Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
File: xUUK-nPwuHpCACjCsqSMzg_pKwo.mft (raw, json)
Hash identifier: NffqFME8DFBYZ4Mq29J+efvY83LmC/sl7nBPNxDVcpk=
Subject key identifier: B1:03:C9:98:61:5B:06:CF:DD:27:DB:97:C7:F7:61:EF:17:91:DB:4B
Authority key identifier: C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
Certificate issuer: /CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Certificate serial: 0199FAD8403E2D11393CBD7AF23F52B3788A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 05:01:40 +0000
Manifest this update: Sun 19 Oct 2025 05:01:40 +0000
Manifest next update: Mon 20 Oct 2025 05:01:40 +0000
Files and hashes: 1: DOYEy7m23OMhQT0GnljJrUQy47E.roa (hash: go8qewztOxPM/eJUbvfZwLwT/UFcT9bOMhrpq63fVQk=)
2: wbQ_0Ms4PpbjrAiW5BsH3h3NRcA.roa (hash: NmuSbPbfuym67xH2QLuOVMqeZvLtav7Q7SRmwtYGojM=)
3: xUUK-nPwuHpCACjCsqSMzg_pKwo.crl (hash: A20fOReuWXpwoibAHZj6/e/C9tPXGe7BsZFenAhrDu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:40:3e:2d:11:39:3c:bd:7a:f2:3f:52:b3:78:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Validity
Not Before: Oct 19 05:01:40 2025 GMT
Not After : Oct 20 05:01:40 2025 GMT
Subject: CN=b103c998615b06cfdd27db97c7f761ef1791db4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e6:ef:e2:ab:ab:fe:ff:aa:75:b5:07:4a:3e:
8d:eb:76:20:c6:98:62:d6:28:db:40:bd:01:37:2a:
c9:50:31:10:24:22:a4:74:aa:5a:9e:9d:6a:7c:d3:
da:dc:f7:d4:9b:42:20:f9:34:4b:24:2b:4d:47:1c:
cd:a3:fa:d1:88:3c:56:3c:19:8b:6c:d1:4e:c7:aa:
ad:59:8d:e1:d5:64:85:38:83:fb:a6:db:27:00:46:
2c:ac:03:7b:51:13:0e:37:75:e6:75:71:28:c2:24:
be:43:10:30:c4:84:79:a5:21:40:0b:69:1b:2d:46:
dd:b3:00:c9:61:0d:4f:cb:ce:38:b4:98:6c:9f:17:
a4:2d:93:84:f0:f0:0b:8e:13:ef:3a:68:da:d2:43:
88:b1:18:84:7e:c7:53:47:cd:a5:c0:1d:c7:6d:6d:
50:7c:11:3d:b0:8a:87:ea:5c:79:6e:40:f9:a7:53:
ec:0f:7d:04:1a:1f:48:90:a2:35:38:85:d6:28:2b:
ed:f2:11:b4:c0:ce:a7:d8:93:c8:d8:27:19:67:b4:
3b:ab:57:fc:a9:95:0b:b2:be:95:15:b4:fc:48:7e:
5b:2e:2d:27:17:33:04:34:ab:94:da:c0:be:54:04:
95:3a:4b:b3:37:d7:99:37:6d:40:48:86:0b:75:3c:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:03:C9:98:61:5B:06:CF:DD:27:DB:97:C7:F7:61:EF:17:91:DB:4B
X509v3 Authority Key Identifier:
keyid:C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d5:79:dc:df:69:f5:05:c8:f3:1b:1f:8c:74:e4:52:75:ef:
