Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
File: XOsOvYeLd9QvLKndCPcMMjxdA9s.mft (raw, json)
Hash identifier: jB0Pq5qDSgPettbDnJbxI9Fi34DeVtrHU1RvjWOzlYQ=
Subject key identifier: B3:76:71:AA:E8:60:70:A6:4A:7B:74:00:AB:FA:ED:C8:A8:7C:65:DA
Authority key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
Certificate issuer: /CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Certificate serial: 019A53AD0B8E819DB77BBE4D1CF965B55F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
Manifest number: 102E
Signing time: Wed 05 Nov 2025 11:00:40 +0000
Manifest this update: Wed 05 Nov 2025 11:00:40 +0000
Manifest next update: Thu 06 Nov 2025 11:00:40 +0000
Files and hashes: 1: RACkLgbLLbmOoJBt91BZdfyl6A0.roa (hash: MZ4vzxaGNc7jn7F682fp+i7yjq4zVlNk1kc4N8fk1T0=)
2: XOsOvYeLd9QvLKndCPcMMjxdA9s.crl (hash: 1k2rRN/zafcxmsPOw/LhDvIWlj5dILRqwRRpwMnPOAY=)
3: zR84EUjuhaa5ivFSjib2H6uqTAI.roa (hash: OvGw4b3tIigD4ZAweUVrQghHKdITbbX+aX8uLk9vlAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:0b:8e:81:9d:b7:7b:be:4d:1c:f9:65:b5:5f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Validity
Not Before: Nov 5 11:00:40 2025 GMT
Not After : Nov 6 11:00:40 2025 GMT
Subject: CN=b37671aae86070a64a7b7400abfaedc8a87c65da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:26:95:3b:f0:34:ab:fa:91:da:0a:07:67:
b2:5d:16:29:42:77:48:bb:23:69:5e:30:95:68:31:
5b:e4:a9:e5:05:4b:5e:1d:c1:73:c9:b1:39:b1:30:
f1:b6:cc:18:95:87:c4:53:2e:e4:15:56:b9:75:11:
72:11:5f:3f:6e:22:d2:a6:91:80:37:16:79:7a:78:
b9:c5:ba:5a:fc:8d:01:50:fe:7b:4d:05:50:9a:d2:
01:6a:84:6b:39:96:73:6d:35:5b:1f:a1:11:3b:53:
83:13:d1:6e:8c:fe:c2:87:1b:d2:a9:e5:db:f9:1d:
24:04:c6:22:6d:ac:fc:2b:e3:34:22:b5:ef:2b:40:
df:f4:52:e5:2e:bc:4e:96:db:d3:eb:26:54:87:f9:
24:2a:41:de:ea:8b:ad:2c:ea:c2:86:f0:d9:db:a4:
ac:49:e5:15:11:5a:12:0d:94:d3:3e:85:65:1c:04:
9c:7f:c5:e7:d1:31:b7:b8:90:2a:55:9b:d9:4e:a4:
7b:f4:93:b2:ed:83:29:77:15:99:09:98:93:73:2b:
e4:9c:6d:86:0c:4e:c3:52:e8:b0:26:22:72:76:00:
aa:9e:c9:98:47:47:07:0d:b8:b6:67:0d:a4:98:4b:
05:eb:b6:8e:a2:07:c7:4b:5e:85:df:27:30:80:17:
f4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:76:71:AA:E8:60:70:A6:4A:7B:74:00:AB:FA:ED:C8:A8:7C:65:DA
X509v3 Authority Key Identifier:
keyid:5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:55:08:77:7c:91:e8:8e:6f:b6:31:8a:ea:e6:9e:8b:76:c0:
