Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: eNLSQnjB6w0V1sO7lFE7TM8TI5qCCSv1DjAvztEgQ70=
Subject key identifier: C4:AA:D4:42:D9:54:70:F1:CB:3A:47:7E:0F:58:A3:1C:AF:1A:63:1A
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 019892C936C2C3C689CA10F2D2429DF8075A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 162B
Signing time: Sun 10 Aug 2025 07:01:56 +0000
Manifest this update: Sun 10 Aug 2025 07:01:56 +0000
Manifest next update: Mon 11 Aug 2025 07:01:56 +0000
Files and hashes: 1: 90NkAjkP5P3wZwJqnXSO9AQDG_M.roa (hash: eK7yCOQkJI1NI1OGTayx19wjsA64ORHdInhLei4bvc8=)
2: eXxQ74lf_D70ri2LePLnjdcMkBc.roa (hash: n78D7QenzcNLmShQTibMqzzt2qmVHcGGjBzWjuUDoBA=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: smxCjiTVNDIcghfTiKfba5k7cLqLp+o8tyMH6ctg1pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:36:c2:c3:c6:89:ca:10:f2:d2:42:9d:f8:07:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: Aug 10 07:01:56 2025 GMT
Not After : Aug 11 07:01:56 2025 GMT
Subject: CN=c4aad442d95470f1cb3a477e0f58a31caf1a631a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:90:d0:ab:c9:2a:dd:9c:19:ee:c6:19:55:
42:db:84:3e:08:22:1a:2c:4b:3d:f2:00:1f:20:be:
3a:08:f7:0d:a4:a5:ce:ad:bb:cb:85:a1:57:93:43:
0c:a9:6c:60:a3:ff:ae:c6:86:b8:e3:6d:50:f2:e4:
97:fb:90:c7:59:59:a6:52:cc:0b:44:66:83:ee:42:
49:7f:6a:83:50:36:a8:d9:2d:5c:23:4f:9f:bb:54:
33:2c:7d:0b:ed:64:71:e4:23:77:c3:17:c2:83:fc:
a1:92:89:61:5d:63:2d:5b:4d:44:5e:9d:53:73:56:
23:ad:84:9a:6c:4e:36:14:de:de:19:46:70:d4:da:
bc:a8:98:6a:5f:6d:fe:93:a5:25:de:c1:76:e0:0a:
d3:f5:13:0d:2c:3d:dd:92:63:be:89:4f:b9:a1:8c:
77:94:cf:fe:cf:0b:e0:a6:91:49:eb:66:5c:b8:3c:
e7:f1:aa:c5:e1:f6:76:1a:d5:74:df:0a:63:4e:04:
59:9e:4e:5c:d6:13:74:15:6e:d1:44:f7:fa:91:a7:
24:61:62:c0:01:d9:aa:1c:00:ac:68:dc:c3:8f:70:
e2:6d:86:e1:e1:c7:53:3d:85:33:07:55:28:bf:0a:
67:40:c8:c2:96:1a:d2:55:99:2e:4d:43:94:bb:d7:
e3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AA:D4:42:D9:54:70:F1:CB:3A:47:7E:0F:58:A3:1C:AF:1A:63:1A
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f5:25:48:0b:1a:d4:44:8b:7a:c0:3b:38:48:1e:85:fd:0d:
c8:c6:7d:2e:ef:c2:20:d8:86:a2:e5:79:bb:30:1a:55:76:8f:
9d:b6:2b:fb:5a:5f:1b:2e:9a:64:95:18:cf:03:02:37:1f:54:
81:cb:dd:84:09:e4:4d:1f:86:35:60:ac:68:a5:07:89:9e:ac:
02:c3:48:e9:74:e1:db:08:6c:45:28:b8:26:31:6c:54:57:2e:
66:e7:23:1c:b7:b4:ab:d5:0a:b4:ec:ee:40:41:da:d9:49:3c:
4d:97:a7:af:c2:f7:e8:91:3c:f8:85:62:20:f2:d8:11:78:cc:
b4:4f:ad:d2:c5:77:fb:e0:32:eb:44:38:73:2f:2c:2a:60:74:
b7:0b:23:41:58:e2:5e:31:d3:28:ca:d8:f5:2a:ae:4b:3a:71:
69:f9:79:ef:98:53:81:00:34:3f:45:0a:28:a3:36:28:ab:6a:
0b:e5:b3:fb:36:d9:fc:d1:24:ef:9d:c9:87:46:e5:81:35:ec:
71:9d:ab:45:16:cb:51:b4:b6:82:42:ba:d2:a9:36:e4:12:c5:
18:fa:b9:d2:10:95:00:eb:24:17:0f:7c:e6:3f:b6:68:97:7f:
09:bd:bd:c7:25:ee:b3:81:f1:a8:f4:f1:f9:ed:c2:96:2c:8c:
21:7e:16:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSyTbCw8aJyhDy0kKd+AdaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NDZlMTU4MTllYWNkMDViY2NlYmY4MDAxOWNhM2NiN2M0
YTM4ZTAwHhcNMjUwODEwMDcwMTU2WhcNMjUwODExMDcwMTU2WjAzMTEwLwYDVQQD
EyhjNGFhZDQ0MmQ5NTQ3MGYxY2IzYTQ3N2UwZjU4YTMxY2FmMWE2MzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJaQ0KvJKt2cGe7GGVVC24Q+CCIa
LEs98gAfIL46CPcNpKXOrbvLhaFXk0MMqWxgo/+uxoa4421Q8uSX+5DHWVmmUswL
RGaD7kJJf2qDUDao2S1cI0+fu1QzLH0L7WRx5CN3wxfCg/yhkolhXWMtW01EXp1T
c1YjrYSabE42FN7eGUZw1Nq8qJhqX23+k6Ul3sF24ArT9RMNLD3dkmO+iU+5oYx3
lM/+zwvgppFJ62ZcuDzn8arF4fZ2GtV03wpjTgRZnk5c1hN0FW7RRPf6kackYWLA
AdmqHACsaNzDj3DibYbh4cdTPYUzB1UovwpnQMjClhrSVZkuTUOUu9fjBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSq1ELZVHDxyzpHfg9YoxyvGmMaMB8GA1UdIwQY
MBaAFMVG4VgZ6s0FvM6/gAGco8t8SjjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEt
MmRiMjI0NWYyOTg1LzEveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEtMmRiMjI0NWYyOTg1
LzEveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfUlSAsa
1ESLesA7OEgehf0NyMZ9Lu/CINiGouV5uzAaVXaPnbYr+1pfGy6aZJUYzwMCNx9U
gcvdhAnkTR+GNWCsaKUHiZ6sAsNI6XTh2whsRSi4JjFsVFcuZucjHLe0q9UKtOzu
QEHa2Uk8TZenr8L36JE8+IViIPLYEXjMtE+t0sV3++Ay60Q4cy8sKmB0twsjQVji
XjHTKMrY9SquSzpxafl575hTgQA0P0UKKKM2KKtqC+Wz+zbZ/NEk753Jh0blgTXs
cZ2rRRbLUbS2gkK60qk25BLFGPq50hCVAOskFw985j+2aJd/Cb29xyXus4HxqPTx
+e3CliyMIX4WEQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:59 2025 by rpki-client