Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
File: xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json)
Hash identifier: NJtB8r7rHg6eaJLqJNgnAqrH+DYeAkx0gk8WBlG4oKA=
Subject key identifier: 7F:72:D3:01:2E:68:D0:40:14:57:A0:11:4E:A6:DA:76:79:FD:3B:C2
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial: 0199FB0EEF36F9ECA3EC8522FC3CB67090A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
Manifest number: 13E9
Signing time: Sun 19 Oct 2025 06:01:23 +0000
Manifest this update: Sun 19 Oct 2025 06:01:23 +0000
Manifest next update: Mon 20 Oct 2025 06:01:23 +0000
Files and hashes: 1: 2O7hTeTBTYQlXrHUGjT-esuiTyY.roa (hash: DN3/NgDDrumPZHYXXX/T0l7uMFZxt8+Z9FjDhPflTwg=)
2: EnujZTa_xifqO1ApuBtNO607PMQ.roa (hash: lVv7SmdnXwh0GWr+88AXWNM4yuVtWqv+5v4P4182pMI=)
3: QsHNthgc9L7fJ_2Fo_g-CqUIr74.roa (hash: 9xya8h6lnbe7gVjWBZEopxxvdjqjl2fFO+ULpdjenyw=)
4: kSQmmeExWfprcCDLfHI_OYJk0ms.roa (hash: 4gXw5KLNPGHoJR1QDpTIZ93gsLn9MiktkPpQtwbbYxQ=)
5: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: 0tKdJHQoxFkJg5LT9PQyCzuF1rO+Y/4Z6Ib4bZyPlgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:ef:36:f9:ec:a3:ec:85:22:fc:3c:b6:70:90:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Validity
Not Before: Oct 19 06:01:23 2025 GMT
Not After : Oct 20 06:01:23 2025 GMT
Subject: CN=7f72d3012e68d0401457a0114ea6da7679fd3bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:2c:83:f6:10:8a:fd:34:90:4f:97:43:c9:
c5:20:8b:93:2e:27:18:8f:98:c1:3a:6f:a1:29:02:
f5:dc:f1:35:56:df:73:6d:04:e5:dc:26:a8:7b:6e:
26:31:16:d5:c9:37:13:aa:78:34:c0:51:41:12:46:
0a:8a:d7:0e:41:7e:a3:90:fc:7d:05:cb:f7:98:5b:
1d:62:1a:59:3e:b7:bb:c4:ea:c4:1a:d4:99:4e:7f:
29:72:f0:e0:84:00:4b:96:32:00:4a:2b:f4:05:2e:
a4:73:82:e6:1e:83:9e:a9:84:ad:06:c0:82:87:04:
9b:de:ed:c3:2e:05:b9:df:83:c7:73:f8:cf:55:d0:
15:17:57:91:d4:36:85:03:36:5c:de:b4:2b:ed:05:
13:2b:c5:b4:06:e4:8c:76:9a:81:29:67:c4:b0:fa:
32:fa:fc:d3:93:45:cf:84:e7:b7:6d:98:ac:a3:5e:
90:ac:b4:4e:8a:2d:57:6c:35:f3:d5:b0:ef:4a:7f:
a0:81:22:cf:3a:5c:2b:1b:81:dd:60:4b:2b:86:f1:
68:8f:ff:b1:7c:61:46:fc:ae:5b:ef:20:17:b9:c2:
1e:21:d7:7a:55:c6:3c:81:5e:32:ab:7e:3f:13:ec:
10:40:8b:a1:9f:3d:f5:29:9b:0c:85:57:c3:17:54:
f9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:72:D3:01:2E:68:D0:40:14:57:A0:11:4E:A6:DA:76:79:FD:3B:C2
X509v3 Authority Key Identifier:
keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:70:0f:a3:e6:a8:d6:ab:db:95:7a:9d:2d:d5:25:a9:fe:ab:
31:5e:d2:0f:f2:fc:90:cf:4b:56:11:23:ef:38:a0:d3:99:d3:
b8:fe:8f:92:1a:9f:dd:e0:cc:6e:b1:1a:78:48:ff:d3:31:3b:
bd:35:5b:51:86:af:83:8e:8f:a5:cd:d0:bd:b4:a5:3c:fc:07:
9f:0f:0c:68:0e:12:f4:91:53:d2:a4:fe:11:81:ce:4d:23:e3:
a5:79:6f:48:4b:5a:62:4e:74:d0:3f:42:4d:56:99:eb:e7:9b:
70:2d:39:d1:d2:91:a3:3f:5f:7b:b0:0d:0e:31:d8:c5:e8:a0:
68:68:e2:06:ea:05:0c:25:b6:b0:7c:6d:3f:6b:25:5d:7d:63:
7b:63:66:dd:55:81:cb:66:20:38:95:cc:37:98:f6:4e:3c:5d:
21:20:ff:52:31:ab:65:62:10:9e:68:27:5c:c5:67:d0:c8:cc:
7d:f6:c7:b2:47:cf:28:8e:22:71:88:06:60:f3:66:98:22:41:
a6:1d:fe:48:fe:91:8c:a0:7d:68:1d:a9:d3:4d:ef:10:ed:fd:
f1:d6:a4:90:d7:ec:a6:de:b6:46:ec:ac:0c:96:4d:bc:04:0f:
d6:2f:64:e8:63:d3:e3:81:86:7a:4c:d4:c5:67:e2:69:8a:16:
c8:67:3d:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Du82+eyj7IUi/Dy2cJCpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjFiNDU4YWJmNzk3ZGVkY2M2NjFlNTRhNjg1ZjY1MTgz
NGI1ZDEwHhcNMjUxMDE5MDYwMTIzWhcNMjUxMDIwMDYwMTIzWjAzMTEwLwYDVQQD
Eyg3ZjcyZDMwMTJlNjhkMDQwMTQ1N2EwMTE0ZWE2ZGE3Njc5ZmQzYmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYosg/YQiv00kE+XQ8nFIIuTLicY
j5jBOm+hKQL13PE1Vt9zbQTl3Caoe24mMRbVyTcTqng0wFFBEkYKitcOQX6jkPx9
Bcv3mFsdYhpZPre7xOrEGtSZTn8pcvDghABLljIASiv0BS6kc4LmHoOeqYStBsCC
hwSb3u3DLgW534PHc/jPVdAVF1eR1DaFAzZc3rQr7QUTK8W0BuSMdpqBKWfEsPoy
+vzTk0XPhOe3bZiso16QrLROii1XbDXz1bDvSn+ggSLPOlwrG4HdYEsrhvFoj/+x
fGFG/K5b7yAXucIeIdd6VcY8gV4yq34/E+wQQIuhnz31KZsMhVfDF1T5HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9y0wEuaNBAFFegEU6m2nZ5/TvCMB8GA1UdIwQY
MBaAFMSxtFir95fe3MZh5UpoX2UYNLXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNjBlMjQtMjA0MC00YTVjLTkyY2Yt
ZWM1OGEzMTI1ZWU1LzEveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yNjBlMjQtMjA0MC00YTVjLTkyY2YtZWM1OGEzMTI1ZWU1
LzEveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbnAPo+ao
1qvblXqdLdUlqf6rMV7SD/L8kM9LVhEj7zig05nTuP6Pkhqf3eDMbrEaeEj/0zE7
vTVbUYavg46Ppc3QvbSlPPwHnw8MaA4S9JFT0qT+EYHOTSPjpXlvSEtaYk500D9C
TVaZ6+ebcC050dKRoz9fe7ANDjHYxeigaGjiBuoFDCW2sHxtP2slXX1je2Nm3VWB
y2YgOJXMN5j2TjxdISD/UjGrZWIQnmgnXMVn0MjMffbHskfPKI4icYgGYPNmmCJB
ph3+SP6RjKB9aB2p003vEO398dakkNfspt62RuysDJZNvAQP1i9k6GPT44GGekzU
xWfiaYoWyGc9GQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:18 2025 by rpki-client