Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier: MWDg1cySSU6VYETB+ReukwjnxgrHG62VY+EUPAAl5xw=
Subject key identifier: 45:18:20:36:22:A2:76:3A:2A:DA:BE:34:A7:93:B3:F3:76:7E:C9:3A
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 019A5007792FB65D503AE745A8CE1F2564F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number: 16AA
Signing time: Tue 04 Nov 2025 18:00:58 +0000
Manifest this update: Tue 04 Nov 2025 18:00:58 +0000
Manifest next update: Wed 05 Nov 2025 18:00:58 +0000
Files and hashes: 1: CRGhbBrd8rm_fFrDE2Ioy1N5NRQ.roa (hash: VH5biAOV6Cy5Giu5m8tHzDNkXlFYhr3VGlYSiMF6VIE=)
2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: o0zarc/TQguw/mT6rZ5sPS7xwFI+0J1e3uszb+qAgBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:79:2f:b6:5d:50:3a:e7:45:a8:ce:1f:25:64:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Nov 4 18:00:58 2025 GMT
Not After : Nov 5 18:00:58 2025 GMT
Subject: CN=4518203622a2763a2adabe34a793b3f3767ec93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5a:c7:ff:71:57:e2:ec:80:29:a4:8b:d2:68:
84:03:f5:97:dd:f0:2a:84:ca:d6:a4:99:cf:71:61:
86:5e:36:d1:41:40:57:cb:c6:fa:b3:53:49:77:51:
85:5c:53:62:d8:07:12:08:49:e5:d3:51:4c:9d:4b:
b8:69:80:b0:e6:00:f0:97:a9:01:10:01:db:bd:ab:
64:9a:43:b9:63:e7:8b:29:10:9b:35:b9:21:bb:8b:
ca:8c:52:64:d0:05:95:ac:ef:f9:ac:0f:7b:31:fb:
1a:70:b5:90:41:06:72:8d:ec:9c:09:3d:ca:c7:3f:
bc:e5:c1:c0:ba:a7:6e:a0:6c:eb:42:20:03:25:a0:
3d:e6:70:54:cc:52:18:95:ce:f2:12:ec:ab:bb:7a:
36:20:5b:61:5d:95:f7:79:b3:46:b1:0d:b1:5f:56:
69:1a:63:67:6e:13:8c:dc:7a:88:22:83:26:5d:5a:
ed:d7:51:31:aa:79:a5:c9:3d:f1:4d:6f:c2:59:42:
95:8c:c8:11:13:1c:39:51:11:b8:b2:0a:6b:ff:e1:
ce:47:e6:7e:09:b5:c7:e5:d7:da:1c:90:31:bf:c6:
3a:3b:d9:f6:57:a9:79:d9:ad:84:dc:f4:ee:e9:51:
94:55:8e:67:66:a9:87:de:79:8f:04:74:c4:79:d4:
2f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:18:20:36:22:A2:76:3A:2A:DA:BE:34:A7:93:B3:F3:76:7E:C9:3A
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:89:1d:b7:13:53:f5:25:df:f1:f5:1b:10:0a:1a:8c:d6:72:
b6:cc:c8:8b:d6:b6:de:d1:a7:7c:e4:fe:5b:c0:1e:f6:31:74:
cb:6c:9c:41:5e:f0:ea:a3:01:9a:a1:00:e7:b9:ca:f0:15:e5:
4b:c9:b3:3b:c3:70:9c:99:50:ae:e5:0f:e0:81:2c:7d:69:1b:
01:75:44:5b:7e:88:dc:97:50:6b:b8:5c:87:56:49:00:72:23:
b8:11:cd:e9:d6:49:d4:f0:34:94:c4:89:ed:80:cd:95:26:5f:
d3:ba:b7:be:0e:f5:4c:c6:fe:96:a2:f5:e5:2d:82:bc:09:1c:
4b:b7:d9:23:06:8e:15:35:d1:9b:69:5b:44:d4:86:52:11:e6:
1b:51:54:a8:25:cf:ce:ca:ed:e5:1c:59:3e:42:c0:41:d2:9a:
a6:35:ef:01:96:81:4e:db:86:a3:f2:70:a9:a1:4d:89:87:d5:
5e:1c:62:28:4c:bb:11:e6:65:f3:2f:ee:3d:e5:50:95:c9:0c:
40:1d:a4:c9:6c:e9:f8:6e:07:08:fb:4f:35:6f:f6:a9:7a:23:
c3:93:29:11:ae:4e:ae:ad:66:93:20:a2:ad:a5:e4:50:f4:c5:
b7:24:b1:87:59:21:10:fa:a2:39:ce:48:e5:44:48:fa:37:30:
9a:fc:15:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQB3kvtl1QOudFqM4fJWT0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YTNlYjE3NWY3YjU3OTA2YzgwZjUwOGUxNWY2M2UwM2Yw
YjdlZjgwHhcNMjUxMTA0MTgwMDU4WhcNMjUxMTA1MTgwMDU4WjAzMTEwLwYDVQQD
Eyg0NTE4MjAzNjIyYTI3NjNhMmFkYWJlMzRhNzkzYjNmMzc2N2VjOTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lrH/3FX4uyAKaSL0miEA/WX3fAq
hMrWpJnPcWGGXjbRQUBXy8b6s1NJd1GFXFNi2AcSCEnl01FMnUu4aYCw5gDwl6kB
EAHbvatkmkO5Y+eLKRCbNbkhu4vKjFJk0AWVrO/5rA97MfsacLWQQQZyjeycCT3K
xz+85cHAuqduoGzrQiADJaA95nBUzFIYlc7yEuyru3o2IFthXZX3ebNGsQ2xX1Zp
GmNnbhOM3HqIIoMmXVrt11ExqnmlyT3xTW/CWUKVjMgRExw5URG4sgpr/+HOR+Z+
CbXH5dfaHJAxv8Y6O9n2V6l52a2E3PTu6VGUVY5nZqmH3nmPBHTEedQvkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUYIDYionY6Ktq+NKeTs/N2fsk6MB8GA1UdIwQY
MBaAFMSj6xdfe1eQbID1COFfY+A/C374MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1Zjkt
ZmNiNGQyMGJjZDc1LzEveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS83Zjc3YmQtYjMwMi00OTMzLWE1ZjktZmNiNGQyMGJjZDc1
LzEveEtQckYxOTdWNUJzZ1BVSTRWOWo0RDhMZnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIokdtxNT
9SXf8fUbEAoajNZytszIi9a23tGnfOT+W8Ae9jF0y2ycQV7w6qMBmqEA57nK8BXl
S8mzO8NwnJlQruUP4IEsfWkbAXVEW36I3JdQa7hch1ZJAHIjuBHN6dZJ1PA0lMSJ
7YDNlSZf07q3vg71TMb+lqL15S2CvAkcS7fZIwaOFTXRm2lbRNSGUhHmG1FUqCXP
zsrt5RxZPkLAQdKapjXvAZaBTtuGo/JwqaFNiYfVXhxiKEy7EeZl8y/uPeVQlckM
QB2kyWzp+G4HCPtPNW/2qXojw5MpEa5Orq1mkyCiraXkUPTFtySxh1khEPqiOc5I
5URI+jcwmvwVMg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:40 2025 by rpki-client