Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
File: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft (raw, json)
Hash identifier: R7DVvJ/u5Qplwws+/OZ3txW8mmSOj03VDztWjNSMH6I=
Subject key identifier: 41:A2:3E:9E:B1:02:13:17:FA:91:B7:90:B6:BA:80:C0:20:89:8A:C5
Authority key identifier: C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
Certificate issuer: /CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Certificate serial: 019A52D22345F5A3770768940C56AA5B9B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
Manifest number: 019D
Signing time: Wed 05 Nov 2025 07:01:34 +0000
Manifest this update: Wed 05 Nov 2025 07:01:34 +0000
Manifest next update: Thu 06 Nov 2025 07:01:34 +0000
Files and hashes: 1: NGw8ktOj6OOwsyhqpmQcxVz3HFU.roa (hash: Z7YWYHXxapOgTQP+VOKpEFoycxd68wL+FS31DhS3NVc=)
2: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl (hash: GIL5upzioZMNzhhNZoZB7R0WpQNLIWo06EY91hAzjMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:23:45:f5:a3:77:07:68:94:0c:56:aa:5b:9b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Validity
Not Before: Nov 5 07:01:34 2025 GMT
Not After : Nov 6 07:01:34 2025 GMT
Subject: CN=41a23e9eb1021317fa91b790b6ba80c020898ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:39:28:5b:0e:02:ea:a9:33:7c:25:e9:9c:9e:
88:fe:81:d8:02:3c:5f:65:f8:39:b8:a3:a1:4e:21:
c7:9c:4b:99:a7:b8:19:28:b8:07:f0:90:52:73:e4:
12:cc:45:fa:8b:cc:00:b8:92:35:c6:ef:c5:2d:6e:
48:8e:4c:b3:83:63:db:50:98:bd:fd:b3:00:16:93:
26:97:0b:b1:c3:a8:1c:2b:ca:18:5d:b6:c4:5e:f6:
8e:bd:1b:c2:81:6c:b8:00:1f:2a:23:26:4a:cf:67:
c1:0d:f8:44:18:ea:87:b6:24:ae:63:51:bf:85:d3:
a7:86:a1:8a:d9:2a:58:20:86:c1:e2:90:90:c3:6d:
30:51:2e:5f:71:aa:ea:97:a2:a2:87:22:0c:36:9d:
b8:62:fd:bb:30:f0:cf:d8:5b:d1:bc:17:fd:34:48:
f3:8d:e0:b0:0a:30:37:71:68:f8:9f:ce:86:12:5e:
ea:2a:d9:cf:3e:7d:6a:67:dc:1e:de:75:7a:68:b5:
21:92:ee:c6:60:07:04:8d:b1:bc:f1:b7:f4:8a:88:
41:c2:ad:73:cf:a9:ea:50:b5:4e:b1:14:2f:a5:23:
b4:07:ec:79:43:70:cb:54:dc:72:27:46:d7:e4:bd:
49:db:c2:f8:11:2a:81:32:dd:40:2c:84:1e:6a:6a:
01:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A2:3E:9E:B1:02:13:17:FA:91:B7:90:B6:BA:80:C0:20:89:8A:C5
X509v3 Authority Key Identifier:
keyid:C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:29:a4:bd:b6:db:8f:b4:39:fb:91:0c:d9:0a:6c:f1:aa:22:
81:b9:da:35:01:30:bf:88:ba:24:9f:f3:74:30:1f:2b:34:2b:
ab:e3:f7:58:04:b1:bd:4a:03:fa:47:da:94:ab:47:8f:97:38:
53:af:db:40:44:85:a2:14:b8:84:40:4e:88:56:a3:7e:67:4f:
bd:e7:40:1e:85:ee:95:f6:d1:1d:fe:10:08:36:57:ba:63:9d:
9a:07:be:74:79:af:b2:18:49:51:0f:e9:b2:9a:97:3d:38:62:
38:13:e5:9a:3d:84:46:3f:fd:3d:0c:14:39:16:7f:12:be:6d:
12:bc:31:8a:b9:ed:95:d1:dd:ee:21:15:04:93:4f:e3:c4:e0:
8b:22:83:d9:f7:e2:a7:10:12:34:1c:1b:33:be:15:31:b9:99:
07:54:a9:68:ec:92:dc:42:16:01:93:cb:c6:f4:8f:1b:55:90:
c0:16:26:de:43:f4:40:1d:26:56:e2:bc:52:5b:0f:8d:63:37:
e8:d3:1d:aa:a1:b1:1c:2e:7d:7e:3b:f9:54:f8:94:04:bb:01:
65:13:28:3a:18:68:c6:a7:9a:49:1f:62:1a:44:c9:01:c0:2e:
aa:fd:9f:e6:bf:89:da:56:39:46:4f:e3:15:be:b7:f2:1a:3c:
6e:7b:bc:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0iNF9aN3B2iUDFaqW5tnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MDZlYThkNWQ3MDU0ZWY4OTk3ZTYyOTJlM2IwNDRiMDkz
YTI3YzYwHhcNMjUxMTA1MDcwMTM0WhcNMjUxMTA2MDcwMTM0WjAzMTEwLwYDVQQD
Eyg0MWEyM2U5ZWIxMDIxMzE3ZmE5MWI3OTBiNmJhODBjMDIwODk4YWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DkoWw4C6qkzfCXpnJ6I/oHYAjxf
Zfg5uKOhTiHHnEuZp7gZKLgH8JBSc+QSzEX6i8wAuJI1xu/FLW5Ijkyzg2PbUJi9
/bMAFpMmlwuxw6gcK8oYXbbEXvaOvRvCgWy4AB8qIyZKz2fBDfhEGOqHtiSuY1G/
hdOnhqGK2SpYIIbB4pCQw20wUS5fcarql6KihyIMNp24Yv27MPDP2FvRvBf9NEjz
jeCwCjA3cWj4n86GEl7qKtnPPn1qZ9we3nV6aLUhku7GYAcEjbG88bf0iohBwq1z
z6nqULVOsRQvpSO0B+x5Q3DLVNxyJ0bX5L1J28L4ESqBMt1ALIQeamoB7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGiPp6xAhMX+pG3kLa6gMAgiYrFMB8GA1UdIwQY
MBaAFMQG6o1dcFTviZfmKS47BEsJOifGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMWIyNmMtMmI3Yy00MTE3LWIyMzUt
OGIzMDFiYWMzMGM5LzEveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iMWIyNmMtMmI3Yy00MTE3LWIyMzUtOGIzMDFiYWMzMGM5
LzEveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0imkvbbb
j7Q5+5EM2Qps8aoigbnaNQEwv4i6JJ/zdDAfKzQrq+P3WASxvUoD+kfalKtHj5c4
U6/bQESFohS4hEBOiFajfmdPvedAHoXulfbRHf4QCDZXumOdmge+dHmvshhJUQ/p
spqXPThiOBPlmj2ERj/9PQwUORZ/Er5tErwxirntldHd7iEVBJNP48TgiyKD2ffi
pxASNBwbM74VMbmZB1SpaOyS3EIWAZPLxvSPG1WQwBYm3kP0QB0mVuK8UlsPjWM3
6NMdqqGxHC59fjv5VPiUBLsBZRMoOhhoxqeaSR9iGkTJAcAuqv2f5r+J2lY5Rk/j
Fb638ho8bnu8MQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:11:53 2025 by rpki-client