Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
File: xmJhwznF7fjYxIPwjka4SAqAXvE.mft (raw, json)
Hash identifier: UgIWPWgzUQ1JHxbjEMNXEODybH/l0J5pFcyScX/Q1Ek=
Subject key identifier: EF:3F:1D:61:8F:FE:F6:8C:8B:33:6B:3B:2A:33:1F:DB:A8:C8:E9:87
Authority key identifier: C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
Certificate issuer: /CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Certificate serial: 019A4D075EFECB11ED5CDF25BCAFF069D2D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
Manifest number: 1648
Signing time: Tue 04 Nov 2025 04:01:59 +0000
Manifest this update: Tue 04 Nov 2025 04:01:59 +0000
Manifest next update: Wed 05 Nov 2025 04:01:59 +0000
Files and hashes: 1: n0PQVaq6lp0buyh71HmvCGJy3cY.roa (hash: QL9cb+VrnWZDKfgvQ3BKYLRd9xHYcd+B/V/qEKLIfgU=)
2: xmJhwznF7fjYxIPwjka4SAqAXvE.crl (hash: S5/SIKLqxYvT+hJ9vs343+VgX8voUs2zIuKU6N1b9II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:5e:fe:cb:11:ed:5c:df:25:bc:af:f0:69:d2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Validity
Not Before: Nov 4 04:01:59 2025 GMT
Not After : Nov 5 04:01:59 2025 GMT
Subject: CN=ef3f1d618ffef68c8b336b3b2a331fdba8c8e987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:33:44:42:81:5a:18:a8:6a:b6:3b:a1:b4:
90:22:f6:50:8e:ba:42:46:2d:32:db:48:fa:b2:bd:
96:35:ee:e7:72:dc:d5:f9:76:42:a4:f6:0c:bb:d3:
4c:3e:66:eb:3b:3a:f7:c5:45:3e:fd:ef:e9:b8:1a:
ae:aa:a3:5e:42:39:a7:74:b0:cd:1b:74:e9:30:8b:
3d:5c:de:e1:f5:4a:83:a3:e1:63:0e:b7:74:c4:6e:
fa:9e:a0:3d:a2:92:1b:de:2e:b6:88:c8:c8:b5:ce:
00:1f:16:a8:43:d3:c2:62:66:a7:50:64:09:c9:9f:
2d:ea:5c:26:bf:e9:8a:e2:11:b8:a7:d2:96:db:a8:
57:d6:2d:d6:31:ec:25:89:9d:1d:ce:26:c8:fb:71:
43:da:6b:c2:0c:fe:39:d5:a5:d8:49:ab:35:de:59:
42:7c:6d:cb:72:7c:1f:b3:ad:04:80:fa:8d:79:04:
7c:0f:f8:87:5a:64:88:d3:35:a5:b5:63:1d:1e:02:
28:ca:eb:14:b7:8f:6b:4f:51:7e:b5:ab:f5:ac:4a:
63:f5:97:c5:6b:27:77:b7:09:67:b9:cb:af:e8:7c:
ea:c4:3d:91:72:72:69:6c:60:0c:98:93:17:d2:f5:
6b:b8:a8:56:4a:02:04:a3:52:2a:ba:b6:21:6b:22:
71:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3F:1D:61:8F:FE:F6:8C:8B:33:6B:3B:2A:33:1F:DB:A8:C8:E9:87
X509v3 Authority Key Identifier:
keyid:C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:37:eb:eb:17:56:96:b3:10:58:a3:c2:b0:83:ee:f2:3d:07:
0c:c8:c7:86:af:3b:df:b1:05:83:97:d9:ae:1c:b1:66:99:6b:
37:36:ea:83:68:a4:5d:7e:e0:bb:ac:52:14:08:e7:2b:1e:a3:
dd:35:86:d6:3c:85:b7:5d:b9:50:fd:fc:dd:07:ac:57:7f:c0:
c6:4a:86:a0:d5:45:a1:f1:6f:0c:1f:6f:34:50:b9:df:79:43:
7c:8a:bf:de:b2:cd:07:e5:f7:e3:71:8f:75:05:8a:e5:29:da:
59:b0:32:48:58:c0:28:c9:e3:29:97:59:d6:05:86:97:65:81:
05:21:46:4c:98:7a:34:d3:e2:f4:8d:d2:ea:39:bf:88:8a:d1:
2f:cb:a4:71:41:7c:47:a4:52:06:82:98:a0:fe:d4:49:ed:8b:
74:5e:8d:f2:ea:8b:93:75:d9:f2:b7:ff:45:f5:a9:6c:a9:0e:
f2:60:e9:51:ff:37:2e:99:4e:56:a1:0e:10:6b:59:76:ab:d9:
90:ae:1c:f7:88:85:09:f5:62:00:3c:fa:8f:a6:01:4c:34:4a:
57:d1:aa:6f:80:4d:b4:4c:2d:a1:19:68:99:41:ab:6d:19:b3:
ff:28:49:36:57:ad:52:c0:89:12:96:65:8c:70:91:44:96:dc:
2d:97:7c:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNB17+yxHtXN8lvK/wadLWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2MWMzMzljNWVkZjhkOGM0ODNmMDhlNDZiODQ4MGE4
MDVlZjEwHhcNMjUxMTA0MDQwMTU5WhcNMjUxMTA1MDQwMTU5WjAzMTEwLwYDVQQD
EyhlZjNmMWQ2MThmZmVmNjhjOGIzMzZiM2IyYTMzMWZkYmE4YzhlOTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniEzREKBWhioarY7obSQIvZQjrpC
Ri0y20j6sr2WNe7nctzV+XZCpPYMu9NMPmbrOzr3xUU+/e/puBquqqNeQjmndLDN
G3TpMIs9XN7h9UqDo+FjDrd0xG76nqA9opIb3i62iMjItc4AHxaoQ9PCYmanUGQJ
yZ8t6lwmv+mK4hG4p9KW26hX1i3WMewliZ0dzibI+3FD2mvCDP451aXYSas13llC
fG3Lcnwfs60EgPqNeQR8D/iHWmSI0zWltWMdHgIoyusUt49rT1F+tav1rEpj9ZfF
ayd3twlnucuv6HzqxD2RcnJpbGAMmJMX0vVruKhWSgIEo1IqurYhayJx2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8/HWGP/vaMizNrOyozH9uoyOmHMB8GA1UdIwQY
MBaAFMZiYcM5xe342MSD8I5GuEgKgF7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81MjU5NTItN2FmYi00NDNkLWFmMGEt
NzdjM2UxYzhmNmRlLzEveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS81MjU5NTItN2FmYi00NDNkLWFmMGEtNzdjM2UxYzhmNmRl
LzEveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTfr6xdW
lrMQWKPCsIPu8j0HDMjHhq8737EFg5fZrhyxZplrNzbqg2ikXX7gu6xSFAjnKx6j
3TWG1jyFt125UP383QesV3/AxkqGoNVFofFvDB9vNFC533lDfIq/3rLNB+X343GP
dQWK5SnaWbAySFjAKMnjKZdZ1gWGl2WBBSFGTJh6NNPi9I3S6jm/iIrRL8ukcUF8
R6RSBoKYoP7USe2LdF6N8uqLk3XZ8rf/RfWpbKkO8mDpUf83LplOVqEOEGtZdqvZ
kK4c94iFCfViADz6j6YBTDRKV9Gqb4BNtEwtoRlomUGrbRmz/yhJNletUsCJEpZl
jHCRRJbcLZd8jg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:02:44 2025 by rpki-client