Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
File: Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json)
Hash identifier: wWQQyDyvu0rNp7vH75FQOwTvgqdfOvRoGFzlnVKbTWc=
Subject key identifier: 77:D7:CE:19:DD:C5:82:9B:EE:AB:3D:12:BD:E0:EB:D7:C8:9B:3C:E8
Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Certificate serial: 019A240A27C4CB28025E37FE0EA1CE23D264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
Manifest number: 16F4
Signing time: Mon 27 Oct 2025 05:00:36 +0000
Manifest this update: Mon 27 Oct 2025 05:00:36 +0000
Manifest next update: Tue 28 Oct 2025 05:00:36 +0000
Files and hashes: 1: B2IUwm0uaSZHaP7DnPbSBjUieo4.roa (hash: BOlqjJDT24t6aaQsferoPEnSoT/e6IPUh40XBnWzYhY=)
2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: /oS0jwxmJcIyRFqsijGTbr/Y671Uk2cgBVAwvSIZXmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:27:c4:cb:28:02:5e:37:fe:0e:a1:ce:23:d2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Validity
Not Before: Oct 27 05:00:36 2025 GMT
Not After : Oct 28 05:00:36 2025 GMT
Subject: CN=77d7ce19ddc5829beeab3d12bde0ebd7c89b3ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:81:78:98:c5:96:3f:af:d1:d5:6a:fb:a2:
78:d9:3b:d6:cc:d9:e3:16:c5:8b:c3:29:a5:6a:50:
07:3a:80:70:f1:cd:fa:0a:c2:c2:9a:d2:35:ad:e0:
c3:ad:17:21:69:e1:ed:80:3d:b5:94:f0:e1:ae:a5:
0b:19:29:46:3f:d8:ef:61:89:5c:7f:3f:93:9a:0c:
8a:c4:cc:4c:f4:ca:d7:b0:ab:1a:37:0c:5e:3a:0b:
da:49:e1:cb:b2:ac:30:88:bb:31:9a:9b:de:9f:6d:
cb:0d:2d:61:ae:08:78:61:1b:f9:22:49:2c:c5:4a:
27:87:7b:84:59:12:7a:a5:32:b7:f2:4a:11:dd:35:
3e:a8:1d:6f:46:ee:24:97:c8:2b:b8:c7:cf:c6:c7:
92:7a:a9:2a:ed:09:07:be:a7:a6:b4:37:ad:2d:87:
be:95:00:a2:82:3c:86:73:4b:53:c5:07:ef:a6:31:
d5:36:5b:b7:1d:79:a5:f7:ae:bd:29:d6:18:34:29:
d2:66:da:40:d4:79:f0:12:09:b2:4b:85:8c:e5:ab:
5e:30:7d:07:0f:fe:94:da:c3:c1:4e:f9:17:58:83:
da:1f:e9:1f:55:39:a4:19:46:9f:ed:47:2f:82:75:
b4:ae:42:36:ff:fa:b9:a6:93:dd:21:6a:ba:7f:d7:
ed:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D7:CE:19:DD:C5:82:9B:EE:AB:3D:12:BD:E0:EB:D7:C8:9B:3C:E8
X509v3 Authority Key Identifier:
keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:af:57:7e:a8:e6:f1:6e:6b:28:57:b7:31:69:ff:bf:81:89:
80:4f:0a:ef:e0:9f:4a:51:aa:42:61:87:ca:13:5e:9c:ce:39:
a1:e9:d6:ba:ac:5c:78:33:4a:62:bd:83:75:60:63:ab:11:b7:
62:64:3e:4c:2d:31:63:b4:d7:3a:df:ef:1c:64:cb:d1:04:12:
45:6d:fd:c0:9c:51:bc:0e:e2:c1:83:f9:2a:01:c3:a8:ea:d5:
d8:c5:23:92:6c:32:ac:f1:de:9f:02:66:39:8e:62:69:55:c6:
e8:64:97:e6:9d:d5:20:33:20:1e:af:26:37:72:36:12:79:43:
43:79:56:38:09:c2:14:6c:57:19:e5:d7:9e:62:65:29:df:c5:
a3:ef:56:37:3f:69:9b:00:c5:e4:a5:1c:fb:25:35:03:db:8c:
83:48:75:89:17:69:62:51:5e:15:d7:8c:37:54:a9:be:3f:12:
67:55:ef:8d:46:ce:ea:07:68:4b:62:97:da:92:4e:66:06:41:
14:5e:fb:cf:9e:1f:ff:fa:66:59:b6:aa:95:d2:ee:50:84:b1:
cd:bb:4c:b6:e4:2a:af:36:23:23:b5:c6:23:a9:b3:20:ab:c1:
1f:f9:65:d7:b0:07:ca:61:a8:fa:a0:b5:62:47:cd:3b:bc:5f:
88:1a:66:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:12:59 2025 by rpki-client