Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
File: xUUK-nPwuHpCACjCsqSMzg_pKwo.mft (raw, json)
Hash identifier: fRa0vDw2KfCCjUk/WMnSLx8WKAZhdaL2pXXJjHIJ8mU=
Subject key identifier: E3:50:48:AD:D4:45:36:A0:3A:BE:59:4B:14:D8:34:21:10:CE:C5:73
Authority key identifier: C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
Certificate issuer: /CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Certificate serial: 0198D54E8FAB4019E2149EB9DE2DB53CA958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:32 +0000
Manifest this update: Sat 23 Aug 2025 05:02:32 +0000
Manifest next update: Sun 24 Aug 2025 05:02:32 +0000
Files and hashes: 1: DOYEy7m23OMhQT0GnljJrUQy47E.roa (hash: go8qewztOxPM/eJUbvfZwLwT/UFcT9bOMhrpq63fVQk=)
2: wbQ_0Ms4PpbjrAiW5BsH3h3NRcA.roa (hash: NmuSbPbfuym67xH2QLuOVMqeZvLtav7Q7SRmwtYGojM=)
3: xUUK-nPwuHpCACjCsqSMzg_pKwo.crl (hash: uqn38HUoS418sVZpFbPTPhoogvvlTU+DZe9gmzop02g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:8f:ab:40:19:e2:14:9e:b9:de:2d:b5:3c:a9:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Validity
Not Before: Aug 23 05:02:32 2025 GMT
Not After : Aug 24 05:02:32 2025 GMT
Subject: CN=e35048add44536a03abe594b14d8342110cec573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:df:39:6d:60:8c:79:ab:bd:fa:5f:48:38:
c8:1f:f7:2b:e1:ae:40:14:f5:11:76:83:f3:7a:63:
52:a1:99:35:c8:f3:1d:a6:76:3b:46:c3:d9:4e:2a:
58:d9:a1:8d:ca:39:9c:35:b9:92:07:fb:83:57:43:
35:25:fe:dd:cc:a2:b3:b0:85:36:1b:54:62:4e:15:
5f:17:cf:c8:f3:1b:ef:89:44:f1:e3:56:73:44:02:
c5:63:79:a9:be:83:18:5d:fd:dc:88:da:b5:43:fa:
40:73:63:69:42:40:63:5e:cd:86:b9:a9:61:5c:9d:
19:f0:0d:74:16:36:c3:06:32:3e:04:1c:49:31:fd:
ef:39:cb:cd:71:f3:7e:ea:8d:60:bd:fd:43:12:08:
96:e6:9e:d7:cf:ac:ff:ca:0a:9a:55:c4:ac:15:ea:
2e:a2:31:7b:b7:ef:5a:9b:c1:51:9e:44:b0:4a:09:
5b:ce:b2:ef:60:27:85:d9:ff:71:4a:79:05:b5:8f:
cf:a3:55:57:9b:8c:cd:fc:35:f5:16:e8:de:c0:35:
ee:54:fa:d4:a4:9b:d4:5f:9b:e4:ed:91:5b:41:94:
74:bd:73:ea:7b:2d:d8:71:75:87:7d:00:f3:a7:5a:
14:87:15:5d:0e:6f:25:0f:08:f7:39:06:c5:ed:36:
2f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:50:48:AD:D4:45:36:A0:3A:BE:59:4B:14:D8:34:21:10:CE:C5:73
X509v3 Authority Key Identifier:
keyid:C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0d:78:71:0e:0b:e4:a3:13:3c:73:00:4c:fe:c2:54:4e:a8:
d6:40:a7:37:6f:bc:11:bf:12:59:80:5d:11:72:ed:30:52:50:
be:08:59:c4:0b:16:81:22:4d:2f:8e:e1:b0:63:b4:2e:62:1c:
65:41:c0:8c:bb:09:64:bb:45:56:2d:74:d0:72:6e:d5:a2:41:
36:cb:52:43:e1:56:45:17:1c:3a:01:d7:f3:30:44:9b:ce:cb:
68:99:43:6e:bf:b7:35:41:7a:24:c9:27:b7:41:35:1d:fb:45:
40:aa:db:88:45:c4:13:f3:eb:29:13:88:d5:df:4b:b3:05:ab:
5d:da:fc:55:ea:75:b3:f6:56:26:6e:3b:50:e8:cb:39:a8:51:
31:a4:1a:bb:e3:aa:ac:9e:3f:d2:ce:9d:13:46:2d:a1:85:89:
c5:79:4a:f8:d3:92:9a:90:95:04:a3:f1:0a:60:6b:40:2e:19:
fe:5f:61:83:4d:27:53:73:05:67:47:7a:42:86:cf:3e:9a:e2:
f0:1c:51:be:df:38:24:67:90:51:98:09:02:b7:2c:b4:05:3d:
d8:97:b4:11:be:3b:d7:75:88:dd:53:eb:cd:e1:1e:c0:e2:7a:
1f:36:d0:bf:00:d3:36:a5:1c:fe:36:29:8e:c0:70:c8:e0:67:
29:f1:42:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTo+rQBniFJ653i21PKlYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NDUwYWZhNzNmMGI4N2E0MjAwMjhjMmIyYTQ4Y2NlMGZl
OTJiMGEwHhcNMjUwODIzMDUwMjMyWhcNMjUwODI0MDUwMjMyWjAzMTEwLwYDVQQD
EyhlMzUwNDhhZGQ0NDUzNmEwM2FiZTU5NGIxNGQ4MzQyMTEwY2VjNTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkDfOW1gjHmrvfpfSDjIH/cr4a5A
FPURdoPzemNSoZk1yPMdpnY7RsPZTipY2aGNyjmcNbmSB/uDV0M1Jf7dzKKzsIU2
G1RiThVfF8/I8xvviUTx41ZzRALFY3mpvoMYXf3ciNq1Q/pAc2NpQkBjXs2Gualh
XJ0Z8A10FjbDBjI+BBxJMf3vOcvNcfN+6o1gvf1DEgiW5p7Xz6z/ygqaVcSsFeou
ojF7t+9am8FRnkSwSglbzrLvYCeF2f9xSnkFtY/Po1VXm4zN/DX1FujewDXuVPrU
pJvUX5vk7ZFbQZR0vXPqey3YcXWHfQDzp1oUhxVdDm8lDwj3OQbF7TYvpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONQSK3URTagOr5ZSxTYNCEQzsVzMB8GA1UdIwQY
MBaAFMVFCvpz8Lh6QgAowrKkjM4P6SsKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hMmE2YWQtYjE1Zi00NzM0LWI1OWUt
NjY0YTk5MjZmMzMzLzEveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hMmE2YWQtYjE1Zi00NzM0LWI1OWUtNjY0YTk5MjZmMzMz
LzEveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQ14cQ4L
5KMTPHMATP7CVE6o1kCnN2+8Eb8SWYBdEXLtMFJQvghZxAsWgSJNL47hsGO0LmIc
ZUHAjLsJZLtFVi100HJu1aJBNstSQ+FWRRccOgHX8zBEm87LaJlDbr+3NUF6JMkn
t0E1HftFQKrbiEXEE/PrKROI1d9LswWrXdr8Vep1s/ZWJm47UOjLOahRMaQau+Oq
rJ4/0s6dE0YtoYWJxXlK+NOSmpCVBKPxCmBrQC4Z/l9hg00nU3MFZ0d6QobPPpri
8BxRvt84JGeQUZgJArcstAU92Je0Eb4713WI3VPrzeEewOJ6HzbQvwDTNqUc/jYp
jsBwyOBnKfFC1w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:50 2025 by rpki-client