41:43:87:03:db:cc:38:35:8d:4a:ee:43:50:df:b1:5f:16:2b:
49:d9:db:13:07:cc:bc:e9:71:24:27:84:ce:d8:a7:1b:87:21:
d3:59:4a:8b:fd:5c:19:43:ac:9d:6e:c4:5c:cf:fc:38:66:a0:
b4:38:f8:eb:5d:0d:3a:ae:a3:34:55:b7:e9:0a:89:bc:cb:6f:
ed:92:aa:ac:03:82:a4:3b:cd:c9:c7:6a:72:58:c1:d2:fd:a1:
4a:6b:8c:d1:56:ab:35:db:c6:85:b4:47:4c:10:14:d9:e0:54:
9b:e1:bc:89:a6:47:51:85:99:dc:91:4a:3b:94:aa:a1:5a:1a:
f6:1c:d2:04:ba:18:8e:ac:29:2f:42:cd:51:62:8a:82:8d:92:
d5:21:71:1a:50:e3:a1:13:06:cd:69:41:e9:70:29:e2:71:03:
52:9a:2a:9a:17:1a:a4:75:7b:78:71:5a:79:97:39:ba:31:b2:
6b:42:38:1d:c4:14:49:e6:9b:9c:31:66:f8:cd:01:19:fa:f5:
e0:9b:8c:d9:47:6b:07:e4:82:b9:03:e9:f1:8c:b3:a6:3c:44:
59:68:17:76:01:a4:04:90:05:74:49:a9:50:62:1f:bb:db:9a:
a8:05:f0:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62EA+LRE5PL168j9Ss3iKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NDUwYWZhNzNmMGI4N2E0MjAwMjhjMmIyYTQ4Y2NlMGZl
OTJiMGEwHhcNMjUxMDE5MDUwMTQwWhcNMjUxMDIwMDUwMTQwWjAzMTEwLwYDVQQD
EyhiMTAzYzk5ODYxNWIwNmNmZGQyN2RiOTdjN2Y3NjFlZjE3OTFkYjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlubv4qur/v+qdbUHSj6N63Ygxphi
1ijbQL0BNyrJUDEQJCKkdKpanp1qfNPa3PfUm0Ig+TRLJCtNRxzNo/rRiDxWPBmL
bNFOx6qtWY3h1WSFOIP7ptsnAEYsrAN7URMON3XmdXEowiS+QxAwxIR5pSFAC2kb
LUbdswDJYQ1Py844tJhsnxekLZOE8PALjhPvOmja0kOIsRiEfsdTR82lwB3HbW1Q
fBE9sIqH6lx5bkD5p1PsD30EGh9IkKI1OIXWKCvt8hG0wM6n2JPI2CcZZ7Q7q1f8
qZULsr6VFbT8SH5bLi0nFzMENKuU2sC+VASVOkuzN9eZN21ASIYLdTy3cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEDyZhhWwbP3Sfbl8f3Ye8XkdtLMB8GA1UdIwQY
MBaAFMVFCvpz8Lh6QgAowrKkjM4P6SsKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hMmE2YWQtYjE1Zi00NzM0LWI1OWUt
NjY0YTk5MjZmMzMzLzEveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hMmE2YWQtYjE1Zi00NzM0LWI1OWUtNjY0YTk5MjZmMzMz
LzEveFVVSy1uUHd1SHBDQUNqQ3NxU016Z19wS3dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNV53N9p
9QXI8xsfjHTkUnXvQUOHA9vMODWNSu5DUN+xXxYrSdnbEwfMvOlxJCeEztinG4ch
01lKi/1cGUOsnW7EXM/8OGagtDj4610NOq6jNFW36QqJvMtv7ZKqrAOCpDvNycdq
cljB0v2hSmuM0VarNdvGhbRHTBAU2eBUm+G8iaZHUYWZ3JFKO5SqoVoa9hzSBLoY
jqwpL0LNUWKKgo2S1SFxGlDjoRMGzWlB6XAp4nEDUpoqmhcapHV7eHFaeZc5ujGy
a0I4HcQUSeabnDFm+M0BGfr14JuM2UdrB+SCuQPp8YyzpjxEWWgXdgGkBJAFdEmp
UGIfu9uaqAXwWQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:45 2025 by rpki-client