Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
File: lFtz335v4RAPHROgfBjVmvIoQow.mft (raw, json)
Hash identifier: uqqkUa+HHZwlp+PNE0NYbTWk4Ngmb3CFtuOY7sXneFw=
Subject key identifier: 07:B2:4B:A6:22:5C:6C:81:8E:EA:E8:3E:EE:C5:15:CC:79:10:47:4A
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 019A4E86A63535DDCE0C00FBD86C5AD08EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
Manifest number: 15B3
Signing time: Tue 04 Nov 2025 11:00:38 +0000
Manifest this update: Tue 04 Nov 2025 11:00:38 +0000
Manifest next update: Wed 05 Nov 2025 11:00:38 +0000
Files and hashes: 1: 9LVEIaMlmJxNlD9z3n5kSDNE07w.roa (hash: Ts++AgaSboNBt9jLBwSwB9DRgMmL7vyooMiQkdJdfP8=)
2: lFtz335v4RAPHROgfBjVmvIoQow.crl (hash: ARmu9QnzLddQgEpAw0saXg0dU1syiH6fXOr2eGtI2C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a6:35:35:dd:ce:0c:00:fb:d8:6c:5a:d0:8e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Nov 4 11:00:38 2025 GMT
Not After : Nov 5 11:00:38 2025 GMT
Subject: CN=07b24ba6225c6c818eeae83eeec515cc7910474a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:06:44:2b:08:15:76:ed:e4:cf:8a:7b:e9:89:
41:a9:b7:28:cb:a1:f5:7b:a2:2c:2b:c8:b5:b4:d4:
76:de:ae:98:ae:ec:b0:47:24:65:81:ac:74:7c:06:
29:ad:bd:59:2f:6c:f3:73:e9:41:63:3c:61:95:b5:
01:19:5f:3c:14:5f:4a:e5:2b:1d:4b:9f:fa:1b:57:
50:90:dd:16:b3:81:e9:eb:d8:3a:20:34:9a:8f:e5:
cb:c8:d8:ef:3c:43:32:48:20:68:37:2c:91:31:91:
9b:40:c2:7e:1a:89:9a:2e:3f:50:91:0c:b5:9d:64:
ad:fe:39:31:92:1f:9a:49:2b:9f:95:a9:7c:e8:e8:
5e:4b:4b:54:42:f7:a2:d2:4c:01:bd:9f:36:5e:95:
96:15:e0:57:76:f4:40:0f:38:8e:82:27:4c:4b:dd:
0b:1a:62:8c:e6:8e:c6:83:af:c8:a1:80:c0:ee:f1:
c8:78:b8:97:4a:5d:f7:a0:59:f4:66:59:9e:80:f8:
6b:d5:6d:84:cc:35:bf:5d:86:cd:e0:da:63:37:9c:
16:3f:2e:61:10:cf:4b:cc:27:90:bb:54:e1:06:bf:
54:95:d9:85:34:ef:3a:f4:c2:db:ac:4a:f0:c0:bf:
9e:8a:82:3a:bc:92:29:97:7c:36:6f:a6:82:44:14:
11:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B2:4B:A6:22:5C:6C:81:8E:EA:E8:3E:EE:C5:15:CC:79:10:47:4A
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bd:1f:a0:2c:34:1e:e1:0b:00:32:15:5b:eb:36:e8:8e:35:
fd:55:9d:87:65:a3:47:a4:7b:5a:28:11:8f:f5:d5:69:f4:ea:
65:3f:ac:f1:41:bb:c0:bb:f3:3a:1c:af:33:28:66:81:72:a6:
a1:85:ef:f6:d0:bc:10:f9:9b:81:d6:a3:2b:71:9c:56:a8:21:
a8:ef:7f:02:c5:95:5a:66:b2:ee:a3:17:c7:d3:ef:e3:b8:6c:
df:10:0c:39:72:f1:b6:1f:63:8c:63:60:62:cf:d9:57:72:2c:
32:60:8e:6d:99:bd:b5:d3:cc:ed:5e:a0:61:90:34:77:cd:00:
96:5c:c3:8a:e5:db:67:75:26:aa:4f:08:54:b3:97:3e:a5:5d:
de:9f:22:a3:fa:a0:90:bf:5f:48:79:10:21:35:a2:7b:cf:7e:
8d:85:d5:1c:eb:71:cb:6b:22:6d:9b:62:5e:a0:4b:ef:1e:17:
9e:bf:a9:b9:ba:05:ef:44:55:52:54:e3:e3:b2:d2:2e:d8:66:
86:10:47:36:9e:b8:87:d4:ba:4f:74:bf:ef:9c:db:76:d0:cf:
92:21:e6:fa:40:02:c8:83:cc:fc:df:53:e3:c2:a7:1c:cc:65:
a5:4a:b8:a3:8d:cd:bb:89:cf:d8:3d:a9:c8:6b:e3:27:6d:87:
d9:f1:5e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:57:51 2025 by rpki-client