Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
File: xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json)
Hash identifier: 9xWnB+dxueMiYGCrD2otLHtlxcICwhUFhU8S5838z00=
Subject key identifier: 10:23:7F:92:B6:A4:78:AC:1D:41:22:08:C2:6B:42:AB:29:C4:91:14
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial: 019A4C97CC1C0A22996FA8CD9B96C0C3B0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
Manifest number: 1053
Signing time: Tue 04 Nov 2025 02:00:07 +0000
Manifest this update: Tue 04 Nov 2025 02:00:07 +0000
Manifest next update: Wed 05 Nov 2025 02:00:07 +0000
Files and hashes: 1: GLHmVae2R6jaakZk3moUBxJAeJc.roa (hash: mSQfdgEmq2Rkg+sk7NnMjuCo2d41gGG9w7/ovXQBtes=)
2: McmEoR42go_NL-e1B7HnbupLbKE.roa (hash: l0MQWVd1GEY0hlnVKUF+5hVPuDs45GKOy6rfNmqbWI0=)
3: cQbtoMzIsUrEiz2_R7FPTDe-83o.roa (hash: uIgSp+mYNVkKY/oukv2IXYpbIzAsJVvw3J0CKtfAk+0=)
4: uW8kB1S11N80An97YmPIheyw1-I.roa (hash: qgctSfTl7OMOIHcXisfgovamPsJVbiOdGZzBwp6qf14=)
5: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: dNCzeARer8h6siq1gaM1GbFV1Di2ulpgdL78iKCGOLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:cc:1c:0a:22:99:6f:a8:cd:9b:96:c0:c3:b0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
Validity
Not Before: Nov 4 02:00:07 2025 GMT
Not After : Nov 5 02:00:07 2025 GMT
Subject: CN=10237f92b6a478ac1d412208c26b42ab29c49114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:80:8f:b1:cc:cb:ca:88:19:01:bf:bc:1d:
0d:96:29:e7:ca:ad:19:6a:fa:5a:73:68:5e:7b:a1:
74:b4:ad:3b:92:e4:40:ef:13:10:f8:aa:a3:71:fd:
7d:88:29:37:b6:79:8f:3c:9e:25:37:cc:82:a5:b2:
d3:4a:1c:00:0b:23:b2:f3:2d:06:e1:05:c9:bb:cf:
b9:d2:23:30:44:f5:91:77:31:91:f2:85:b7:96:11:
ea:49:5b:3d:e2:ec:1b:57:d2:e0:42:ab:1d:97:87:
68:06:ac:6b:20:24:3d:5e:ae:de:03:e4:fd:e0:f0:
ba:a7:2c:9f:9e:d6:ea:de:ec:e1:94:6f:d2:76:74:
58:0e:49:34:40:ec:ba:91:db:90:9b:54:24:5e:a9:
b0:e7:26:34:c7:d1:35:80:b0:ce:ce:61:e0:fe:0f:
b8:5d:08:f5:1f:13:22:cc:51:86:d6:2c:32:7b:d4:
2e:94:58:77:a5:58:51:31:a5:2b:25:e0:77:1b:14:
13:fa:c6:4e:60:61:da:21:99:6a:48:22:d3:18:22:
f6:ea:18:66:e8:fa:47:a4:b8:fb:62:dd:fb:73:45:
de:be:ea:9a:b1:73:b4:d4:a4:e3:f7:13:40:33:77:
de:f2:cb:ba:ec:f4:bd:06:9a:59:09:8b:7f:69:71:
ce:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:23:7F:92:B6:A4:78:AC:1D:41:22:08:C2:6B:42:AB:29:C4:91:14
