Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
File: xLMV8myhzbhEERaAw88EN7TBJ-Y.mft (raw, json)
Hash identifier: mztk7Hxj4ce2OTXc7m5etSa6fgSuNtXlJtwrhn+oWA4=
Subject key identifier: 1A:AE:A7:CA:5A:82:01:47:94:84:3D:20:45:3C:B8:84:1D:A5:FB:54
Authority key identifier: C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6
Certificate issuer: /CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6
Certificate serial: 019A72CA844D0CA04224B62697B9B49D5FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
Manifest number: 0327
Signing time: Tue 11 Nov 2025 12:01:06 +0000
Manifest this update: Tue 11 Nov 2025 12:01:06 +0000
Manifest next update: Wed 12 Nov 2025 12:01:06 +0000
Files and hashes: 1: X8EmhkaAzLrZGF0PLTQTQ3F7TQY.roa (hash: wTbEC33NFOM4jNYeqPZkMZltYqmbT0A3haddap6K47g=)
2: xLMV8myhzbhEERaAw88EN7TBJ-Y.crl (hash: s1qdPUP1lYy/qE2QuO2/M9/lcmg8yKiboDZBjB30V6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:84:4d:0c:a0:42:24:b6:26:97:b9:b4:9d:5f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6
Validity
Not Before: Nov 11 12:01:06 2025 GMT
Not After : Nov 12 12:01:06 2025 GMT
Subject: CN=1aaea7ca5a82014794843d20453cb8841da5fb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:53:bd:20:48:7b:55:65:cf:c5:4c:69:36:6a:
7b:0c:52:ef:c5:c1:34:76:fc:6d:72:b4:86:be:f7:
a4:95:6d:26:f2:fa:8f:e4:31:7d:8f:85:3c:07:92:
a5:f9:d4:61:22:39:5a:8f:ea:61:4d:b4:61:a4:81:
db:2e:81:91:b5:55:5d:7d:6e:ff:8f:6a:10:67:12:
4d:15:0a:85:3c:16:b7:0b:a2:ee:19:19:9a:61:69:
fb:3c:bb:6b:e1:1b:11:b0:dc:66:a0:a5:3b:ba:c8:
81:68:ee:e1:2e:71:d3:af:49:34:8e:89:33:ec:cc:
b2:ec:cf:21:a4:25:29:9a:ea:d9:f6:6b:d8:92:cf:
44:11:95:f7:42:f3:e4:97:f4:5f:2f:1f:b2:f5:a5:
a5:3a:95:0b:df:8a:ec:73:c8:ea:41:20:f2:d6:50:
b9:3e:ed:6c:47:e7:0c:dd:5d:8d:bb:05:19:be:57:
26:22:f1:94:dc:bb:48:29:05:29:4a:89:8c:e9:23:
31:01:16:cd:82:17:25:f9:14:ef:ff:d9:70:d7:fe:
9e:e0:78:c6:c7:d4:1a:73:6a:29:9f:8d:5a:b0:a8:
fb:95:ce:02:8c:54:24:65:1b:7e:5d:94:49:6f:5e:
75:f9:d6:59:9e:e9:fc:7f:12:9d:5d:3e:41:3f:be:
54:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AE:A7:CA:5A:82:01:47:94:84:3D:20:45:3C:B8:84:1D:A5:FB:54
X509v3 Authority Key Identifier:
keyid:C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c6:2b:bf:4f:66:af:f5:32:4c:ae:79:5f:c4:fe:fe:49:d2:
16:c9:02:e2:58:c9:50:cb:88:bb:22:1c:20:db:9f:29:8e:61:
db:26:8b:4d:da:f8:82:d2:e2:bd:44:0f:79:b9:98:1a:ce:57:
1b:fb:44:bf:58:05:9b:27:7f:50:5e:48:5b:b1:bd:c4:27:4d:
89:e8:d4:1a:e6:fd:b7:25:2c:12:f4:30:25:b5:e7:2d:9e:c3:
a5:e4:ce:58:47:6d:1a:74:b3:57:a9:08:07:2c:5e:4f:e3:0f:
9e:dc:db:7a:08:52:af:6f:77:fc:10:c8:65:3b:8c:00:79:75:
aa:c9:ce:78:c0:f1:57:88:1b:13:37:26:e9:c7:89:cf:ed:02:
d3:32:59:3b:29:7f:98:84:95:13:d4:0a:09:be:8d:ae:e0:aa:
19:22:dd:52:af:3d:41:59:4f:b4:fe:1f:fc:61:be:b6:32:07:
49:b1:09:9c:3b:25:1e:8e:c5:ef:89:99:2c:9e:58:83:c4:cb:
ef:9c:28:85:c8:08:6b:c8:ef:ff:5f:2d:94:6f:de:d8:0d:51:
8f:7d:28:30:d8:65:65:82:73:32:c2:6d:f5:4c:81:ca:ef:a2:
c3:6e:8a:8d:90:8a:f0:c4:d7:13:1f:32:a8:9c:e7:cd:4c:1f:
a2:fb:02:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:55 2025 by rpki-client