46:4d:4e:fb:a8:46:34:3a:41:be:36:12:47:1a:32:03:32:94:
f8:40:d6:fd:48:35:5f:b9:79:7e:ad:7e:8d:1a:10:3d:c0:3c:
c0:7d:d9:93:50:64:8c:7f:4f:bd:af:1e:d4:46:0c:80:04:06:
ca:29:5d:5a:09:42:60:37:7c:e4:c4:69:cb:a5:a7:2e:9a:b7:
f8:9e:42:73:25:5e:f2:12:be:d5:35:c4:5b:78:95:4e:78:89:
e3:bc:f1:f1:ac:5c:c0:02:df:fd:aa:ea:4b:ae:e9:49:92:18:
92:60:21:f3:d4:25:07:45:58:7d:73:e8:18:38:85:ce:82:92:
bc:10:b3:04:94:43:75:5c:33:31:2c:b5:e4:9b:23:a0:d2:e4:
e7:6a:b9:94:ec:ec:3d:df:34:f9:4a:47:29:31:b2:84:08:e4:
ad:4e:6b:a4:f7:ed:d4:58:43:00:68:9f:ca:1a:38:17:8c:5b:
1d:61:e8:60:85:10:d9:05:b9:c5:66:2d:a0:92:02:54:c4:5a:
65:15:07:c8:69:14:46:07:8c:23:c1:97:a3:ce:bd:16:25:be:
d3:75:61:49:04:20:a5:90:54:5b:9a:0f:51:aa:9a:16:5e:53:
13:6f:5c:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTrQuOgZ23e75NHPlltV9mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZWIwZWJkODc4Yjc3ZDQyZjJjYTlkZDA4ZjcwYzMyM2M1
ZDAzZGIwHhcNMjUxMTA1MTEwMDQwWhcNMjUxMTA2MTEwMDQwWjAzMTEwLwYDVQQD
EyhiMzc2NzFhYWU4NjA3MGE2NGE3Yjc0MDBhYmZhZWRjOGE4N2M2NWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3UmlTvwNKv6kdoKB2eyXRYpQndI
uyNpXjCVaDFb5KnlBUteHcFzybE5sTDxtswYlYfEUy7kFVa5dRFyEV8/biLSppGA
NxZ5eni5xbpa/I0BUP57TQVQmtIBaoRrOZZzbTVbH6ERO1ODE9FujP7ChxvSqeXb
+R0kBMYibaz8K+M0IrXvK0Df9FLlLrxOltvT6yZUh/kkKkHe6outLOrChvDZ26Ss
SeUVEVoSDZTTPoVlHAScf8Xn0TG3uJAqVZvZTqR79JOy7YMpdxWZCZiTcyvknG2G
DE7DUuiwJiJydgCqnsmYR0cHDbi2Zw2kmEsF67aOogfHS16F3ycwgBf0AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLN2caroYHCmSnt0AKv67ciofGXaMB8GA1UdIwQY
MBaAFFzrDr2Hi3fULyyp3Qj3DDI8XQPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8zZTcyZWQtMWQ2NS00OTgyLWFkOWEt
OWMzNzQ3OGE1OTNmLzEvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8zZTcyZWQtMWQ2NS00OTgyLWFkOWEtOWMzNzQ3OGE1OTNm
LzEvWE9zT3ZZZUxkOVF2TEtuZENQY01NanhkQTlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1UId3yR
6I5vtjGK6uaei3bARk1O+6hGNDpBvjYSRxoyAzKU+EDW/Ug1X7l5fq1+jRoQPcA8
wH3Zk1BkjH9Pva8e1EYMgAQGyildWglCYDd85MRpy6WnLpq3+J5CcyVe8hK+1TXE
W3iVTniJ47zx8axcwALf/arqS67pSZIYkmAh89QlB0VYfXPoGDiFzoKSvBCzBJRD
dVwzMSy15JsjoNLk52q5lOzsPd80+UpHKTGyhAjkrU5rpPft1FhDAGifyho4F4xb
HWHoYIUQ2QW5xWYtoJICVMRaZRUHyGkURgeMI8GXo869FiW+03VhSQQgpZBUW5oP
UaqaFl5TE29cfQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:53:21 2025 by rpki-client