X509v3 Authority Key Identifier:
keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:04:dc:3e:2d:9d:42:8b:b2:da:13:fb:88:37:72:44:1d:fb:
5c:b0:ca:6a:25:cd:e7:68:48:0f:c3:f9:95:dd:00:3c:f7:b5:
d3:d4:46:de:1b:11:4c:67:86:9b:21:4c:e3:ca:0a:10:67:76:
51:ed:af:76:98:5e:5c:5a:f2:26:06:4d:d3:7b:57:88:e3:48:
96:af:44:6c:02:2e:76:ad:ea:25:bc:45:25:68:21:83:f7:11:
60:ab:77:ce:91:19:77:de:db:ea:cd:fc:0a:de:f9:ab:b7:1d:
cc:5f:c0:c4:91:c6:8d:a1:e0:54:5f:39:2f:70:f4:d6:a7:89:
9b:c9:40:ed:b2:ab:b9:db:27:e2:8d:25:51:21:c4:38:0f:60:
3d:d3:8e:61:00:ea:9e:22:19:24:88:0a:15:e1:33:f4:ac:a0:
88:8b:28:0c:42:62:23:d2:03:46:01:ab:6f:15:28:6d:f7:d6:
b5:8f:a1:8b:dd:b4:a4:38:3e:37:13:74:ee:75:91:ee:da:30:
84:6d:af:35:bb:1e:57:1e:93:c8:59:58:27:2b:53:8a:09:34:
8b:cf:6c:8d:b0:52:e4:f5:85:59:b7:b2:b4:77:2d:26:51:3e:
16:00:08:29:c0:26:ad:40:1d:89:86:ed:31:b2:9d:d9:78:93:
e7:f6:80:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMl8wcCiKZb6jNm5bAw7DPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZWIzNGRkYTJmODA5NDk2ODQ5NDg5MjA2MzM1MWVlMGYx
MGU5MWEwHhcNMjUxMTA0MDIwMDA3WhcNMjUxMTA1MDIwMDA3WjAzMTEwLwYDVQQD
EygxMDIzN2Y5MmI2YTQ3OGFjMWQ0MTIyMDhjMjZiNDJhYjI5YzQ5MTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPeAj7HMy8qIGQG/vB0Nlinnyq0Z
avpac2hee6F0tK07kuRA7xMQ+Kqjcf19iCk3tnmPPJ4lN8yCpbLTShwACyOy8y0G
4QXJu8+50iMwRPWRdzGR8oW3lhHqSVs94uwbV9LgQqsdl4doBqxrICQ9Xq7eA+T9
4PC6pyyfntbq3uzhlG/SdnRYDkk0QOy6kduQm1QkXqmw5yY0x9E1gLDOzmHg/g+4
XQj1HxMizFGG1iwye9QulFh3pVhRMaUrJeB3GxQT+sZOYGHaIZlqSCLTGCL26hhm
6PpHpLj7Yt37c0XevuqasXO01KTj9xNAM3fe8su67PS9BppZCYt/aXHOEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAjf5K2pHisHUEiCMJrQqspxJEUMB8GA1UdIwQY
MBaAFMTrNN2i+AlJaElIkgYzUe4PEOkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEt
YTM0N2I1NmYzYjlhLzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEtYTM0N2I1NmYzYjlh
LzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwTcPi2d
Qouy2hP7iDdyRB37XLDKaiXN52hID8P5ld0APPe109RG3hsRTGeGmyFM48oKEGd2
Ue2vdpheXFryJgZN03tXiONIlq9EbAIudq3qJbxFJWghg/cRYKt3zpEZd97b6s38
Ct75q7cdzF/AxJHGjaHgVF85L3D01qeJm8lA7bKrudsn4o0lUSHEOA9gPdOOYQDq
niIZJIgKFeEz9KygiIsoDEJiI9IDRgGrbxUobffWtY+hi920pDg+NxN07nWR7tow
hG2vNbseVx6TyFlYJytTigk0i89sjbBS5PWFWbeytHctJlE+FgAIKcAmrUAdiYbt
MbKd2XiT5/aAAw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:45 2025 by rpki-client