Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.mft
File: XEzh8ZMxT2k5vxw_nawjafYpWFo.mft (raw, json)
Hash identifier: 1M7q7teGSreS6yTyxU5CtEabklKEjmnQIUHYBzYcTrE=
Subject key identifier: B2:47:08:3F:6E:5F:AD:BC:13:D1:E4:8C:C7:8B:06:B3:DD:47:B1:67
Authority key identifier: 5C:4C:E1:F1:93:31:4F:69:39:BF:1C:3F:9D:AC:23:69:F6:29:58:5A
Certificate issuer: /CN=5c4ce1f193314f6939bf1c3f9dac2369f629585a
Certificate serial: 019A52633CDDC034B9FB5AD613763CE748AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEzh8ZMxT2k5vxw_nawjafYpWFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 05:00:26 +0000
Manifest this update: Wed 05 Nov 2025 05:00:26 +0000
Manifest next update: Thu 06 Nov 2025 05:00:26 +0000
Files and hashes: 1: NeVlE-PzPHn5ppNlSgj87PhylgM.roa (hash: +i1WA9cuFFrQg1WFh0BGIYlKWMIvdmOqwrDe9C8B0aM=)
2: XEzh8ZMxT2k5vxw_nawjafYpWFo.crl (hash: FaXc2+9XBQmnBz8vxLFWr6a1fOiDL4YKz9BWYH5eYGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEzh8ZMxT2k5vxw_nawjafYpWFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:3c:dd:c0:34:b9:fb:5a:d6:13:76:3c:e7:48:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4ce1f193314f6939bf1c3f9dac2369f629585a
Validity
Not Before: Nov 5 05:00:26 2025 GMT
Not After : Nov 6 05:00:26 2025 GMT
Subject: CN=b247083f6e5fadbc13d1e48cc78b06b3dd47b167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:55:f0:81:35:aa:15:e7:44:72:e9:ef:b2:
3f:47:9f:7d:01:9e:81:2a:74:a5:86:f8:6a:ee:47:
22:64:1e:95:e7:8d:64:37:52:31:92:38:79:a0:05:
63:30:99:37:a1:45:b5:9d:22:c6:1d:50:e3:5c:94:
58:86:15:c3:9e:8f:2e:56:b6:17:e1:c1:d4:07:4a:
1c:d8:e0:b0:d8:21:54:63:10:5a:43:00:3e:78:70:
32:cd:cf:eb:4f:89:9c:2a:8b:2a:20:fe:0d:75:52:
da:bc:84:de:f9:85:a0:3e:3b:50:ac:3c:de:00:02:
47:da:7b:67:98:17:2e:f2:b6:63:8e:ea:6a:a3:30:
24:99:79:06:27:b2:06:3d:48:84:ba:23:2a:bb:12:
13:bb:28:6d:78:38:16:12:54:1f:57:4a:76:85:87:
0b:df:d1:21:cf:aa:f4:0b:37:97:ef:77:ea:96:18:
88:16:7c:e9:72:9c:e7:dd:82:41:d1:95:ae:14:78:
56:91:cc:75:bb:e8:35:55:e4:05:72:1e:63:23:3e:
16:51:8e:43:08:31:72:ff:51:4c:fb:7d:82:ba:47:
fd:4b:ce:26:29:6b:a1:a4:16:4f:ff:5f:03:bb:9f:
5f:c5:01:9d:30:6d:34:25:c2:ea:08:e8:97:19:e7:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:47:08:3F:6E:5F:AD:BC:13:D1:E4:8C:C7:8B:06:B3:DD:47:B1:67
X509v3 Authority Key Identifier:
keyid:5C:4C:E1:F1:93:31:4F:69:39:BF:1C:3F:9D:AC:23:69:F6:29:58:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEzh8ZMxT2k5vxw_nawjafYpWFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/dbf502-9f31-4d70-87d4-e066d022e927/1/XEzh8ZMxT2k5vxw_nawjafYpWFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2d:cf:7b:9c:61:c4:e9:51:6f:b5:af:6d:d2:b1:4f:46:91:
