9cemaZOBVmnKSsND3p3aw1/elhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3RLE7XqnDVmNtcLz3hwmpw93V0MB8GA1UdIwQY
MBaAFFxPweTe/Eccn9t/2tuYlVY9r5mcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEVfQjVONzhSeHlmMjNfYTI1aVZWajJ2bVp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85Y2ZhNWYtNWQyZC00YmU0LWE4MGQt
N2QwZWUyZTk5MGY1LzEvWEVfQjVONzhSeHlmMjNfYTI1aVZWajJ2bVp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy85Y2ZhNWYtNWQyZC00YmU0LWE4MGQtN2QwZWUyZTk5MGY1
LzEvWEVfQjVONzhSeHlmMjNfYTI1aVZWajJ2bVp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgY8Hk4su
ZUDO3PzMlgGThKzS76gDnog6+mtU+sIAzrc3uyc1N2bpkZT3m2MCVohJ1ec4gvq6
4irPMxtvgYK5/Q5ineC1kRIrxvVQ3+7VrfpIvYKcDWfLz1PhryRFUlj85Zyfr/gq
BNvc/H2NdZcLNJJIvgQCgpth4m0m91S6eQKnMWXpDmb/jRIsNp+akv+9TMs6n4e+
uIc+kY58psbX63r1c9O+HjdrjBJGMlbI+fk8exA031OqmMHBdXAdbp2AqTvReKno
A2T9FdZEc8N3R5hOlrw9D/RyvwNK7HFTcoUXlJlUkpuj1mKM6p4Afz5ptaAZKBR6
9K0CeJGPNdP3vQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:56:00 2025 by rpki-client