Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier: wo8OzsXpCc3ylmmj3FYAQ0zlRg3eMNKE8aQOsb53yDA=
Subject key identifier: B3:82:BA:CF:20:D5:88:64:EC:E3:D5:C2:E6:8D:09:6C:1D:FC:7D:A6
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer: /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial: 019A4FD03008B9C6978F9FE5A0BB1872FBA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number: 0ED6
Signing time: Tue 04 Nov 2025 17:00:35 +0000
Manifest this update: Tue 04 Nov 2025 17:00:35 +0000
Manifest next update: Wed 05 Nov 2025 17:00:35 +0000
Files and hashes: 1: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: M6iL3pqeOHBi9tYBIDP9iPM26tbDmdlFnhU5TKBCE9I=)
2: mmQZQMc3pi55Js-9aVzfnXjlBGY.roa (hash: 93uL4N1ZhKCAtYqh9gXaRNVs2vWfWmN+xYkYAO6a64o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:30:08:b9:c6:97:8f:9f:e5:a0:bb:18:72:fb:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Validity
Not Before: Nov 4 17:00:35 2025 GMT
Not After : Nov 5 17:00:35 2025 GMT
Subject: CN=b382bacf20d58864ece3d5c2e68d096c1dfc7da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:e6:06:c6:fe:1b:2d:5b:38:5f:65:ec:49:
1b:23:ea:b9:e2:a1:c6:5e:6b:5c:ac:00:2e:45:45:
ac:d1:e9:b6:9e:58:ed:1b:3d:7f:53:20:14:b9:25:
d2:5d:e8:77:d6:cc:75:f5:73:cc:3a:89:cf:c4:ac:
73:b0:68:1d:87:63:cf:b8:4d:37:f0:6d:1f:ed:d8:
c8:d9:52:46:68:ec:6f:6b:1e:7c:bf:55:16:a8:cc:
e3:f5:eb:7a:6e:e6:e8:ce:13:c9:49:48:99:f0:a7:
33:6b:44:7f:18:8c:d5:d2:e6:35:22:71:03:4b:2b:
d0:f1:17:06:37:58:b8:92:87:51:4d:0d:b6:74:7b:
d4:9d:4a:71:32:af:27:dc:ab:96:f8:03:7b:38:53:
33:2d:2c:42:c2:41:c9:9a:06:0c:2d:31:90:4e:90:
e9:1e:85:5b:e2:69:dc:be:97:5e:4d:43:e2:12:f8:
09:4a:c3:e3:6e:0e:e2:73:c8:82:0a:2a:85:dd:32:
c4:f7:f7:90:73:c0:fc:7e:4d:36:b5:10:3d:3c:62:
7b:e5:ee:77:f0:9d:c1:c9:de:6c:19:6f:18:64:08:
bd:06:81:be:cc:26:90:31:27:18:13:cb:91:16:9c:
61:c0:13:c3:ef:ad:8a:58:bb:fa:5c:c5:c5:ab:fc:
59:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:82:BA:CF:20:D5:88:64:EC:E3:D5:C2:E6:8D:09:6C:1D:FC:7D:A6
X509v3 Authority Key Identifier:
keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:96:9d:a3:71:df:fe:55:73:d7:4a:dd:15:32:9c:50:c0:e7:
bb:24:1b:7b:c4:3b:b9:7f:0b:1f:19:63:26:ee:a8:2e:ff:95:
53:4c:6b:be:b7:c4:07:a9:21:e1:2c:7a:87:96:50:3a:58:9c:
3e:38:5b:6c:d5:32:f1:b1:b3:90:f0:0d:97:5c:3d:61:c3:a5:
b4:45:5a:5b:49:cf:9a:ef:e0:a8:45:7f:74:2e:c9:f7:ea:ef:
45:f3:c6:cc:27:f9:f3:dd:8d:63:fd:ab:4b:31:0e:ca:a8:97:
f9:61:9d:2b:2e:d1:f3:da:60:2c:fd:ed:2f:7d:f9:89:75:5d:
36:69:eb:73:e7:d9:27:5b:ec:fc:35:93:92:81:11:34:e9:4d:
c6:c7:47:59:85:f8:0c:2c:4e:b4:3f:c5:fe:2b:cf:22:0e:db:
69:36:09:01:b9:61:79:21:24:0c:7a:92:78:4e:cc:16:79:d8:
cd:a9:e3:9a:13:3e:16:39:35:62:a9:63:a0:db:bc:54:65:e9:
cd:e8:ec:31:cf:87:61:b1:d0:95:df:52:f9:02:7c:11:1f:3b:
c1:6a:ab:4f:e2:e9:47:f3:16:65:f9:ef:71:9a:e6:c3:4d:a9:
c5:16:64:89:fd:58:8e:76:b0:05:c2:89:0b:31:be:73:49:94:
7b:82:a0:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0DAIucaXj5/loLsYcvunMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMTNhMjFiNGU4Y2UxNGNlN2Q2NjgwYzk5MGVjNmJhMjlh
MDI3YzIwHhcNMjUxMTA0MTcwMDM1WhcNMjUxMTA1MTcwMDM1WjAzMTEwLwYDVQQD
EyhiMzgyYmFjZjIwZDU4ODY0ZWNlM2Q1YzJlNjhkMDk2YzFkZmM3ZGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxzmBsb+Gy1bOF9l7EkbI+q54qHG
XmtcrAAuRUWs0em2nljtGz1/UyAUuSXSXeh31sx19XPMOonPxKxzsGgdh2PPuE03
8G0f7djI2VJGaOxvax58v1UWqMzj9et6bubozhPJSUiZ8Kcza0R/GIzV0uY1InED
SyvQ8RcGN1i4kodRTQ22dHvUnUpxMq8n3KuW+AN7OFMzLSxCwkHJmgYMLTGQTpDp
HoVb4mncvpdeTUPiEvgJSsPjbg7ic8iCCiqF3TLE9/eQc8D8fk02tRA9PGJ75e53
8J3Byd5sGW8YZAi9BoG+zCaQMScYE8uRFpxhwBPD762KWLv6XMXFq/xZvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOCus8g1Yhk7OPVwuaNCWwd/H2mMB8GA1UdIwQY
MBaAFP8TohtOjOFM59ZoDJkOxropoCfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kNmNmZTktYzMwMS00MDc5LTg2Yjkt
N2ZiYzRlNTc5N2ExLzEvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9kNmNmZTktYzMwMS00MDc5LTg2YjktN2ZiYzRlNTc5N2Ex
LzEvX3hPaUcwNk00VXpuMW1nTW1RN0d1aW1nSjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZado3Hf
/lVz10rdFTKcUMDnuyQbe8Q7uX8LHxljJu6oLv+VU0xrvrfEB6kh4Sx6h5ZQOlic
PjhbbNUy8bGzkPANl1w9YcOltEVaW0nPmu/gqEV/dC7J9+rvRfPGzCf5892NY/2r
SzEOyqiX+WGdKy7R89pgLP3tL335iXVdNmnrc+fZJ1vs/DWTkoERNOlNxsdHWYX4
DCxOtD/F/ivPIg7baTYJAblheSEkDHqSeE7MFnnYzanjmhM+Fjk1YqljoNu8VGXp
zejsMc+HYbHQld9S+QJ8ER87wWqrT+LpR/MWZfnvcZrmw02pxRZkif1YjnawBcKJ
CzG+c0mUe4Kgkg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:43:48 2025 by rpki-client