Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
File: xUUK-nPwuHpCACjCsqSMzg_pKwo.mft (raw, json)
Hash identifier: fA0zr2cdsqtHTmUfZVG11Se3s6Er4j45zhGnhk9CBwA=
Subject key identifier: 14:5A:EB:AE:37:FD:64:B9:05:68:F7:D3:50:8A:C5:7F:3F:CA:0F:AA
Authority key identifier: C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
Certificate issuer: /CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Certificate serial: 019A729331E5B26EF3CC37EB87EEC72A14A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:00:40 +0000
Manifest this update: Tue 11 Nov 2025 11:00:40 +0000
Manifest next update: Wed 12 Nov 2025 11:00:40 +0000
Files and hashes: 1: DOYEy7m23OMhQT0GnljJrUQy47E.roa (hash: go8qewztOxPM/eJUbvfZwLwT/UFcT9bOMhrpq63fVQk=)
2: wbQ_0Ms4PpbjrAiW5BsH3h3NRcA.roa (hash: NmuSbPbfuym67xH2QLuOVMqeZvLtav7Q7SRmwtYGojM=)
3: xUUK-nPwuHpCACjCsqSMzg_pKwo.crl (hash: 7vw+Y+gNzqix1Tipfq0n4YCSxEt7qq03fF+znF/WlnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:31:e5:b2:6e:f3:cc:37:eb:87:ee:c7:2a:14:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Validity
Not Before: Nov 11 11:00:40 2025 GMT
Not After : Nov 12 11:00:40 2025 GMT
Subject: CN=145aebae37fd64b90568f7d3508ac57f3fca0faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0e:e5:9c:9b:38:5b:77:b9:8d:1b:a0:96:34:
10:d9:3c:29:ae:fd:80:b9:ec:b1:03:2c:8c:a0:f9:
22:0a:76:7d:0a:a8:9c:84:50:83:1d:95:7f:cb:d8:
c9:76:d1:03:fb:d7:0b:7f:38:4e:94:a8:4e:7e:b2:
e3:fd:ae:bc:8e:70:4f:72:59:65:87:35:9c:1f:27:
07:c6:63:37:c1:f2:92:ed:75:47:9f:e5:e8:88:6f:
d1:27:e5:03:e8:7f:d8:f2:e0:ab:0f:1c:ed:18:82:
47:26:3b:d9:9d:e6:19:84:62:28:0c:fe:17:ca:32:
3b:bf:68:d6:15:12:e9:c2:34:05:00:87:2a:c4:f0:
ea:3b:a6:af:66:a0:ee:1a:4b:49:06:07:c7:9e:e4:
a4:de:25:96:79:95:66:cb:bf:22:78:29:5c:0a:6b:
2a:f7:1e:f6:34:2b:d8:55:04:69:16:67:79:e6:8a:
93:f9:c4:8e:9a:07:3b:75:43:a7:42:eb:a8:1d:e8:
95:bb:9c:a1:c6:61:3d:98:e1:ec:2f:68:32:e2:3b:
72:cd:96:d8:69:7c:e2:57:e6:c9:3e:0a:11:54:58:
a7:c9:80:04:a9:a7:3b:3d:ba:11:8f:07:ce:7d:a6:
91:1c:18:e6:b6:01:6b:13:28:a9:b1:1b:c2:42:c8:
93:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5A:EB:AE:37:FD:64:B9:05:68:F7:D3:50:8A:C5:7F:3F:CA:0F:AA
X509v3 Authority Key Identifier:
keyid:C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:49:ff:22:7c:c6:ff:1c:e8:ca:f3:8b:a4:60:90:ee:b8:7b:
2a:a3:93:94:bd:f9:38:83:3c:1d:cf:e7:e6:ef:d8:cd:87:49:
49:f2:de:52:80:e5:af:6a:a1:4c:d3:37:64:a5:6c:1d:09:37:
ab:c4:57:9c:9c:3c:84:f2:55:00:b1:4a:dd:22:84:35:2b:ba:
8b:ab:12:7d:5b:d1:4f:fe:db:2d:13:42:8a:82:86:9a:5d:28:
5c:86:3b:ca:88:f1:af:ad:c0:c6:2c:57:1a:6f:35:9c:98:b1:
b8:58:6b:2b:f2:90:9a:30:42:3f:84:35:eb:c7:06:65:9d:c0:
aa:4f:9e:7e:11:74:97:14:2c:64:1f:ca:89:e9:76:19:98:d7:
b0:92:ee:7f:9b:8c:13:69:af:c5:85:49:d7:67:59:8e:a7:3d:
30:87:1b:77:51:d9:07:b4:be:4d:c7:56:c7:12:0a:63:95:3e:
13:b1:ab:ce:c2:4c:99:a2:0f:12:09:b8:52:e7:17:de:c5:0f:
27:1b:30:19:a8:27:61:6e:58:68:3c:6f:d2:bc:95:49:7e:59:
c3:70:8c:e3:cf:e4:20:20:7a:ad:63:e8:7e:72:9f:03:b2:1a:
3a:9f:8d:f1:22:ef:3b:56:d7:8b:1d:22:18:18:08:8a:83:e9:
4f:6f:ff:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:35:06 2025 by rpki-client