Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: n9t8G6ycn3WnFeerk0tZWgxh7EUSuQ2M07nDMeTyG3Y=
Subject key identifier: D6:30:DD:21:49:C0:84:DC:AF:19:0E:2E:A9:15:5D:65:E8:80:14:5F
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 019A4CCED5B719C6192857E0143C85BDB39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 03:00:14 +0000
Manifest this update: Tue 04 Nov 2025 03:00:14 +0000
Manifest next update: Wed 05 Nov 2025 03:00:14 +0000
Files and hashes: 1: PbaQDOw99sbMqST1_6GFgBuET80.roa (hash: z/Z68ylDK98w4Ux4hRpw7BRYSr2koQbXP7ZWYLEFwCQ=)
2: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: 3P2BXHvvlW9/y0/nJN05IgCExrf10dzagYteG1q433Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 03:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:ce:d5:b7:19:c6:19:28:57:e0:14:3c:85:bd:b3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Nov 4 03:00:14 2025 GMT
Not After : Nov 5 03:00:14 2025 GMT
Subject: CN=d630dd2149c084dcaf190e2ea9155d65e880145f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:b0:53:ea:95:4e:4e:be:78:20:48:b3:8a:
7c:a1:01:26:da:43:3f:98:91:f7:91:67:c0:52:c3:
4b:57:d2:df:d0:c7:3e:23:29:e5:14:aa:71:d2:aa:
99:6a:ec:cb:9b:34:9f:fd:e8:7e:04:d7:e7:da:82:
c3:4e:16:1e:80:63:e4:dc:82:9b:8b:b8:79:f9:66:
38:f5:77:4f:48:4f:8f:fc:c3:d8:7a:5f:8e:f8:3a:
33:a3:21:19:a7:7c:84:67:b2:b9:f1:ad:46:e4:97:
c5:df:54:5a:61:e4:f5:72:de:88:a4:44:53:d0:72:
0c:f3:49:6a:3d:8e:05:1f:82:9b:d9:4a:a0:69:d2:
75:37:01:5b:0a:d3:8a:1a:b6:4e:6a:64:81:cd:a0:
fd:00:7a:32:bf:7c:62:74:2c:b7:d2:43:46:54:28:
92:66:58:ac:7d:b3:3c:75:c7:cf:a5:67:81:91:24:
40:a5:05:09:d4:79:e5:fb:4f:7c:51:a1:dd:41:fa:
96:4d:af:20:fe:0d:60:19:4b:77:46:2c:03:2a:10:
10:25:e6:a1:50:10:9a:41:db:21:e3:32:a4:f1:d6:
30:6c:be:00:c1:a8:f7:79:00:7e:b1:95:24:c4:17:
39:cd:93:59:16:ce:31:36:20:00:3b:b0:c3:e2:ba:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:30:DD:21:49:C0:84:DC:AF:19:0E:2E:A9:15:5D:65:E8:80:14:5F
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:80:84:e4:59:38:00:b8:0b:32:2b:d9:3b:e7:f1:ce:36:0d:
0e:96:d7:af:d6:83:70:42:65:a0:bc:92:32:a1:7a:ad:dc:5c:
f2:c7:3f:fb:5f:b8:17:80:81:11:c3:d8:dc:74:4d:76:42:db:
1a:52:c3:33:28:be:79:fb:64:50:83:75:7b:b2:74:15:7a:a1:
f7:e1:3a:88:a2:03:03:d3:69:56:6c:3f:3f:05:c1:8d:9b:76:
06:b2:ef:b8:d6:89:50:50:1a:90:b8:e8:f0:46:7e:38:cc:62:
d4:50:b5:20:46:05:ea:35:47:cb:30:ab:ea:d7:ca:4c:37:a8:
bf:46:88:c0:04:60:48:e0:10:df:ac:31:61:a8:cb:06:ea:e2:
cb:02:e5:bd:99:83:64:19:19:f1:70:a9:b9:c0:b2:81:ca:92:
70:56:c1:86:40:a5:4b:3b:61:e6:a9:20:0d:84:92:ed:7b:d7:
6f:04:36:75:60:97:9a:2b:8e:9a:4f:e3:38:8b:b1:bf:3a:23:
ac:32:f4:67:1f:e6:ae:24:29:f5:c6:da:dd:71:12:ca:8e:c8:
0e:7a:75:df:fc:0f:2a:d1:09:ad:d4:17:5a:27:00:24:77:68:
06:34:c6:57:1d:c3:5c:94:b0:9c:ba:e0:5a:eb:97:46:e0:8e:
43:f7:d0:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMztW3GcYZKFfgFDyFvbOdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OGVjOWM3ZjFlY2MyN2NiMmVjNzEzYzI3NjRhMDIxNGZj
ZTc4MjgwHhcNMjUxMTA0MDMwMDE0WhcNMjUxMTA1MDMwMDE0WjAzMTEwLwYDVQQD
EyhkNjMwZGQyMTQ5YzA4NGRjYWYxOTBlMmVhOTE1NWQ2NWU4ODAxNDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2ywU+qVTk6+eCBIs4p8oQEm2kM/
mJH3kWfAUsNLV9Lf0Mc+IynlFKpx0qqZauzLmzSf/eh+BNfn2oLDThYegGPk3IKb
i7h5+WY49XdPSE+P/MPYel+O+DozoyEZp3yEZ7K58a1G5JfF31RaYeT1ct6IpERT
0HIM80lqPY4FH4Kb2UqgadJ1NwFbCtOKGrZOamSBzaD9AHoyv3xidCy30kNGVCiS
ZlisfbM8dcfPpWeBkSRApQUJ1Hnl+098UaHdQfqWTa8g/g1gGUt3RiwDKhAQJeah
UBCaQdsh4zKk8dYwbL4Awaj3eQB+sZUkxBc5zZNZFs4xNiAAO7DD4rrnjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYw3SFJwITcrxkOLqkVXWXogBRfMB8GA1UdIwQY
MBaAFMaOycfx7MJ8suxxPCdkoCFPzngoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kNzRjOWUtMDRmMC00ZTYzLWFmMzAt
ODYzMmVlOTQxNDViLzEveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kNzRjOWUtMDRmMC00ZTYzLWFmMzAtODYzMmVlOTQxNDVi
LzEveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYCE5Fk4
ALgLMivZO+fxzjYNDpbXr9aDcEJloLySMqF6rdxc8sc/+1+4F4CBEcPY3HRNdkLb
GlLDMyi+eftkUIN1e7J0FXqh9+E6iKIDA9NpVmw/PwXBjZt2BrLvuNaJUFAakLjo
8EZ+OMxi1FC1IEYF6jVHyzCr6tfKTDeov0aIwARgSOAQ36wxYajLBuriywLlvZmD
ZBkZ8XCpucCygcqScFbBhkClSzth5qkgDYSS7XvXbwQ2dWCXmiuOmk/jOIuxvzoj
rDL0Zx/mriQp9cba3XESyo7IDnp13/wPKtEJrdQXWicAJHdoBjTGVx3DXJSwnLrg
WuuXRuCOQ/fQaQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:47 2025 by rpki-client