Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
File: XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft (raw, json)
Hash identifier: koYpHBmOaiazzgRSwr6oOh3TQMeR4cp/DfIJ+Yhi9QQ=
Subject key identifier: 29:42:5B:1A:EC:D9:ED:8B:9F:49:10:F0:36:39:0B:A4:21:75:9B:88
Authority key identifier: 5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
Certificate issuer: /CN=5d656b2013e851516b942fa90706c72090dcddef
Certificate serial: 019A4F9960CDB157DF4C206239AE9C03AF49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 16:00:43 +0000
Manifest this update: Tue 04 Nov 2025 16:00:43 +0000
Manifest next update: Wed 05 Nov 2025 16:00:43 +0000
Files and hashes: 1: XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl (hash: MH886wmjAYteM4OBxn1Gb5ZncbR32Jqc15E9FB2HCPU=)
2: eE4dt64YbIc12mVCfO2vYEZbsAA.roa (hash: P8IHkCQWXy483d0oeppd6qsQK9bS8c+YRPET1f6MD4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:60:cd:b1:57:df:4c:20:62:39:ae:9c:03:af:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d656b2013e851516b942fa90706c72090dcddef
Validity
Not Before: Nov 4 16:00:43 2025 GMT
Not After : Nov 5 16:00:43 2025 GMT
Subject: CN=29425b1aecd9ed8b9f4910f036390ba421759b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:49:8d:ac:6b:43:8c:b2:b4:ab:5c:56:aa:e7:
3b:81:3b:90:06:ec:49:a7:ce:57:e6:39:1a:69:72:
52:39:3d:a6:30:e6:16:81:1e:0f:a7:b0:1d:fa:7f:
17:23:5d:65:c8:9e:a0:03:e4:74:2c:c2:5f:7d:ae:
28:a2:e6:6f:65:28:b3:5d:1a:f0:d1:c5:e1:4a:b2:
5b:82:af:11:5d:77:4c:ed:3c:69:ef:e0:fa:cb:f5:
87:6d:d7:63:61:68:f6:9d:a5:d3:16:56:3d:f5:68:
8f:48:71:56:ed:f8:2a:db:58:95:29:8f:a5:fa:63:
e7:e8:fe:83:84:1c:1c:36:ff:bd:38:d3:7d:6e:ca:
fd:81:92:f6:f2:18:98:e7:d8:56:3b:da:06:73:76:
a5:ed:99:e0:d9:49:4a:cc:ce:2b:a4:1f:d4:ef:b5:
e7:80:c0:2d:a2:e0:5e:c2:ee:48:50:3a:79:d9:9f:
f2:21:0e:00:51:bf:1f:71:be:63:17:68:8d:f7:69:
59:b1:62:c1:ee:ab:ba:2b:12:7d:a8:0b:0d:e6:6d:
25:ae:e1:64:45:66:83:82:b1:6c:f8:bc:73:42:8f:
01:20:bc:86:40:d6:bd:f6:cf:6b:15:be:07:d9:94:
62:c6:05:fb:7e:75:43:4c:cf:76:dd:38:87:8c:25:
9f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:42:5B:1A:EC:D9:ED:8B:9F:49:10:F0:36:39:0B:A4:21:75:9B:88
X509v3 Authority Key Identifier:
keyid:5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3f:2c:a5:72:91:1c:a2:a6:0a:5f:2d:2a:e6:69:c4:7e:ab:
89:bf:91:de:c5:18:07:89:fc:81:5b:97:74:65:4d:5a:c0:f0:
05:be:79:03:98:fa:c8:f6:3e:40:45:30:71:a8:26:bc:37:45:
28:b8:95:f5:62:1a:81:1b:4a:72:40:86:5c:9b:04:c1:f9:50:
71:fe:fe:51:60:b4:63:90:ee:be:d5:d5:1e:90:8b:39:7d:26:
be:70:3c:36:ad:6b:3a:e0:3a:d2:9d:d2:f0:bc:53:b3:b1:67:
8a:ca:9b:3c:43:5f:52:ec:3f:65:89:59:3c:fb:f4:1a:1a:86:
31:32:47:ac:47:48:ae:7a:02:77:e6:6a:51:6f:c9:57:aa:14:
f6:1e:4e:3a:e3:4b:89:bd:e9:82:e3:8c:f6:fb:4c:1f:5f:a7:
2f:91:35:c0:73:93:13:4c:a9:cb:75:ea:21:62:19:c5:14:f5:
e5:ea:a8:7b:1f:4d:c9:97:48:0e:0e:5e:8b:8a:0b:c4:e2:49:
da:4f:34:db:b8:8d:b3:c3:11:ae:ee:bc:11:8e:e0:38:7a:18:
6f:9a:92:72:05:9f:7f:6b:f9:ba:a9:d3:4a:f4:da:e2:44:f8:
47:c0:ad:cb:9f:7b:16:8d:16:87:1e:d5:1f:6d:7b:e2:23:95:
f6:f7:9a:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmWDNsVffTCBiOa6cA69JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNjU2YjIwMTNlODUxNTE2Yjk0MmZhOTA3MDZjNzIwOTBk
Y2RkZWYwHhcNMjUxMTA0MTYwMDQzWhcNMjUxMTA1MTYwMDQzWjAzMTEwLwYDVQQD
EygyOTQyNWIxYWVjZDllZDhiOWY0OTEwZjAzNjM5MGJhNDIxNzU5Yjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+UmNrGtDjLK0q1xWquc7gTuQBuxJ
p85X5jkaaXJSOT2mMOYWgR4Pp7Ad+n8XI11lyJ6gA+R0LMJffa4oouZvZSizXRrw
0cXhSrJbgq8RXXdM7Txp7+D6y/WHbddjYWj2naXTFlY99WiPSHFW7fgq21iVKY+l
+mPn6P6DhBwcNv+9ONN9bsr9gZL28hiY59hWO9oGc3al7Zng2UlKzM4rpB/U77Xn
gMAtouBewu5IUDp52Z/yIQ4AUb8fcb5jF2iN92lZsWLB7qu6KxJ9qAsN5m0lruFk
RWaDgrFs+LxzQo8BILyGQNa99s9rFb4H2ZRixgX7fnVDTM923TiHjCWfLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClCWxrs2e2Ln0kQ8DY5C6QhdZuIMB8GA1UdIwQY
MBaAFF1layAT6FFRa5QvqQcGxyCQ3N3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xZGY3NjQtMmI4My00MzQzLTkxMDIt
NDdhOWY5NmNhNTg2LzEvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8xZGY3NjQtMmI4My00MzQzLTkxMDItNDdhOWY5NmNhNTg2
LzEvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATj8spXKR
HKKmCl8tKuZpxH6rib+R3sUYB4n8gVuXdGVNWsDwBb55A5j6yPY+QEUwcagmvDdF
KLiV9WIagRtKckCGXJsEwflQcf7+UWC0Y5DuvtXVHpCLOX0mvnA8Nq1rOuA60p3S
8LxTs7FnisqbPENfUuw/ZYlZPPv0GhqGMTJHrEdIrnoCd+ZqUW/JV6oU9h5OOuNL
ib3pguOM9vtMH1+nL5E1wHOTE0ypy3XqIWIZxRT15eqoex9NyZdIDg5ei4oLxOJJ
2k8027iNs8MRru68EY7gOHoYb5qScgWff2v5uqnTSvTa4kT4R8Cty597Fo0Whx7V
H2174iOV9vea4w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:33:18 2025 by rpki-client