Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: N2NTeACFoLCDrIMcntL+jo0AFjS8v2PQEvVg/lCD2Q4=
Subject key identifier: D3:E2:2A:5E:F2:6D:37:23:08:CB:43:F6:75:C0:9D:7C:53:EE:C1:74
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 019A24785EDDF271D90B476FAEC60B1B22FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 16FB
Signing time: Mon 27 Oct 2025 07:00:59 +0000
Manifest this update: Mon 27 Oct 2025 07:00:59 +0000
Manifest next update: Tue 28 Oct 2025 07:00:59 +0000
Files and hashes: 1: 90NkAjkP5P3wZwJqnXSO9AQDG_M.roa (hash: eK7yCOQkJI1NI1OGTayx19wjsA64ORHdInhLei4bvc8=)
2: eXxQ74lf_D70ri2LePLnjdcMkBc.roa (hash: n78D7QenzcNLmShQTibMqzzt2qmVHcGGjBzWjuUDoBA=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: HwalgVwXne1ia89jyAhhDr7t0gE1jgAU5Tnb9+HZQf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:5e:dd:f2:71:d9:0b:47:6f:ae:c6:0b:1b:22:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: Oct 27 07:00:59 2025 GMT
Not After : Oct 28 07:00:59 2025 GMT
Subject: CN=d3e22a5ef26d372308cb43f675c09d7c53eec174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:7c:0c:c2:49:ce:88:c0:5e:8b:1a:3a:be:
50:35:86:3c:ae:c8:b4:de:8e:c9:69:13:86:11:fd:
4f:e2:c1:eb:af:fc:fc:e0:a9:70:49:06:62:d3:5d:
ec:ba:d5:fa:07:e5:2c:cd:04:a7:4a:06:e7:a0:61:
d4:3f:8e:8e:0c:34:94:61:aa:54:e3:c5:93:5e:5d:
c3:79:30:0a:b6:d1:4d:6c:66:39:dc:b9:42:00:96:
fb:9f:d2:ad:61:1a:f1:1b:df:6b:2a:0e:5a:27:b5:
8a:45:34:1e:e0:df:34:ae:47:3c:3d:76:1a:d5:ae:
49:40:e5:6d:1c:9a:68:d8:1c:59:ee:cc:a9:c2:c7:
0b:5d:65:1e:97:f1:10:c6:c1:f4:f7:ae:3b:73:d3:
4a:54:0a:4c:88:b4:34:af:4f:8c:23:c1:9b:df:40:
c7:64:b1:ae:e8:23:81:fb:df:ee:e0:fd:06:3c:06:
eb:36:5e:d3:d4:b8:43:d0:bb:2f:29:68:78:0a:f4:
be:4d:cb:02:4c:7b:3c:65:ab:ca:50:44:5f:a5:44:
27:3e:ab:b5:e6:16:37:b6:de:fd:eb:46:61:f7:a2:
20:23:9f:56:05:6a:dd:4d:25:eb:f1:1c:e1:b7:08:
cb:97:6a:d1:e8:2c:ee:5e:88:ef:29:f3:63:68:5d:
14:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E2:2A:5E:F2:6D:37:23:08:CB:43:F6:75:C0:9D:7C:53:EE:C1:74
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:98:3d:e4:a2:c9:37:53:f9:47:e0:8b:f8:c6:cc:1f:f2:28:
da:25:47:84:4e:c1:11:4e:bc:5c:48:25:b3:db:c7:94:2e:93:
b6:ae:db:2c:b2:aa:58:2c:27:5b:8e:dc:41:f9:9e:b5:5e:97:
89:de:89:00:df:83:a8:9e:2a:a0:63:d6:93:69:12:84:1f:3c:
c4:04:38:d0:33:ba:2d:b6:63:71:4b:08:87:b7:c3:d7:a2:0e:
ae:ac:85:d7:21:03:b0:27:54:0c:20:10:fb:70:a1:5a:c1:a1:
5f:49:a7:05:45:d7:55:4e:85:13:41:a2:8d:f5:5e:65:01:c1:
07:56:60:b4:41:dd:db:40:ce:03:db:56:77:1f:92:80:0e:9f:
bb:81:02:86:8e:ce:48:3b:d9:ca:5d:cc:ea:90:83:62:45:9e:
4a:cc:c6:59:26:a6:66:a6:e1:1f:39:57:cc:31:e8:b7:91:2a:
8f:8e:04:79:0e:ba:86:de:3f:dd:3e:81:03:2e:fd:5e:fe:c2:
0f:06:f8:51:4e:26:ef:01:7b:81:f1:f9:c5:d3:d5:32:82:b8:
57:1d:12:19:95:44:62:e1:24:d9:3a:29:cb:e9:c8:3f:13:55:
c5:42:bc:9e:8a:91:61:20:44:77:93:9d:63:f5:77:a8:d5:b8:
b2:b8:af:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:04 2025 by rpki-client