c4:c4:be:6e:4d:62:5c:1e:85:72:97:86:a4:bb:60:33:fd:ab:
1f:06:b6:83:60:19:7e:78:21:84:09:6a:56:da:d1:81:9c:2d:
e0:d5:10:81:9b:7a:c0:fc:cc:68:a1:48:e7:5b:4b:c6:ea:a7:
70:8f:03:b8:e3:9a:4d:5d:1f:c6:bf:16:80:fe:58:b9:d8:c7:
82:b4:04:12:19:61:07:d7:42:95:50:75:76:99:98:04:15:ac:
6e:0f:7f:47:7b:d2:1c:e9:e8:26:df:35:c5:3a:b4:d0:0f:e1:
97:e2:7e:3c:75:62:fd:f2:ed:dc:11:fa:de:01:f4:f1:1c:73:
c4:a0:d2:1d:08:ad:23:5b:4a:7b:a2:cc:42:81:30:62:6d:a4:
18:09:92:1b:1f:22:e9:60:d2:54:1c:eb:96:8c:bd:ef:78:eb:
bb:30:82:fa:80:55:03:2c:f6:14:97:60:2f:ac:bf:11:33:f7:
a6:21:7c:cc:eb:82:2a:77:aa:55:c0:7e:74:a5:30:66:af:33:
7f:ea:0e:46:f0:8a:3e:b6:8a:93:5c:4f:56:13:fe:a1:3e:88:
e8:74:1a:e4:c1:bf:a3:08:b9:7c:0d:55:9a:6f:03:f1:46:75:
8d:25:cf:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSYzzdwDS5+1rWE3Y850itMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNGNlMWYxOTMzMTRmNjkzOWJmMWMzZjlkYWMyMzY5ZjYy
OTU4NWEwHhcNMjUxMTA1MDUwMDI2WhcNMjUxMTA2MDUwMDI2WjAzMTEwLwYDVQQD
EyhiMjQ3MDgzZjZlNWZhZGJjMTNkMWU0OGNjNzhiMDZiM2RkNDdiMTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr9V8IE1qhXnRHLp77I/R599AZ6B
KnSlhvhq7kciZB6V541kN1Ixkjh5oAVjMJk3oUW1nSLGHVDjXJRYhhXDno8uVrYX
4cHUB0oc2OCw2CFUYxBaQwA+eHAyzc/rT4mcKosqIP4NdVLavITe+YWgPjtQrDze
AAJH2ntnmBcu8rZjjupqozAkmXkGJ7IGPUiEuiMquxITuyhteDgWElQfV0p2hYcL
39Ehz6r0CzeX73fqlhiIFnzpcpzn3YJB0ZWuFHhWkcx1u+g1VeQFch5jIz4WUY5D
CDFy/1FM+32Cukf9S84mKWuhpBZP/18Du59fxQGdMG00JcLqCOiXGecSNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJHCD9uX628E9HkjMeLBrPdR7FnMB8GA1UdIwQY
MBaAFFxM4fGTMU9pOb8cP52sI2n2KVhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEV6aDhaTXhUMms1dnh3X25hd2phZllwV0ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kYmY1MDItOWYzMS00ZDcwLTg3ZDQt
ZTA2NmQwMjJlOTI3LzEvWEV6aDhaTXhUMms1dnh3X25hd2phZllwV0ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9kYmY1MDItOWYzMS00ZDcwLTg3ZDQtZTA2NmQwMjJlOTI3
LzEvWEV6aDhaTXhUMms1dnh3X25hd2phZllwV0ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABy3Pe5xh
xOlRb7WvbdKxT0aRxMS+bk1iXB6FcpeGpLtgM/2rHwa2g2AZfnghhAlqVtrRgZwt
4NUQgZt6wPzMaKFI51tLxuqncI8DuOOaTV0fxr8WgP5YudjHgrQEEhlhB9dClVB1
dpmYBBWsbg9/R3vSHOnoJt81xTq00A/hl+J+PHVi/fLt3BH63gH08RxzxKDSHQit
I1tKe6LMQoEwYm2kGAmSGx8i6WDSVBzrloy973jruzCC+oBVAyz2FJdgL6y/ETP3
piF8zOuCKneqVcB+dKUwZq8zf+oORvCKPraKk1xPVhP+oT6I6HQa5MG/owi5fA1V
mm8D8UZ1jSXP1A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:11:56 2025 by rpki-client