Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
File: XWwVypA9fSVFPq619ySgTjqmWQg.mft (raw, json)
Hash identifier: tjEeLFb8szGYhIB2IltzIcirikFkBTG+8Kldf9mQoSA=
Subject key identifier: 6C:9A:40:36:EB:A0:24:73:84:D0:C4:47:E9:E5:C8:E9:BE:12:69:19
Authority key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
Certificate issuer: /CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Certificate serial: 019A4F2B69128480259B0B9E0F255C0AE569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
Manifest number: 1717
Signing time: Tue 04 Nov 2025 14:00:36 +0000
Manifest this update: Tue 04 Nov 2025 14:00:36 +0000
Manifest next update: Wed 05 Nov 2025 14:00:36 +0000
Files and hashes: 1: KGLhnOtOH4dX4vgy-roccfFwMa0.roa (hash: Q+cux+R5PAR0o25xtkFz855zy5Yln4wHE6v90utYbJQ=)
2: Qsquv-ZBIzu2BhTBmwiDuotpT-k.roa (hash: VtsAwnOJ0dcAIuG5UEeCYDSZIwaCh4D0bTxtLddYo+4=)
3: XWwVypA9fSVFPq619ySgTjqmWQg.crl (hash: PyenhDpJYSMnKSZJd+tYDTWbzzQ7BXCS/KEl3VmIpjA=)
4: pjuwfv3bsHCpq2bUzmpShMFHNQw.roa (hash: Hy8/ILbDAQXBmLpCF9rnEz7CfpQmiaJg4wOv9IAGHBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:69:12:84:80:25:9b:0b:9e:0f:25:5c:0a:e5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Validity
Not Before: Nov 4 14:00:36 2025 GMT
Not After : Nov 5 14:00:36 2025 GMT
Subject: CN=6c9a4036eba0247384d0c447e9e5c8e9be126919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:ec:bb:5f:66:0a:88:ce:8f:56:8e:ea:79:
ac:0c:3d:a2:a2:5b:f2:55:6b:41:4b:17:82:bf:9f:
67:24:da:a4:94:95:51:4c:4c:3a:55:2e:94:19:1f:
9d:1f:04:65:e5:45:53:88:66:5d:f2:50:9f:76:63:
5b:0b:e2:23:36:f7:bc:7f:21:cb:f7:dd:3d:7e:83:
f7:66:39:9c:65:ab:f7:09:0a:b9:7f:e8:7d:29:4d:
01:db:e0:03:a1:c0:39:0c:46:39:2c:05:9b:0d:f8:
8f:52:28:9e:68:4e:0e:d6:da:fb:2c:d2:ec:14:b9:
06:34:24:e7:b7:ce:74:a4:fb:b8:fe:c4:a3:20:00:
2b:6b:3f:8a:96:b1:b6:f8:69:b4:77:39:2b:a7:23:
31:8e:46:41:bf:05:ad:18:29:07:9e:9c:28:e7:63:
3a:65:48:c6:d8:88:21:c4:ba:30:f3:66:c7:a7:99:
41:38:ed:40:4e:89:57:44:3f:57:6d:a7:60:0c:fb:
22:47:8f:2b:c3:eb:14:ec:b5:96:51:ac:83:fd:cb:
5e:04:78:fd:01:cc:1a:09:32:b0:f6:bf:90:73:b5:
9a:75:27:5a:bb:da:a1:0c:4f:3c:95:15:79:70:dd:
e8:3d:67:a1:44:8b:2e:97:e8:fd:28:f2:0e:5b:9f:
0d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9A:40:36:EB:A0:24:73:84:D0:C4:47:E9:E5:C8:E9:BE:12:69:19
X509v3 Authority Key Identifier:
keyid:5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:42:65:1e:50:9c:91:ea:f9:ab:34:f1:07:64:b9:5a:1f:1e:
