Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
File: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft (raw, json)
Hash identifier: kdYrhieCAMqk0DXVKUJxz4AuFCX5Fe1oPJjsx3eyTn4=
Subject key identifier: F5:07:B7:19:60:E4:3B:D4:5B:83:C2:60:3F:A9:83:D4:97:8A:4C:95
Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Certificate issuer: /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Certificate serial: 019A4D73A47B13BCF4CD5E0B08C5A2FADCA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
Manifest number: 075C
Signing time: Tue 04 Nov 2025 06:00:15 +0000
Manifest this update: Tue 04 Nov 2025 06:00:15 +0000
Manifest next update: Wed 05 Nov 2025 06:00:15 +0000
Files and hashes: 1: gO1QQzQ8EJSK1sz9QVMIVflw4Is.roa (hash: XHDVuSMRNZ8ZK68EQ/rZiQRsF4JaubC5jLA4NaC8LBM=)
2: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl (hash: 16vCiDMwGzl6vF7Z+942Sq6EXKDpRUc7Hx8flzwVLcs=)
3: z5AaUIsCUfsHWnAtqAIr_d8n8do.roa (hash: rmzyF9COLH0iNSyMo0DleMzCkcEN6+9Om4xVkdPkL6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:a4:7b:13:bc:f4:cd:5e:0b:08:c5:a2:fa:dc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Validity
Not Before: Nov 4 06:00:15 2025 GMT
Not After : Nov 5 06:00:15 2025 GMT
Subject: CN=f507b71960e43bd45b83c2603fa983d4978a4c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:20:bb:cf:b4:b5:8c:4e:a3:8b:4c:24:ad:
18:e5:fc:19:5e:1b:73:cc:36:d8:9d:7d:f2:b7:f4:
28:70:1f:78:ee:d7:b3:a1:6a:0f:17:ce:d3:fc:e6:
58:1b:30:2f:cd:95:41:33:16:c6:38:f3:0e:d3:2f:
78:bd:6f:8b:60:d2:6f:4b:6f:5b:f5:24:01:16:06:
e8:fd:c7:8c:97:bd:8f:38:a4:92:56:ec:16:99:be:
67:d4:8e:6c:40:0d:28:b6:a5:80:db:6b:84:9c:02:
40:77:a3:5b:eb:e0:bf:07:10:fa:81:26:c2:88:68:
ba:6a:f2:c7:17:9d:98:96:a0:08:3e:11:90:69:ef:
d6:9f:8f:1d:a8:82:97:70:4d:40:fd:db:51:41:6a:
57:cd:59:53:bc:2d:99:77:21:68:77:d1:73:e9:54:
13:59:db:0c:b9:9d:bb:ae:8c:bb:b4:b4:b5:41:74:
eb:a9:a2:7f:43:cb:72:01:15:85:39:38:4e:77:8c:
92:42:5a:54:6a:80:59:a8:81:9b:2d:22:30:72:98:
7c:5d:23:e1:00:1f:36:17:89:0c:9c:fb:67:25:b1:
44:11:4b:29:4b:5e:9c:85:e5:80:03:ec:a6:2a:4c:
6b:4f:d0:45:7c:98:25:d1:03:1e:2e:6d:90:7c:6a:
b4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:07:B7:19:60:E4:3B:D4:5B:83:C2:60:3F:A9:83:D4:97:8A:4C:95
X509v3 Authority Key Identifier:
keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:03:f8:c5:c3:26:4c:79:10:d3:5e:53:5b:10:11:d0:7a:f7:
