Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
File: xNinONTBPEpnevUSdbqEyLNtyc4.mft (raw, json)
Hash identifier: OqKwdKldJwNwgkQ9pub6eEPPGJIeprv9bApHDd7Cfag=
Subject key identifier: CF:95:E4:13:B0:2B:CF:39:42:C4:CB:28:81:9F:9D:0D:50:7C:C8:73
Authority key identifier: C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
Certificate issuer: /CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Certificate serial: 019A4E500D4C17F2E6A7CD7C9971AA7E25B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
Manifest number: 169D
Signing time: Tue 04 Nov 2025 10:01:00 +0000
Manifest this update: Tue 04 Nov 2025 10:01:00 +0000
Manifest next update: Wed 05 Nov 2025 10:01:00 +0000
Files and hashes: 1: AOrWMlaoWwr9BiH2KC52e33LvU8.roa (hash: C5KmnNcC1frqJFB0GlvW18JGpvtpy3xiJI4dTDmXhFM=)
2: xNinONTBPEpnevUSdbqEyLNtyc4.crl (hash: rrCPHvfC/vAj1GFGF4DYCKyLVwP+bSHnlChHUsHwtoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:0d:4c:17:f2:e6:a7:cd:7c:99:71:aa:7e:25:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8a738d4c13c4a677af51275ba84c8b36dc9ce
Validity
Not Before: Nov 4 10:01:00 2025 GMT
Not After : Nov 5 10:01:00 2025 GMT
Subject: CN=cf95e413b02bcf3942c4cb28819f9d0d507cc873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:ca:d2:e4:a4:98:30:09:58:87:c6:f9:77:
d3:66:e0:53:4d:1f:b6:c8:f8:d7:02:6b:ad:56:43:
6e:f5:01:c1:d8:4f:5e:27:18:7d:a8:69:ed:cc:08:
36:79:f1:4c:14:6f:30:44:01:ca:1d:59:be:f1:8e:
57:4e:98:6a:77:8a:bf:6d:04:03:ee:bc:bf:81:8f:
d9:98:51:2e:08:4a:bb:c6:96:d7:6e:a4:5a:45:87:
aa:94:05:8a:58:6c:44:15:85:a9:95:14:7b:ca:84:
77:63:73:8a:6e:24:6c:19:ca:c2:d8:4b:ff:d3:a2:
31:4c:74:6f:be:f5:ec:ee:da:ec:71:e0:c3:a7:d4:
a7:74:e1:e9:c0:e5:4c:00:9d:6a:49:17:9c:e8:1b:
0a:96:67:dd:35:85:2d:cd:94:d4:bc:87:eb:ca:32:
ee:1f:0e:81:75:36:8f:e7:9c:6e:59:ec:b0:02:b6:
98:e1:30:34:12:dc:b4:e6:4f:68:ff:d4:32:0e:20:
9d:ac:8b:c5:8e:a6:99:84:b6:8f:ae:2d:1f:bc:65:
ef:97:14:8e:94:c2:f6:65:b7:c2:9f:d9:62:6e:2e:
d3:84:60:53:41:96:98:26:1b:5e:da:fc:2e:40:fb:
a0:12:46:74:06:fa:65:96:69:48:4e:b3:5a:8e:e2:
d4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:95:E4:13:B0:2B:CF:39:42:C4:CB:28:81:9F:9D:0D:50:7C:C8:73
X509v3 Authority Key Identifier:
keyid:C4:D8:A7:38:D4:C1:3C:4A:67:7A:F5:12:75:BA:84:C8:B3:6D:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNinONTBPEpnevUSdbqEyLNtyc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/715ade-9dae-4151-819f-af62c8465dab/1/xNinONTBPEpnevUSdbqEyLNtyc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:41:1f:b2:38:d3:34:fe:ac:c2:75:94:86:76:1e:28:75:8a:
