Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: QlbcDQbz+iDa/kAajb0nd9n2BW4Bba/1CqtigSzR4Wc=
Subject key identifier: 8D:C7:D4:2B:9B:48:C4:C9:C7:8E:09:CC:E3:53:64:96:4F:4A:46:4C
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 019A51BEB36454777B2E020A26DEF47956C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 02:00:43 +0000
Manifest this update: Wed 05 Nov 2025 02:00:43 +0000
Manifest next update: Thu 06 Nov 2025 02:00:43 +0000
Files and hashes: 1: LTquGO6JvOxW-LYJu4ZO5vl58sw.roa (hash: v+hhHffkC8MxjORjl69a74aTRaVaz0829ZGGCSWHn0k=)
2: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: gTsu4x1/7e3/jC0LEbzXEnP/6EG3KYhDDlZFr/VMfLU=)
3: YOp8_XwcgPGtX480oZMMv5FkFTE.roa (hash: JNbcPg+eKKH2RwoC8Uz9lo+3KmcraBTljIvma3VhA6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:b3:64:54:77:7b:2e:02:0a:26:de:f4:79:56:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Nov 5 02:00:43 2025 GMT
Not After : Nov 6 02:00:43 2025 GMT
Subject: CN=8dc7d42b9b48c4c9c78e09cce35364964f4a464c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8e:c5:92:66:d4:08:61:46:33:fd:e6:aa:1e:
44:80:dd:92:4d:ce:e5:08:8a:4f:72:22:25:19:71:
fb:7a:79:87:0d:0c:7b:b9:09:12:76:70:ef:41:94:
26:11:bf:70:9e:a4:6c:82:99:f2:a6:82:58:4b:fe:
e0:4c:32:63:1f:4a:31:88:89:23:47:b1:a9:fc:8c:
e6:8d:71:08:d6:18:12:12:fb:c5:9e:de:87:e4:ae:
ea:48:c7:ff:f5:0a:81:71:ff:3a:55:15:ff:7c:11:
98:e7:5e:7d:d5:44:b7:6a:cd:76:d6:94:26:b5:8b:
9a:0f:93:18:e0:b1:85:79:1a:56:e8:7d:f1:d4:3e:
96:b1:61:85:2e:19:1d:14:81:7a:6b:3b:45:38:ae:
f3:cd:88:ff:00:b7:b5:a1:db:d9:e3:c5:6c:75:3f:
11:f7:b0:0c:58:a7:37:4d:0b:8b:54:60:b4:7f:fe:
86:eb:f8:92:78:c4:45:57:27:20:c8:49:3d:a3:5b:
14:1b:7e:9c:88:81:e0:24:d6:ad:c8:6c:04:a2:d2:
03:d9:97:d2:a5:b2:2c:c5:70:5b:7e:8f:bf:44:eb:
ac:81:ea:65:f7:7f:07:d4:b8:af:52:2b:35:fe:35:
5b:6c:72:7a:54:7f:d2:1d:e2:b8:7e:22:a0:51:ee:
63:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C7:D4:2B:9B:48:C4:C9:C7:8E:09:CC:E3:53:64:96:4F:4A:46:4C
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:52:70:4b:fe:45:4c:04:88:32:1c:7c:7f:74:91:50:53:a7:
89:c3:52:07:df:5a:32:96:80:9e:76:43:92:35:bb:88:d0:6b:
ee:ee:d9:e7:08:01:98:15:03:3c:e2:6f:c2:dd:fb:52:6c:57:
9d:b7:06:87:e7:00:dc:a1:bb:35:b1:ec:c3:81:58:3e:f9:96:
14:70:20:b4:c4:46:96:d8:19:f5:af:73:c8:9f:01:f8:16:43:
e8:2b:0b:5e:aa:59:9a:5a:68:86:1a:28:82:2c:50:6d:ce:76:
8c:33:37:85:22:a9:eb:7b:dc:67:36:9c:70:16:55:d6:f6:aa:
dd:09:e6:a7:b0:c2:19:bc:c2:42:be:e1:64:5a:5f:d9:04:94:
a1:15:9d:20:bd:11:e0:f1:3e:74:86:67:a2:41:55:1a:f4:11:
ed:ed:44:0d:0e:0f:df:a7:1c:5f:be:31:b2:1a:70:4b:b9:9e:
c5:38:0a:1f:54:cc:7a:d5:a2:23:a7:17:52:43:db:c6:db:61:
5f:ab:82:3d:38:46:a5:2b:f7:e4:9b:2e:d2:d4:37:8b:5f:5b:
31:9f:88:5d:cd:1f:97:8a:a0:cf:d4:73:df:c9:59:eb:b3:60:
db:8f:c8:3f:25:cd:64:12:e1:e6:60:5c:9f:71:4b:ed:ad:26:
b0:ec:a3:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvrNkVHd7LgIKJt70eVbJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNDFjNjY0YzBjMDEzZGZmYjZlMGRkMWQ3M2IzNjljYmE1
ZmJkMWMwHhcNMjUxMTA1MDIwMDQzWhcNMjUxMTA2MDIwMDQzWjAzMTEwLwYDVQQD
Eyg4ZGM3ZDQyYjliNDhjNGM5Yzc4ZTA5Y2NlMzUzNjQ5NjRmNGE0NjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI7FkmbUCGFGM/3mqh5EgN2STc7l
CIpPciIlGXH7enmHDQx7uQkSdnDvQZQmEb9wnqRsgpnypoJYS/7gTDJjH0oxiIkj
R7Gp/IzmjXEI1hgSEvvFnt6H5K7qSMf/9QqBcf86VRX/fBGY51591US3as121pQm
tYuaD5MY4LGFeRpW6H3x1D6WsWGFLhkdFIF6aztFOK7zzYj/ALe1odvZ48VsdT8R
97AMWKc3TQuLVGC0f/6G6/iSeMRFVycgyEk9o1sUG36ciIHgJNatyGwEotID2ZfS
pbIsxXBbfo+/ROusgepl938H1LivUis1/jVbbHJ6VH/SHeK4fiKgUe5j8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3H1CubSMTJx44JzONTZJZPSkZMMB8GA1UdIwQY
MBaAFF9BxmTAwBPf+24N0dc7Npy6X70cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNzlhMWQtNTJiOS00NjY5LTk2MjUt
NjIzMDZhYmRmYTAzLzEvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zNzlhMWQtNTJiOS00NjY5LTk2MjUtNjIzMDZhYmRmYTAz
LzEvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFJwS/5F
TASIMhx8f3SRUFOnicNSB99aMpaAnnZDkjW7iNBr7u7Z5wgBmBUDPOJvwt37UmxX
nbcGh+cA3KG7NbHsw4FYPvmWFHAgtMRGltgZ9a9zyJ8B+BZD6CsLXqpZmlpohhoo
gixQbc52jDM3hSKp63vcZzaccBZV1vaq3Qnmp7DCGbzCQr7hZFpf2QSUoRWdIL0R
4PE+dIZnokFVGvQR7e1EDQ4P36ccX74xshpwS7mexTgKH1TMetWiI6cXUkPbxtth
X6uCPThGpSv35Jsu0tQ3i19bMZ+IXc0fl4qgz9Rz38lZ67Ng24/IPyXNZBLh5mBc
n3FL7a0msOyjWw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:02:57 2025 by rpki-client