Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
File: xLejOGcjuooupILHtoAxpUEirE8.mft (raw, json)
Hash identifier: i5chyrfoTrzoIE76k8jkIMqollEP4FKM/fqa3T5K2cI=
Subject key identifier: D1:F8:0A:BA:A8:B9:0E:B5:93:48:30:C1:96:24:1F:25:B2:93:8C:C8
Authority key identifier: C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
Certificate issuer: /CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Certificate serial: 019A4D0725124E5D00914C4CB1D8184A5170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
Manifest number: 0572
Signing time: Tue 04 Nov 2025 04:01:45 +0000
Manifest this update: Tue 04 Nov 2025 04:01:45 +0000
Manifest next update: Wed 05 Nov 2025 04:01:45 +0000
Files and hashes: 1: 0_rsDpozI4g5wPFKDmzbwq9bb1k.roa (hash: 7DcbeCiF69zZXzwKjiTUr+RmXx7bcAENnZcFTHZwzHM=)
2: xLejOGcjuooupILHtoAxpUEirE8.crl (hash: XXa1BTPs9uyC26yekv4uhIBbyrJhBx3R90IHpT6Hyco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:25:12:4e:5d:00:91:4c:4c:b1:d8:18:4a:51:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Validity
Not Before: Nov 4 04:01:45 2025 GMT
Not After : Nov 5 04:01:45 2025 GMT
Subject: CN=d1f80abaa8b90eb5934830c196241f25b2938cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:98:fa:0d:26:30:92:6b:06:2d:98:5f:b9:
ef:05:21:5b:e0:ad:fa:a3:37:d9:dc:91:3e:ca:d5:
84:65:7d:56:09:f1:63:3e:41:0c:6b:0c:e8:77:73:
22:2f:4e:b9:da:19:86:a5:7b:9d:29:a9:08:47:68:
49:cd:3d:65:6d:1a:69:39:c1:e7:e7:1f:ee:ce:96:
ed:e0:5b:ca:72:6c:6a:29:53:dc:94:ab:2e:e8:15:
10:28:e8:de:b1:50:cc:80:f4:ba:83:9a:93:47:d8:
b3:54:8e:ec:1f:7c:b4:dc:06:ab:2d:91:37:5a:7c:
16:13:2f:56:23:d2:dc:ba:55:4e:19:32:f7:34:53:
66:56:e9:a9:78:ec:66:82:26:79:df:28:d2:2f:f7:
37:3d:21:e2:70:7f:64:6f:62:98:74:43:0f:8e:4c:
ff:36:8c:d9:21:ae:ce:de:5a:c1:91:9d:8b:40:97:
e6:9d:69:53:e0:3f:4d:a9:d0:27:03:5d:36:74:2c:
49:27:28:ea:bb:e4:52:10:f3:43:a3:f8:a1:d8:7a:
bf:54:58:f3:a8:75:e0:3a:eb:de:dd:7e:8b:31:44:
54:67:85:c2:13:e2:0b:29:02:bc:1e:ff:76:36:65:
7e:aa:75:78:ce:2a:08:4a:2c:3e:94:95:f1:48:d7:
cc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F8:0A:BA:A8:B9:0E:B5:93:48:30:C1:96:24:1F:25:B2:93:8C:C8
X509v3 Authority Key Identifier:
keyid:C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:03:29:44:41:4f:9b:f3:d4:12:c7:e5:ec:f3:00:53:33:9a:
44:89:2d:ec:ec:8f:bb:f6:bc:7e:e2:7f:ed:2c:30:56:f2:44:
ec:56:2b:e1:64:85:8e:46:c3:d0:4c:2b:9e:2e:8a:9f:c3:6e:
4a:69:d1:b0:77:00:d2:ef:e7:35:5b:bb:16:ea:0a:d4:30:20:
c0:39:5b:c6:f1:7d:f1:65:5a:5c:22:ce:d2:c7:e9:95:aa:ac:
b2:02:95:7a:93:26:e8:c3:61:d5:73:b5:b0:e6:15:01:6a:c4:
78:6b:a1:d4:e8:13:eb:78:90:a3:27:e7:70:78:ba:b4:bd:bb:
05:ca:c3:c5:b4:a6:e0:f3:73:59:99:f9:b0:93:a2:09:bc:e5:
43:98:77:24:68:47:dc:82:93:c8:d9:d4:ac:70:bc:2f:68:df:
92:81:3f:fd:f5:e5:7f:50:0d:6a:6b:fb:e9:40:75:96:86:78:
99:e1:a9:9b:9e:87:73:be:9f:ec:92:67:d3:53:40:85:5b:96:
d6:54:05:f1:86:54:39:be:06:11:e9:b6:e6:ec:26:86:58:6c:
95:01:26:38:d4:e1:2e:6e:19:ac:e7:36:20:df:ba:5c:b4:85:
82:33:49:ff:e4:17:d7:81:13:27:99:e8:de:ec:29:27:06:9e:
e9:81:42:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:09 2025 by rpki-client