Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
File: xUUK-nPwuHpCACjCsqSMzg_pKwo.mft (raw, json)
Hash identifier: q1UJz5sJVxBXlfZchPjwuUv469+APiq1OXkWaBn5WaI=
Subject key identifier: 41:95:68:D7:B4:1F:4B:AA:E7:49:4B:65:80:62:49:FD:C9:ED:5A:90
Authority key identifier: C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
Certificate issuer: /CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Certificate serial: 019A4DE20010D020725D275C75017269F387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:48 +0000
Manifest this update: Tue 04 Nov 2025 08:00:48 +0000
Manifest next update: Wed 05 Nov 2025 08:00:48 +0000
Files and hashes: 1: DOYEy7m23OMhQT0GnljJrUQy47E.roa (hash: go8qewztOxPM/eJUbvfZwLwT/UFcT9bOMhrpq63fVQk=)
2: wbQ_0Ms4PpbjrAiW5BsH3h3NRcA.roa (hash: NmuSbPbfuym67xH2QLuOVMqeZvLtav7Q7SRmwtYGojM=)
3: xUUK-nPwuHpCACjCsqSMzg_pKwo.crl (hash: rgnEsNr6h2HTi85/GkaQAfjLsPc9xo5OvX1xlqkdf5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:00:10:d0:20:72:5d:27:5c:75:01:72:69:f3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Validity
Not Before: Nov 4 08:00:48 2025 GMT
Not After : Nov 5 08:00:48 2025 GMT
Subject: CN=419568d7b41f4baae7494b65806249fdc9ed5a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bf:8b:83:d5:aa:fa:99:91:bc:c2:0d:8d:d4:
08:65:6b:17:74:b2:3e:a2:3f:3b:26:35:ed:3e:f4:
4e:3e:91:fa:61:ae:22:79:8d:76:b2:3c:b4:cb:22:
20:c3:c4:e0:31:34:a0:b4:d0:f3:ca:d6:a3:6c:69:
45:69:f5:b1:db:3a:05:71:e2:28:6c:35:5b:a7:1e:
ac:92:7c:80:29:15:23:0e:7b:e7:0b:ba:d4:b9:31:
a7:81:cc:88:e4:2e:7d:4f:b3:53:28:b6:45:f4:94:
88:c5:af:33:fa:f6:6c:9a:64:18:1b:7b:b2:6b:7f:
70:31:c1:7e:fe:6e:d5:cc:9b:91:7c:51:56:6e:e4:
95:d3:f6:79:4a:5f:39:c2:68:7a:14:de:e1:1f:1b:
21:d0:29:f0:13:b2:87:f8:5c:9b:7f:ed:58:0e:07:
8c:72:f0:9a:7e:ab:f0:b5:e9:fb:e2:24:43:97:c6:
7f:e4:6f:42:99:e9:85:90:2c:48:5d:37:bb:9e:6b:
0b:e9:7c:ad:fa:6e:7f:b9:a5:6f:ab:90:af:b3:dc:
b1:f5:56:ea:9b:29:1b:70:ab:30:c5:b5:7f:72:df:
d5:8a:ca:6f:16:22:fb:9d:b2:a9:b2:cf:cd:5b:61:
41:c0:dc:37:28:a3:96:79:15:90:61:22:1e:5b:02:
6d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:95:68:D7:B4:1F:4B:AA:E7:49:4B:65:80:62:49:FD:C9:ED:5A:90
X509v3 Authority Key Identifier:
keyid:C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:82:62:63:89:75:6b:7d:63:4f:61:d9:ff:89:bb:c7:9a:61:
10:18:10:10:6b:4a:9e:a6:a9:33:19:02:64:4d:33:da:68:95:
62:4b:73:e0:6d:c0:94:97:6f:6c:f5:75:b6:d2:e5:8c:4a:5d:
51:1b:9e:27:d4:31:c3:95:7d:b8:1f:67:a8:9a:63:6e:52:0d:
f2:e7:f5:3f:69:54:61:f8:64:01:1e:c5:4b:e4:7c:0c:ea:d3:
09:c7:19:68:95:7c:51:41:a4:f5:1e:a4:d1:d9:ca:9e:64:c3:
3a:4c:8d:06:cd:da:1b:c9:06:29:b1:6a:c1:e3:33:a8:23:5a:
aa:e7:bc:f2:e9:0c:4b:bb:8a:7e:e9:71:39:17:ef:7d:b9:9a:
9f:7b:67:1e:22:ed:f5:07:1b:c2:fe:66:02:0c:05:72:a0:98:
32:0c:5a:a3:2b:e2:a2:68:c7:a8:02:02:9d:f5:d4:73:7e:e3:
ae:b1:9a:d7:cd:43:12:4e:11:b8:75:42:18:72:f8:f6:ff:75:
a2:49:8e:ff:9e:ea:36:a5:16:1e:20:42:7d:5f:e1:3e:57:2e:
1e:32:b2:e1:7a:4f:33:8a:19:91:92:a0:73:86:1e:8b:e8:f2:
b2:2d:42:58:61:40:7a:df:2e:13:73:a8:df:ae:34:ed:47:c1:
8b:41:40:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:18:57 2025 by rpki-client