Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier: yKwqrcnQy78i+tr96OacLburijirb52f3oIGZ5CC8mU=
Subject key identifier: EA:A6:72:B5:1E:BB:4F:CA:26:57:E2:BA:C2:DE:05:56:51:BB:5A:50
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial: 019A4D060ACA512257D2102A12F0707DDF84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 04:00:32 +0000
Manifest this update: Tue 04 Nov 2025 04:00:32 +0000
Manifest next update: Wed 05 Nov 2025 04:00:32 +0000
Files and hashes: 1: nywPQh9QP-OhqhIRdI1AR086REo.roa (hash: fyTq9cJsDKGICMb+AhPPiPfngZOBuqPjdSV/9OfNj10=)
2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: nrp5u7AfG/LW1ks1KhNQeEiB1sbzAS7eYpL49227xzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:0a:ca:51:22:57:d2:10:2a:12:f0:70:7d:df:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Validity
Not Before: Nov 4 04:00:32 2025 GMT
Not After : Nov 5 04:00:32 2025 GMT
Subject: CN=eaa672b51ebb4fca2657e2bac2de055651bb5a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b0:50:1a:b9:ba:52:34:03:36:9c:c3:a0:74:
be:d9:db:80:f6:7e:b6:10:82:a5:2b:be:cb:0f:22:
dc:b2:e2:f8:15:56:b9:e5:de:16:cf:9f:de:60:87:
3a:db:3c:5b:a5:c7:77:bd:e8:6f:5a:bb:62:6e:fb:
9b:ab:f2:b0:85:bf:f7:a8:54:ac:ce:61:c3:94:5c:
cf:18:fc:48:c9:1e:b4:0a:3f:2a:7a:f4:5c:cf:47:
54:9c:3a:57:52:8f:06:fd:7a:37:d3:52:c4:20:33:
5b:1e:c4:c4:ca:1b:d6:a5:56:cb:d1:b0:ad:92:3c:
6a:19:fc:5a:a2:38:aa:e4:bd:70:06:9d:1e:3e:63:
c0:80:05:fe:3a:85:c8:8e:23:22:9b:9a:e9:8a:d5:
6f:89:ae:68:7f:b5:56:d9:01:7c:f8:a5:2f:ee:39:
0b:e9:6a:7d:b0:e8:e2:9f:f9:be:1d:25:5b:c7:7b:
cf:83:e2:be:d1:7c:82:96:33:1a:1d:d0:03:67:61:
00:e3:39:53:48:5f:31:50:05:80:cb:f0:24:06:66:
20:e0:fa:73:64:09:13:89:9a:40:cc:99:53:f6:79:
b3:60:64:36:fe:20:75:45:63:0c:37:28:29:d0:e2:
58:78:75:99:4d:fd:5a:8b:23:b7:10:25:4d:48:1e:
49:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A6:72:B5:1E:BB:4F:CA:26:57:E2:BA:C2:DE:05:56:51:BB:5A:50
X509v3 Authority Key Identifier:
keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7c:09:fd:88:23:2a:c4:89:4a:68:f5:f0:04:4e:7c:fc:ce:
61:89:7a:3e:eb:ff:94:d1:cb:21:62:c9:73:56:1c:e5:0e:10:
3a:fb:f3:b0:57:bc:ad:87:5a:44:fe:1d:c7:d8:8e:25:33:e3:
13:b5:54:35:cc:e4:df:c7:a7:6b:74:e7:d6:c9:23:3e:b7:73:
0c:03:c5:54:6f:bb:1c:91:8d:a6:26:c1:b0:6f:f2:4f:83:fb:
bd:33:72:4d:33:29:61:2a:d9:93:94:30:67:fc:49:7a:ce:35:
ff:b7:63:7f:29:8b:1b:7e:9b:31:47:30:22:ba:43:83:a6:63:
08:13:b2:f1:70:34:1a:16:c8:68:0e:34:94:40:88:6d:79:7b:
b3:79:97:db:02:86:fb:cf:91:78:bb:6a:94:6f:7a:55:01:d6:
6f:e2:5b:d2:c1:79:3a:b1:5c:0e:ba:c1:eb:65:73:52:f1:12:
be:0d:26:25:3d:93:83:8a:04:c4:94:45:cf:71:a3:30:72:bd:
c2:5c:c8:19:92:c6:0f:f3:db:69:44:ef:9b:04:64:5a:6b:6b:
af:10:cd:76:d0:9c:0c:0a:36:54:22:6d:2b:2a:df:53:77:0c:
27:70:69:08:5e:f9:71:90:32:2d:63:22:a5:8a:b1:c0:e3:9d:
20:42:e8:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBgrKUSJX0hAqEvBwfd+EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZGZlYmFjOGI3NTQ1MTEyMmY5MTRmY2EwMjRlZTFmNTQx
N2NhYmIwHhcNMjUxMTA0MDQwMDMyWhcNMjUxMTA1MDQwMDMyWjAzMTEwLwYDVQQD
EyhlYWE2NzJiNTFlYmI0ZmNhMjY1N2UyYmFjMmRlMDU1NjUxYmI1YTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybBQGrm6UjQDNpzDoHS+2duA9n62
EIKlK77LDyLcsuL4FVa55d4Wz5/eYIc62zxbpcd3vehvWrtibvubq/Kwhb/3qFSs
zmHDlFzPGPxIyR60Cj8qevRcz0dUnDpXUo8G/Xo301LEIDNbHsTEyhvWpVbL0bCt
kjxqGfxaojiq5L1wBp0ePmPAgAX+OoXIjiMim5rpitVvia5of7VW2QF8+KUv7jkL
6Wp9sOjin/m+HSVbx3vPg+K+0XyCljMaHdADZ2EA4zlTSF8xUAWAy/AkBmYg4Ppz
ZAkTiZpAzJlT9nmzYGQ2/iB1RWMMNygp0OJYeHWZTf1aiyO3ECVNSB5JxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqmcrUeu0/KJlfiusLeBVZRu1pQMB8GA1UdIwQY
MBaAFMbf66yLdUURIvkU/KAk7h9UF8q7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hNjVhNDgtMDkzNS00YTc5LWFjMGYt
MzgwOTFiMTk3NjRiLzEveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hNjVhNDgtMDkzNS00YTc5LWFjMGYtMzgwOTFiMTk3NjRi
LzEveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXwJ/Ygj
KsSJSmj18AROfPzOYYl6Puv/lNHLIWLJc1Yc5Q4QOvvzsFe8rYdaRP4dx9iOJTPj
E7VUNczk38ena3Tn1skjPrdzDAPFVG+7HJGNpibBsG/yT4P7vTNyTTMpYSrZk5Qw
Z/xJes41/7djfymLG36bMUcwIrpDg6ZjCBOy8XA0GhbIaA40lECIbXl7s3mX2wKG
+8+ReLtqlG96VQHWb+Jb0sF5OrFcDrrB62VzUvESvg0mJT2Tg4oExJRFz3GjMHK9
wlzIGZLGD/PbaUTvmwRkWmtrrxDNdtCcDAo2VCJtKyrfU3cMJ3BpCF75cZAyLWMi
pYqxwOOdIELovg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:41 2025 by rpki-client