Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: EdEjoDMsQfmLQXr4ehF3cKeeyGnsinhPu8yuYcy2TAw=
Subject key identifier: EF:79:52:A1:54:50:76:8F:D3:63:14:FC:E1:C9:2E:88:20:D8:EF:C0
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 01985AC89F0F3BDE19B0E3838914184EF653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 160E
Signing time: Wed 30 Jul 2025 10:02:33 +0000
Manifest this update: Wed 30 Jul 2025 10:02:33 +0000
Manifest next update: Thu 31 Jul 2025 10:02:33 +0000
Files and hashes: 1: 90NkAjkP5P3wZwJqnXSO9AQDG_M.roa (hash: eK7yCOQkJI1NI1OGTayx19wjsA64ORHdInhLei4bvc8=)
2: eXxQ74lf_D70ri2LePLnjdcMkBc.roa (hash: n78D7QenzcNLmShQTibMqzzt2qmVHcGGjBzWjuUDoBA=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: AyrvRtrOiIz6dwege5nTYqum+NidTbHwa1WGTnySsnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 10:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:c8:9f:0f:3b:de:19:b0:e3:83:89:14:18:4e:f6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: Jul 30 10:02:33 2025 GMT
Not After : Jul 31 10:02:33 2025 GMT
Subject: CN=ef7952a15450768fd36314fce1c92e8820d8efc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:21:dc:d6:7f:07:cc:25:b5:93:0b:dd:85:b7:
bc:3c:af:1a:e8:51:c1:3e:57:51:af:83:76:a9:6f:
f2:59:68:79:eb:02:ad:8c:bb:a5:57:41:95:32:64:
cb:a2:2e:34:7c:03:a8:30:1f:c0:40:2b:18:49:19:
5c:b3:e8:30:8d:96:7c:8d:73:a3:43:ac:81:0e:44:
54:d0:25:4e:45:5d:f3:0f:80:14:95:b2:ef:47:7d:
d2:af:18:a4:2d:3a:2b:ca:38:ae:ca:03:7f:3b:a7:
68:69:83:d2:c9:7b:88:4e:eb:b0:e1:da:4f:df:08:
94:f9:04:f0:ac:3b:54:2f:cc:1d:cb:63:95:20:0a:
a1:8a:a4:d4:da:f1:c8:d6:1a:b6:e2:96:54:91:74:
9a:67:9a:55:24:7d:c4:13:8a:71:ab:09:14:18:ec:
55:cf:0c:0b:65:14:99:c4:b4:d4:d5:37:c3:00:b3:
a6:75:7f:c3:0f:ab:12:46:7c:0d:48:d2:89:a8:72:
da:af:1d:47:b2:d4:46:6b:ec:4a:46:38:0a:5e:8c:
f9:14:0b:01:99:97:50:44:ef:73:cd:0d:e8:44:b6:
a9:a6:74:6e:46:90:5b:a1:b7:6a:d1:54:d6:83:89:
6f:bd:04:e9:fc:b3:c6:1e:ed:bf:bd:d7:5e:69:38:
40:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:79:52:A1:54:50:76:8F:D3:63:14:FC:E1:C9:2E:88:20:D8:EF:C0
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c6:31:93:b5:be:49:e7:9a:31:d5:cd:ce:65:e8:c5:d6:bf:
34:5d:4a:42:b6:a4:df:05:99:42:3f:54:c5:0a:8a:71:c7:8e:
17:44:e0:96:d0:fb:c6:72:57:19:0e:7b:20:46:46:49:88:99:
6e:c7:74:5c:c4:2e:62:95:59:78:86:4d:9a:61:c2:0b:d4:5b:
b4:90:de:1d:da:c1:00:f7:ea:d5:23:c2:9b:52:f7:e7:b7:87:
c7:aa:b4:60:8d:40:14:7b:2d:d0:d6:7d:20:6e:36:e9:dc:40:
88:1b:72:16:a1:8f:14:2d:ec:e5:8f:54:7c:fb:fd:79:7a:53:
b3:70:4d:27:f5:7d:86:2c:47:9f:2e:77:a5:77:9d:72:50:22:
81:28:b1:d6:1c:52:06:7e:d1:4d:77:6c:21:2a:90:61:9f:49:
8a:55:19:25:24:58:28:78:2d:08:34:9b:33:dd:96:fb:71:8e:
52:4c:e0:77:ec:2f:0f:97:dd:2a:6f:27:2a:ef:de:90:7a:ec:
51:32:98:f4:15:1d:0c:06:f7:92:9e:61:ca:af:3e:03:35:ee:
1b:60:ba:d0:10:95:7b:e2:c6:76:a0:dd:7e:2f:55:c0:df:ae:
e5:dd:69:9d:97:86:3b:92:1e:0a:27:11:dd:d1:77:ab:79:59:
1c:80:8f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 18:37:01 2025 by rpki-client