Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
File: Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json)
Hash identifier: kNBS1mxFsY5ZoxC1Hqpm0QoXqegJ3yLpHF1jXssUM3o=
Subject key identifier: 8B:44:0F:1B:87:0C:87:3F:E7:87:FA:F9:E7:48:DF:AD:8F:5F:3A:5E
Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Certificate serial: 019A4C983B967F00E2B0E0A4D48085FC999A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 02:00:36 +0000
Manifest this update: Tue 04 Nov 2025 02:00:36 +0000
Manifest next update: Wed 05 Nov 2025 02:00:36 +0000
Files and hashes: 1: B2IUwm0uaSZHaP7DnPbSBjUieo4.roa (hash: BOlqjJDT24t6aaQsferoPEnSoT/e6IPUh40XBnWzYhY=)
2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: 07DUTMkExiHetWPdt0ki0FoH67HmbBtlWv4IbPQGx/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:3b:96:7f:00:e2:b0:e0:a4:d4:80:85:fc:99:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Validity
Not Before: Nov 4 02:00:36 2025 GMT
Not After : Nov 5 02:00:36 2025 GMT
Subject: CN=8b440f1b870c873fe787faf9e748dfad8f5f3a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:ae:bb:ef:07:76:e4:d9:dc:b5:77:58:49:
c2:9e:ed:13:31:32:23:eb:f1:1e:ad:05:30:51:68:
b4:ed:00:44:94:e2:35:22:e0:82:76:97:d7:1c:b5:
4f:3e:4b:e5:65:e8:72:8c:10:ec:9e:c4:97:70:4c:
f7:ae:81:ab:51:77:35:74:41:4b:f9:14:74:0a:b8:
ce:92:d2:25:98:9d:68:1a:99:21:cb:cb:e6:d4:84:
ed:50:54:66:5f:ad:1d:52:e1:02:a9:0e:d6:3d:f9:
f6:33:b2:88:e3:57:57:02:04:56:d3:97:ff:cf:38:
d1:03:92:fc:71:b4:0d:c9:52:78:46:e8:9b:c6:ff:
11:50:94:f0:8b:85:d9:a9:07:f7:8c:2e:26:1a:25:
52:38:65:9c:d3:df:bc:5d:ec:6e:0e:60:f4:58:36:
17:e8:8f:74:3a:82:02:61:16:53:4c:c5:d0:6f:7c:
f3:bc:0f:c9:cf:c1:f7:47:a5:30:30:6d:ef:a8:be:
5c:83:e2:e4:7b:a6:71:05:49:86:db:96:f4:90:12:
7c:df:bf:be:d0:30:ff:ea:4a:61:03:90:33:b6:82:
03:16:ea:1a:36:a2:09:b9:97:0d:2f:3c:7f:ab:0b:
0a:67:cf:13:d5:06:93:6a:7d:8c:d4:f1:fb:65:0e:
21:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:44:0F:1B:87:0C:87:3F:E7:87:FA:F9:E7:48:DF:AD:8F:5F:3A:5E
X509v3 Authority Key Identifier:
keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:52:4f:50:40:47:d5:9c:ad:17:de:2e:b2:7e:c7:bc:03:31:
5b:d6:06:32:13:4a:1a:72:ec:f8:29:18:82:02:f5:d5:f1:45:
0c:36:8d:80:97:bc:d6:ba:f7:1e:2e:3c:ab:fc:eb:36:e0:0c:
b2:41:22:86:38:0e:50:72:29:e8:4d:02:71:9b:20:11:c4:c4:
91:66:0c:13:75:8d:97:52:a5:a1:a9:c7:e2:6d:98:61:cf:af:
22:a1:1b:d1:8b:67:a9:73:be:ab:eb:41:8d:38:a5:d0:ff:f8:
a1:ba:21:7d:ec:09:f7:9a:44:c8:dc:27:76:4a:29:fd:7c:44:
36:80:93:b1:18:d1:37:93:89:4c:33:ef:e7:6f:38:ff:da:cb:
73:7b:56:4c:c1:08:b6:c6:f6:be:17:52:c6:cb:5e:fb:a6:9a:
a2:6b:55:b8:85:a1:ba:f6:f2:85:1f:c2:72:8d:89:ba:7f:9b:
37:41:02:bc:8a:4f:b7:65:e7:c2:88:08:01:f2:cf:a5:1d:39:
83:cf:08:30:39:87:74:97:42:78:9a:bf:ce:3f:80:7a:ea:a1:
9a:99:c7:22:48:64:ce:a6:4b:27:ce:7c:03:9d:80:2d:e4:db:
e3:d9:5b:05:77:00:8f:12:3c:45:85:a1:a9:fc:a8:23:16:12:
c6:55:3d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:26 2025 by rpki-client