Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: un3S2iZN8owPSeGDpT1sAL4F5aKLfRUOL+pAyyBVvyo=
Subject key identifier: C5:45:25:EC:69:CF:DC:89:BF:29:EE:62:CE:0C:C6:7E:87:63:12:62
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 0199FBEAF0108609EB5F43D5D97B53EF0A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 10:01:42 +0000
Manifest this update: Sun 19 Oct 2025 10:01:42 +0000
Manifest next update: Mon 20 Oct 2025 10:01:42 +0000
Files and hashes: 1: 90NkAjkP5P3wZwJqnXSO9AQDG_M.roa (hash: eK7yCOQkJI1NI1OGTayx19wjsA64ORHdInhLei4bvc8=)
2: eXxQ74lf_D70ri2LePLnjdcMkBc.roa (hash: n78D7QenzcNLmShQTibMqzzt2qmVHcGGjBzWjuUDoBA=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: g/8krFj+peIn0cwZeJV1NARDsXzORF7tQL34UnqLVw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f0:10:86:09:eb:5f:43:d5:d9:7b:53:ef:0a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: Oct 19 10:01:42 2025 GMT
Not After : Oct 20 10:01:42 2025 GMT
Subject: CN=c54525ec69cfdc89bf29ee62ce0cc67e87631262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:6b:c8:4e:d9:e2:1c:e5:01:69:03:44:41:
d7:99:7a:77:79:ad:6e:b4:47:3f:8e:17:63:86:1a:
f2:04:3f:ba:72:0a:00:29:c6:a4:06:39:25:3a:2e:
6b:19:97:59:23:6c:ea:9f:ca:4b:7d:4f:c7:79:93:
53:74:62:f5:39:4e:87:09:90:00:b5:05:db:e3:de:
08:12:cd:0e:df:f5:38:eb:95:97:f3:82:15:8a:52:
f8:0f:9e:0c:83:bd:6d:d9:a5:69:4c:5a:16:2b:64:
ed:d8:31:f6:33:3c:95:c7:59:79:cd:e3:95:c3:de:
45:e8:fe:c1:34:5c:14:b3:2c:c1:b4:c7:2b:4b:32:
f6:21:fa:84:56:8f:17:30:20:90:6e:d2:19:74:7b:
15:bc:fd:48:29:e5:6f:56:d7:19:13:98:77:e9:e8:
42:b4:45:cf:05:a3:88:90:7f:01:50:da:5f:7c:24:
d7:c1:fe:72:14:39:8e:6a:11:d4:8a:34:5f:5e:9c:
35:fb:34:a8:98:1e:ec:fa:8e:f2:72:1f:90:cc:fc:
00:4a:5f:eb:41:9a:32:80:1e:d2:94:fd:2a:5a:8a:
b8:a7:16:62:48:09:19:02:b9:5f:ec:0d:35:67:87:
ca:a4:a3:e9:3f:3e:14:f7:54:7d:cb:a3:db:4f:16:
b0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:45:25:EC:69:CF:DC:89:BF:29:EE:62:CE:0C:C6:7E:87:63:12:62
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d1:b3:04:48:5c:bc:70:2a:86:ec:b9:5b:bf:95:61:32:76:
4d:e1:7f:d9:49:40:16:eb:09:61:ce:09:ec:11:67:ff:1b:64:
13:2b:72:a2:cf:46:1f:75:1f:cb:bd:a8:ab:1c:9c:30:fd:1e:
21:9c:43:de:6c:e8:d1:c5:11:ed:a0:25:f6:2a:7c:05:07:81:
63:03:c6:32:b6:1b:27:0c:78:1d:cd:19:ff:6f:73:dc:5a:3c:
0c:e4:d4:5f:87:c1:72:36:c6:87:51:54:fe:4c:15:8b:1f:9e:
3e:97:c3:de:f7:41:ab:8a:10:04:8d:af:de:13:c5:42:77:85:
9b:9e:46:f1:ac:16:39:bb:b8:e5:c3:93:08:31:12:04:22:1d:
bd:f9:66:50:1c:b5:06:39:43:91:1e:8a:3f:87:d9:89:97:a3:
ea:63:e1:5a:1a:9d:fa:b5:0f:15:56:b6:79:9b:56:37:cd:7a:
9f:33:ef:66:6d:22:1e:38:66:5b:d8:9a:0b:7d:19:2a:18:74:
b4:c1:dc:1c:82:50:c6:b2:a3:2b:55:7b:b1:c2:2a:15:2b:71:
f6:37:e2:16:72:70:2f:40:46:6a:c8:a5:fe:ad:01:bd:b5:fd:
d7:88:b2:b5:b6:77:d3:14:75:10:df:80:4b:f1:b0:86:73:7b:
8e:bc:b7:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76vAQhgnrX0PV2XtT7woUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NDZlMTU4MTllYWNkMDViY2NlYmY4MDAxOWNhM2NiN2M0
YTM4ZTAwHhcNMjUxMDE5MTAwMTQyWhcNMjUxMDIwMTAwMTQyWjAzMTEwLwYDVQQD
EyhjNTQ1MjVlYzY5Y2ZkYzg5YmYyOWVlNjJjZTBjYzY3ZTg3NjMxMjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9RryE7Z4hzlAWkDREHXmXp3ea1u
tEc/jhdjhhryBD+6cgoAKcakBjklOi5rGZdZI2zqn8pLfU/HeZNTdGL1OU6HCZAA
tQXb494IEs0O3/U465WX84IVilL4D54Mg71t2aVpTFoWK2Tt2DH2MzyVx1l5zeOV
w95F6P7BNFwUsyzBtMcrSzL2IfqEVo8XMCCQbtIZdHsVvP1IKeVvVtcZE5h36ehC
tEXPBaOIkH8BUNpffCTXwf5yFDmOahHUijRfXpw1+zSomB7s+o7ych+QzPwASl/r
QZoygB7SlP0qWoq4pxZiSAkZArlf7A01Z4fKpKPpPz4U91R9y6PbTxawzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVFJexpz9yJvynuYs4Mxn6HYxJiMB8GA1UdIwQY
MBaAFMVG4VgZ6s0FvM6/gAGco8t8SjjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEt
MmRiMjI0NWYyOTg1LzEveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEtMmRiMjI0NWYyOTg1
LzEveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNGzBEhc
vHAqhuy5W7+VYTJ2TeF/2UlAFusJYc4J7BFn/xtkEytyos9GH3Ufy72oqxycMP0e
IZxD3mzo0cUR7aAl9ip8BQeBYwPGMrYbJwx4Hc0Z/29z3Fo8DOTUX4fBcjbGh1FU
/kwVix+ePpfD3vdBq4oQBI2v3hPFQneFm55G8awWObu45cOTCDESBCIdvflmUBy1
BjlDkR6KP4fZiZej6mPhWhqd+rUPFVa2eZtWN816nzPvZm0iHjhmW9iaC30ZKhh0
tMHcHIJQxrKjK1V7scIqFStx9jfiFnJwL0BGasil/q0BvbX914iytbZ30xR1EN+A
S/GwhnN7jry3Fg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:46 2025 by rpki-client