Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
File: cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft (raw, json)
Hash identifier: iVK2oyHLbeINMGG21WZuAKQCPqKRP62CqWeFdSVBGAU=
Subject key identifier: 34:F6:33:30:91:76:7D:9A:EB:EB:76:77:A7:A9:09:D6:FB:E8:14:C3
Authority key identifier: 73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
Certificate issuer: /CN=7316772efce2a133fb7f8720929d0560cef1db46
Certificate serial: 019A1FBF200C6383D938468B3D4AAFD13B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
Manifest number: 04FE
Signing time: Sun 26 Oct 2025 09:00:10 +0000
Manifest this update: Sun 26 Oct 2025 09:00:10 +0000
Manifest next update: Mon 27 Oct 2025 09:00:10 +0000
Files and hashes: 1: OFaqwNs5Dyg1d88HTW2H4gncFRI.roa (hash: wFSS58IXWFEAJ1x0fwOpm9Nk9TzQ4SMDP5LPnSI+dzw=)
2: cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl (hash: siFn+bxVqYld2Fcr2f7BjEDWIs78L2m6wMenppx1j5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:20:0c:63:83:d9:38:46:8b:3d:4a:af:d1:3b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7316772efce2a133fb7f8720929d0560cef1db46
Validity
Not Before: Oct 26 09:00:10 2025 GMT
Not After : Oct 27 09:00:10 2025 GMT
Subject: CN=34f6333091767d9aebeb7677a7a909d6fbe814c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:67:04:af:27:5b:ee:f4:54:c6:0e:dd:8a:4f:
44:93:27:74:40:59:2e:7b:87:f3:df:a4:6d:77:82:
6f:9e:b4:de:b3:f8:56:c3:d7:0d:ad:9a:af:19:7f:
08:9a:ce:d3:65:aa:6c:52:71:fa:56:fc:33:5e:53:
04:f6:38:b5:53:84:c0:e2:92:3c:01:8c:fc:12:a2:
56:8c:ec:f9:eb:ce:43:6d:41:cd:71:21:83:62:be:
03:04:71:03:e1:af:10:2e:66:f3:ea:27:37:49:0b:
ae:f0:bb:45:37:da:ca:3e:36:20:cb:d8:59:3e:dd:
e4:ee:79:9c:e2:69:b6:d0:a5:df:72:c5:72:b2:ff:
31:a4:a6:49:86:12:5d:5f:8b:d4:e4:0d:e7:9c:2d:
8a:9e:4c:cf:6d:a9:75:09:4f:8a:98:b2:11:70:63:
2d:01:df:a7:4b:4e:a9:89:8e:85:06:4a:fb:39:a1:
1e:6f:50:84:13:63:7e:ec:0b:28:53:8a:e7:ec:fb:
9b:08:11:80:38:4b:03:bc:b6:de:ea:0c:4a:7d:a0:
fb:28:2d:30:66:a0:a5:86:1e:67:f9:f8:f2:62:22:
3f:21:20:a3:92:27:6c:8b:65:96:ac:40:eb:ec:f4:
48:63:41:7e:b3:9e:f1:4b:14:b6:56:f1:ea:80:13:
89:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F6:33:30:91:76:7D:9A:EB:EB:76:77:A7:A9:09:D6:FB:E8:14:C3
X509v3 Authority Key Identifier:
keyid:73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:db:70:6c:e7:cd:ee:a9:0e:70:71:b6:c5:93:92:17:25:6b:
3f:8d:4a:e3:05:b4:13:c0:1f:01:60:b0:cf:94:96:40:3a:0c:
02:7a:3f:6d:1f:5c:50:42:d4:ef:e5:0c:7e:e6:16:8b:ea:b8:
40:23:4d:f1:12:58:67:d6:71:ba:45:62:2d:2e:3e:e1:69:27:
60:a5:aa:5e:58:29:76:82:55:c7:42:cc:ce:97:46:7e:44:ba:
93:83:2e:21:18:63:7e:ad:d4:dc:83:97:27:8a:ef:02:89:0f:
f3:58:25:82:49:70:d9:e1:ce:b5:14:74:9f:dd:32:da:60:60:
f7:fa:ee:a2:39:21:ca:97:53:9c:5d:fe:82:9a:a7:67:61:21:
e3:9c:25:29:ee:20:18:46:17:2b:96:81:9a:bc:de:dd:87:e4:
d9:1a:95:5d:10:43:54:57:c2:c8:7f:86:0f:dd:27:ae:18:ea:
17:31:68:c2:a7:e5:b8:db:5b:89:09:98:e0:b0:db:69:d1:9c:
72:fe:f2:cb:0f:5d:12:ff:e2:01:50:08:83:8e:48:5f:9f:58:
57:c0:47:89:e0:f0:4f:14:f0:41:53:c5:1d:a4:28:c1:65:35:
3e:9e:0d:c0:76:38:ff:f1:be:2c:61:a0:32:cd:92:9d:89:4c:
b4:ca:42:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofvyAMY4PZOEaLPUqv0Ts8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMTY3NzJlZmNlMmExMzNmYjdmODcyMDkyOWQwNTYwY2Vm
MWRiNDYwHhcNMjUxMDI2MDkwMDEwWhcNMjUxMDI3MDkwMDEwWjAzMTEwLwYDVQQD
EygzNGY2MzMzMDkxNzY3ZDlhZWJlYjc2NzdhN2E5MDlkNmZiZTgxNGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WcErydb7vRUxg7dik9Ekyd0QFku
e4fz36Rtd4JvnrTes/hWw9cNrZqvGX8Ims7TZapsUnH6VvwzXlME9ji1U4TA4pI8
AYz8EqJWjOz5685DbUHNcSGDYr4DBHED4a8QLmbz6ic3SQuu8LtFN9rKPjYgy9hZ
Pt3k7nmc4mm20KXfcsVysv8xpKZJhhJdX4vU5A3nnC2KnkzPbal1CU+KmLIRcGMt
Ad+nS06piY6FBkr7OaEeb1CEE2N+7AsoU4rn7PubCBGAOEsDvLbe6gxKfaD7KC0w
ZqClhh5n+fjyYiI/ISCjkidsi2WWrEDr7PRIY0F+s57xSxS2VvHqgBOJDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDT2MzCRdn2a6+t2d6epCdb76BTDMB8GA1UdIwQY
MBaAFHMWdy784qEz+3+HIJKdBWDO8dtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80ZThkNTctNTNjYS00OWM1LTk3ZWYt
MWM4NzZkYjQ0ZmUyLzEvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80ZThkNTctNTNjYS00OWM1LTk3ZWYtMWM4NzZkYjQ0ZmUy
LzEvY3haM0x2emlvVFA3ZjRjZ2twMEZZTTd4MjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9twbOfN
7qkOcHG2xZOSFyVrP41K4wW0E8AfAWCwz5SWQDoMAno/bR9cUELU7+UMfuYWi+q4
QCNN8RJYZ9ZxukViLS4+4WknYKWqXlgpdoJVx0LMzpdGfkS6k4MuIRhjfq3U3IOX
J4rvAokP81glgklw2eHOtRR0n90y2mBg9/ruojkhypdTnF3+gpqnZ2Eh45wlKe4g
GEYXK5aBmrze3Yfk2RqVXRBDVFfCyH+GD90nrhjqFzFowqfluNtbiQmY4LDbadGc
cv7yyw9dEv/iAVAIg45IX59YV8BHieDwTxTwQVPFHaQowWU1Pp4NwHY4//G+LGGg
Ms2SnYlMtMpCbA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 13:03:44 2025 by rpki-client