Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
File: xeu4t5Qi-y1tioLbfxrAtqpZs38.mft (raw, json)
Hash identifier: FzMWS+fxRGBweyXWaz9irLJT0DjKi8mP+fh6v+N+3oA=
Subject key identifier: EE:B1:A8:E4:A2:4F:A1:4D:B0:16:42:37:71:6A:18:5F:3E:82:6A:C4
Authority key identifier: C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
Certificate issuer: /CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Certificate serial: 019A4EF54C1A1A9B73063050D2669BEA1437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
Manifest number: 1630
Signing time: Tue 04 Nov 2025 13:01:29 +0000
Manifest this update: Tue 04 Nov 2025 13:01:29 +0000
Manifest next update: Wed 05 Nov 2025 13:01:29 +0000
Files and hashes: 1: xeu4t5Qi-y1tioLbfxrAtqpZs38.crl (hash: sRATnM3EyYB8Q0D4l6S95ap2TmWooIHqKRzsLGSrpsg=)
2: zG4ly3FhpsRy_muFf41M8ZKPF5o.roa (hash: 9tm7KsG1SMgxDQdJBogQZSZKc5Vw7KrlfAJHfrS64mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:4c:1a:1a:9b:73:06:30:50:d2:66:9b:ea:14:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Validity
Not Before: Nov 4 13:01:29 2025 GMT
Not After : Nov 5 13:01:29 2025 GMT
Subject: CN=eeb1a8e4a24fa14db0164237716a185f3e826ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:83:3a:f7:c5:93:00:ad:3f:38:4e:b5:90:
94:76:b5:85:12:7c:71:a1:ad:de:21:bd:66:4e:d9:
27:6c:c6:44:16:a4:fb:4b:bf:8b:ff:17:4d:37:96:
e6:23:fc:a3:69:95:85:8b:b7:a2:f1:91:7e:07:5e:
bc:ea:28:30:e2:b1:2a:a5:ec:0e:c4:d6:d9:2c:ba:
ab:23:fb:4f:fc:fe:ae:bd:78:a4:81:20:3c:fe:49:
ea:32:b4:ba:49:83:42:33:56:c8:65:22:ae:ae:ce:
4d:a6:24:98:6d:f0:b8:10:5a:a5:75:fb:dc:dc:ec:
32:48:69:63:c1:17:be:34:50:4a:a5:57:3c:98:ef:
bd:c2:75:75:c2:b9:44:3a:80:0d:43:7e:12:03:2c:
c0:d9:d3:66:87:6d:8d:3b:74:83:5c:06:e8:95:5a:
ca:13:04:9b:d0:17:56:09:0f:5b:d8:da:f1:b9:02:
f3:66:45:15:4c:25:49:6a:b0:68:fc:bd:a6:10:17:
0e:a4:7a:d6:0a:41:e0:a2:90:64:48:39:97:45:07:
25:78:26:9a:9b:7b:e9:8b:e1:1b:83:fb:7f:33:10:
9f:84:20:db:87:e6:53:01:91:2a:2e:4a:08:7e:d0:
1d:a4:27:7f:91:4b:5d:bc:ad:d1:92:38:b9:b7:b7:
19:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B1:A8:E4:A2:4F:A1:4D:B0:16:42:37:71:6A:18:5F:3E:82:6A:C4
X509v3 Authority Key Identifier:
keyid:C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e1:df:ef:ff:e8:15:8d:c4:b2:be:f7:b7:ce:fd:47:31:78:
6b:db:59:b0:d6:4f:1d:34:8f:1e:c7:18:fd:ff:60:03:6a:bc:
a4:84:43:42:ba:44:fe:d1:bd:b8:e2:ae:eb:b8:1d:ad:64:5d:
bc:28:24:3c:28:a5:50:31:8f:3d:ac:4f:3f:56:0b:94:32:2c:
93:44:49:61:d5:41:a1:d4:50:5b:91:16:57:05:5e:af:6b:1a:
57:c1:87:7d:19:a7:bc:29:25:c7:1c:ca:8e:42:e3:6f:98:2c:
65:de:fa:b5:d2:f8:9a:a2:f6:df:e8:49:ee:17:cf:48:d4:92:
f0:37:16:c1:83:55:47:e6:10:a0:94:9b:c1:e2:d0:f1:f7:36:
30:9c:11:32:dd:0c:f1:a6:ab:d1:51:82:94:f3:99:12:fd:2b:
0e:dd:75:5e:ba:1f:d6:66:9d:d0:92:7e:d8:b7:de:11:f9:6d:
ad:aa:d8:f3:84:3e:a6:24:77:7c:25:45:66:cf:11:42:16:cc:
00:ee:93:89:7b:d6:86:65:cc:51:fb:79:9e:25:4a:10:e4:8f:
bc:0a:c9:a2:ea:35:a7:78:03:56:54:11:50:17:40:eb:51:66:
3f:23:0a:3f:64:8b:a4:f2:77:8c:db:ed:11:2c:8e:61:68:4b:
2a:68:66:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9UwaGptzBjBQ0mab6hQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZWJiOGI3OTQyMmZiMmQ2ZDhhODJkYjdmMWFjMGI2YWE1
OWIzN2YwHhcNMjUxMTA0MTMwMTI5WhcNMjUxMTA1MTMwMTI5WjAzMTEwLwYDVQQD
EyhlZWIxYThlNGEyNGZhMTRkYjAxNjQyMzc3MTZhMTg1ZjNlODI2YWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiGDOvfFkwCtPzhOtZCUdrWFEnxx
oa3eIb1mTtknbMZEFqT7S7+L/xdNN5bmI/yjaZWFi7ei8ZF+B1686igw4rEqpewO
xNbZLLqrI/tP/P6uvXikgSA8/knqMrS6SYNCM1bIZSKurs5NpiSYbfC4EFqldfvc
3OwySGljwRe+NFBKpVc8mO+9wnV1wrlEOoANQ34SAyzA2dNmh22NO3SDXAbolVrK
EwSb0BdWCQ9b2NrxuQLzZkUVTCVJarBo/L2mEBcOpHrWCkHgopBkSDmXRQcleCaa
m3vpi+Ebg/t/MxCfhCDbh+ZTAZEqLkoIftAdpCd/kUtdvK3Rkji5t7cZcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6xqOSiT6FNsBZCN3FqGF8+gmrEMB8GA1UdIwQY
MBaAFMXruLeUIvstbYqC238awLaqWbN/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGV1NHQ1UWkteTF0aW9MYmZ4ckF0cXBaczM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNTBlY2QtMWMxNi00YmQzLWJkMGUt
Yzg0YmZkNGVlODc4LzEveGV1NHQ1UWkteTF0aW9MYmZ4ckF0cXBaczM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mNTBlY2QtMWMxNi00YmQzLWJkMGUtYzg0YmZkNGVlODc4
LzEveGV1NHQ1UWkteTF0aW9MYmZ4ckF0cXBaczM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+Hf7//o
FY3Esr73t879RzF4a9tZsNZPHTSPHscY/f9gA2q8pIRDQrpE/tG9uOKu67gdrWRd
vCgkPCilUDGPPaxPP1YLlDIsk0RJYdVBodRQW5EWVwVer2saV8GHfRmnvCklxxzK
jkLjb5gsZd76tdL4mqL23+hJ7hfPSNSS8DcWwYNVR+YQoJSbweLQ8fc2MJwRMt0M
8aar0VGClPOZEv0rDt11Xrof1mad0JJ+2LfeEfltrarY84Q+piR3fCVFZs8RQhbM
AO6TiXvWhmXMUft5niVKEOSPvArJouo1p3gDVlQRUBdA61FmPyMKP2SLpPJ3jNvt
ESyOYWhLKmhm8A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:04 2025 by rpki-client