Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
File: mxl1igh4doFtwZNh6vHpQS3nP4Y.mft (raw, json)
Hash identifier: 34w0Navb+eGKkG9FgMBTs5l0ji/dW3+bgmzBvAb1OVw=
Subject key identifier: AD:37:1C:4C:59:16:67:F7:D6:0B:73:01:92:0F:FF:B8:67:07:3E:FA
Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
Certificate issuer: /CN=9b19758a087876816dc19361eaf1e9412de73f86
Certificate serial: 019A209B8990FDFC1B0A1202CC0690EC2453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
Manifest number: 07A9
Signing time: Sun 26 Oct 2025 13:00:55 +0000
Manifest this update: Sun 26 Oct 2025 13:00:55 +0000
Manifest next update: Mon 27 Oct 2025 13:00:55 +0000
Files and hashes: 1: BDTH3ILUan6_zfYPTgmdo2aSIEs.roa (hash: vfoMCSza5cDas2vR4Ocwzq0jqksW2l8HAJ0wMflsMqE=)
2: E5IVKgbJt2zbKiLJbsrX3LIySFU.roa (hash: tGHo3B7TRCKpsC+++roBe0/3ivzBH+Ps/KgroLhmH0s=)
3: UaT5Q9bX82Bqe6jOA8JUwqN9Vlk.roa (hash: juEH9dDl19+Gh9JzennWIbN6WX5TGedOU3KMBiUkbg4=)
4: Y2-uFOvDKhB51qa1_AM5U2JOtUY.roa (hash: 4c9/YhL+TK23Lox9YjacyfqcSWeripXtyhdacCRYF0A=)
5: mxl1igh4doFtwZNh6vHpQS3nP4Y.crl (hash: FgjwS9nAXmnhfDESu845/zYgyA8w6Y0u6ciydzBWPk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:89:90:fd:fc:1b:0a:12:02:cc:06:90:ec:24:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86
Validity
Not Before: Oct 26 13:00:55 2025 GMT
Not After : Oct 27 13:00:55 2025 GMT
Subject: CN=ad371c4c591667f7d60b7301920fffb867073efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:df:d6:6f:a5:bd:a3:57:e5:56:f3:bd:cb:f7:
78:50:09:5a:50:6c:b3:5f:34:42:ea:b7:5c:b1:2d:
a3:12:97:e0:ae:c7:fd:e0:15:ad:3e:de:80:a7:b2:
d8:13:29:fd:0b:68:c3:98:0e:7f:82:ea:95:03:e8:
98:e7:49:b0:03:ab:51:12:da:71:cc:85:fc:df:f3:
ab:e4:b7:5d:c9:48:db:68:72:a3:c8:a7:d8:b4:93:
ff:57:bf:cd:57:2d:14:8f:50:84:ed:89:d4:39:37:
9b:58:75:94:4a:41:e2:25:e2:6c:69:e6:27:8d:ac:
6e:80:76:e4:49:06:b3:9e:45:16:a7:f9:8e:d5:b7:
4c:91:ec:ae:57:78:66:ee:3c:32:bc:17:ae:40:9d:
ab:9b:a4:5a:e9:8e:ec:83:6a:65:31:81:19:2c:e5:
57:e9:23:f3:2f:84:12:02:30:5c:b8:74:64:c5:34:
85:6f:aa:69:2c:68:1b:b2:e0:0d:f6:80:28:ee:93:
ad:04:28:5f:87:b7:26:16:47:5e:d2:9d:4e:f6:4a:
f3:30:07:59:af:ea:7e:c5:bd:89:59:da:e0:a0:9d:
d7:0f:7a:bf:8a:e2:64:ef:10:7f:c4:27:8a:42:a8:
af:5c:f7:d2:42:d9:21:39:70:75:54:4d:27:76:0a:
04:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:37:1C:4C:59:16:67:F7:D6:0B:73:01:92:0F:FF:B8:67:07:3E:FA
X509v3 Authority Key Identifier:
keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:90:86:e5:59:4f:3e:1f:0a:bb:94:df:5d:cf:31:f1:97:d4:
80:65:11:17:77:bf:07:41:ca:da:b3:71:ac:92:35:4c:81:6c:
f5:8d:16:d4:10:be:1d:5d:b6:8e:ce:e4:cd:8a:11:62:bc:c9:
1f:77:e8:09:f3:d0:3c:73:b5:41:64:ec:26:df:85:6a:d9:ea:
06:0c:0d:62:9d:7e:36:dc:7f:d4:6a:1a:38:85:49:29:3a:03:
e5:82:79:e7:de:34:7d:01:9d:15:b5:30:f3:16:77:25:d2:b2:
2e:ae:8d:e1:ce:31:94:f9:15:d7:d8:cc:21:68:de:da:8f:21:
42:12:39:f7:6a:3c:9f:a5:2e:ab:a0:db:ba:45:31:60:97:88:
2b:04:39:3e:6c:ae:c5:c2:ea:22:ab:84:02:52:b5:dd:b2:12:
1a:d1:82:b5:06:1c:87:8a:ef:68:1c:d7:9d:aa:8d:ab:a0:58:
1b:0f:f3:fa:d4:1a:de:c5:3f:7f:f8:0a:e7:24:03:6f:3d:5b:
f1:d1:c0:8d:7d:5e:4c:3e:4b:f7:7c:43:28:72:01:41:c9:89:
8d:70:88:c4:3d:d0:6e:dc:4e:05:2b:13:f2:ce:0d:82:2b:c0:
31:22:e7:fa:30:66:c2:aa:cc:76:03:f5:f2:c2:2e:57:83:c5:
e3:79:67:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 16:17:40 2025 by rpki-client