Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
File: XcYkXKggiZ1-tBQDAsIQQbXbygY.mft (raw, json)
Hash identifier: 9oFneEuBL5HXjnk9PwhHFguu9UQXFLMJ4+WO4aq6cZs=
Subject key identifier: EE:E5:F7:38:39:75:36:F7:87:78:76:1A:DB:FF:1B:9F:A8:D3:97:E1
Authority key identifier: 5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
Certificate issuer: /CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Certificate serial: 019A53E427846951D94573EEE4791209044A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
Manifest number: 06FA
Signing time: Wed 05 Nov 2025 12:00:52 +0000
Manifest this update: Wed 05 Nov 2025 12:00:52 +0000
Manifest next update: Thu 06 Nov 2025 12:00:52 +0000
Files and hashes: 1: XcYkXKggiZ1-tBQDAsIQQbXbygY.crl (hash: dM8o/75EOk422ryk3Vjw4dxXTgoF/CInJ32m3ePKKvY=)
2: p3q-BDwRqsq597BmScWC04Uizbg.roa (hash: vEfpkI+83ThIFnHcYAP8l+1vWWpuU+kEjWNLTSj4mUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:27:84:69:51:d9:45:73:ee:e4:79:12:09:04:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Validity
Not Before: Nov 5 12:00:52 2025 GMT
Not After : Nov 6 12:00:52 2025 GMT
Subject: CN=eee5f738397536f78778761adbff1b9fa8d397e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:07:67:b2:40:81:3b:d0:8a:64:8c:dd:2f:
82:d5:9b:b1:4c:56:f4:c4:48:8e:72:cf:f8:6f:93:
b4:89:66:19:de:ba:87:4c:71:b4:61:80:f5:b8:3e:
36:88:da:9d:38:34:a4:2c:1f:54:42:ac:aa:1d:6c:
56:3c:82:18:45:43:c8:d1:5b:49:71:89:cc:21:18:
89:f6:20:a2:1e:b3:58:79:f6:84:04:03:cb:31:57:
b1:dc:dd:ba:51:73:7d:95:d5:b5:c6:60:c1:ca:f9:
72:3d:a3:72:8e:5f:a6:a9:91:16:c0:1c:97:dd:c3:
a8:de:5f:10:ed:69:fa:65:a9:53:21:3a:53:5b:47:
67:1e:c2:41:cf:0d:23:57:65:7d:8c:d5:c2:02:87:
5a:ac:e3:cc:5c:b8:04:c1:c8:d0:b1:50:9c:8d:d3:
28:3b:d8:13:a3:e3:8f:9b:bd:30:5d:48:61:05:bf:
db:50:13:76:e9:bb:0b:16:62:d0:ba:92:9d:9c:e4:
d4:90:7a:b7:44:76:49:0a:c8:90:40:a7:41:8a:31:
9b:a4:48:15:da:32:bd:43:d0:4f:db:7e:32:8f:07:
5f:86:f5:90:4a:4f:13:13:95:3e:c4:3d:67:85:f8:
ac:c9:c9:87:40:e0:93:5a:a3:ad:7a:fa:f5:ec:ba:
65:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E5:F7:38:39:75:36:F7:87:78:76:1A:DB:FF:1B:9F:A8:D3:97:E1
X509v3 Authority Key Identifier:
keyid:5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5c:6c:83:5d:97:5b:ef:86:cf:ed:43:9b:61:7e:3c:cd:48:
1c:5f:6f:fb:f7:b4:39:fb:f4:bf:26:02:bf:15:f0:ac:af:83:
b5:65:27:d0:d1:22:eb:68:7d:03:3f:81:19:14:c2:42:7a:42:
2d:a9:69:77:3d:a8:54:e8:78:1f:14:e1:bf:e3:78:8a:b6:6b:
20:66:65:50:ba:a1:20:2f:cc:f0:ae:dc:ff:93:2d:ff:93:10:
5b:59:08:81:a9:9a:20:a5:93:ef:28:1e:ab:4a:6e:ae:92:ff:
95:48:28:46:33:e9:6f:85:6b:37:95:d4:2e:79:bd:f8:5e:08:
52:3c:b9:61:56:59:9c:cf:6b:b0:ba:5b:9c:2a:f0:5e:dc:57:
f3:9b:60:d1:46:ea:72:67:0e:94:d9:be:26:6b:b1:f5:58:55:
6f:45:16:fc:58:9e:f4:eb:e0:f9:89:95:ff:76:4d:ec:b7:78:
f9:62:6a:86:b5:98:1f:44:be:d6:0b:a4:d0:8e:7d:97:00:70:
61:4a:ac:db:74:6d:85:15:57:03:a5:bb:01:bd:df:4a:1e:e3:
48:89:d9:e6:68:30:96:8f:0c:74:be:9e:c9:10:99:4b:ff:6c:
1f:07:e1:c9:ca:5b:d3:37:04:1a:49:fd:4e:cc:67:f1:b4:16:
99:85:ea:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpT5CeEaVHZRXPu5HkSCQRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYzYyNDVjYTgyMDg5OWQ3ZWI0MTQwMzAyYzIxMDQxYjVk
YmNhMDYwHhcNMjUxMTA1MTIwMDUyWhcNMjUxMTA2MTIwMDUyWjAzMTEwLwYDVQQD
EyhlZWU1ZjczODM5NzUzNmY3ODc3ODc2MWFkYmZmMWI5ZmE4ZDM5N2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh0HZ7JAgTvQimSM3S+C1ZuxTFb0
xEiOcs/4b5O0iWYZ3rqHTHG0YYD1uD42iNqdODSkLB9UQqyqHWxWPIIYRUPI0VtJ
cYnMIRiJ9iCiHrNYefaEBAPLMVex3N26UXN9ldW1xmDByvlyPaNyjl+mqZEWwByX
3cOo3l8Q7Wn6ZalTITpTW0dnHsJBzw0jV2V9jNXCAodarOPMXLgEwcjQsVCcjdMo
O9gTo+OPm70wXUhhBb/bUBN26bsLFmLQupKdnOTUkHq3RHZJCsiQQKdBijGbpEgV
2jK9Q9BP234yjwdfhvWQSk8TE5U+xD1nhfisycmHQOCTWqOtevr17LplUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7l9zg5dTb3h3h2Gtv/G5+o05fhMB8GA1UdIwQY
MBaAFF3GJFyoIImdfrQUAwLCEEG128oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YTQzMGYtNDBjNS00NzRiLThmZDkt
MDc0ZWQ3MGI0NjczLzEvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84YTQzMGYtNDBjNS00NzRiLThmZDktMDc0ZWQ3MGI0Njcz
LzEvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFxsg12X
W++Gz+1Dm2F+PM1IHF9v+/e0Ofv0vyYCvxXwrK+DtWUn0NEi62h9Az+BGRTCQnpC
Lalpdz2oVOh4HxThv+N4irZrIGZlULqhIC/M8K7c/5Mt/5MQW1kIgamaIKWT7yge
q0purpL/lUgoRjPpb4VrN5XULnm9+F4IUjy5YVZZnM9rsLpbnCrwXtxX85tg0Ubq
cmcOlNm+Jmux9VhVb0UW/Fie9Ovg+YmV/3ZN7Ld4+WJqhrWYH0S+1guk0I59lwBw
YUqs23RthRVXA6W7Ab3fSh7jSInZ5mgwlo8MdL6eyRCZS/9sHwfhycpb0zcEGkn9
Tsxn8bQWmYXqSQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:43:48 2025 by rpki-client