Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
File: xUcTl89ew5mqDuxcMXOx8wQHI6k.mft (raw, json)
Hash identifier: 9h1kbYqHJiEstR4szQ5j5HeCaQD0RBQBxH8h7IMXdhY=
Subject key identifier: 0D:AA:97:25:73:2B:CB:F0:6D:BC:A2:74:34:E6:04:52:C1:F0:C4:CD
Authority key identifier: C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9
Certificate issuer: /CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
Certificate serial: 01994EC01A6BDB09D95B14C03659A2FAF6B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
Manifest number: 0855
Signing time: Mon 15 Sep 2025 19:00:36 +0000
Manifest this update: Mon 15 Sep 2025 19:00:36 +0000
Manifest next update: Tue 16 Sep 2025 19:00:36 +0000
Files and hashes: 1: 6ju2EuNQ-q9l9jWpaCX_yFCWFus.roa (hash: USfZBKBFKPqpoZ4/RnsmCkjU4lbPXZn+7Zop6eU1524=)
2: xUcTl89ew5mqDuxcMXOx8wQHI6k.crl (hash: 6Rd9ydmCWpduiQijl/BSBjty7Edtp8Qfa/YSiL6v/Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:c0:1a:6b:db:09:d9:5b:14:c0:36:59:a2:fa:f6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
Validity
Not Before: Sep 15 19:00:36 2025 GMT
Not After : Sep 16 19:00:36 2025 GMT
Subject: CN=0daa9725732bcbf06dbca27434e60452c1f0c4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2f:4c:4c:d9:29:91:e8:1e:3f:7a:b7:51:fc:
4b:29:d5:c1:8a:8c:84:06:23:60:60:db:b4:aa:6c:
ad:da:d4:3f:aa:8b:43:62:a8:94:1e:47:c7:5f:5a:
ba:fa:28:31:94:b0:4c:09:6e:46:8a:1b:d4:bb:2f:
fc:35:77:0a:d0:51:3e:ac:87:bc:b4:dd:10:33:1b:
5b:30:36:1f:66:2a:75:d3:3e:a4:bd:92:e4:eb:79:
b9:2f:f0:d5:59:24:d5:0a:af:1e:81:cc:8f:6c:c3:
41:c6:f6:83:89:a2:4b:81:56:68:e5:7a:19:2b:f8:
a5:e7:6f:43:94:c8:1c:f0:d9:d1:8b:43:09:06:fd:
fd:07:2a:0f:59:bf:ab:42:8a:21:ec:58:ce:a1:62:
51:71:06:cd:5f:58:81:b2:52:61:0c:3e:e6:f6:b4:
02:d5:19:b1:64:b4:df:47:6d:08:20:da:a9:ed:3c:
b3:f2:f1:1c:0a:11:79:c7:0c:a9:61:3b:91:31:1f:
fe:45:7b:56:db:24:7c:8d:ca:9c:9b:37:9b:52:f3:
1d:08:5d:8e:84:6d:f8:e9:cb:91:0d:78:ae:b8:c7:
05:fe:16:f5:a5:b1:37:23:77:2c:0d:8d:f8:69:f9:
ab:e4:6d:14:d5:ba:e0:c1:e7:07:19:de:85:82:6a:
24:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AA:97:25:73:2B:CB:F0:6D:BC:A2:74:34:E6:04:52:C1:F0:C4:CD
X509v3 Authority Key Identifier:
keyid:C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:63:ba:e6:61:64:ee:27:88:f9:0c:75:fc:dd:f2:67:40:83:
8b:e3:7c:39:fd:4d:26:c0:2f:9c:8a:e4:06:32:98:97:40:17:
23:4b:1e:52:63:f6:ad:c8:d7:6f:a0:ee:ef:db:37:ff:29:3e:
d8:ff:1c:2e:d7:7a:ea:08:ab:23:f4:43:87:aa:08:74:a0:1d:
66:52:ec:bb:f6:b9:e8:34:b1:5a:a0:cc:1a:37:e4:75:1e:f8:
e3:2f:57:3b:8b:f7:19:ee:81:ea:41:dd:66:b2:7b:8e:e5:b0:
a9:47:d3:83:a5:81:5b:41:ea:eb:09:34:89:f0:15:2e:b9:59:
a3:40:be:88:13:49:51:22:2c:c7:dd:20:3c:e4:16:48:91:d6:
9c:58:b2:9f:47:be:d8:d2:33:b3:ed:7d:00:13:24:81:ce:d4:
c4:18:78:cf:6c:50:13:d9:47:cb:c7:07:34:68:24:74:63:55:
45:5c:5e:88:d6:04:2f:9d:f5:11:9e:d6:de:7f:32:47:45:1f:
63:1b:ed:63:39:bb:7b:53:45:68:d6:b7:5c:89:fd:a6:8f:a7:
1b:a4:8b:43:87:35:3c:8c:b1:98:42:66:e2:1e:3e:a4:83:9b:
77:26:b8:6b:04:63:a7:59:c4:34:6e:9d:49:c3:c7:36:9d:94:
6a:3b:b7:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlOwBpr2wnZWxTANlmi+va3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NDcxMzk3Y2Y1ZWMzOTlhYTBlZWM1YzMxNzNiMWYzMDQw
NzIzYTkwHhcNMjUwOTE1MTkwMDM2WhcNMjUwOTE2MTkwMDM2WjAzMTEwLwYDVQQD
EygwZGFhOTcyNTczMmJjYmYwNmRiY2EyNzQzNGU2MDQ1MmMxZjBjNGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC9MTNkpkegeP3q3UfxLKdXBioyE
BiNgYNu0qmyt2tQ/qotDYqiUHkfHX1q6+igxlLBMCW5GihvUuy/8NXcK0FE+rIe8
tN0QMxtbMDYfZip10z6kvZLk63m5L/DVWSTVCq8egcyPbMNBxvaDiaJLgVZo5XoZ
K/il529DlMgc8NnRi0MJBv39ByoPWb+rQooh7FjOoWJRcQbNX1iBslJhDD7m9rQC
1RmxZLTfR20IINqp7Tyz8vEcChF5xwypYTuRMR/+RXtW2yR8jcqcmzebUvMdCF2O
hG346cuRDXiuuMcF/hb1pbE3I3csDY34afmr5G0U1brgwecHGd6Fgmok8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2qlyVzK8vwbbyidDTmBFLB8MTNMB8GA1UdIwQY
MBaAFMVHE5fPXsOZqg7sXDFzsfMEByOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFVjVGw4OWV3NW1xRHV4Y01YT3g4d1FISTZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS83NzdhNjAtNmRlMS00ZGZiLWI5NjUt
MjYyMjJmMDk1NWFlLzEveFVjVGw4OWV3NW1xRHV4Y01YT3g4d1FISTZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS83NzdhNjAtNmRlMS00ZGZiLWI5NjUtMjYyMjJmMDk1NWFl
LzEveFVjVGw4OWV3NW1xRHV4Y01YT3g4d1FISTZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmO65mFk
7ieI+Qx1/N3yZ0CDi+N8Of1NJsAvnIrkBjKYl0AXI0seUmP2rcjXb6Du79s3/yk+
2P8cLtd66girI/RDh6oIdKAdZlLsu/a56DSxWqDMGjfkdR744y9XO4v3Ge6B6kHd
ZrJ7juWwqUfTg6WBW0Hq6wk0ifAVLrlZo0C+iBNJUSIsx90gPOQWSJHWnFiyn0e+
2NIzs+19ABMkgc7UxBh4z2xQE9lHy8cHNGgkdGNVRVxeiNYEL531EZ7W3n8yR0Uf
YxvtYzm7e1NFaNa3XIn9po+nG6SLQ4c1PIyxmEJm4h4+pIObdya4awRjp1nENG6d
ScPHNp2Uaju3IQ==
-----END CERTIFICATE-----
Generated at Mon Sep 15 22:55:47 2025 by rpki-client