Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
File: Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json)
Hash identifier: pnyWGOa2ikijjIxZFPY4nTwHVUq+/9fLJg4VrjyjwGM=
Subject key identifier: F3:0A:A8:E4:C4:DB:DD:00:09:F2:58:15:95:43:B6:B7:E4:52:41:F1
Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Certificate serial: 0199FD6AE9DD8BB794D0AC97D0D72087B3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 17:01:06 +0000
Manifest this update: Sun 19 Oct 2025 17:01:06 +0000
Manifest next update: Mon 20 Oct 2025 17:01:06 +0000
Files and hashes: 1: B2IUwm0uaSZHaP7DnPbSBjUieo4.roa (hash: BOlqjJDT24t6aaQsferoPEnSoT/e6IPUh40XBnWzYhY=)
2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: d+L+XaI9Tl7mMXhuwtZutU845EDIGpRpQLIPDPB+keQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e9:dd:8b:b7:94:d0:ac:97:d0:d7:20:87:b3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Validity
Not Before: Oct 19 17:01:06 2025 GMT
Not After : Oct 20 17:01:06 2025 GMT
Subject: CN=f30aa8e4c4dbdd0009f258159543b6b7e45241f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:ee:52:16:c6:1f:4d:7f:f1:78:4c:b8:fc:
d0:0b:ec:da:0b:f7:55:07:27:94:46:2c:ed:33:0e:
c2:b2:d6:97:07:12:3d:a2:b1:1a:5c:a6:21:19:bf:
12:6e:1b:d5:94:9e:d1:0b:b9:6c:6b:5c:27:af:76:
d4:29:a1:8e:a8:28:c8:fa:88:19:9c:d0:41:86:c9:
59:fd:aa:7c:56:57:d8:72:ce:eb:9a:64:db:d9:23:
a8:63:21:88:98:48:19:ac:05:59:48:6d:7b:eb:e3:
c7:74:92:b5:c8:2d:37:de:5f:5f:f6:f1:52:fe:88:
ed:fb:67:d7:16:7d:68:ab:ea:e4:b5:b9:52:f1:43:
ac:16:b5:6f:fa:3b:5e:83:1d:c1:17:79:20:07:a6:
0d:25:38:85:55:22:e8:cf:96:7a:30:96:68:45:9b:
38:90:d6:c8:00:81:18:71:bd:77:fb:0f:c4:3c:68:
ec:77:6f:b9:62:15:75:e7:af:76:a6:19:f1:a5:33:
75:8d:41:20:bd:4f:ae:45:71:b4:8f:4f:93:96:51:
19:b6:90:7a:b5:6b:97:e1:33:fe:75:6e:6b:ca:36:
7d:57:a6:bc:9e:29:3e:7a:b4:fa:20:d9:e3:8a:94:
97:dd:0a:75:fe:98:f4:7e:03:66:18:0b:a4:06:e2:
19:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0A:A8:E4:C4:DB:DD:00:09:F2:58:15:95:43:B6:B7:E4:52:41:F1
X509v3 Authority Key Identifier:
keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4f:92:2e:cd:d0:ec:2f:54:b3:b9:fa:90:b3:d9:f8:03:37:
10:cb:07:0e:1a:28:28:c4:bd:ca:16:fd:58:c8:a1:f2:67:c6:
72:83:05:f0:d8:62:c4:1d:99:c9:1a:23:ba:b9:6d:63:57:e6:
7c:a0:1f:65:c3:c6:62:40:45:40:97:2b:b2:93:ed:18:28:1e:
91:76:cd:3f:f2:8a:38:36:1c:60:d4:70:e8:d9:8c:82:bb:ce:
4c:64:ea:39:5f:3b:be:92:ae:a2:74:91:d6:90:8e:75:a3:77:
ad:53:39:2f:b3:c0:4d:85:e4:73:95:6a:ad:91:ef:e1:06:4b:
80:30:92:6d:4b:25:e7:14:b3:e3:e4:d7:fb:a3:7a:3f:f9:f1:
69:47:09:fe:4e:15:d3:dc:14:a9:73:5a:ac:d0:53:85:6a:1d:
2c:6f:6a:3a:18:20:25:dc:0b:83:bb:fe:bf:99:96:6c:5a:32:
8e:fb:87:a0:c2:ff:43:89:22:dc:85:16:3b:a7:be:c4:21:cd:
2d:2d:c7:09:a1:4b:43:ef:49:23:b0:7a:4f:82:e0:be:d0:fe:
f7:d0:1c:4c:74:15:24:a0:3a:63:17:e8:ec:12:6f:05:67:d2:
04:2f:b7:39:6a:5a:2a:7d:b2:a7:ce:d1:7d:ce:39:20:90:5a:
21:b5:df:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:27:40 2025 by rpki-client