Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
File: mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft (raw, json)
Hash identifier: dSLvt94KDCy7fKP+b8RFHfnQZxc66VyH00ukd1b4cAE=
Subject key identifier: 5A:AA:3E:12:18:1C:8C:E2:05:27:F6:1E:35:63:2D:58:A9:E4:EB:DA
Authority key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
Certificate issuer: /CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Certificate serial: 019A52D1C878E3B46C62910A67C6902E55F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
Manifest number: 10F0
Signing time: Wed 05 Nov 2025 07:01:11 +0000
Manifest this update: Wed 05 Nov 2025 07:01:11 +0000
Manifest next update: Thu 06 Nov 2025 07:01:11 +0000
Files and hashes: 1: mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl (hash: ZQJtC5ZuL/oLGNaYAph7FQAP477NCPW0sDgum3fAy3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:c8:78:e3:b4:6c:62:91:0a:67:c6:90:2e:55:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Validity
Not Before: Nov 5 07:01:11 2025 GMT
Not After : Nov 6 07:01:11 2025 GMT
Subject: CN=5aaa3e12181c8ce20527f61e35632d58a9e4ebda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:e4:12:eb:3e:50:35:45:57:44:3b:b4:82:
85:3d:f2:7c:ae:60:5b:01:48:c3:7d:70:01:fd:6f:
d4:e2:de:a3:5d:92:b6:68:82:68:78:6f:3d:17:9b:
b7:8e:7c:09:99:38:38:b6:a1:82:ff:9c:29:c4:2a:
4e:70:73:9c:4e:67:11:65:9c:0d:c6:a3:db:6b:3d:
84:06:83:ca:db:71:5f:95:ae:05:09:63:60:c9:89:
11:dd:f0:2e:18:35:79:83:d7:ed:ea:8f:f1:06:a8:
58:12:6d:ef:c4:79:55:dc:01:bc:3b:10:3a:6e:5c:
e0:3f:15:3b:b1:0c:41:45:75:ff:cf:6c:cd:fc:11:
ca:e4:0f:a5:63:b1:24:c1:39:3f:f2:34:4f:b4:8e:
0f:c9:03:56:be:b6:b7:c6:9f:20:da:a9:50:3b:61:
09:68:a3:32:4c:59:54:e3:f8:17:05:6b:03:22:f3:
2a:02:41:44:0c:d4:21:00:aa:c7:00:18:8d:bf:ac:
03:45:9e:8c:fd:32:16:cd:2a:26:90:01:b7:da:aa:
c8:a7:e1:1f:ad:74:7f:4c:ab:ce:8b:6a:41:a9:5d:
d6:cd:b1:9a:56:cf:92:eb:bf:7d:72:a2:97:b0:14:
4c:99:82:19:93:27:a3:9d:dc:53:e1:d5:d7:21:de:
d7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AA:3E:12:18:1C:8C:E2:05:27:F6:1E:35:63:2D:58:A9:E4:EB:DA
X509v3 Authority Key Identifier:
keyid:98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ea:ea:e9:a7:0b:ad:a7:a0:ed:c6:60:f5:ef:88:a7:4c:b4:
46:b9:82:02:ba:7d:ba:ca:dc:93:e6:72:e1:40:75:10:15:d0:
cf:aa:f9:e9:4a:2f:dd:76:1c:6c:e0:c6:f2:e0:f9:1a:48:4c:
75:f1:d3:de:7f:de:e7:1d:63:b0:76:95:cd:06:20:d4:12:03:
b5:88:46:b9:17:e6:a4:6b:12:e6:e7:6b:d2:ee:02:b5:57:e9:
97:63:47:7b:90:70:bb:c7:d8:2f:42:9e:bf:90:23:19:88:5a:
78:ce:6c:82:4b:84:1c:01:c6:a8:f4:72:b3:df:3a:65:54:75:
4c:c7:02:a1:d9:15:77:55:1c:8a:9e:d0:bb:2e:95:e3:03:c7:
ce:1e:58:02:65:18:60:04:3d:5e:01:5b:c4:27:43:03:42:ac:
a6:69:f5:5f:e0:c4:c7:37:0a:d4:ed:ac:f9:9f:e9:c3:90:3f:
70:85:54:96:f1:04:5e:c3:16:66:a7:df:7a:90:ab:1d:df:1f:
b6:8a:55:19:c7:d4:9d:9c:04:79:52:6b:43:ad:0d:d3:39:2e:
a1:e4:ab:1a:67:2d:54:f5:26:83:62:9f:09:61:7f:ca:0e:2e:
5c:04:c9:d1:74:be:c1:3d:f7:84:08:7a:2e:2d:6b:02:fd:20:
a2:ee:75:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0ch447RsYpEKZ8aQLlXyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YjVjYTcxOGYzYjlhOTM5YTUxMzY0MWJkODVjYzk0ZmE0
MDE5NTQwHhcNMjUxMTA1MDcwMTExWhcNMjUxMTA2MDcwMTExWjAzMTEwLwYDVQQD
Eyg1YWFhM2UxMjE4MWM4Y2UyMDUyN2Y2MWUzNTYzMmQ1OGE5ZTRlYmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxvkEus+UDVFV0Q7tIKFPfJ8rmBb
AUjDfXAB/W/U4t6jXZK2aIJoeG89F5u3jnwJmTg4tqGC/5wpxCpOcHOcTmcRZZwN
xqPbaz2EBoPK23Ffla4FCWNgyYkR3fAuGDV5g9ft6o/xBqhYEm3vxHlV3AG8OxA6
blzgPxU7sQxBRXX/z2zN/BHK5A+lY7EkwTk/8jRPtI4PyQNWvra3xp8g2qlQO2EJ
aKMyTFlU4/gXBWsDIvMqAkFEDNQhAKrHABiNv6wDRZ6M/TIWzSomkAG32qrIp+Ef
rXR/TKvOi2pBqV3WzbGaVs+S6799cqKXsBRMmYIZkyejndxT4dXXId7XtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqqPhIYHIziBSf2HjVjLVip5OvaMB8GA1UdIwQY
MBaAFJi1ynGPO5qTmlE2Qb2FzJT6QBlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUxYS2NZODdtcE9hVVRaQnZZWE1sUHBBR1ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80ZDkzYjktMmM3OS00ZTUyLWJlNDEt
YzQyYWIwMTk4MzczLzEvbUxYS2NZODdtcE9hVVRaQnZZWE1sUHBBR1ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS80ZDkzYjktMmM3OS00ZTUyLWJlNDEtYzQyYWIwMTk4Mzcz
LzEvbUxYS2NZODdtcE9hVVRaQnZZWE1sUHBBR1ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOrq6acL
raeg7cZg9e+Ip0y0RrmCArp9usrck+Zy4UB1EBXQz6r56Uov3XYcbODG8uD5GkhM
dfHT3n/e5x1jsHaVzQYg1BIDtYhGuRfmpGsS5udr0u4CtVfpl2NHe5Bwu8fYL0Ke
v5AjGYhaeM5sgkuEHAHGqPRys986ZVR1TMcCodkVd1Ucip7Quy6V4wPHzh5YAmUY
YAQ9XgFbxCdDA0Kspmn1X+DExzcK1O2s+Z/pw5A/cIVUlvEEXsMWZqffepCrHd8f
topVGcfUnZwEeVJrQ60N0zkuoeSrGmctVPUmg2KfCWF/yg4uXATJ0XS+wT33hAh6
Li1rAv0gou51IA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:57:55 2025 by rpki-client