Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: jsuPjDi82G/j06YiOirEFugsCVS24qJ67MRuisBJs5E=
Subject key identifier: 43:26:9E:F7:21:4E:94:B2:97:07:56:E2:9F:BE:AE:5C:D9:4C:84:A6
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 019A537625CD9BC1661EE138AE8AC7E3E437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 1714
Signing time: Wed 05 Nov 2025 10:00:43 +0000
Manifest this update: Wed 05 Nov 2025 10:00:43 +0000
Manifest next update: Thu 06 Nov 2025 10:00:43 +0000
Files and hashes: 1: BF6kk7Ioe_IANLRocL5TB8rFDXg.roa (hash: I9vdVPlJI90+Jqde5mcaJ83frB+5PPL50CTnL2GyUcg=)
2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: J+uWUpO3GJ9HXh0KCmARRTzj9m4K57uwzl9LmW3YqPY=)
3: ciH-ly2HETPUQCD4TRirLR18GQo.roa (hash: 71uXiXu0mczhWCwGxw73zRSUQufVbuKwkYWRQfbodEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:25:cd:9b:c1:66:1e:e1:38:ae:8a:c7:e3:e4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Nov 5 10:00:43 2025 GMT
Not After : Nov 6 10:00:43 2025 GMT
Subject: CN=43269ef7214e94b2970756e29fbeae5cd94c84a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:7a:8a:72:e5:0e:9a:e7:5e:71:55:05:8d:
3b:ff:31:15:20:85:f1:33:ce:35:8e:a3:0c:62:2c:
56:ae:03:08:a1:b2:a6:15:57:c2:a4:3d:ec:5f:35:
0d:6e:9b:00:20:96:e4:72:38:1f:76:5f:39:6a:1a:
7b:25:24:85:6f:8c:25:f8:88:0d:f6:4f:85:79:f6:
a5:29:cd:8b:ae:75:d7:7f:3a:87:0f:82:0e:13:3b:
57:22:f0:c5:1d:37:ac:10:2b:61:d5:cf:a5:cb:f5:
00:88:04:6e:cb:b6:26:c4:24:88:20:fd:05:5b:26:
49:59:58:46:a8:56:46:41:be:86:62:25:00:f0:ed:
10:3a:31:3b:ee:4a:a7:1b:3a:84:6b:5e:a5:2f:25:
8e:10:be:9c:0d:91:db:09:82:e5:4f:7a:d3:da:e1:
61:da:55:66:33:2f:28:88:01:a4:2f:b4:24:75:3a:
1b:0c:8c:8a:2f:59:2f:c8:3b:89:72:04:44:6a:b5:
52:3a:85:38:39:75:24:59:a8:5c:b8:1b:2d:9e:54:
c3:14:79:bd:b5:8f:2f:2f:3d:0b:ea:f7:ff:46:ee:
22:6e:ad:16:48:64:03:28:53:8d:22:e9:69:16:4a:
c8:dc:15:a9:2a:90:d2:22:a4:d5:dd:ad:22:be:fc:
5a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:26:9E:F7:21:4E:94:B2:97:07:56:E2:9F:BE:AE:5C:D9:4C:84:A6
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:71:38:54:99:bb:52:ac:7c:94:e6:16:77:03:6b:85:12:c5:
e4:a7:b6:98:b9:6a:35:1b:41:60:5c:22:3d:1d:d3:a2:5c:de:
62:66:7d:9b:cb:eb:1d:84:43:04:d6:57:9d:57:5f:04:52:03:
7c:25:37:57:4e:15:6f:09:2d:8a:72:b3:53:7e:52:a4:48:cb:
ad:36:e5:9d:6c:f5:7d:56:fb:2b:a5:de:c3:a5:56:0e:0c:c8:
0b:29:aa:33:ee:61:fb:f3:21:7a:ab:a5:16:42:98:27:36:7d:
63:6c:95:98:ce:fa:69:1c:3c:1f:ef:44:1e:e9:d6:c2:b4:2b:
ff:ea:fd:b0:a2:29:8a:74:e5:5e:0e:09:13:d3:33:4c:eb:3d:
ef:1d:ff:ff:d0:48:92:55:0a:cc:a3:42:52:89:8b:8c:32:2d:
0e:82:26:b0:2c:c1:1f:c2:87:ff:85:76:d2:0a:47:2e:0f:af:
2a:d7:54:7a:47:31:82:d0:b6:62:5b:8a:4f:bd:54:9c:a2:06:
92:ab:40:9b:f2:2c:7a:44:5e:24:eb:d9:f3:ca:14:b6:8f:09:
6a:5b:f4:25:c4:b7:54:5c:15:fd:67:61:d3:bf:d6:f5:56:00:
ab:80:2b:d8:ba:66:dc:1e:3a:28:62:42:38:91:b9:30:27:7d:
b1:b0:13:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTdiXNm8FmHuE4rorH4+Q3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNTdjOGY4ZDllZTVlMmNlNzA0M2UxZWMyNmJiMTY5M2Y3
ZjEyMWYwHhcNMjUxMTA1MTAwMDQzWhcNMjUxMTA2MTAwMDQzWjAzMTEwLwYDVQQD
Eyg0MzI2OWVmNzIxNGU5NGIyOTcwNzU2ZTI5ZmJlYWU1Y2Q5NGM4NGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgd6inLlDprnXnFVBY07/zEVIIXx
M841jqMMYixWrgMIobKmFVfCpD3sXzUNbpsAIJbkcjgfdl85ahp7JSSFb4wl+IgN
9k+FefalKc2LrnXXfzqHD4IOEztXIvDFHTesECth1c+ly/UAiARuy7YmxCSIIP0F
WyZJWVhGqFZGQb6GYiUA8O0QOjE77kqnGzqEa16lLyWOEL6cDZHbCYLlT3rT2uFh
2lVmMy8oiAGkL7QkdTobDIyKL1kvyDuJcgREarVSOoU4OXUkWahcuBstnlTDFHm9
tY8vLz0L6vf/Ru4ibq0WSGQDKFONIulpFkrI3BWpKpDSIqTV3a0ivvxaUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMmnvchTpSylwdW4p++rlzZTISmMB8GA1UdIwQY
MBaAFFxXyPjZ7l4s5wQ+HsJrsWk/fxIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQt
MWY2YjJkMTRmNGY5LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQtMWY2YjJkMTRmNGY5
LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXE4VJm7
Uqx8lOYWdwNrhRLF5Ke2mLlqNRtBYFwiPR3TolzeYmZ9m8vrHYRDBNZXnVdfBFID
fCU3V04VbwktinKzU35SpEjLrTblnWz1fVb7K6Xew6VWDgzICymqM+5h+/Mhequl
FkKYJzZ9Y2yVmM76aRw8H+9EHunWwrQr/+r9sKIpinTlXg4JE9MzTOs97x3//9BI
klUKzKNCUomLjDItDoImsCzBH8KH/4V20gpHLg+vKtdUekcxgtC2YluKT71UnKIG
kqtAm/IsekReJOvZ88oUto8Jalv0JcS3VFwV/Wdh07/W9VYAq4Ar2Lpm3B46KGJC
OJG5MCd9sbAT8w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:06:31 2025 by rpki-client