Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json)
Hash identifier: TV18/L9qeH2u7sXj0E1GuGsQgwBaF6SNEeNy83Aufm0=
Subject key identifier: A6:B8:08:5F:D9:C6:91:9D:02:8B:FE:70:31:D6:7E:83:65:B6:18:E1
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 019A4DE1E07B2E8D6E76B23BE912792A24BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 08:00:39 +0000
Manifest this update: Tue 04 Nov 2025 08:00:39 +0000
Manifest next update: Wed 05 Nov 2025 08:00:39 +0000
Files and hashes: 1: BoKKJKVNDBlAbDDx0t4rcuMFdKc.roa (hash: J6k/Sg2MbHd91WObfCSG9OqQCQjNF25rkegFMN8dmuc=)
2: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: y8vusaFeLXhYpMRVrSBAmesCQ22rU+YjAO50SEZ8aZM=)
3: er13LyaEEpybrKtiNYKCEMG-QS8.roa (hash: aEnyWiHyU9gmwh/2jnL5BvTsMw/v/0bYu8DgEkcY+S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e0:7b:2e:8d:6e:76:b2:3b:e9:12:79:2a:24:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: Nov 4 08:00:39 2025 GMT
Not After : Nov 5 08:00:39 2025 GMT
Subject: CN=a6b8085fd9c6919d028bfe7031d67e8365b618e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:2b:5d:87:0b:89:7a:ae:94:49:68:c1:d6:
8b:6a:40:57:fc:39:50:54:8e:af:4d:dd:97:08:c4:
b9:3b:59:17:4c:6e:dc:a8:0e:d2:f3:42:f0:69:c2:
c0:b3:11:b0:07:90:93:4e:a2:a4:af:af:3f:57:31:
1f:a3:b0:d3:09:7b:9b:ba:0a:5d:a0:92:e0:ab:82:
87:29:ed:b0:a4:fa:26:1d:32:be:f9:f7:78:a6:fb:
5f:47:2b:8c:bc:43:98:69:d5:3e:f6:b4:ff:36:97:
7f:c5:b7:3c:aa:82:f7:72:ca:28:c0:c7:e0:1b:8f:
ad:84:fd:60:16:1c:48:6e:f8:db:8f:fc:a9:da:11:
48:17:bc:7b:7f:80:1b:6c:04:53:a0:a8:57:9b:eb:
19:62:17:c3:64:ab:9d:f1:af:d7:1c:cf:75:b5:9d:
b6:0f:17:8f:73:80:2b:bf:27:11:50:49:fd:61:cc:
29:da:9e:c8:fc:6a:76:1b:fc:e7:70:03:09:e8:1c:
cd:6e:05:53:68:37:ed:28:4e:fa:5e:76:69:95:dd:
13:24:5e:fd:83:fa:8f:ac:ee:ac:84:62:bd:ee:82:
31:76:d2:c5:90:2c:a3:a3:2a:38:3f:78:91:01:4b:
79:3e:a0:45:ee:41:a4:b5:05:60:5a:83:1b:7b:16:
65:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B8:08:5F:D9:C6:91:9D:02:8B:FE:70:31:D6:7E:83:65:B6:18:E1
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:80:77:90:5a:cd:45:22:8d:de:8d:b7:43:66:71:10:32:18:
70:0a:a0:9a:5d:14:73:d7:78:ec:b4:a6:cf:18:a1:81:55:21:
57:b1:28:93:b3:16:31:31:7b:b1:10:27:be:da:20:18:cb:52:
72:b7:31:7b:e0:d1:66:5d:53:38:07:7f:ad:6f:5b:96:86:b2:
01:69:00:46:d9:34:92:4c:c1:e4:ba:3c:36:93:fd:ec:c3:6d:
a6:80:28:a0:7b:a4:6d:f9:91:f3:c4:10:27:77:ab:ae:fd:a1:
0a:d3:e9:99:43:c8:57:0b:81:dd:cd:4a:ba:b0:36:dc:65:ff:
52:09:2f:49:e6:23:64:27:a0:dd:77:46:9a:58:2d:22:1c:1c:
ce:25:69:a0:c6:56:d5:3a:f7:4f:ca:83:e5:6e:6d:b3:95:e7:
ab:bd:13:5d:23:f8:44:f8:24:ed:2c:92:d8:14:bb:56:b9:4c:
0a:15:cd:bd:be:6b:40:54:5b:f3:23:21:1b:05:75:da:15:05:
05:52:bf:03:e0:e5:1e:60:9a:cc:4c:26:5b:83:2e:09:a1:69:
e4:46:7c:66:d9:8e:fa:18:ff:70:af:ab:b3:1d:ce:26:45:3f:
ad:e1:43:a4:ce:2f:2a:40:5b:7a:19:e8:51:51:bf:68:95:cf:
46:83:e2:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4eB7Lo1udrI76RJ5KiS7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMTI5YjA0NjBjZjllZTA1MDBlZTg4MGEyY2ZhMWE1MjRl
NGRmMDAwHhcNMjUxMTA0MDgwMDM5WhcNMjUxMTA1MDgwMDM5WjAzMTEwLwYDVQQD
EyhhNmI4MDg1ZmQ5YzY5MTlkMDI4YmZlNzAzMWQ2N2U4MzY1YjYxOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEcrXYcLiXqulElowdaLakBX/DlQ
VI6vTd2XCMS5O1kXTG7cqA7S80LwacLAsxGwB5CTTqKkr68/VzEfo7DTCXubugpd
oJLgq4KHKe2wpPomHTK++fd4pvtfRyuMvEOYadU+9rT/Npd/xbc8qoL3csoowMfg
G4+thP1gFhxIbvjbj/yp2hFIF7x7f4AbbARToKhXm+sZYhfDZKud8a/XHM91tZ22
DxePc4ArvycRUEn9Ycwp2p7I/Gp2G/zncAMJ6BzNbgVTaDftKE76XnZpld0TJF79
g/qPrO6shGK97oIxdtLFkCyjoyo4P3iRAUt5PqBF7kGktQVgWoMbexZlSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKa4CF/ZxpGdAov+cDHWfoNlthjhMB8GA1UdIwQY
MBaAFF0SmwRgz57gUA7ogKLPoaUk5N8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEt
YTg3N2RkNTFiYzQ5LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEtYTg3N2RkNTFiYzQ5
LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIB3kFrN
RSKN3o23Q2ZxEDIYcAqgml0Uc9d47LSmzxihgVUhV7Eok7MWMTF7sRAnvtogGMtS
crcxe+DRZl1TOAd/rW9bloayAWkARtk0kkzB5Lo8NpP97MNtpoAooHukbfmR88QQ
J3errv2hCtPpmUPIVwuB3c1KurA23GX/UgkvSeYjZCeg3XdGmlgtIhwcziVpoMZW
1Tr3T8qD5W5ts5Xnq70TXSP4RPgk7SyS2BS7VrlMChXNvb5rQFRb8yMhGwV12hUF
BVK/A+DlHmCazEwmW4MuCaFp5EZ8ZtmO+hj/cK+rsx3OJkU/reFDpM4vKkBbehno
UVG/aJXPRoPivQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:25 2025 by rpki-client