Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
File: XHbv8miEvwBiB9cis7AaRNK1YZk.mft (raw, json)
Hash identifier: 48W+vPfGjAqurcleyjMomiu3qJ1WDiOH/SsbHBUajSs=
Subject key identifier: 89:0F:B8:66:6C:68:0B:95:08:4E:2E:0A:FE:BC:81:1A:68:5B:4F:CA
Authority key identifier: 5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
Certificate issuer: /CN=5c76eff26884bf006207d722b3b01a44d2b56199
Certificate serial: 019A54C0CAAFB94F0B245F2AE94918E4F30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
Manifest number: 0F47
Signing time: Wed 05 Nov 2025 16:01:52 +0000
Manifest this update: Wed 05 Nov 2025 16:01:52 +0000
Manifest next update: Thu 06 Nov 2025 16:01:52 +0000
Files and hashes: 1: XHbv8miEvwBiB9cis7AaRNK1YZk.crl (hash: iw2of0Sa3cyCc56tk0V1M9P6xEERSSluJHC9arpHAIs=)
2: aeqC4EE0KUZ0Hdgey5muRSCYEvc.roa (hash: aH7XcxnHv3qEq7LQXqlBVrjotePFAy5nc/77ZI52Ock=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:ca:af:b9:4f:0b:24:5f:2a:e9:49:18:e4:f3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c76eff26884bf006207d722b3b01a44d2b56199
Validity
Not Before: Nov 5 16:01:52 2025 GMT
Not After : Nov 6 16:01:52 2025 GMT
Subject: CN=890fb8666c680b95084e2e0afebc811a685b4fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ff:3f:26:50:30:42:31:f6:1a:9d:8f:82:43:
4b:d7:b2:19:09:50:d3:ea:68:4a:d3:58:8e:94:1a:
6e:d7:72:3f:51:dc:b7:9d:d2:e0:fc:d4:5f:87:1a:
cc:7a:82:0e:ed:ca:84:96:00:61:ae:23:f9:9f:b2:
88:51:58:7e:90:a9:34:d2:da:17:54:7d:de:00:9e:
01:b1:9a:27:d4:67:55:d3:b1:e8:2a:78:a1:bc:c4:
28:fd:f1:05:2e:e3:c8:96:59:c4:1a:b4:eb:b5:77:
d6:e1:b6:94:e5:3b:06:ac:d7:86:0e:f1:d1:43:4d:
2b:ba:99:14:57:5b:e5:dd:e0:4c:e4:b6:c1:79:95:
72:48:96:a9:0b:f0:dc:81:ef:0b:bb:3f:9d:73:bf:
c5:1f:09:59:3a:92:86:59:eb:a5:01:56:82:61:bf:
be:ee:f8:20:43:df:67:2e:f0:cb:aa:6a:ca:b8:14:
64:08:4f:9b:6f:13:d8:5b:5f:44:6b:0a:f3:d0:53:
ec:49:f5:ab:b1:48:36:df:92:49:57:7c:a0:7d:87:
a3:37:7b:01:15:90:8f:4a:c2:a9:13:42:63:b5:41:
68:42:7f:97:c3:33:a2:af:6a:77:06:14:05:ce:e1:
99:ef:3a:42:68:49:2e:e8:07:56:72:e5:c5:3d:a8:
64:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0F:B8:66:6C:68:0B:95:08:4E:2E:0A:FE:BC:81:1A:68:5B:4F:CA
X509v3 Authority Key Identifier:
keyid:5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:09:df:fa:90:73:dc:03:5e:0d:7c:53:fb:2a:05:a9:2e:e3:
12:ac:a1:14:42:53:93:78:d7:98:74:3f:d5:dc:e2:62:89:ea:
ad:13:87:0e:3e:83:55:e1:f8:b5:f9:ed:19:71:7e:13:e4:b9:
40:8d:22:5f:fd:16:33:1f:2e:44:45:4b:cd:fa:2b:34:06:26:
0e:be:a9:8e:d1:5b:2d:25:08:52:47:6e:db:44:2b:4b:28:26:
57:c7:d1:a6:bd:e4:fa:dc:fa:93:40:c8:ff:e0:73:fe:dd:fb:
dc:8c:7c:ac:14:1f:a2:4e:cd:32:ea:15:a3:82:81:b1:fc:46:
6e:93:2b:dc:28:3f:75:8f:c4:44:aa:8a:92:2a:3c:93:23:e8:
7c:8e:55:8f:cb:49:55:da:b2:b7:d3:0b:3a:dc:2a:fc:66:83:
8d:5e:29:6a:2e:c7:fe:b4:1c:64:e1:ff:d0:15:6d:68:11:e2:
3f:d2:38:5b:fb:34:5b:af:a1:2f:47:6e:81:af:f7:5b:bf:eb:
e6:ac:2a:db:9b:4b:a2:2b:64:46:ce:ca:da:b7:4e:30:e2:8f:
b1:01:31:92:34:92:a2:e6:be:0f:15:be:5c:2a:98:7e:7a:4a:
1c:f7:a9:1a:a0:a2:e6:4d:de:a9:64:f9:53:b8:eb:e0:c2:b6:
5f:6f:b6:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUwMqvuU8LJF8q6UkY5PMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzZlZmYyNjg4NGJmMDA2MjA3ZDcyMmIzYjAxYTQ0ZDJi
NTYxOTkwHhcNMjUxMTA1MTYwMTUyWhcNMjUxMTA2MTYwMTUyWjAzMTEwLwYDVQQD
Eyg4OTBmYjg2NjZjNjgwYjk1MDg0ZTJlMGFmZWJjODExYTY4NWI0ZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf8/JlAwQjH2Gp2PgkNL17IZCVDT
6mhK01iOlBpu13I/Udy3ndLg/NRfhxrMeoIO7cqElgBhriP5n7KIUVh+kKk00toX
VH3eAJ4BsZon1GdV07HoKnihvMQo/fEFLuPIllnEGrTrtXfW4baU5TsGrNeGDvHR
Q00rupkUV1vl3eBM5LbBeZVySJapC/Dcge8Luz+dc7/FHwlZOpKGWeulAVaCYb++
7vggQ99nLvDLqmrKuBRkCE+bbxPYW19Eawrz0FPsSfWrsUg235JJV3ygfYejN3sB
FZCPSsKpE0JjtUFoQn+XwzOir2p3BhQFzuGZ7zpCaEku6AdWcuXFPahkQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkPuGZsaAuVCE4uCv68gRpoW0/KMB8GA1UdIwQY
MBaAFFx27/JohL8AYgfXIrOwGkTStWGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhidjhtaUV2d0JpQjljaXM3QWFSTksxWVprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NjIyMzItNThkNy00YzFkLWIxOTgt
NjYwNDExYjlkMTY3LzEvWEhidjhtaUV2d0JpQjljaXM3QWFSTksxWVprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84NjIyMzItNThkNy00YzFkLWIxOTgtNjYwNDExYjlkMTY3
LzEvWEhidjhtaUV2d0JpQjljaXM3QWFSTksxWVprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwnf+pBz
3ANeDXxT+yoFqS7jEqyhFEJTk3jXmHQ/1dziYonqrROHDj6DVeH4tfntGXF+E+S5
QI0iX/0WMx8uREVLzforNAYmDr6pjtFbLSUIUkdu20QrSygmV8fRpr3k+tz6k0DI
/+Bz/t373Ix8rBQfok7NMuoVo4KBsfxGbpMr3Cg/dY/ERKqKkio8kyPofI5Vj8tJ
Vdqyt9MLOtwq/GaDjV4pai7H/rQcZOH/0BVtaBHiP9I4W/s0W6+hL0duga/3W7/r
5qwq25tLoitkRs7K2rdOMOKPsQExkjSSoua+DxW+XCqYfnpKHPepGqCi5k3eqWT5
U7jr4MK2X2+2RA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 22:35:56 2025 by rpki-client