Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
File: XX9jQBQHwcx5excDToE9IlT5dz4.mft (raw, json)
Hash identifier: RgOn6ul4JDmFEPITWo6ygHjya3G5OR1q2AggiHMmuxM=
Subject key identifier: C5:37:A0:B2:2E:1E:2E:E0:C1:07:93:BE:13:24:0F:3E:13:E0:F7:DB
Authority key identifier: 5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
Certificate issuer: /CN=5d7f63401407c1cc797b17034e813d2254f9773e
Certificate serial: 019A53082E248C8388BEBE5AC22C69F2D32D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
Manifest number: 0DA6
Signing time: Wed 05 Nov 2025 08:00:36 +0000
Manifest this update: Wed 05 Nov 2025 08:00:36 +0000
Manifest next update: Thu 06 Nov 2025 08:00:36 +0000
Files and hashes: 1: XX9jQBQHwcx5excDToE9IlT5dz4.crl (hash: WTbOdmgrS3CUh3PTbzzqu0FPY/eWKtonlFjLVf/WcLY=)
2: d_GxW2d1XGEYH2UR9fC88UUW3QY.roa (hash: uor8f2a3ITsSo8ZIn5M2P4KmPLaok++1jFjqHJFf6Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:2e:24:8c:83:88:be:be:5a:c2:2c:69:f2:d3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d7f63401407c1cc797b17034e813d2254f9773e
Validity
Not Before: Nov 5 08:00:36 2025 GMT
Not After : Nov 6 08:00:36 2025 GMT
Subject: CN=c537a0b22e1e2ee0c10793be13240f3e13e0f7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:8b:49:b7:0f:db:67:84:2c:e3:9e:40:c6:
c5:3e:fc:7e:a0:2d:1c:99:e0:82:5c:f6:09:4f:6c:
2d:87:a9:42:2b:58:d3:1a:67:87:e4:86:ee:cf:5b:
fe:fd:7c:7f:1a:5f:5e:7d:8e:3a:5d:f4:66:35:41:
78:e5:50:2d:6b:3b:0f:7e:b5:0e:7d:cd:2f:13:7b:
d4:0c:88:de:76:d8:2d:70:a3:d5:57:96:d9:c5:15:
37:e7:6a:5c:25:83:6c:7e:02:ac:a0:eb:a2:d2:a0:
20:09:5c:3d:ec:a5:47:9d:15:3a:d5:6a:f7:5f:55:
4b:69:e8:66:81:21:71:a3:ea:df:65:7d:00:ba:46:
6b:fe:bc:b6:e6:17:c0:be:7f:78:11:b9:4b:05:21:
f2:7d:40:31:4e:f9:60:c3:21:63:70:8e:4b:84:fc:
28:b7:46:3b:1a:e7:37:cc:5f:55:17:77:2f:84:2f:
b4:33:94:06:f0:21:53:00:50:2d:6b:50:cb:98:cf:
f6:6a:0e:86:a7:74:74:df:38:db:0a:8b:0a:48:54:
b7:b1:ff:48:e2:e8:0b:41:a6:04:26:35:b5:c3:f2:
36:31:e7:10:06:f8:f3:d8:f3:fb:e5:ec:da:da:8c:
4c:1f:23:94:ae:04:3b:be:60:60:ce:4b:ef:c1:79:
ea:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:37:A0:B2:2E:1E:2E:E0:C1:07:93:BE:13:24:0F:3E:13:E0:F7:DB
X509v3 Authority Key Identifier:
keyid:5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:32:7e:de:3a:27:1c:6e:a2:07:f7:08:b5:e2:ec:72:84:fc:
b8:57:96:f7:f0:c3:20:d0:7d:7e:c1:14:8a:aa:24:5c:a0:d6:
