Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
File: xLejOGcjuooupILHtoAxpUEirE8.mft (raw, json)
Hash identifier: 6eXelhbJ6afRZxt3T1fGOIcILD2vfo8RrvpS5IS2ErQ=
Subject key identifier: 09:D9:DF:67:16:8E:02:F2:B0:71:28:9F:82:8A:1E:37:05:81:76:57
Authority key identifier: C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
Certificate issuer: /CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Certificate serial: 0199FDD995FB66B6E9B9304BC40D7A05CC6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
Manifest number: 0549
Signing time: Sun 19 Oct 2025 19:01:59 +0000
Manifest this update: Sun 19 Oct 2025 19:01:59 +0000
Manifest next update: Mon 20 Oct 2025 19:01:59 +0000
Files and hashes: 1: 0_rsDpozI4g5wPFKDmzbwq9bb1k.roa (hash: 7DcbeCiF69zZXzwKjiTUr+RmXx7bcAENnZcFTHZwzHM=)
2: xLejOGcjuooupILHtoAxpUEirE8.crl (hash: 1FCWtuKm+9tNYWgCECG+sSk4pXQZEN6I1CiW6OHff/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:95:fb:66:b6:e9:b9:30:4b:c4:0d:7a:05:cc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Validity
Not Before: Oct 19 19:01:59 2025 GMT
Not After : Oct 20 19:01:59 2025 GMT
Subject: CN=09d9df67168e02f2b071289f828a1e3705817657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4b:d1:6f:30:73:7d:9d:ed:b4:63:07:05:13:
15:2f:a5:aa:90:3e:4c:6b:48:19:42:e4:e8:df:a5:
91:f7:8c:9e:6a:93:c0:7b:2a:d3:84:af:e2:72:b4:
74:b7:fb:84:d8:4b:e0:12:5c:dd:35:28:5e:15:24:
60:af:ed:0d:95:6c:6a:5c:5a:e3:b9:c7:27:1e:40:
b4:1c:8c:13:ce:34:c1:b0:7f:7f:0d:6a:0f:cd:0b:
cf:7a:37:38:ed:41:1a:44:95:0d:d1:ad:82:2d:7a:
b0:06:30:8a:ae:1d:f3:f8:27:88:b6:93:50:0c:ef:
50:86:e6:51:43:c2:c8:a9:0f:4b:75:20:2b:b3:29:
33:78:2f:6a:51:b7:f2:50:99:8e:07:a9:26:18:a4:
a5:50:1d:55:a1:06:1f:b5:f5:ea:c6:1b:f8:50:39:
82:bf:1a:40:b4:0a:6f:4e:46:b4:4c:95:c2:30:82:
73:ce:17:df:72:3a:e4:e1:20:4b:cf:f7:77:58:91:
d4:58:97:ba:5f:17:56:f2:16:e0:c0:f4:c7:2e:8b:
a9:f6:59:af:fc:19:f3:41:ef:49:63:aa:ce:fd:90:
d8:39:3f:ff:d5:40:79:92:76:94:98:dd:f3:1f:fa:
08:92:cc:ec:ca:63:27:ec:2a:6f:21:06:6b:fe:66:
a7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D9:DF:67:16:8E:02:F2:B0:71:28:9F:82:8A:1E:37:05:81:76:57
X509v3 Authority Key Identifier:
keyid:C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1b:0c:e5:25:b3:83:ce:ac:e3:a1:02:f6:f7:55:9f:25:3b:
cc:1a:f4:18:44:a7:e2:81:27:e2:7c:93:23:36:2f:a3:41:a8:
85:02:db:c8:2a:0f:13:38:a0:a8:1a:cc:5f:03:b4:a4:01:be:
f7:cf:f2:90:a0:6b:e5:70:ce:a4:11:93:fe:28:3e:4b:35:39:
37:c7:ca:72:24:5e:1d:fa:40:0e:09:76:f1:35:77:b0:20:0c:
fd:14:ca:5d:f3:c1:68:33:15:56:54:a4:ff:58:b5:50:80:74:
be:f6:4e:74:d1:53:d0:97:93:64:91:f4:26:16:52:36:7c:86:
9c:86:1c:a1:5f:a5:23:9f:4d:a4:9e:e5:a2:4f:cf:b3:a6:56:
6f:28:6c:ae:55:c0:db:bd:af:cf:18:54:f7:04:00:5c:2a:c1:
e4:3d:9b:11:30:a5:aa:2a:18:99:aa:63:1e:7c:72:4e:10:9d:
aa:0b:e7:5f:75:5c:3b:67:a4:39:bd:fb:61:25:03:aa:b0:7c:
49:74:36:19:7c:f0:31:01:66:ee:aa:5a:c2:71:66:0e:65:a5:
db:f1:d9:46:22:ac:bd:4e:96:c7:25:e0:99:7e:15:42:5b:23:
c5:36:4d:09:5d:db:c1:ff:08:38:11:d7:c6:62:80:9c:02:02:
77:7a:eb:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92ZX7ZrbpuTBLxA16BcxqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjdhMzM4NjcyM2JhOGEyZWE0ODJjN2I2ODAzMWE1NDEy
MmFjNGYwHhcNMjUxMDE5MTkwMTU5WhcNMjUxMDIwMTkwMTU5WjAzMTEwLwYDVQQD
EygwOWQ5ZGY2NzE2OGUwMmYyYjA3MTI4OWY4MjhhMWUzNzA1ODE3NjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokvRbzBzfZ3ttGMHBRMVL6WqkD5M
a0gZQuTo36WR94yeapPAeyrThK/icrR0t/uE2EvgElzdNSheFSRgr+0NlWxqXFrj
uccnHkC0HIwTzjTBsH9/DWoPzQvPejc47UEaRJUN0a2CLXqwBjCKrh3z+CeItpNQ
DO9QhuZRQ8LIqQ9LdSArsykzeC9qUbfyUJmOB6kmGKSlUB1VoQYftfXqxhv4UDmC
vxpAtApvTka0TJXCMIJzzhffcjrk4SBLz/d3WJHUWJe6XxdW8hbgwPTHLoup9lmv
/BnzQe9JY6rO/ZDYOT//1UB5knaUmN3zH/oIkszsymMn7CpvIQZr/mansQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnZ32cWjgLysHEon4KKHjcFgXZXMB8GA1UdIwQY
MBaAFMS3ozhnI7qKLqSCx7aAMaVBIqxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYTdiZjYtNjUyNS00Mzk0LTgwYmEt
YmQ0MGRmYWU3ODg2LzEveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9hYTdiZjYtNjUyNS00Mzk0LTgwYmEtYmQ0MGRmYWU3ODg2
LzEveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRsM5SWz
g86s46EC9vdVnyU7zBr0GESn4oEn4nyTIzYvo0GohQLbyCoPEzigqBrMXwO0pAG+
98/ykKBr5XDOpBGT/ig+SzU5N8fKciReHfpADgl28TV3sCAM/RTKXfPBaDMVVlSk
/1i1UIB0vvZOdNFT0JeTZJH0JhZSNnyGnIYcoV+lI59NpJ7lok/Ps6ZWbyhsrlXA
272vzxhU9wQAXCrB5D2bETClqioYmapjHnxyThCdqgvnX3VcO2ekOb37YSUDqrB8
SXQ2GXzwMQFm7qpawnFmDmWl2/HZRiKsvU6WxyXgmX4VQlsjxTZNCV3bwf8IOBHX
xmKAnAICd3rrSA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:23 2025 by rpki-client