Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: JxUsghY5RfOc1/CJJOx7JvqZrAs2V03qOBH1uK5O/oE=
Subject key identifier: 0A:10:D5:FC:C9:25:DA:8F:ED:25:7C:E8:E7:D5:42:03:FE:77:BD:B3
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 019A52D20260A10AB53DB9CCB429241EA56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 07:01:26 +0000
Manifest this update: Wed 05 Nov 2025 07:01:26 +0000
Manifest next update: Thu 06 Nov 2025 07:01:26 +0000
Files and hashes: 1: 90NkAjkP5P3wZwJqnXSO9AQDG_M.roa (hash: eK7yCOQkJI1NI1OGTayx19wjsA64ORHdInhLei4bvc8=)
2: eXxQ74lf_D70ri2LePLnjdcMkBc.roa (hash: n78D7QenzcNLmShQTibMqzzt2qmVHcGGjBzWjuUDoBA=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: RG/qvzyIOhHpgTdz5mkjyhtc23OA97n0bhYl35Nc8Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:02:60:a1:0a:b5:3d:b9:cc:b4:29:24:1e:a5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: Nov 5 07:01:26 2025 GMT
Not After : Nov 6 07:01:26 2025 GMT
Subject: CN=0a10d5fcc925da8fed257ce8e7d54203fe77bdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:87:35:db:d1:c4:5a:63:c8:07:e3:7e:06:98:
f5:53:36:b8:48:43:ba:1a:25:e9:12:78:c4:9e:c1:
91:0c:80:c9:82:c5:5e:2d:59:d3:9d:8e:9b:7b:13:
5e:bd:bb:9c:d5:2b:5c:5d:f2:7d:c6:14:a8:82:56:
04:51:11:6c:61:36:ec:7d:dd:8b:bd:cd:fa:1f:45:
be:e2:9d:46:82:08:f0:b5:44:2a:b2:5c:7b:03:76:
10:72:15:fd:d6:32:73:90:df:5c:46:21:6c:fd:34:
5e:70:2e:15:53:a5:85:03:4c:61:8e:27:9d:06:aa:
98:6f:82:a5:52:20:25:b1:89:bf:d2:cc:03:33:bc:
06:db:de:45:3c:91:75:48:b8:3e:a7:38:1e:33:d6:
51:13:08:36:b8:d4:05:54:14:40:54:7a:ce:bd:08:
21:f9:f0:ed:d9:ff:4a:50:2a:ba:f0:1d:a9:59:4b:
3d:2d:88:4c:e5:7a:a3:95:76:b8:2d:99:10:1d:f1:
30:7a:fb:f3:29:51:1f:85:bf:74:f4:bf:0c:9b:b2:
c6:64:62:b9:5e:b0:02:c0:d4:1b:29:dc:59:5b:6d:
d5:02:60:e1:00:1c:10:5e:9e:24:6e:1d:06:31:af:
3c:79:c0:9b:cb:cc:de:58:4b:6f:6a:24:1e:92:e3:
6e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:10:D5:FC:C9:25:DA:8F:ED:25:7C:E8:E7:D5:42:03:FE:77:BD:B3
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b7:f8:b2:d2:be:33:86:26:8a:c4:4c:fe:c5:f5:ba:a9:0e:
3d:14:9e:d5:91:ab:e7:62:86:3e:e6:53:f2:9f:cb:b7:7e:52:
0f:9d:f8:f8:37:06:76:aa:7b:0a:65:34:92:1c:f8:09:35:bf:
25:6b:60:04:cc:69:c0:50:f4:19:e1:c8:5f:ae:d6:7d:54:07:
82:fd:01:b6:bd:86:af:4a:be:d1:20:a1:0d:3b:82:f7:82:20:
62:01:98:3a:81:f8:a7:45:b5:49:92:7b:3f:05:5f:50:52:0e:
85:e8:f7:58:c3:7b:ab:6c:d4:76:5e:61:e1:42:54:75:72:99:
59:82:76:6c:cd:e3:af:00:1e:df:0e:27:e5:01:4a:cf:38:8d:
c8:ac:2e:ce:23:85:7a:69:1b:91:be:c8:55:9d:4a:00:cb:e6:
7c:b6:dc:75:d6:4a:f5:1a:97:d1:a0:28:40:1b:79:3e:3d:23:
43:5f:e1:fe:05:8a:46:3a:dd:3c:17:05:58:3e:e3:e3:b8:f1:
8c:f7:48:db:f9:47:66:44:31:c4:40:f3:19:ac:e1:a8:a9:37:
a1:1a:6b:da:8a:2e:81:c2:63:df:d9:3a:f0:e3:ca:45:3e:58:
03:42:88:be:53:f8:26:ad:ad:ee:31:6c:6e:84:d6:40:66:32:
84:a0:f0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:00:42 2025 by rpki-client