Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: yGUJoCAnTdKJ2iBCrO3eLRC4G7WNRtwOIoRgG2l12Go=
Subject key identifier: E6:88:12:52:8C:AC:E4:A9:03:22:49:E2:65:95:E8:EE:B4:79:12:04
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 019A4EF519E4F4EAC81F2F74CAC1AEA640EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 12CB
Signing time: Tue 04 Nov 2025 13:01:17 +0000
Manifest this update: Tue 04 Nov 2025 13:01:17 +0000
Manifest next update: Wed 05 Nov 2025 13:01:17 +0000
Files and hashes: 1: 1ylHoCjP82H2cRlJcKOWxCiIA9s.roa (hash: c062Fjrkbud1S9wrUUG9+yQLXJvgcVhnwrbsUatXzgg=)
2: 6-BNn1ahWtft0g-GuZtIXl4l5Qo.roa (hash: mnVCxlV7vM9sKmc4seeqVJ1+v+wCWGn9k8XntKlO+8E=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: G/4jEO1VwQ0gYNci4dz3dkTSlwoFIescy/PPgYn0Yxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:19:e4:f4:ea:c8:1f:2f:74:ca:c1:ae:a6:40:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Nov 4 13:01:17 2025 GMT
Not After : Nov 5 13:01:17 2025 GMT
Subject: CN=e68812528cace4a9032249e26595e8eeb4791204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:e1:22:b5:ce:54:63:05:45:83:5d:36:33:
8f:a2:c9:0c:07:6d:39:bc:97:76:83:c0:ec:cf:cd:
ee:c4:7c:1a:c9:45:3f:44:6a:e8:76:9a:b7:f2:13:
44:b2:aa:05:b2:3d:57:3c:d3:6d:c9:8a:49:54:47:
c8:4c:3f:19:48:79:20:6b:fc:8b:d5:04:67:fe:fc:
02:e4:b4:2d:2d:95:00:a1:c1:6f:9f:08:05:05:5a:
31:a9:ed:01:a8:4a:db:49:28:7a:df:e3:12:b7:d5:
8e:16:12:2b:36:1e:e4:c1:8b:cb:ee:e2:c3:91:13:
c4:4c:e3:bb:5d:a0:1f:bd:92:12:93:1f:75:9a:9f:
f7:48:7d:3f:ac:5e:db:25:14:cc:42:b0:9e:1a:19:
49:df:94:70:68:39:a0:21:99:40:ef:7c:e9:2b:14:
ea:b7:7c:1d:ca:16:40:59:d2:b6:7b:6d:a9:96:e0:
a9:49:c1:0d:7f:2c:fa:2a:af:de:9d:2c:e4:14:23:
4a:0b:c7:11:5f:d4:5b:00:0d:5d:49:61:11:f6:f8:
e8:18:05:46:13:4e:aa:85:eb:f2:03:ee:3d:8a:e4:
60:f0:ab:38:af:8a:93:ec:e0:7d:ba:05:a5:e0:6d:
62:7a:96:cb:1d:73:fe:0b:de:0d:c6:53:3c:73:c3:
c2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:88:12:52:8C:AC:E4:A9:03:22:49:E2:65:95:E8:EE:B4:79:12:04
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ef:e1:92:73:0e:84:b7:65:42:c8:c7:2c:69:c3:06:fa:b8:
8a:52:a6:9d:e1:eb:1a:64:3c:77:12:5e:ba:e5:ba:76:41:9c:
dc:f2:78:69:44:e5:45:dd:6c:3b:f0:04:f3:29:a7:4c:17:c3:
d8:19:56:95:e9:a7:73:9b:96:43:2c:a3:55:c9:53:76:81:44:
43:a7:63:62:8a:9f:72:ac:75:53:78:6c:44:b4:69:97:3a:23:
9c:da:27:8d:25:48:99:b5:1c:54:d1:71:9e:42:af:c9:1f:b4:
b5:5d:4c:d6:4e:26:be:1a:19:c0:c8:f4:97:b5:dd:a3:46:6b:
b3:18:d8:10:6d:69:d0:10:52:41:6c:b5:c4:48:9f:44:40:b4:
e3:8f:f8:4f:f3:a9:d4:c7:bd:f9:56:db:92:3f:70:99:03:45:
af:a9:61:13:39:2a:a9:c3:9e:bf:cd:ac:4e:b9:ef:93:dd:a0:
08:88:ca:74:88:b7:35:05:99:ae:32:ba:bb:bf:36:75:d6:ed:
0e:00:3b:b7:69:d6:ce:71:4d:e0:ea:da:f7:89:2e:cf:51:7c:
0c:ab:1a:4a:66:f0:7f:6e:67:b6:92:c5:ec:6a:17:5f:cb:7d:
c0:8e:02:79:c9:03:d9:d6:72:a4:9e:65:3e:df:7f:d1:ba:07:
3d:95:03:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Rnk9OrIHy90ysGupkDsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTZiY2NiZGM5ZjJlNGJhZGMwYTA1N2VhMDhmN2M3NDgx
ODhiMWYwHhcNMjUxMTA0MTMwMTE3WhcNMjUxMTA1MTMwMTE3WjAzMTEwLwYDVQQD
EyhlNjg4MTI1MjhjYWNlNGE5MDMyMjQ5ZTI2NTk1ZThlZWI0NzkxMjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSnhIrXOVGMFRYNdNjOPoskMB205
vJd2g8Dsz83uxHwayUU/RGrodpq38hNEsqoFsj1XPNNtyYpJVEfITD8ZSHkga/yL
1QRn/vwC5LQtLZUAocFvnwgFBVoxqe0BqErbSSh63+MSt9WOFhIrNh7kwYvL7uLD
kRPETOO7XaAfvZISkx91mp/3SH0/rF7bJRTMQrCeGhlJ35RwaDmgIZlA73zpKxTq
t3wdyhZAWdK2e22pluCpScENfyz6Kq/enSzkFCNKC8cRX9RbAA1dSWER9vjoGAVG
E06qhevyA+49iuRg8Ks4r4qT7OB9ugWl4G1iepbLHXP+C94NxlM8c8PCcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOaIElKMrOSpAyJJ4mWV6O60eRIEMB8GA1UdIwQY
MBaAFMVWvMvcny5LrcCgV+oI98dIGIsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83ZGVmMTMtYzRjZC00NmE2LTgyNWYt
NDJlYTU1MTRlNzIyLzEveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83ZGVmMTMtYzRjZC00NmE2LTgyNWYtNDJlYTU1MTRlNzIy
LzEveFZhOHk5eWZMa3V0d0tCWDZnajN4MGdZaXg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+/hknMO
hLdlQsjHLGnDBvq4ilKmneHrGmQ8dxJeuuW6dkGc3PJ4aUTlRd1sO/AE8ymnTBfD
2BlWlemnc5uWQyyjVclTdoFEQ6djYoqfcqx1U3hsRLRplzojnNonjSVImbUcVNFx
nkKvyR+0tV1M1k4mvhoZwMj0l7Xdo0ZrsxjYEG1p0BBSQWy1xEifREC044/4T/Op
1Me9+Vbbkj9wmQNFr6lhEzkqqcOev82sTrnvk92gCIjKdIi3NQWZrjK6u782ddbt
DgA7t2nWznFN4Ora94kuz1F8DKsaSmbwf25ntpLF7GoXX8t9wI4CeckD2dZypJ5l
Pt9/0boHPZUDaw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:46 2025 by rpki-client