Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier: Ttmy+aZGLdt5E9DWa9eApS7xP+JOq58aF+LaybtyQkU=
Subject key identifier: 8A:16:7A:09:AD:D9:9B:83:15:CB:64:CB:40:BA:5E:F2:10:ED:D9:8B
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial: 019A70DC18E22A3B8E2C21E35AC51BB945AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number: 0514
Signing time: Tue 11 Nov 2025 03:01:03 +0000
Manifest this update: Tue 11 Nov 2025 03:01:03 +0000
Manifest next update: Wed 12 Nov 2025 03:01:03 +0000
Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: yHxdv3nigJI92UE7UHEacDSDeNy2uTCPMzUuoPZtP/w=)
2: RfQdtLKXYLdrItaAhtareV1d0X8.roa (hash: 2v2M5d2SJj08W++N719Wz/Nxup00xLX8rohfuP7PYPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:18:e2:2a:3b:8e:2c:21:e3:5a:c5:1b:b9:45:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Validity
Not Before: Nov 11 03:01:03 2025 GMT
Not After : Nov 12 03:01:03 2025 GMT
Subject: CN=8a167a09add99b8315cb64cb40ba5ef210edd98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a4:fc:b6:e9:80:82:60:7b:08:b0:5e:93:a6:
6e:bb:e2:b9:19:c4:3e:ab:27:94:fd:e2:cb:65:dd:
f3:64:25:a6:3d:90:c0:9e:30:61:de:a5:ff:71:8d:
64:53:92:96:12:47:d5:37:10:7c:d1:18:e6:12:38:
9a:8c:7b:60:d3:81:da:5f:e7:e3:9b:2e:6f:3d:f3:
b3:bd:1e:28:34:44:43:ad:89:a4:92:0b:2e:f0:63:
5a:65:6d:c4:f0:fd:47:5c:68:a5:09:13:c6:30:38:
42:15:3f:6a:37:0f:c5:55:d1:ba:68:bd:f2:c7:bd:
fc:02:18:ac:57:c7:ab:5b:47:44:5d:1a:50:10:8f:
23:a2:bc:18:ec:8e:cf:69:2d:39:aa:15:0c:cf:7f:
08:3b:d2:c1:ed:00:f1:7c:2b:16:81:2a:14:a2:a9:
60:cd:63:cf:e4:8b:be:3e:7f:64:a5:f9:1c:d5:4e:
f8:16:8e:5b:bb:d1:ea:40:d2:7f:3a:fd:d2:9b:20:
6b:7e:48:98:40:95:08:16:72:c3:3b:b3:e2:0b:94:
6a:38:c9:41:c7:52:4b:7f:d7:03:99:6a:de:2f:aa:
fb:fc:da:77:cf:61:f1:21:80:46:8c:bd:4a:64:2e:
31:31:33:f6:62:36:8e:63:a2:21:b5:e0:33:14:32:
aa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:16:7A:09:AD:D9:9B:83:15:CB:64:CB:40:BA:5E:F2:10:ED:D9:8B
X509v3 Authority Key Identifier:
keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:39:92:e6:6c:ff:6d:42:72:d9:f6:cd:ce:80:3d:3c:4b:92:
9e:67:dd:50:6c:56:f3:73:c6:8d:99:25:fa:6e:7e:2f:8e:be:
2c:f2:24:c7:1c:24:0c:95:52:db:ff:4b:c8:ed:f8:2b:d8:ae:
b8:15:0f:c5:08:78:2d:cf:79:19:d0:61:ee:b9:f1:f0:c3:90:
3e:ac:46:a2:dc:35:5f:7c:15:5d:08:67:76:a4:4d:09:d2:c9:
6f:76:00:37:5c:57:6a:1e:d7:7f:4e:41:36:e7:67:32:23:9a:
18:f7:08:06:05:08:b2:d9:34:24:79:ca:c8:61:1a:be:25:b2:
c0:6a:53:e1:7b:ae:b8:92:f1:bc:d5:a2:3a:34:a8:3b:ba:21:
ee:b8:98:b0:0c:a6:e0:b5:8a:e7:dc:94:6a:c0:8f:03:ce:87:
c3:f8:7b:23:57:ef:5c:62:55:82:8e:d7:c8:4c:e3:ff:46:f2:
94:03:66:b3:0c:89:a2:d3:17:bc:cb:e7:b7:f6:11:4b:f5:ea:
87:ca:17:2e:ff:da:d0:90:a5:8b:a9:52:56:74:e8:5d:c3:81:
ff:fb:83:e5:ee:5f:bc:3d:08:8d:e2:4f:e7:00:8c:0e:5a:21:
78:88:67:22:cd:73:25:76:d4:40:cd:0e:76:5d:6d:f2:84:e7:
6d:10:91:5b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpw3BjiKjuOLCHjWsUbuUWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMTJmMDVmY2Q1OWZkMTY4NmY5MjljNjdiZWRjZWY1OWU1
NTBkZjIwHhcNMjUxMTExMDMwMTAzWhcNMjUxMTEyMDMwMTAzWjAzMTEwLwYDVQQD
Eyg4YTE2N2EwOWFkZDk5YjgzMTVjYjY0Y2I0MGJhNWVmMjEwZWRkOThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9KT8tumAgmB7CLBek6Zuu+K5GcQ+
qyeU/eLLZd3zZCWmPZDAnjBh3qX/cY1kU5KWEkfVNxB80RjmEjiajHtg04HaX+fj
my5vPfOzvR4oNERDrYmkkgsu8GNaZW3E8P1HXGilCRPGMDhCFT9qNw/FVdG6aL3y
x738AhisV8erW0dEXRpQEI8jorwY7I7PaS05qhUMz38IO9LB7QDxfCsWgSoUoqlg
zWPP5Iu+Pn9kpfkc1U74Fo5bu9HqQNJ/Ov3SmyBrfkiYQJUIFnLDO7PiC5RqOMlB
x1JLf9cDmWreL6r7/Np3z2HxIYBGjL1KZC4xMTP2YjaOY6IhteAzFDKqMwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIoWegmt2ZuDFctky0C6XvIQ7dmLMB8GA1UdIwQY
MBaAFPsS8F/NWf0WhvkpxnvtzvWeVQ3yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14THdYODFaX1JhRy1TbkdlLTNPOVo1VkRmSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvYTAzN2QxLWVhN2MtNGM4NS04MTI4
LWQ0ZDBhYWI3MDFiZi8xLzEteEx3WDgxWl9SYUctU25HZS0zTzlaNVZEZkkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M5L2EwMzdkMS1lYTdjLTRjODUtODEyOC1kNGQwYWFiNzAx
YmYvMS8xLXhMd1g4MVpfUmFHLVNuR2UtM085WjVWRGZJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzmS
5mz/bUJy2fbNzoA9PEuSnmfdUGxW83PGjZkl+m5+L46+LPIkxxwkDJVS2/9LyO34
K9iuuBUPxQh4Lc95GdBh7rnx8MOQPqxGotw1X3wVXQhndqRNCdLJb3YAN1xXah7X
f05BNudnMiOaGPcIBgUIstk0JHnKyGEaviWywGpT4XuuuJLxvNWiOjSoO7oh7riY
sAym4LWK59yUasCPA86Hw/h7I1fvXGJVgo7XyEzj/0bylANmswyJotMXvMvnt/YR
S/Xqh8oXLv/a0JCli6lSVnToXcOB//uD5e5fvD0IjeJP5wCMDloheIhnIs1zJXbU
QM0Odl1t8oTnbRCRWw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:13 2025 by rpki-client