Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
File: xN8L0EqoQ-aAgvbezgeYcytviDI.mft (raw, json)
Hash identifier: 3Ns2LJv6pVYpM+zSXEjge/588YNwWVxYFvZKy967k/w=
Subject key identifier: 96:78:07:60:EC:9C:90:F0:45:BC:F1:86:EE:54:25:BF:1F:4A:08:A4
Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Certificate serial: 019A4DAB2522FC3BFA1522F5D0C3D84EC6D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
Manifest number: 169E
Signing time: Tue 04 Nov 2025 07:00:53 +0000
Manifest this update: Tue 04 Nov 2025 07:00:53 +0000
Manifest next update: Wed 05 Nov 2025 07:00:53 +0000
Files and hashes: 1: 0PsILassVkdjO3YLqLzhDep43F0.roa (hash: BTuwwmqm+lVoIfqGdzicWWpXk8ZLAGxFDZrA6HPrjFA=)
2: T00AB9xipsEuuuK1wmFSrgJa6EQ.roa (hash: h2lLCAhcvRlcJCiD1oieS2PrcXQxs+tKUD+48vFOxxo=)
3: ZB1bFwuNv6eWdiv8dDMsMnuoFfs.roa (hash: +Mo9nvZ4p8mpAlYTdnVEDmvUa5mEw+oncE82//f49Ts=)
4: j4_7U96IEPffvwOTiMn9moiTZAE.roa (hash: Z8Hyt/Bq5aoXLuGUE36BT9I0Ee4e3qh5AvVB4wMCsaI=)
5: xN8L0EqoQ-aAgvbezgeYcytviDI.crl (hash: OqQ5HZb9yjBJAJlrJ4eecNZu112Njtp4YlmSjgE7kxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:25:22:fc:3b:fa:15:22:f5:d0:c3:d8:4e:c6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832
Validity
Not Before: Nov 4 07:00:53 2025 GMT
Not After : Nov 5 07:00:53 2025 GMT
Subject: CN=96780760ec9c90f045bcf186ee5425bf1f4a08a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e9:58:3f:9f:e2:f8:79:fc:23:14:3e:f6:c7:
ff:87:85:db:3e:6f:87:65:ed:4f:74:1b:f2:a8:ef:
36:e3:6d:bd:74:cf:17:27:21:6f:7f:0b:23:cf:55:
e7:d1:c8:c3:1d:7c:9b:52:e5:27:8f:80:7a:b7:d3:
20:51:ff:bc:70:be:64:22:05:fc:68:94:df:57:19:
a8:9d:7f:43:31:aa:d2:58:11:97:23:c0:7f:1a:f6:
88:d2:33:d5:db:25:f5:4f:01:5a:60:12:75:c9:0f:
af:ef:7d:43:e3:fb:ff:d3:ff:6f:cc:ca:db:06:e5:
17:73:e3:c1:39:d2:c6:ec:96:1b:d9:6c:82:35:71:
8f:eb:90:bf:de:f8:91:d0:b4:2a:58:f3:20:2a:8b:
cd:92:5b:4f:ef:d4:db:92:6f:cb:1c:29:70:86:70:
23:44:75:77:06:06:2c:38:46:50:23:e8:3a:e5:a4:
49:d9:4f:48:19:7d:3a:9d:22:95:0e:04:27:6a:2a:
b4:a8:c9:29:e9:7e:4b:7f:73:ab:32:85:e4:f1:26:
3e:10:5a:3d:6e:5a:d0:c8:f0:59:3f:d8:d4:d0:fe:
e3:9c:0c:de:73:98:a4:2e:e2:52:25:3f:07:26:3c:
dc:77:93:12:b9:25:17:83:f8:29:38:61:3a:bf:01:
20:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:78:07:60:EC:9C:90:F0:45:BC:F1:86:EE:54:25:BF:1F:4A:08:A4
X509v3 Authority Key Identifier:
keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c3:d6:f5:d5:f3:96:19:01:d3:67:61:00:86:86:6d:e1:63:
df:97:1e:32:d0:6f:91:e7:0a:42:a8:ad:5c:3a:32:d7:fd:b1:
cd:b7:ff:33:75:62:01:38:6a:c4:6d:ee:c2:66:4b:c2:a2:55:
21:af:ec:3e:71:7a:11:4a:3a:1d:29:0e:ef:aa:52:2d:89:4b:
67:e1:c0:46:3f:97:41:8c:c6:e3:89:fc:c6:6e:e4:3e:4e:de:
8c:2f:2e:b2:47:5a:b0:64:3d:e6:c9:35:ab:5a:d5:60:51:ee:
fa:af:06:6d:f9:8d:ba:d8:e0:96:10:2b:b0:5b:66:53:43:87:
c2:af:a5:19:0b:fd:1f:91:ae:30:15:81:24:dc:79:62:a9:9d:
df:25:92:fd:03:29:aa:52:c7:87:4e:33:34:d7:e4:55:ba:e1:
67:47:bd:ea:c0:fc:c1:d4:92:3e:17:70:1d:f4:b3:b1:b0:a4:
df:3b:4e:1b:86:39:99:11:33:24:f1:49:75:2c:ea:68:38:a9:
01:1b:40:e4:85:14:ac:9f:71:dc:36:5b:da:14:7c:68:6f:77:
fa:2a:e6:25:62:67:1e:2b:69:b7:76:ce:e9:27:01:14:94:11:
eb:a9:a1:6a:04:77:fe:c9:22:2c:bc:26:e5:02:98:15:88:77:
f3:94:f6:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqyUi/Dv6FSL10MPYTsbWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZGYwYmQwNGFhODQzZTY4MDgyZjZkZWNlMDc5ODczMmI2
Zjg4MzIwHhcNMjUxMTA0MDcwMDUzWhcNMjUxMTA1MDcwMDUzWjAzMTEwLwYDVQQD
Eyg5Njc4MDc2MGVjOWM5MGYwNDViY2YxODZlZTU0MjViZjFmNGEwOGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OlYP5/i+Hn8IxQ+9sf/h4XbPm+H
Ze1PdBvyqO824229dM8XJyFvfwsjz1Xn0cjDHXybUuUnj4B6t9MgUf+8cL5kIgX8
aJTfVxmonX9DMarSWBGXI8B/GvaI0jPV2yX1TwFaYBJ1yQ+v731D4/v/0/9vzMrb
BuUXc+PBOdLG7JYb2WyCNXGP65C/3viR0LQqWPMgKovNkltP79Tbkm/LHClwhnAj
RHV3BgYsOEZQI+g65aRJ2U9IGX06nSKVDgQnaiq0qMkp6X5Lf3OrMoXk8SY+EFo9
blrQyPBZP9jU0P7jnAzec5ikLuJSJT8HJjzcd5MSuSUXg/gpOGE6vwEgjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZ4B2DsnJDwRbzxhu5UJb8fSgikMB8GA1UdIwQY
MBaAFMTfC9BKqEPmgIL23s4HmHMrb4gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAt
Y2I5ZTFlZDc3OWFjLzEveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAtY2I5ZTFlZDc3OWFj
LzEveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsPW9dXz
lhkB02dhAIaGbeFj35ceMtBvkecKQqitXDoy1/2xzbf/M3ViAThqxG3uwmZLwqJV
Ia/sPnF6EUo6HSkO76pSLYlLZ+HARj+XQYzG44n8xm7kPk7ejC8uskdasGQ95sk1
q1rVYFHu+q8GbfmNutjglhArsFtmU0OHwq+lGQv9H5GuMBWBJNx5Yqmd3yWS/QMp
qlLHh04zNNfkVbrhZ0e96sD8wdSSPhdwHfSzsbCk3ztOG4Y5mREzJPFJdSzqaDip
ARtA5IUUrJ9x3DZb2hR8aG93+irmJWJnHitpt3bO6ScBFJQR66mhagR3/skiLLwm
5QKYFYh385T2jw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:42 2025 by rpki-client