Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
File: x6trIlTkVzCq-kWrUZcyA2FLtsw.mft (raw, json)
Hash identifier: 2GlZCwn7fTK1MkHhQnFADWUDCo7qwo5lR5KV0wwnY0c=
Subject key identifier: 97:E5:1E:05:DE:39:80:C1:51:B1:E7:29:F1:AA:CB:7E:37:5A:E0:D5
Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
Certificate issuer: /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Certificate serial: 019A4D73F802150F63189E874FF0A41A400F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
Manifest number: 144F
Signing time: Tue 04 Nov 2025 06:00:37 +0000
Manifest this update: Tue 04 Nov 2025 06:00:37 +0000
Manifest next update: Wed 05 Nov 2025 06:00:37 +0000
Files and hashes: 1: 1-nvEOeF_8-seqo32QYrx6ZTVBbQ.roa (hash: wVf2ruzd40pFbTR8RI0Ob3qelEQ26yizyOMJb6WWHNQ=)
2: G0WvFuc_CxaN6eARB2yClzaX2KQ.roa (hash: OXBzj+MAAD5v1p61n5nSRmMEjnNH86aTtUDpVIx76+o=)
3: x6trIlTkVzCq-kWrUZcyA2FLtsw.crl (hash: JgcZTq4L431ClUbBlW60yFIbhUG+dqpWnhJsmaoQ1XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:f8:02:15:0f:63:18:9e:87:4f:f0:a4:1a:40:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Validity
Not Before: Nov 4 06:00:37 2025 GMT
Not After : Nov 5 06:00:37 2025 GMT
Subject: CN=97e51e05de3980c151b1e729f1aacb7e375ae0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ee:58:43:68:ef:f9:07:fa:70:6a:ad:4f:42:
f2:f8:12:72:fd:45:0e:61:50:06:59:2b:48:59:49:
16:dc:f3:d8:81:68:d6:23:72:c3:8e:ad:b5:78:f2:
71:cc:1d:76:b9:af:4d:c7:6b:d6:15:26:df:f8:04:
f9:4a:86:ec:9d:fa:05:49:5a:e8:73:0e:f2:d9:3a:
6f:61:a5:d2:38:9a:ad:c5:36:41:92:d9:44:97:c1:
1c:c6:7e:00:04:91:d5:9b:f9:96:c0:1a:4f:a5:8e:
17:77:58:c4:be:8f:6b:7f:43:27:9f:46:ef:00:ff:
e5:fb:48:92:d5:4d:db:e1:f3:5c:94:40:b8:02:f6:
c8:8c:6a:0e:6c:ea:32:b4:76:f1:84:57:1d:8c:61:
a8:de:e6:a8:1a:6c:d2:98:83:a7:42:75:60:57:ba:
4e:1c:d1:f2:84:f7:be:e4:a6:4f:1a:87:dd:cc:e7:
c6:92:c3:18:74:29:32:02:25:27:2e:36:e3:ae:83:
2b:c7:c4:d4:75:3d:a7:ec:c8:0e:cc:8f:7e:73:3b:
77:7e:c7:2f:7d:c8:12:64:b8:f5:5f:46:f5:2b:4a:
ae:00:c4:a8:b3:ce:bf:18:42:1c:a3:88:25:64:b7:
e3:99:d4:72:bf:d7:8e:ea:a7:e5:49:4c:a8:7a:28:
38:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E5:1E:05:DE:39:80:C1:51:B1:E7:29:F1:AA:CB:7E:37:5A:E0:D5
X509v3 Authority Key Identifier:
keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:12:48:9b:a5:f7:12:a3:2d:6d:a2:f0:95:78:ed:76:1c:05:
99:98:56:b8:78:d9:a6:89:df:1a:d9:fd:0b:82:08:89:b3:47:
26:1f:96:2d:a3:92:91:69:b8:b4:01:80:a1:b4:8b:1e:d9:0c:
12:4d:78:71:f9:57:ac:9d:57:ae:3e:48:c5:e2:e9:ff:05:be:
e4:90:12:0e:71:58:d9:71:25:00:33:10:4f:b0:29:16:cb:27:
8e:a3:6c:48:4f:31:b8:b1:88:c2:f5:ff:d8:72:bb:99:da:99:
00:b5:2b:cd:fc:4a:66:25:8d:86:9c:b5:7e:54:32:9f:e6:e9:
c7:42:3d:bf:6a:b0:94:58:5e:28:34:f4:46:35:42:3b:78:e1:
bd:f9:5d:f4:6a:e8:63:30:c0:dd:25:e0:e0:ba:5d:69:92:3f:
72:9e:3b:af:ef:b5:5b:41:bf:4d:1d:66:a7:a9:eb:1f:fd:d5:
cf:6f:de:48:69:bc:88:7d:99:72:16:6c:10:33:72:ab:a5:a4:
08:16:eb:12:29:a1:e6:02:cf:2c:7f:ae:59:4e:19:69:a2:6f:
02:4f:01:77:9d:7f:e7:15:5f:ea:03:a3:e0:6c:67:31:47:d6:
c9:da:2f:eb:10:7b:27:92:bc:ed:dc:79:3c:0e:b1:33:ee:18:
de:5a:8e:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc/gCFQ9jGJ6HT/CkGkAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YWI2YjIyNTRlNDU3MzBhYWZhNDVhYjUxOTczMjAzNjE0
YmI2Y2MwHhcNMjUxMTA0MDYwMDM3WhcNMjUxMTA1MDYwMDM3WjAzMTEwLwYDVQQD
Eyg5N2U1MWUwNWRlMzk4MGMxNTFiMWU3MjlmMWFhY2I3ZTM3NWFlMGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu5YQ2jv+Qf6cGqtT0Ly+BJy/UUO
YVAGWStIWUkW3PPYgWjWI3LDjq21ePJxzB12ua9Nx2vWFSbf+AT5SobsnfoFSVro
cw7y2TpvYaXSOJqtxTZBktlEl8Ecxn4ABJHVm/mWwBpPpY4Xd1jEvo9rf0Mnn0bv
AP/l+0iS1U3b4fNclEC4AvbIjGoObOoytHbxhFcdjGGo3uaoGmzSmIOnQnVgV7pO
HNHyhPe+5KZPGofdzOfGksMYdCkyAiUnLjbjroMrx8TUdT2n7MgOzI9+czt3fscv
fcgSZLj1X0b1K0quAMSos86/GEIco4glZLfjmdRyv9eO6qflSUyoeig4/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJflHgXeOYDBUbHnKfGqy343WuDVMB8GA1UdIwQY
MBaAFMerayJU5FcwqvpFq1GXMgNhS7bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zM2I2OWQtZjRjYS00M2FhLTk3ODAt
MWQ1NWQ1OTI5Y2VjLzEveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8zM2I2OWQtZjRjYS00M2FhLTk3ODAtMWQ1NWQ1OTI5Y2Vj
LzEveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxJIm6X3
EqMtbaLwlXjtdhwFmZhWuHjZponfGtn9C4IIibNHJh+WLaOSkWm4tAGAobSLHtkM
Ek14cflXrJ1Xrj5IxeLp/wW+5JASDnFY2XElADMQT7ApFssnjqNsSE8xuLGIwvX/
2HK7mdqZALUrzfxKZiWNhpy1flQyn+bpx0I9v2qwlFheKDT0RjVCO3jhvfld9Gro
YzDA3SXg4LpdaZI/cp47r++1W0G/TR1mp6nrH/3Vz2/eSGm8iH2ZchZsEDNyq6Wk
CBbrEimh5gLPLH+uWU4ZaaJvAk8Bd51/5xVf6gOj4GxnMUfWydov6xB7J5K87dx5
PA6xM+4Y3lqOrQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:46 2025 by rpki-client