Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json)
Hash identifier: ZTn5z6jVXZbArxS0M54YJMpx+h4r52tfIY5+Te12iiI=
Subject key identifier: 87:77:FD:86:DA:2D:87:44:2D:16:3F:B4:0A:AA:A1:0B:93:40:44:65
Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Certificate serial: 019A5187B858DA85F0FFCC2265208F62A85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
Manifest number: 0527
Signing time: Wed 05 Nov 2025 01:00:40 +0000
Manifest this update: Wed 05 Nov 2025 01:00:40 +0000
Manifest next update: Thu 06 Nov 2025 01:00:40 +0000
Files and hashes: 1: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: mgv6IMETz1ec/4uHzegWusq/Z0pRGy5GjfJr/JDNvSM=)
2: ysZqYOzY1kNFh1sIOpeYsbxT0Fs.roa (hash: LkPu7W8d8SU9QHrC15AzmgPhWHRle+7DN15uGWx+c9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:b8:58:da:85:f0:ff:cc:22:65:20:8f:62:a8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Validity
Not Before: Nov 5 01:00:40 2025 GMT
Not After : Nov 6 01:00:40 2025 GMT
Subject: CN=8777fd86da2d87442d163fb40aaaa10b93404465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:62:7f:36:6f:2b:c4:66:dd:87:13:fe:e6:4a:
2b:ef:ab:ce:7b:a4:0b:df:d4:d3:7e:16:ee:8e:40:
74:43:85:09:e1:e2:ab:0c:45:8c:24:a7:98:49:11:
70:26:6f:6b:9a:53:9d:0e:3d:2f:a5:46:b0:fc:59:
0a:ea:5e:d7:cf:47:50:6b:f6:cc:3a:7f:c3:2b:a7:
53:cc:f0:40:ee:83:7f:92:02:03:99:ca:f6:fb:01:
e4:60:1c:39:8c:59:3a:ec:62:4f:58:c0:e7:c7:09:
1e:9b:7e:0d:e9:28:81:d2:f5:d8:1a:49:60:4f:8f:
b4:93:9c:38:9f:e5:2a:77:3e:5a:ee:c3:32:fc:3e:
24:54:c8:3a:cf:fb:5c:3a:65:19:b3:82:6a:5b:18:
1c:12:b9:59:9c:02:48:ad:79:98:d7:9c:8e:a2:f5:
00:66:f8:12:8c:5c:73:14:56:4d:6f:be:34:03:5c:
8d:7f:9c:bb:ad:32:02:91:77:8d:0e:74:97:6f:4f:
f5:13:71:15:42:44:83:ab:d7:b5:b0:d2:9f:8d:54:
91:49:9d:62:ce:16:ba:b7:0e:dd:63:7c:4d:d5:8e:
61:54:b7:48:b0:c5:13:bf:96:2a:28:0e:4b:e1:b2:
bb:61:39:3b:3e:12:72:6d:1b:d9:64:10:6d:9e:8a:
74:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:77:FD:86:DA:2D:87:44:2D:16:3F:B4:0A:AA:A1:0B:93:40:44:65
X509v3 Authority Key Identifier:
keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:30:65:7a:f4:c3:56:e4:7e:6b:81:a3:eb:50:1a:32:cb:1e:
b7:8b:d7:90:14:6f:ec:89:9d:e6:90:4c:3a:88:20:3d:5f:83:
1d:07:3e:2b:4a:84:7e:3d:b7:fc:32:ce:01:f2:16:01:25:62:
55:51:47:0b:3d:ae:72:f6:07:9b:96:c1:23:cc:7a:1c:0d:43:
72:94:8a:8a:cd:51:1d:c8:fd:6a:4d:0c:ef:2f:ba:84:fc:70:
1f:4c:23:9e:49:d9:d8:f3:10:69:bb:83:36:e2:8f:19:69:e6:
d3:3e:fa:0d:51:d5:00:95:f6:0f:22:ff:71:63:ac:4a:db:ec:
bd:58:87:68:ea:83:f3:fc:34:7a:e0:de:81:1d:b7:96:e7:62:
c2:27:e6:db:53:2f:81:bf:a5:6c:6d:b7:1a:05:7c:3c:f1:c6:
bc:82:eb:6c:d5:c9:a4:e2:5e:68:b6:80:13:1f:d8:44:3b:ab:
de:68:3d:8a:7d:68:9a:ad:97:91:ef:0e:3e:91:b3:fa:ad:60:
ba:93:76:48:e1:76:2c:4e:40:05:85:cd:a7:f7:aa:a2:81:1a:
97:d6:11:97:27:b3:8e:f5:c0:d3:4d:af:95:e6:18:d7:fe:28:
c3:b5:8a:23:6d:e0:48:74:c2:92:d4:6a:c5:da:31:24:53:fc:
7e:8b:c7:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh7hY2oXw/8wiZSCPYqhaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMWEwYTc1NTQzODU3MDM5NzRhZTE1ZWY5NDdiYzU0YzBi
ODljOTUwHhcNMjUxMTA1MDEwMDQwWhcNMjUxMTA2MDEwMDQwWjAzMTEwLwYDVQQD
Eyg4Nzc3ZmQ4NmRhMmQ4NzQ0MmQxNjNmYjQwYWFhYTEwYjkzNDA0NDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmJ/Nm8rxGbdhxP+5kor76vOe6QL
39TTfhbujkB0Q4UJ4eKrDEWMJKeYSRFwJm9rmlOdDj0vpUaw/FkK6l7Xz0dQa/bM
On/DK6dTzPBA7oN/kgIDmcr2+wHkYBw5jFk67GJPWMDnxwkem34N6SiB0vXYGklg
T4+0k5w4n+Uqdz5a7sMy/D4kVMg6z/tcOmUZs4JqWxgcErlZnAJIrXmY15yOovUA
ZvgSjFxzFFZNb740A1yNf5y7rTICkXeNDnSXb0/1E3EVQkSDq9e1sNKfjVSRSZ1i
zha6tw7dY3xN1Y5hVLdIsMUTv5YqKA5L4bK7YTk7PhJybRvZZBBtnop0yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFId3/YbaLYdELRY/tAqqoQuTQERlMB8GA1UdIwQY
MBaAFP8aCnVUOFcDl0rhXvlHvFTAuJyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yNjkyOTAtNTlmZi00MjMzLThmYTAt
Mjc1NTBiMjE5NTA3LzEvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8yNjkyOTAtNTlmZi00MjMzLThmYTAtMjc1NTBiMjE5NTA3
LzEvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDBlevTD
VuR+a4Gj61AaMsset4vXkBRv7Imd5pBMOoggPV+DHQc+K0qEfj23/DLOAfIWASVi
VVFHCz2ucvYHm5bBI8x6HA1DcpSKis1RHcj9ak0M7y+6hPxwH0wjnknZ2PMQabuD
NuKPGWnm0z76DVHVAJX2DyL/cWOsStvsvViHaOqD8/w0euDegR23ludiwifm21Mv
gb+lbG23GgV8PPHGvILrbNXJpOJeaLaAEx/YRDur3mg9in1omq2Xke8OPpGz+q1g
upN2SOF2LE5ABYXNp/eqooEal9YRlyezjvXA002vleYY1/4ow7WKI23gSHTCktRq
xdoxJFP8fovHZg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:09:14 2025 by rpki-client