Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
File: x0at2Nr-mfan14fUR5VFpkb23tg.mft (raw, json)
Hash identifier: HdgTi58+Jy8BCqweMF86rjT9DW9S1/EIy1J2Ivo8EYU=
Subject key identifier: F6:A3:1D:A6:5F:4C:21:06:BB:E4:7A:4A:EF:A6:10:86:15:C6:5C:27
Authority key identifier: C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
Certificate issuer: /CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Certificate serial: 019A4DE22BDD2031676EB77366F253E9B988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:59 +0000
Manifest this update: Tue 04 Nov 2025 08:00:59 +0000
Manifest next update: Wed 05 Nov 2025 08:00:59 +0000
Files and hashes: 1: 5ew0AHvlVZKk-XGMQ-7_VQCyPko.roa (hash: r01XfwbxbtnFEz4LgMmHMoPfMeBX2hjKhEb9/b2NI+4=)
2: x0at2Nr-mfan14fUR5VFpkb23tg.crl (hash: aUOaPX85U6vzQ29QOlt63Ufyw9XjTbhbIuXUa2M0Lis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:2b:dd:20:31:67:6e:b7:73:66:f2:53:e9:b9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Validity
Not Before: Nov 4 08:00:59 2025 GMT
Not After : Nov 5 08:00:59 2025 GMT
Subject: CN=f6a31da65f4c2106bbe47a4aefa6108615c65c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:d2:be:0e:2d:a9:49:8b:91:89:01:01:dd:
ea:36:27:d1:96:10:df:40:62:83:c9:92:df:e3:28:
c7:66:de:fa:06:e9:ae:67:a4:c9:c2:6b:cd:61:57:
45:1c:26:a0:c3:7c:12:a5:ce:b2:ac:ca:a3:af:95:
2e:c1:e2:40:35:34:aa:ae:6a:7c:76:21:e6:bb:46:
28:56:bc:b2:61:15:fb:c4:40:10:e7:7e:85:4c:96:
8b:d2:1e:81:e5:6f:13:c8:1d:dd:39:ce:f3:45:60:
ee:1d:28:b2:e8:c1:1a:43:e0:4f:6f:7d:c5:69:1c:
fb:82:a7:89:b8:eb:4b:9c:5b:c7:e8:e6:f4:01:47:
ae:dc:86:fa:f8:1c:d6:b2:ab:af:59:fb:3d:fe:cb:
b5:f1:4b:ee:ee:77:2f:8f:2f:b5:1b:5d:42:50:93:
3b:8a:19:41:7d:c3:1a:08:ed:e7:95:c8:ed:03:5c:
be:cf:37:8a:0d:b2:94:c0:4f:e8:ed:8f:42:f6:5d:
2f:3b:70:21:bd:27:1f:37:f0:7e:16:ec:46:39:01:
fb:f1:5d:1d:39:8c:b1:6f:c0:b6:98:3c:fb:e1:b7:
5e:99:ba:be:a1:fd:c0:a8:39:23:1a:3e:40:75:33:
ad:73:72:49:27:aa:f1:59:df:dd:9d:d9:35:5c:7e:
f6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A3:1D:A6:5F:4C:21:06:BB:E4:7A:4A:EF:A6:10:86:15:C6:5C:27
X509v3 Authority Key Identifier:
keyid:C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0e:10:ae:c5:42:40:9c:74:0f:21:80:e6:08:c0:b3:35:f0:
69:25:15:d4:6f:f3:82:73:72:99:ad:b7:c9:26:8a:87:d7:ce:
48:25:79:b1:a0:1b:a4:4c:d9:6e:72:fc:8b:4a:df:04:99:f6:
