Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
File: xm3GDRbf4WSdhsFpPheFjCMGOH8.mft (raw, json)
Hash identifier: Z9IHfIT/QzaVWgaFkEd8SC6eQpJus/M63d9BXUgS7l0=
Subject key identifier: B8:DC:E4:47:3F:A2:05:DB:E2:12:2F:52:E0:E5:33:AD:A5:7F:FD:66
Authority key identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
Certificate issuer: /CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Certificate serial: 019A50E2FC9126665F4F00D37BB22CD09FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
Manifest number: 14F6
Signing time: Tue 04 Nov 2025 22:00:44 +0000
Manifest this update: Tue 04 Nov 2025 22:00:44 +0000
Manifest next update: Wed 05 Nov 2025 22:00:44 +0000
Files and hashes: 1: 9wllcBQptpahKiXvdA8fp8dAnd4.roa (hash: EZriZJeJYlorIY+q2d7CpiKRv59NpOmz9CDJjivHJGw=)
2: JehPYERpWNPyZpbjXvQLka1W0tc.roa (hash: lTB81sn8qz5yoT+HG2SJwj2/2HvuYhBId4lkI/gSD6M=)
3: xm3GDRbf4WSdhsFpPheFjCMGOH8.crl (hash: GsN7b6WqqWk2FKuabrOna4lRpe16MJ9HOcmQ5zhDgkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:fc:91:26:66:5f:4f:00:d3:7b:b2:2c:d0:9f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Validity
Not Before: Nov 4 22:00:44 2025 GMT
Not After : Nov 5 22:00:44 2025 GMT
Subject: CN=b8dce4473fa205dbe2122f52e0e533ada57ffd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d8:2d:b1:8d:a2:f7:5b:90:94:6e:ea:18:22:
f1:f4:39:bb:c6:72:08:e2:45:2f:e1:b9:aa:8b:72:
dc:8a:bb:30:b9:f5:c3:df:f5:5e:2a:9c:42:22:3a:
d9:f9:1a:c0:77:68:4c:c2:2b:07:52:c8:c1:70:4d:
dd:fc:fe:90:9e:41:a5:b9:c4:de:5a:4e:94:1f:f1:
db:c9:15:7f:d5:ed:93:bb:17:18:16:6d:88:27:b7:
44:88:61:d3:f2:78:fd:cf:39:22:e6:86:cb:1e:25:
4f:84:32:8a:98:d1:24:d0:f4:41:cb:06:97:26:bd:
7e:72:87:59:6f:06:34:ad:1f:ea:3b:11:c1:e5:76:
0b:37:2d:55:f0:04:12:62:b7:b7:60:f1:c9:a3:bd:
75:96:85:ad:c2:8c:c2:13:38:56:c2:f6:30:cc:89:
46:c5:b5:3c:8f:7b:69:91:b7:34:7d:9f:ef:59:4c:
04:76:bb:e6:95:05:f5:5c:55:6d:2b:21:12:4b:ab:
e6:81:70:f4:cd:4a:b4:28:aa:e9:f8:94:c6:0a:be:
6c:4a:11:0a:00:7a:af:83:a8:66:d1:52:2e:95:bd:
16:90:50:07:8c:97:12:ca:9a:70:1c:c9:35:eb:3b:
94:96:2c:26:18:09:69:c2:44:28:7e:b6:4b:c2:af:
f8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DC:E4:47:3F:A2:05:DB:E2:12:2F:52:E0:E5:33:AD:A5:7F:FD:66
X509v3 Authority Key Identifier:
keyid:C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e4:d1:9a:30:c2:6c:68:a7:bc:6a:da:ee:59:0c:9f:4f:ab:
6d:5d:ca:82:60:58:53:1d:8b:63:e0:34:4d:4a:96:91:12:a4:
38:62:fd:b9:ce:91:4f:94:74:3b:1b:2f:bb:0d:8c:6b:36:f9:
28:de:07:69:a1:f3:35:a8:bd:51:c8:af:09:71:d7:74:58:8c:
6e:ac:ee:83:1e:aa:4d:56:b5:e8:2b:08:ae:73:53:90:a9:ed:
6c:b5:49:9c:18:77:22:5c:66:d1:30:32:65:4e:f9:84:76:82:
38:1d:e0:e8:bd:4b:81:da:f4:88:26:26:dc:ad:dc:a3:11:ef:
e4:53:ab:9d:41:5b:4d:0c:5b:04:13:81:51:b4:09:92:59:8f:
6b:fc:d7:97:36:a4:4a:39:0e:a5:11:0e:75:ae:4b:ce:61:02:
5d:cb:89:40:48:e0:5e:71:b4:82:1f:28:bb:ab:ed:40:b5:ed:
21:3b:6e:ca:25:c7:61:0b:8a:80:6e:42:01:81:1f:82:b8:76:
73:0c:6c:bc:83:17:10:a1:18:9a:de:2c:ca:4f:cb:88:c3:23:
4b:1b:4d:09:84:d7:44:ba:b1:64:73:e3:a0:42:9a:33:2c:97:
87:31:4f:71:44:aa:49:83:a7:70:2a:3b:5f:1d:e3:44:07:d3:
8f:4a:63:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4vyRJmZfTwDTe7Is0J/CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NmRjNjBkMTZkZmUxNjQ5ZDg2YzE2OTNlMTc4NThjMjMw
NjM4N2YwHhcNMjUxMTA0MjIwMDQ0WhcNMjUxMTA1MjIwMDQ0WjAzMTEwLwYDVQQD
EyhiOGRjZTQ0NzNmYTIwNWRiZTIxMjJmNTJlMGU1MzNhZGE1N2ZmZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdgtsY2i91uQlG7qGCLx9Dm7xnII
4kUv4bmqi3LcirswufXD3/VeKpxCIjrZ+RrAd2hMwisHUsjBcE3d/P6QnkGlucTe
Wk6UH/HbyRV/1e2TuxcYFm2IJ7dEiGHT8nj9zzki5obLHiVPhDKKmNEk0PRBywaX
Jr1+codZbwY0rR/qOxHB5XYLNy1V8AQSYre3YPHJo711loWtwozCEzhWwvYwzIlG
xbU8j3tpkbc0fZ/vWUwEdrvmlQX1XFVtKyESS6vmgXD0zUq0KKrp+JTGCr5sShEK
AHqvg6hm0VIulb0WkFAHjJcSyppwHMk16zuUliwmGAlpwkQofrZLwq/4IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjc5Ec/ogXb4hIvUuDlM62lf/1mMB8GA1UdIwQY
MBaAFMZtxg0W3+FknYbBaT4XhYwjBjh/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mMGUxNjEtYTQzYy00ZDMxLWI2NWQt
ZDRmZWQ1MDg1MzkyLzEveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mMGUxNjEtYTQzYy00ZDMxLWI2NWQtZDRmZWQ1MDg1Mzky
LzEveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOTRmjDC
bGinvGra7lkMn0+rbV3KgmBYUx2LY+A0TUqWkRKkOGL9uc6RT5R0Oxsvuw2Mazb5
KN4HaaHzNai9UcivCXHXdFiMbqzugx6qTVa16CsIrnNTkKntbLVJnBh3Ilxm0TAy
ZU75hHaCOB3g6L1Lgdr0iCYm3K3coxHv5FOrnUFbTQxbBBOBUbQJklmPa/zXlzak
SjkOpREOda5LzmECXcuJQEjgXnG0gh8ou6vtQLXtITtuyiXHYQuKgG5CAYEfgrh2
cwxsvIMXEKEYmt4syk/LiMMjSxtNCYTXRLqxZHPjoEKaMyyXhzFPcUSqSYOncCo7
Xx3jRAfTj0pj4A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:38 2025 by rpki-client