3c:59:11:ee:57:54:93:bf:03:98:0c:0e:af:d2:54:45:4b:4c:
2e:43:d9:95:90:f1:8b:24:a5:79:0e:43:33:c8:61:dc:8c:4c:
d2:6e:6b:b1:56:e7:e7:63:fb:3b:8d:d9:c2:16:31:4c:7f:96:
0b:23:de:f9:81:12:0f:52:44:4b:99:9c:31:31:04:2e:fa:35:
29:20:f9:f6:b3:d0:5b:41:18:45:89:c9:4b:8d:f9:a4:1b:05:
e8:51:8d:b9:37:89:fd:b7:ec:7e:e2:02:36:78:56:e8:bf:09:
97:24:ab:39:72:00:61:b5:90:49:62:b4:ca:6b:5f:e8:61:0a:
14:1f:14:24:e2:41:b3:cf:00:6a:d8:c0:17:86:46:4b:22:5e:
c9:13:51:f7:f7:97:70:ad:30:0a:3c:fb:a6:d1:ed:15:b2:94:
0b:ea:9f:57:61:29:49:70:6c:3b:48:3f:34:44:79:e8:a1:3d:
00:40:84:3d:d4:4f:4b:26:67:cd:81:81:5b:21:d0:2f:a5:00:
a3:0b:be:5f:7e:26:f0:6f:39:0c:dd:26:55:2c:7c:03:10:14:
fa:79:56:eb:29:db:27:ff:6c:8e:85:6a:39:ab:e1:0c:e4:db:
d6:25:d7:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc6R7E7z0zV4LCMWi+tyiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTg1MDE3M2M4ZDI4ZDVhZmJmOTEwOTFjYTYzZTVkYTNj
NzVlZDQwHhcNMjUxMTA0MDYwMDE1WhcNMjUxMTA1MDYwMDE1WjAzMTEwLwYDVQQD
EyhmNTA3YjcxOTYwZTQzYmQ0NWI4M2MyNjAzZmE5ODNkNDk3OGE0Yzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1Mgu8+0tYxOo4tMJK0Y5fwZXhtz
zDbYnX3yt/QocB947tezoWoPF87T/OZYGzAvzZVBMxbGOPMO0y94vW+LYNJvS29b
9SQBFgbo/ceMl72POKSSVuwWmb5n1I5sQA0otqWA22uEnAJAd6Nb6+C/BxD6gSbC
iGi6avLHF52YlqAIPhGQae/Wn48dqIKXcE1A/dtRQWpXzVlTvC2ZdyFod9Fz6VQT
WdsMuZ27roy7tLS1QXTrqaJ/Q8tyARWFOThOd4ySQlpUaoBZqIGbLSIwcph8XSPh
AB82F4kMnPtnJbFEEUspS16cheWAA+ymKkxrT9BFfJgl0QMeLm2QfGq0VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUHtxlg5DvUW4PCYD+pg9SXikyVMB8GA1UdIwQY
MBaAFMYYUBc8jSjVr7+RCRymPl2jx17UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhoUUZ6eU5LTld2djVFSkhLWS1YYVBIWHRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9lZTA5ZjEtN2QwYi00MzFmLWFhZWUt
YmI4ZGViYzAwMzg4LzEveGhoUUZ6eU5LTld2djVFSkhLWS1YYVBIWHRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9lZTA5ZjEtN2QwYi00MzFmLWFhZWUtYmI4ZGViYzAwMzg4
LzEveGhoUUZ6eU5LTld2djVFSkhLWS1YYVBIWHRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAP4xcMm
THkQ015TWxAR0Hr3PFkR7ldUk78DmAwOr9JURUtMLkPZlZDxiySleQ5DM8hh3IxM
0m5rsVbn52P7O43ZwhYxTH+WCyPe+YESD1JES5mcMTEELvo1KSD59rPQW0EYRYnJ
S435pBsF6FGNuTeJ/bfsfuICNnhW6L8JlySrOXIAYbWQSWK0ymtf6GEKFB8UJOJB
s88AatjAF4ZGSyJeyRNR9/eXcK0wCjz7ptHtFbKUC+qfV2EpSXBsO0g/NER56KE9
AECEPdRPSyZnzYGBWyHQL6UAowu+X34m8G85DN0mVSx8AxAU+nlW6ynbJ/9sjoVq
OavhDOTb1iXXTw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:38 2025 by rpki-client