Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
File: cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft (raw, json)
Hash identifier: F7a5LUYyft554XFJzdRGfC0Zl1kH+mt4x0Z/ZhYWfeE=
Subject key identifier: AA:E7:76:9A:62:B8:DA:47:E0:69:D3:D9:B0:2F:A3:6E:1E:A0:44:EC
Authority key identifier: 73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
Certificate issuer: /CN=7316772efce2a133fb7f8720929d0560cef1db46
Certificate serial: 019A51F5692C3825B9BC92890E03EFA10D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
Manifest number: 0518
Signing time: Wed 05 Nov 2025 03:00:28 +0000
Manifest this update: Wed 05 Nov 2025 03:00:28 +0000
Manifest next update: Thu 06 Nov 2025 03:00:28 +0000
Files and hashes: 1: OFaqwNs5Dyg1d88HTW2H4gncFRI.roa (hash: wFSS58IXWFEAJ1x0fwOpm9Nk9TzQ4SMDP5LPnSI+dzw=)
2: cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl (hash: 4jedqwRTovmkJTdzDCEI5T8Xc6N7KYHh1eK/+fUBrYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:69:2c:38:25:b9:bc:92:89:0e:03:ef:a1:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7316772efce2a133fb7f8720929d0560cef1db46
Validity
Not Before: Nov 5 03:00:28 2025 GMT
Not After : Nov 6 03:00:28 2025 GMT
Subject: CN=aae7769a62b8da47e069d3d9b02fa36e1ea044ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:75:3c:51:b5:bf:23:78:d0:4f:06:2a:6c:e4:
dd:1d:1f:78:41:64:c2:8f:5a:6d:24:6a:d1:1a:69:
42:58:16:ea:61:ac:88:ff:6e:07:35:75:b0:d7:ac:
5b:6f:f8:b2:c0:6a:33:c4:f0:e3:4e:69:89:04:a4:
0a:ae:86:59:76:4e:3b:3c:ca:8e:fa:a9:4f:c0:90:
e6:9f:1f:9f:7b:26:dd:0d:76:d9:64:32:5d:67:d0:
5f:dc:9d:02:8a:16:b3:b9:d1:88:5f:13:d3:5d:84:
9c:50:86:67:c2:ce:b3:35:25:75:19:78:91:a5:ee:
ef:e1:3e:5b:53:7e:cd:7e:ad:a8:46:96:8a:cc:55:
7a:aa:74:a5:80:df:57:48:49:86:03:04:c0:1f:38:
74:42:ec:ca:02:b2:28:cc:20:fd:58:94:ec:a1:b1:
5e:9a:bc:35:97:fa:11:00:63:84:89:af:b5:f5:33:
88:c0:74:a2:f2:51:5b:2a:bb:eb:47:9e:3e:44:a6:
55:9e:36:a1:52:6b:c4:3a:1e:83:44:1c:4f:af:b1:
d1:19:cc:7d:e3:7e:ba:80:58:f1:1d:12:f3:60:3d:
ad:20:b4:c7:a5:5e:ae:cc:87:68:cf:fb:00:c4:d6:
e5:4f:25:d5:d3:46:97:4d:2e:be:c5:d9:97:6e:8e:
2b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E7:76:9A:62:B8:DA:47:E0:69:D3:D9:B0:2F:A3:6E:1E:A0:44:EC
X509v3 Authority Key Identifier:
keyid:73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:71:95:f3:34:1b:a9:52:5e:de:d9:8d:c2:9c:68:ba:0f:e6:
87:10:1c:e9:08:a5:16:85:ae:76:a7:04:aa:d9:4f:e9:f0:b7:
3f:d8:fa:eb:1c:ac:94:f4:10:a3:c3:14:49:85:91:01:fb:a4:
6c:dc:3c:37:5f:5c:56:56:ae:8c:06:67:fd:cc:8c:d4:b7:ec:
7f:b3:cf:d8:4f:81:b2:47:3c:01:78:e8:e4:f6:52:df:8c:25:
b5:07:12:10:e8:f3:da:f9:45:d3:9d:4d:25:d6:f5:fb:d0:f7:
e4:7c:83:af:7e:21:21:43:3d:c3:37:4a:76:95:5d:84:83:e2:
da:e7:86:46:8e:9a:94:3e:91:db:da:58:4d:0b:e4:42:cb:ec:
34:b1:72:fe:d0:9c:5e:b0:08:d1:77:b7:fb:6e:80:80:84:91:
6e:35:d5:b3:e4:29:cf:0d:c6:ee:c7:71:b4:f1:8a:92:14:a9:
75:82:94:ae:df:d6:ab:68:30:7d:c0:7a:cc:96:3c:11:83:60:
e6:d7:ba:23:7f:f7:ac:d4:23:19:10:db:a8:91:93:f9:5b:25:
f1:1e:30:a9:fa:6e:22:85:ff:a4:20:b0:54:8d:02:f5:dd:e0:
c1:a7:98:21:39:59:0a:b1:0f:1d:15:52:a2:f0:82:b2:d5:63:
e9:d5:07:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:56:15 2025 by rpki-client