cc:b4:ed:29:55:c1:73:98:b4:1f:9f:be:0a:57:4a:62:6d:59:
c0:8e:82:07:12:61:d1:2a:21:fe:b3:14:95:86:73:c4:65:81:
9f:17:67:db:e8:0a:96:b3:11:40:31:88:f8:57:73:09:4f:5e:
11:6c:65:5e:b4:75:2e:01:33:c3:53:b2:1d:b7:51:50:73:49:
b4:bd:85:ed:8f:c8:0a:44:a6:8a:b5:06:8b:15:ac:f0:ef:f0:
72:d1:22:5f:3e:31:dd:6d:c0:d7:60:eb:c2:91:0b:c9:8c:aa:
52:63:33:66:ad:96:fa:74:41:9b:69:4c:0e:53:fe:98:f1:7f:
23:77:96:bb:05:1d:27:ab:71:c2:22:59:ac:34:f8:5c:97:02:
d0:fd:8c:ee:9c:b2:db:5c:69:9a:9c:70:94:61:b4:87:40:ee:
3b:61:8e:8f:07:46:8d:34:16:b5:09:e4:9a:1b:0f:08:a4:3f:
f6:80:9b:b0:5d:a2:74:b0:0d:87:fd:2e:69:f8:e4:69:9d:9b:
bf:89:86:7d:85:c0:1c:92:a8:b6:36:55:a5:59:bc:e3:2b:9e:
fb:94:68:34:78:14:f5:71:df:c3:e7:52:18:1e:70:66:3b:a4:
a8:6d:09:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK2kShIAlmwueDyVcCuVpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNmMxNWNhOTAzZDdkMjU0NTNlYWViNWY3MjRhMDRlM2Fh
NjU5MDgwHhcNMjUxMTA0MTQwMDM2WhcNMjUxMTA1MTQwMDM2WjAzMTEwLwYDVQQD
Eyg2YzlhNDAzNmViYTAyNDczODRkMGM0NDdlOWU1YzhlOWJlMTI2OTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLPsu19mCojOj1aO6nmsDD2iolvy
VWtBSxeCv59nJNqklJVRTEw6VS6UGR+dHwRl5UVTiGZd8lCfdmNbC+IjNve8fyHL
9909foP3ZjmcZav3CQq5f+h9KU0B2+ADocA5DEY5LAWbDfiPUiieaE4O1tr7LNLs
FLkGNCTnt850pPu4/sSjIAAraz+KlrG2+Gm0dzkrpyMxjkZBvwWtGCkHnpwo52M6
ZUjG2IghxLow82bHp5lBOO1ATolXRD9XbadgDPsiR48rw+sU7LWWUayD/cteBHj9
AcwaCTKw9r+Qc7WadSdau9qhDE88lRV5cN3oPWehRIsul+j9KPIOW58NAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyaQDbroCRzhNDER+nlyOm+EmkZMB8GA1UdIwQY
MBaAFF1sFcqQPX0lRT6utfckoE46plkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFd3VnlwQTlmU1ZGUHE2MTl5U2dUanFtV1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yODY0YzgtYzA0Mi00MjhmLWEwMmQt
M2IzNGMyM2I5YzVhLzEvWFd3VnlwQTlmU1ZGUHE2MTl5U2dUanFtV1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yODY0YzgtYzA0Mi00MjhmLWEwMmQtM2IzNGMyM2I5YzVh
LzEvWFd3VnlwQTlmU1ZGUHE2MTl5U2dUanFtV1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkJlHlCc
ker5qzTxB2S5Wh8ezLTtKVXBc5i0H5++CldKYm1ZwI6CBxJh0Soh/rMUlYZzxGWB
nxdn2+gKlrMRQDGI+FdzCU9eEWxlXrR1LgEzw1OyHbdRUHNJtL2F7Y/ICkSmirUG
ixWs8O/wctEiXz4x3W3A12DrwpELyYyqUmMzZq2W+nRBm2lMDlP+mPF/I3eWuwUd
J6txwiJZrDT4XJcC0P2M7pyy21xpmpxwlGG0h0DuO2GOjwdGjTQWtQnkmhsPCKQ/
9oCbsF2idLANh/0uafjkaZ2bv4mGfYXAHJKotjZVpVm84yue+5RoNHgU9XHfw+dS
GB5wZjukqG0JOg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:44 2025 by rpki-client