51:6e:17:57:05:12:d4:d6:bf:86:b7:a6:e7:3b:c6:4b:0c:eb:
fb:56:f9:37:58:af:db:02:ba:b6:ac:8c:61:09:74:fc:b4:8c:
7e:fe:06:a5:f2:d4:67:b7:ba:9b:43:64:2c:9c:81:20:5b:1e:
6b:5f:71:91:0a:76:c3:ae:04:20:1b:98:fd:14:0f:4f:cb:1f:
21:45:24:fb:90:81:a5:52:c5:bc:75:5f:0c:e8:0c:14:0e:54:
6c:30:4f:5b:82:08:17:b2:df:a3:46:0a:b6:11:95:9b:f7:a7:
fd:36:be:f7:ae:84:21:f1:c6:de:6e:19:12:0b:2b:58:55:50:
7a:42:03:c6:66:52:2c:c0:c6:2f:7d:8e:fa:ff:93:c2:2a:3a:
e0:c3:9c:cf:52:ec:c6:fa:82:e4:60:5c:4e:b2:d3:86:1e:24:
91:28:9a:76:30:3e:fd:b3:92:d3:18:9e:be:19:01:aa:6c:b2:
db:d2:68:bc:e0:fc:19:66:99:6c:14:cb:73:fc:68:1e:d5:4d:
d6:a2:5b:dd:23:e1:dc:51:00:93:b0:88:cc:3a:c3:24:fb:86:
82:23:5f:c8:2c:a0:9e:e1:67:18:ba:be:32:c2:8f:73:80:a1:
05:69:38:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOUA1MF/Lmp818mXGqfiW3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZDhhNzM4ZDRjMTNjNGE2NzdhZjUxMjc1YmE4NGM4YjM2
ZGM5Y2UwHhcNMjUxMTA0MTAwMTAwWhcNMjUxMTA1MTAwMTAwWjAzMTEwLwYDVQQD
EyhjZjk1ZTQxM2IwMmJjZjM5NDJjNGNiMjg4MTlmOWQwZDUwN2NjODczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2vK0uSkmDAJWIfG+XfTZuBTTR+2
yPjXAmutVkNu9QHB2E9eJxh9qGntzAg2efFMFG8wRAHKHVm+8Y5XTphqd4q/bQQD
7ry/gY/ZmFEuCEq7xpbXbqRaRYeqlAWKWGxEFYWplRR7yoR3Y3OKbiRsGcrC2Ev/
06IxTHRvvvXs7trsceDDp9SndOHpwOVMAJ1qSRec6BsKlmfdNYUtzZTUvIfryjLu
Hw6BdTaP55xuWeywAraY4TA0Ety05k9o/9QyDiCdrIvFjqaZhLaPri0fvGXvlxSO
lML2ZbfCn9libi7ThGBTQZaYJhte2vwuQPugEkZ0BvpllmlITrNajuLUewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+V5BOwK885QsTLKIGfnQ1QfMhzMB8GA1UdIwQY
MBaAFMTYpzjUwTxKZ3r1EnW6hMizbcnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE5pbk9OVEJQRXBuZXZVU2RicUV5TE50eWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MTVhZGUtOWRhZS00MTUxLTgxOWYt
YWY2MmM4NDY1ZGFiLzEveE5pbk9OVEJQRXBuZXZVU2RicUV5TE50eWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS83MTVhZGUtOWRhZS00MTUxLTgxOWYtYWY2MmM4NDY1ZGFi
LzEveE5pbk9OVEJQRXBuZXZVU2RicUV5TE50eWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEEfsjjT
NP6swnWUhnYeKHWKUW4XVwUS1Na/hrem5zvGSwzr+1b5N1iv2wK6tqyMYQl0/LSM
fv4GpfLUZ7e6m0NkLJyBIFsea19xkQp2w64EIBuY/RQPT8sfIUUk+5CBpVLFvHVf
DOgMFA5UbDBPW4IIF7Lfo0YKthGVm/en/Ta+966EIfHG3m4ZEgsrWFVQekIDxmZS
LMDGL32O+v+Twio64MOcz1LsxvqC5GBcTrLThh4kkSiadjA+/bOS0xievhkBqmyy
29JovOD8GWaZbBTLc/xoHtVN1qJb3SPh3FEAk7CIzDrDJPuGgiNfyCygnuFnGLq+
MsKPc4ChBWk4sg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:48 2025 by rpki-client