dd:9c:68:b0:13:16:ca:87:ed:10:de:84:95:cb:65:29:37:06:
79:3b:ee:87:06:78:57:5a:52:c1:6b:d5:6f:c5:11:04:c6:1f:
cd:6e:6e:0a:50:01:8c:39:52:d9:8d:16:ad:10:b3:bb:2f:8a:
06:5e:94:dd:79:c1:1e:de:17:47:aa:7b:46:b7:31:6a:ba:62:
b3:2b:db:f2:97:de:3c:4f:6e:9d:45:85:41:c1:0a:d3:6c:5c:
ef:b4:91:b4:2d:1c:45:63:17:6e:a9:50:b3:01:1e:47:eb:4f:
7a:a3:31:9e:6e:f6:0e:08:95:bc:e6:77:0c:94:f8:98:f9:01:
87:a1:24:40:0c:53:63:cc:fd:75:00:c4:ec:75:26:d4:69:52:
d7:41:bf:5d:bb:75:65:93:e0:cb:42:67:dc:eb:15:f7:ab:45:
bc:35:c5:8e:b0:e8:99:1b:89:06:5a:d0:27:13:e2:e5:24:d5:
c7:d7:3f:75:ff:47:e2:ac:0a:2b:b8:fd:8a:38:80:59:ae:18:
b7:a6:6a:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4ivdIDFnbrdzZvJT6bmIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NDZhZGQ4ZGFmZTk5ZjZhN2Q3ODdkNDQ3OTU0NWE2NDZm
NmRlZDgwHhcNMjUxMTA0MDgwMDU5WhcNMjUxMTA1MDgwMDU5WjAzMTEwLwYDVQQD
EyhmNmEzMWRhNjVmNGMyMTA2YmJlNDdhNGFlZmE2MTA4NjE1YzY1YzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSrSvg4tqUmLkYkBAd3qNifRlhDf
QGKDyZLf4yjHZt76BumuZ6TJwmvNYVdFHCagw3wSpc6yrMqjr5UuweJANTSqrmp8
diHmu0YoVryyYRX7xEAQ536FTJaL0h6B5W8TyB3dOc7zRWDuHSiy6MEaQ+BPb33F
aRz7gqeJuOtLnFvH6Ob0AUeu3Ib6+BzWsquvWfs9/su18Uvu7ncvjy+1G11CUJM7
ihlBfcMaCO3nlcjtA1y+zzeKDbKUwE/o7Y9C9l0vO3AhvScfN/B+FuxGOQH78V0d
OYyxb8C2mDz74bdembq+of3AqDkjGj5AdTOtc3JJJ6rxWd/dndk1XH72ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPajHaZfTCEGu+R6Su+mEIYVxlwnMB8GA1UdIwQY
MBaAFMdGrdja/pn2p9eH1EeVRaZG9t7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDBhdDJOci1tZmFuMTRmVVI1VkZwa2IyM3RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zNzJhYWYtNTA2Mi00MTQ3LTg3N2It
N2NiZmU3MzdhODI3LzEveDBhdDJOci1tZmFuMTRmVVI1VkZwa2IyM3RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8zNzJhYWYtNTA2Mi00MTQ3LTg3N2ItN2NiZmU3MzdhODI3
LzEveDBhdDJOci1tZmFuMTRmVVI1VkZwa2IyM3RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnA4QrsVC
QJx0DyGA5gjAszXwaSUV1G/zgnNyma23ySaKh9fOSCV5saAbpEzZbnL8i0rfBJn2
3ZxosBMWyoftEN6ElctlKTcGeTvuhwZ4V1pSwWvVb8URBMYfzW5uClABjDlS2Y0W
rRCzuy+KBl6U3XnBHt4XR6p7Rrcxarpisyvb8pfePE9unUWFQcEK02xc77SRtC0c
RWMXbqlQswEeR+tPeqMxnm72DgiVvOZ3DJT4mPkBh6EkQAxTY8z9dQDE7HUm1GlS
10G/Xbt1ZZPgy0Jn3OsV96tFvDXFjrDomRuJBlrQJxPi5STVx9c/df9H4qwKK7j9
ijiAWa4Yt6ZqPA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:34 2025 by rpki-client