19:ae:af:17:e2:29:c9:12:50:fd:5e:33:d9:70:60:80:37:09:
1c:2a:6c:6b:bb:e1:06:5a:8c:85:5b:f4:f9:e9:0c:5f:d0:32:
cf:44:43:68:57:10:e9:a7:67:32:88:6b:2c:2c:e9:8e:dd:e1:
f9:71:a1:04:a6:cf:1c:d1:5b:b6:3d:93:60:50:c4:e8:d5:20:
46:4c:cd:ab:e0:53:da:a6:d4:fd:aa:c6:a1:8b:9e:cc:9a:10:
c6:fe:8c:e8:88:96:2d:a9:13:bc:93:e2:95:8b:16:98:5d:c3:
95:95:2d:c5:97:b5:bd:00:52:87:9e:ab:b6:be:3d:52:39:59:
13:e6:01:87:70:f1:aa:fe:55:40:1e:45:96:0e:38:db:9a:d0:
12:a4:7b:57:99:14:43:e8:bd:b0:a6:15:50:e8:72:59:e4:70:
ce:a5:e4:9a:aa:54:d8:19:18:fc:cf:cd:29:4e:33:ac:d9:48:
d5:cd:ab:1b:2c:56:ad:f7:ce:2e:aa:81:f2:06:1e:8b:3a:97:
13:1c:3a:09:ba:62:e2:0f:95:d2:4e:cf:66:07:2a:15:77:11:
26:0d:f3:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTCC4kjIOIvr5awixp8tMtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkN2Y2MzQwMTQwN2MxY2M3OTdiMTcwMzRlODEzZDIyNTRm
OTc3M2UwHhcNMjUxMTA1MDgwMDM2WhcNMjUxMTA2MDgwMDM2WjAzMTEwLwYDVQQD
EyhjNTM3YTBiMjJlMWUyZWUwYzEwNzkzYmUxMzI0MGYzZTEzZTBmN2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8GLSbcP22eELOOeQMbFPvx+oC0c
meCCXPYJT2wth6lCK1jTGmeH5Ibuz1v+/Xx/Gl9efY46XfRmNUF45VAtazsPfrUO
fc0vE3vUDIjedtgtcKPVV5bZxRU352pcJYNsfgKsoOui0qAgCVw97KVHnRU61Wr3
X1VLaehmgSFxo+rfZX0AukZr/ry25hfAvn94EblLBSHyfUAxTvlgwyFjcI5LhPwo
t0Y7Guc3zF9VF3cvhC+0M5QG8CFTAFAta1DLmM/2ag6Gp3R03zjbCosKSFS3sf9I
4ugLQaYEJjW1w/I2MecQBvjz2PP75eza2oxMHyOUrgQ7vmBgzkvvwXnqzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMU3oLIuHi7gwQeTvhMkDz4T4PfbMB8GA1UdIwQY
MBaAFF1/Y0AUB8HMeXsXA06BPSJU+Xc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFg5alFCUUh3Y3g1ZXhjRFRvRTlJbFQ1ZHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81NTAwMDQtZTFhNi00NTY5LWFlNjMt
MzNmYjE0NTJiYjBhLzEvWFg5alFCUUh3Y3g1ZXhjRFRvRTlJbFQ1ZHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC81NTAwMDQtZTFhNi00NTY5LWFlNjMtMzNmYjE0NTJiYjBh
LzEvWFg5alFCUUh3Y3g1ZXhjRFRvRTlJbFQ1ZHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDJ+3jon
HG6iB/cIteLscoT8uFeW9/DDINB9fsEUiqokXKDWGa6vF+IpyRJQ/V4z2XBggDcJ
HCpsa7vhBlqMhVv0+ekMX9Ayz0RDaFcQ6adnMohrLCzpjt3h+XGhBKbPHNFbtj2T
YFDE6NUgRkzNq+BT2qbU/arGoYuezJoQxv6M6IiWLakTvJPilYsWmF3DlZUtxZe1
vQBSh56rtr49UjlZE+YBh3Dxqv5VQB5Flg4425rQEqR7V5kUQ+i9sKYVUOhyWeRw
zqXkmqpU2BkY/M/NKU4zrNlI1c2rGyxWrffOLqqB8gYeizqXExw6Cbpi4g+V0k7P
ZgcqFXcRJg3zqQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:24:51 2025 by rpki-client