Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: /j2tz1ou3VlGkzVqtCjiJsB3WM1CyPGg/tMkbyG0j1E=
Subject key identifier: 05:D1:60:7E:5E:97:56:9A:95:15:7C:48:29:F5:F6:16:AD:3A:9F:A3
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 0198D66035C951178D0C6F63AF7E16FD803B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 10:01:26 +0000
Manifest this update: Sat 23 Aug 2025 10:01:26 +0000
Manifest next update: Sun 24 Aug 2025 10:01:26 +0000
Files and hashes: 1: 90NkAjkP5P3wZwJqnXSO9AQDG_M.roa (hash: eK7yCOQkJI1NI1OGTayx19wjsA64ORHdInhLei4bvc8=)
2: eXxQ74lf_D70ri2LePLnjdcMkBc.roa (hash: n78D7QenzcNLmShQTibMqzzt2qmVHcGGjBzWjuUDoBA=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: +xv5LNe/6WHkoOyV1qoQ2JzOO0bwXlFK0f2+iALxV7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:35:c9:51:17:8d:0c:6f:63:af:7e:16:fd:80:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: Aug 23 10:01:26 2025 GMT
Not After : Aug 24 10:01:26 2025 GMT
Subject: CN=05d1607e5e97569a95157c4829f5f616ad3a9fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7e:36:c9:8c:4f:23:70:54:e2:e2:a6:f0:5e:
af:d1:1c:04:9c:05:5f:e8:48:a4:64:cb:ad:e2:a8:
76:d5:1e:20:22:fc:cd:b9:ed:4b:4a:e2:0c:dd:c0:
39:37:09:c5:a4:e4:9c:7c:7a:18:ec:6a:84:9e:6d:
a3:4e:13:06:c2:9f:11:53:1a:19:47:8f:66:38:04:
f5:d9:d9:d5:a9:d8:14:c0:00:be:1b:60:3c:11:83:
80:91:f2:b4:f9:73:d0:37:65:4d:65:48:20:2c:bd:
37:7c:67:23:a4:b3:40:c4:04:d8:e2:5b:f5:88:b1:
2f:86:db:06:5a:32:d1:d6:5a:03:d2:2f:c5:83:32:
f4:83:02:7f:8c:17:af:1b:17:2b:43:96:89:4c:6f:
5b:06:26:b8:a8:92:93:51:67:e4:d0:88:8e:fd:0e:
9e:d5:b8:ea:26:ca:2f:e6:11:96:2d:53:f7:7c:c0:
13:9b:ef:d9:ae:de:10:52:9b:a9:2d:d2:a5:fe:ea:
82:32:93:06:60:cb:a3:9c:c6:45:6c:4e:c9:fb:73:
ac:26:fd:70:cb:bc:0d:69:91:fe:f1:44:ed:bc:0f:
4a:a0:1d:0d:ac:c8:64:5e:53:28:0f:47:14:16:28:
a3:1d:44:9f:d1:2b:78:53:ea:2d:56:c7:50:83:db:
f1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D1:60:7E:5E:97:56:9A:95:15:7C:48:29:F5:F6:16:AD:3A:9F:A3
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b2:35:84:e3:b7:50:b5:cb:98:de:54:f4:7d:25:fd:ab:0f:
11:8f:df:e1:cb:d2:b2:7c:ad:fc:83:32:87:48:21:67:26:87:
62:85:6a:f1:55:dc:b6:33:aa:b6:85:96:79:d4:f3:7e:a7:a3:
22:b4:f3:a0:52:bc:fe:d7:ab:47:1e:9f:05:9d:1e:ab:2b:77:
b1:27:a1:fe:6e:c0:2f:ef:b1:b8:20:a6:0f:06:53:b3:0c:2c:
d9:e1:db:68:a9:a5:48:fc:8e:1b:7e:e0:e3:eb:94:78:a5:27:
43:5c:5f:46:62:b5:11:4d:b2:66:06:f7:7d:f2:72:79:e0:e0:
b6:fe:39:36:1f:f7:f0:7c:79:3e:2b:d6:4c:66:98:27:bb:3d:
d1:3a:a5:7d:2e:13:1e:81:67:69:67:c9:86:54:8f:18:85:8f:
0a:cf:58:f3:b9:f3:84:8d:72:ef:64:10:0d:60:84:49:3b:85:
1d:06:f1:fb:fd:8d:a8:fd:32:21:e0:f1:d6:75:7f:1a:20:c8:
21:85:3a:68:7e:8c:76:f3:dc:e9:c7:61:ab:07:65:7d:4c:27:
cb:db:cd:a1:ab:bc:6a:a7:ff:92:d9:4f:3f:c6:81:16:24:ef:
ed:25:b1:62:13:1f:28:b2:21:27:b8:71:a7:94:ce:c5:48:42:
a4:b7:d0:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYDXJUReNDG9jr34W/YA7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NDZlMTU4MTllYWNkMDViY2NlYmY4MDAxOWNhM2NiN2M0
YTM4ZTAwHhcNMjUwODIzMTAwMTI2WhcNMjUwODI0MTAwMTI2WjAzMTEwLwYDVQQD
EygwNWQxNjA3ZTVlOTc1NjlhOTUxNTdjNDgyOWY1ZjYxNmFkM2E5ZmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2X42yYxPI3BU4uKm8F6v0RwEnAVf
6EikZMut4qh21R4gIvzNue1LSuIM3cA5NwnFpOScfHoY7GqEnm2jThMGwp8RUxoZ
R49mOAT12dnVqdgUwAC+G2A8EYOAkfK0+XPQN2VNZUggLL03fGcjpLNAxATY4lv1
iLEvhtsGWjLR1loD0i/FgzL0gwJ/jBevGxcrQ5aJTG9bBia4qJKTUWfk0IiO/Q6e
1bjqJsov5hGWLVP3fMATm+/Zrt4QUpupLdKl/uqCMpMGYMujnMZFbE7J+3OsJv1w
y7wNaZH+8UTtvA9KoB0NrMhkXlMoD0cUFiijHUSf0St4U+otVsdQg9vxmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXRYH5el1aalRV8SCn19hatOp+jMB8GA1UdIwQY
MBaAFMVG4VgZ6s0FvM6/gAGco8t8SjjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEt
MmRiMjI0NWYyOTg1LzEveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEtMmRiMjI0NWYyOTg1
LzEveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7I1hOO3
ULXLmN5U9H0l/asPEY/f4cvSsnyt/IMyh0ghZyaHYoVq8VXctjOqtoWWedTzfqej
IrTzoFK8/terRx6fBZ0eqyt3sSeh/m7AL++xuCCmDwZTswws2eHbaKmlSPyOG37g
4+uUeKUnQ1xfRmK1EU2yZgb3ffJyeeDgtv45Nh/38Hx5PivWTGaYJ7s90TqlfS4T
HoFnaWfJhlSPGIWPCs9Y87nzhI1y72QQDWCESTuFHQbx+/2NqP0yIeDx1nV/GiDI
IYU6aH6MdvPc6cdhqwdlfUwny9vNoau8aqf/ktlPP8aBFiTv7SWxYhMfKLIhJ7hx
p5TOxUhCpLfQ+A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:35:23 2025 by rpki-client