Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
File: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft (raw, json)
Hash identifier: hn76S+dT4IBfiG825txc9+7XpQgcu1QMoMPaMq83OH0=
Subject key identifier: 88:5C:7F:19:2F:09:42:DF:BB:BB:A3:00:1E:C1:33:6E:4D:00:84:9D
Authority key identifier: C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59
Certificate issuer: /CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
Certificate serial: 019A4D3D2015A6AF27E050DE0B84554ECEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
Manifest number: 0643
Signing time: Tue 04 Nov 2025 05:00:42 +0000
Manifest this update: Tue 04 Nov 2025 05:00:42 +0000
Manifest next update: Wed 05 Nov 2025 05:00:42 +0000
Files and hashes: 1: IiIPmmM-nxlvi6X_BDwclVK8nN4.roa (hash: 70bCr4c8aponltkSleoGsfNe8bySTBqaNCakdvrbnEM=)
2: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl (hash: +KlZS7RP5Lj7CK35/3wW5BiGIe6vpMUwsEXpogKipOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:20:15:a6:af:27:e0:50:de:0b:84:55:4e:ce:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
Validity
Not Before: Nov 4 05:00:42 2025 GMT
Not After : Nov 5 05:00:42 2025 GMT
Subject: CN=885c7f192f0942dfbbbba3001ec1336e4d00849d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:c8:54:ec:2d:fd:fd:bb:88:86:6a:7f:25:
b6:96:a4:1d:ed:42:f2:be:57:46:77:52:74:63:28:
ae:08:bd:44:95:b7:7b:7a:ad:e7:c8:d9:bc:31:a3:
90:b6:e7:24:28:29:01:4f:f8:6e:85:6c:6a:79:94:
7a:e3:9c:6c:c3:91:93:77:6a:d2:63:38:41:5d:1d:
b7:68:1e:17:d3:a5:b9:5b:c8:bc:d0:ee:1f:43:9a:
9e:ef:3e:08:38:ac:8c:b0:28:12:59:66:dd:5b:db:
fd:00:53:36:a5:52:e7:af:7d:c2:00:f8:0e:90:78:
3c:f9:0d:63:af:40:d2:41:4a:27:fb:e0:ab:63:1c:
f5:c1:e3:5b:8a:e3:5b:ce:71:04:a1:4f:4b:c2:7d:
85:74:d8:3b:31:6e:4e:5e:1d:02:81:14:c8:d8:51:
5f:a4:56:fa:38:40:af:fe:aa:b8:1b:a9:f5:a5:90:
cb:7a:9f:9d:fe:6b:d2:bf:31:d5:a9:73:85:bc:52:
da:6f:75:09:62:da:1c:a5:ae:a2:c8:0b:d9:12:6b:
d3:55:7a:0e:61:9c:1c:65:58:d4:cb:b5:20:b0:6d:
6b:d5:07:29:3a:48:a9:ed:56:31:8c:f5:8e:1c:1e:
80:a4:91:fb:64:b7:49:bc:49:91:08:1d:49:40:21:
4f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5C:7F:19:2F:09:42:DF:BB:BB:A3:00:1E:C1:33:6E:4D:00:84:9D
X509v3 Authority Key Identifier:
keyid:C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:21:ee:2a:ec:05:b4:ab:28:59:df:6f:7b:65:8e:84:5f:e7:
b6:33:e1:f4:86:3a:c8:f5:b3:51:d7:6b:1b:54:50:f0:96:95:
90:a6:1e:07:6c:e3:89:13:75:7a:18:78:fc:20:82:59:87:4a:
58:39:69:a2:1d:e0:39:ea:74:47:17:13:3f:c6:57:4a:62:5b:
36:3c:14:e9:0e:57:64:9d:cd:48:fe:55:62:ff:61:e5:8d:64:
36:b9:56:e9:a8:2a:7c:27:12:04:27:f7:7a:da:af:57:f2:c9:
39:08:3c:8a:51:fd:32:3f:b1:76:85:34:07:4d:c0:ac:40:b5:
49:95:2b:fa:08:d2:91:35:60:ff:89:0d:6b:f7:c3:ae:f1:19:
5d:76:97:75:cb:08:0f:39:7e:11:e8:f9:1c:1b:89:53:3d:94:
bf:84:06:29:be:0c:c2:6d:32:a2:bb:04:b6:e4:a8:bc:b7:bf:
b0:e4:58:42:cd:39:2d:13:b8:26:00:55:5f:c7:9c:81:bb:76:
34:20:fe:04:18:48:67:40:2f:46:74:c7:84:09:fa:90:4a:05:
08:51:e3:81:83:a4:22:af:fa:20:36:a9:0c:0e:cf:f6:26:b4:
af:18:f0:a1:1d:9f:c4:2a:d4:01:ce:15:12:ec:b3:59:41:f1:
c0:93:ed:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPSAVpq8n4FDeC4RVTs68MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YjM2ZmVhMjJjMzY2ZDA4YTRiNTQ2YWM4M2Y0NDg1YjJi
MWUxNTkwHhcNMjUxMTA0MDUwMDQyWhcNMjUxMTA1MDUwMDQyWjAzMTEwLwYDVQQD
Eyg4ODVjN2YxOTJmMDk0MmRmYmJiYmEzMDAxZWMxMzM2ZTRkMDA4NDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9fIVOwt/f27iIZqfyW2lqQd7ULy
vldGd1J0YyiuCL1Elbd7eq3nyNm8MaOQtuckKCkBT/huhWxqeZR645xsw5GTd2rS
YzhBXR23aB4X06W5W8i80O4fQ5qe7z4IOKyMsCgSWWbdW9v9AFM2pVLnr33CAPgO
kHg8+Q1jr0DSQUon++CrYxz1weNbiuNbznEEoU9Lwn2FdNg7MW5OXh0CgRTI2FFf
pFb6OECv/qq4G6n1pZDLep+d/mvSvzHVqXOFvFLab3UJYtocpa6iyAvZEmvTVXoO
YZwcZVjUy7UgsG1r1QcpOkip7VYxjPWOHB6ApJH7ZLdJvEmRCB1JQCFPowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhcfxkvCULfu7ujAB7BM25NAISdMB8GA1UdIwQY
MBaAFMazb+oiw2bQiktUasg/RIWyseFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHJOdjZpTERadENLUzFScXlEOUVoYkt4NFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jYzA4M2MtZmU3Ni00NDNmLWEyMTQt
NTRkMjBkODg5MTVkLzEveHJOdjZpTERadENLUzFScXlEOUVoYkt4NFZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jYzA4M2MtZmU3Ni00NDNmLWEyMTQtNTRkMjBkODg5MTVk
LzEveHJOdjZpTERadENLUzFScXlEOUVoYkt4NFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSHuKuwF
tKsoWd9ve2WOhF/ntjPh9IY6yPWzUddrG1RQ8JaVkKYeB2zjiRN1ehh4/CCCWYdK
WDlpoh3gOep0RxcTP8ZXSmJbNjwU6Q5XZJ3NSP5VYv9h5Y1kNrlW6agqfCcSBCf3
etqvV/LJOQg8ilH9Mj+xdoU0B03ArEC1SZUr+gjSkTVg/4kNa/fDrvEZXXaXdcsI
Dzl+Eej5HBuJUz2Uv4QGKb4Mwm0yorsEtuSovLe/sORYQs05LRO4JgBVX8ecgbt2
NCD+BBhIZ0AvRnTHhAn6kEoFCFHjgYOkIq/6IDapDA7P9ia0rxjwoR2fxCrUAc4V
EuyzWUHxwJPt6Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:13 2025 by rpki-client