Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
File: xUUK-nPwuHpCACjCsqSMzg_pKwo.mft (raw, json)
Hash identifier: JZRFTPiOT3B8LBolAZvAFBCizWpJOgGlgs7ptsL1JgY=
Subject key identifier: 30:94:AB:A6:CC:89:8E:0B:A3:B2:4C:53:CD:B9:75:32:92:C5:0E:54
Authority key identifier: C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
Certificate issuer: /CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Certificate serial: 01974779ACDFC915ACCC37587863CFE0C04A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 23:00:45 +0000
Manifest this update: Fri 06 Jun 2025 23:00:45 +0000
Manifest next update: Sat 07 Jun 2025 23:00:45 +0000
Files and hashes: 1: DOYEy7m23OMhQT0GnljJrUQy47E.roa (hash: go8qewztOxPM/eJUbvfZwLwT/UFcT9bOMhrpq63fVQk=)
2: wbQ_0Ms4PpbjrAiW5BsH3h3NRcA.roa (hash: NmuSbPbfuym67xH2QLuOVMqeZvLtav7Q7SRmwtYGojM=)
3: xUUK-nPwuHpCACjCsqSMzg_pKwo.crl (hash: 9Ioa/kjrDL5zFPydA5TxDjDNWQLY9VaNQnRY2jNGIms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:ac:df:c9:15:ac:cc:37:58:78:63:cf:e0:c0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Validity
Not Before: Jun 6 23:00:45 2025 GMT
Not After : Jun 7 23:00:45 2025 GMT
Subject: CN=3094aba6cc898e0ba3b24c53cdb9753292c50e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:78:38:26:00:52:f2:c2:b0:50:ef:18:5f:1e:
95:da:9f:7c:ae:f2:1e:c4:99:0f:92:b1:8f:2c:c1:
79:e0:de:ac:00:40:2c:d1:7b:2e:79:55:c7:57:45:
dc:49:5f:04:72:7b:da:e2:6a:7e:2f:e2:ee:fc:8c:
89:bd:13:4a:34:a4:7a:c3:c0:36:2a:83:a9:11:b6:
53:6c:c0:9f:76:b9:e5:9d:f5:55:f9:65:d4:57:f1:
13:b4:7b:cd:37:fc:94:dc:6f:11:6e:ad:b5:0a:32:
58:b6:80:29:05:90:8d:44:2e:c2:59:e4:f0:e2:5b:
d9:5b:38:c2:09:bf:34:03:72:82:ce:a9:d6:d9:53:
c2:de:86:51:c4:81:80:c7:3d:ef:64:75:36:36:64:
2b:92:82:26:c1:f0:83:88:fc:6f:9a:c9:cf:ab:a5:
e5:c6:ce:26:d8:67:10:4b:57:aa:53:b8:a2:57:90:
d2:e9:4e:5b:60:90:a3:4c:83:cc:66:c2:6f:9a:26:
d2:b4:e8:bc:b3:9d:ac:61:70:c0:c6:80:d4:3f:46:
0f:69:b5:8a:d6:16:60:92:44:56:b4:8f:f6:c7:11:
c2:db:85:61:c5:f2:09:b8:c3:71:78:31:c4:cc:45:
04:b0:94:ea:23:ce:ae:c9:5a:a4:36:86:75:50:ab:
9d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:94:AB:A6:CC:89:8E:0B:A3:B2:4C:53:CD:B9:75:32:92:C5:0E:54
X509v3 Authority Key Identifier:
keyid:C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:33:51:d3:66:ac:6e:b8:1b:f8:d3:33:61:90:09:e6:3e:2f:
6d:cc:68:13:6c:7c:d9:57:29:89:58:69:71:37:3b:bb:c2:9f:
70:d8:71:c7:c6:12:00:c2:68:59:5b:c5:61:1a:4c:f4:93:26:
49:1a:8e:10:6a:83:bf:18:85:2a:ab:1d:86:6f:66:54:15:a8:
e5:55:a9:e6:74:de:98:23:11:8b:df:ff:57:17:de:14:08:6c:
27:3e:e9:73:c0:30:d1:92:f8:f0:27:c8:05:30:57:89:63:9b:
35:23:45:07:64:13:a6:59:a5:b5:18:b9:66:e1:f4:1c:f4:7c:
67:a5:8c:9e:e0:ec:51:68:21:af:b2:c3:c6:f5:f1:dc:db:4c:
ce:df:f4:86:b4:af:6e:51:17:78:d6:e6:41:94:0a:9d:d7:97:
8b:70:72:6d:2a:83:6f:89:29:1c:48:80:26:1c:59:a9:69:50:
ef:94:da:de:22:3c:41:5d:66:85:56:0a:1e:be:27:95:7d:89:
55:fb:c7:a1:1b:8d:ab:6e:87:78:29:02:8f:52:31:d9:dd:c4:
23:16:35:1f:38:25:dc:de:6a:82:1a:b7:e7:d3:ba:75:3c:e9:
94:8a:bf:65:d9:03:3c:81:bc:85:66:b6:36:39:26:a8:86:15:
96:8a:2f:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeazfyRWszDdYeGPP4MBKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NDUwYWZhNzNmMGI4N2E0MjAwMjhjMmIyYTQ4Y2NlMGZl
OTJiMGEwHhcNMjUwNjA2MjMwMDQ1WhcNMjUwNjA3MjMwMDQ1WjAzMTEwLwYDVQQD
EygzMDk0YWJhNmNjODk4ZTBiYTNiMjRjNTNjZGI5NzUzMjkyYzUwZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXg4JgBS8sKwUO8YXx6V2p98rvIe
xJkPkrGPLMF54N6sAEAs0XsueVXHV0XcSV8Ecnva4mp+L+Lu/IyJvRNKNKR6w8A2
KoOpEbZTbMCfdrnlnfVV+WXUV/ETtHvNN/yU3G8Rbq21CjJYtoApBZCNRC7CWeTw
4lvZWzjCCb80A3KCzqnW2VPC3oZRxIGAxz3vZHU2NmQrkoImwfCDiPxvmsnPq6Xl
xs4m2GcQS1eqU7iiV5DS6U5bYJCjTIPMZsJvmibStOi8s52sYXDAxoDUP0YPabWK
1hZgkkRWtI/2xxHC24VhxfIJuMNxeDHEzEUEsJTqI86uyVqkNoZ1UKudBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCUq6bMiY4Lo7JMU825dTKSxQ5UMB8GA1UdIwQY
MBaAFMVFCvpz8Lh6QgAowrKkjM4P6SsKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hMmE2YWQtYjE1Zi00NzM0LWI1OWUt
NjY0YTk5MjZmMzMzLzEveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hMmE2YWQtYjE1Zi00NzM0LWI1OWUtNjY0YTk5MjZmMzMz
LzEveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTNR02as
brgb+NMzYZAJ5j4vbcxoE2x82VcpiVhpcTc7u8KfcNhxx8YSAMJoWVvFYRpM9JMm
SRqOEGqDvxiFKqsdhm9mVBWo5VWp5nTemCMRi9//VxfeFAhsJz7pc8Aw0ZL48CfI
BTBXiWObNSNFB2QTplmltRi5ZuH0HPR8Z6WMnuDsUWghr7LDxvXx3NtMzt/0hrSv
blEXeNbmQZQKndeXi3BybSqDb4kpHEiAJhxZqWlQ75Ta3iI8QV1mhVYKHr4nlX2J
VfvHoRuNq26HeCkCj1Ix2d3EIxY1Hzgl3N5qghq359O6dTzplIq/ZdkDPIG8hWa2
NjkmqIYVloovtQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:37:47 2025 by rpki-client