Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
File: X8JHQzBLf9mgZdIs2JzalQReJpw.mft (raw, json)
Hash identifier: drhxDm/CIq0gAHTM0OhuRO/6faotyqCterERa5cFEus=
Subject key identifier: 75:DF:62:7F:43:74:C0:9B:2D:57:D0:31:D1:52:25:88:1C:F9:5A:8D
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial: 019A4DE1ADB0600428C152076081F1C92F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:00:26 +0000
Manifest this update: Tue 04 Nov 2025 08:00:26 +0000
Manifest next update: Wed 05 Nov 2025 08:00:26 +0000
Files and hashes: 1: QeiRkvhJ1jMmsZj6cRnslCHsAIo.roa (hash: uEqxaO+pWPZv8MfWPZnEIuXT69hT3YN8Q/V/0g2kRZQ=)
2: X8JHQzBLf9mgZdIs2JzalQReJpw.crl (hash: pj8B+BX1qxBwX3i4imHxsxRZalZ0VPcQjGHjyYwAttI=)
3: vyiJ9VgxunO1beL-TLp8DQho0z4.roa (hash: ThIUsMZZykRqe6AuoTNCl3LT/Ty2lekPXvQyW0X+N8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ad:b0:60:04:28:c1:52:07:60:81:f1:c9:2f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Validity
Not Before: Nov 4 08:00:26 2025 GMT
Not After : Nov 5 08:00:26 2025 GMT
Subject: CN=75df627f4374c09b2d57d031d15225881cf95a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:36:05:22:a1:a6:49:a6:4d:ba:51:63:74:
1b:70:64:fb:c8:9d:cf:af:4a:31:a7:7c:49:52:d2:
b8:70:ac:91:1f:bc:07:fd:96:b6:20:9f:82:0a:cb:
c2:26:1e:c5:44:48:86:c2:3c:43:29:50:81:37:76:
3a:7c:f7:de:dd:f7:8d:07:ea:79:bd:65:a3:13:dd:
23:31:fd:b9:e1:60:93:57:4c:6b:60:8b:ee:10:71:
00:86:1f:4d:b6:06:74:8e:e0:0a:48:22:a5:b1:05:
f2:48:60:2c:4d:9f:bb:9b:74:43:5f:90:89:f6:f3:
02:17:cf:35:d8:1c:e8:2f:0f:47:ee:51:33:c5:e9:
56:42:ba:6c:6b:f5:24:d2:52:ce:63:4c:e0:92:61:
e4:cd:38:b5:26:f2:fc:b2:df:37:a8:f9:49:30:f5:
7e:b7:45:4b:0c:d8:3e:ee:60:8f:71:d2:6b:94:7b:
da:80:8f:f3:59:dd:b0:db:35:71:2b:e2:7a:49:a0:
c5:4e:43:88:32:f9:50:25:6f:3c:5c:0c:91:fc:7b:
1e:3d:d5:ba:f0:dc:24:56:4b:30:2a:88:4f:16:af:
76:a1:43:94:04:d9:6f:7f:22:77:97:e6:f0:95:92:
20:cf:d7:90:02:7b:6a:ca:f6:ec:94:b3:1c:11:f4:
7f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DF:62:7F:43:74:C0:9B:2D:57:D0:31:D1:52:25:88:1C:F9:5A:8D
X509v3 Authority Key Identifier:
keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e6:65:fa:ed:12:1d:26:f5:a7:15:24:e6:65:5f:f9:2c:f9:
8c:0f:a2:da:e8:05:6d:40:62:4f:90:df:20:6d:e6:87:1b:ce:
c2:15:81:5c:12:d4:c0:8c:58:cb:b3:fd:7b:fc:5d:79:2f:2b:
b1:11:27:6f:0a:41:e7:90:51:77:72:bd:45:1e:4d:eb:de:46:
09:ba:b8:d5:24:6d:34:68:4a:fc:13:d0:1e:ab:51:7e:eb:f3:
44:ff:18:2d:08:a6:fa:e1:c5:d7:f7:49:68:b9:5c:7b:b5:ae:
89:2f:06:c6:15:22:bd:c5:12:6b:51:6b:e2:9a:4e:11:b9:ee:
f4:68:d4:1e:15:a9:17:84:2d:e7:3a:c1:5c:6b:81:b1:4b:8f:
b4:60:74:48:43:28:43:53:32:cc:40:68:cd:7a:dc:47:3e:9d:
39:fa:a2:3f:b4:ca:6e:b7:36:a1:4f:fc:ee:ad:e2:de:74:0c:
76:b3:54:53:36:bc:e0:42:c6:ff:4d:58:66:8b:04:3f:e2:48:
0c:6b:84:3b:39:a5:3a:8f:6e:25:12:89:4f:3d:c1:90:b3:da:
c6:4f:bc:dc:71:5b:a2:6f:88:2e:b9:eb:ee:6a:03:79:51:8f:
4b:3a:20:68:fd:1b:2e:d2:1a:23:9f:bc:14:db:88:e9:20:7a:
54:4b:2c:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4a2wYAQowVIHYIHxyS96MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYzI0NzQzMzA0YjdmZDlhMDY1ZDIyY2Q4OWNkYTk1MDQ1
ZTI2OWMwHhcNMjUxMTA0MDgwMDI2WhcNMjUxMTA1MDgwMDI2WjAzMTEwLwYDVQQD
Eyg3NWRmNjI3ZjQzNzRjMDliMmQ1N2QwMzFkMTUyMjU4ODFjZjk1YThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlE2BSKhpkmmTbpRY3QbcGT7yJ3P
r0oxp3xJUtK4cKyRH7wH/Za2IJ+CCsvCJh7FREiGwjxDKVCBN3Y6fPfe3feNB+p5
vWWjE90jMf254WCTV0xrYIvuEHEAhh9NtgZ0juAKSCKlsQXySGAsTZ+7m3RDX5CJ
9vMCF8812BzoLw9H7lEzxelWQrpsa/Uk0lLOY0zgkmHkzTi1JvL8st83qPlJMPV+
t0VLDNg+7mCPcdJrlHvagI/zWd2w2zVxK+J6SaDFTkOIMvlQJW88XAyR/HsePdW6
8NwkVkswKohPFq92oUOUBNlvfyJ3l+bwlZIgz9eQAntqyvbslLMcEfR/nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXfYn9DdMCbLVfQMdFSJYgc+VqNMB8GA1UdIwQY
MBaAFF/CR0MwS3/ZoGXSLNic2pUEXiacMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lNWEyYzctMDQ1My00OGJhLWIxMGMt
MGJhOTY3OWRlMmU2LzEvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9lNWEyYzctMDQ1My00OGJhLWIxMGMtMGJhOTY3OWRlMmU2
LzEvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceZl+u0S
HSb1pxUk5mVf+Sz5jA+i2ugFbUBiT5DfIG3mhxvOwhWBXBLUwIxYy7P9e/xdeS8r
sREnbwpB55BRd3K9RR5N695GCbq41SRtNGhK/BPQHqtRfuvzRP8YLQim+uHF1/dJ
aLlce7WuiS8GxhUivcUSa1Fr4ppOEbnu9GjUHhWpF4Qt5zrBXGuBsUuPtGB0SEMo
Q1MyzEBozXrcRz6dOfqiP7TKbrc2oU/87q3i3nQMdrNUUza84ELG/01YZosEP+JI
DGuEOzmlOo9uJRKJTz3BkLPaxk+83HFbom+ILrnr7moDeVGPSzogaP0bLtIaI5+8
FNuI6SB6VEssfQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:21 2025 by rpki-client