Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
File: l5SL1vKtFY5iT9jonp718b2x05o.mft (raw, json)
Hash identifier: lySVKzus25qxLP9u9S40F/ZamFwCoeacOZmCBfh852w=
Subject key identifier: E4:4A:90:57:C3:70:0C:FD:8A:48:22:E9:3E:9E:BC:AF:2B:92:14:01
Authority key identifier: 97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A
Certificate issuer: /CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a
Certificate serial: 019A4EF5D3B568157668EF73E0578F63C3C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
Manifest number: 043C
Signing time: Tue 04 Nov 2025 13:02:04 +0000
Manifest this update: Tue 04 Nov 2025 13:02:04 +0000
Manifest next update: Wed 05 Nov 2025 13:02:04 +0000
Files and hashes: 1: l5SL1vKtFY5iT9jonp718b2x05o.crl (hash: 0TC2b2SgDw8XE8Aue/ekkoHHs2X0n2dlFDDlSPEDLEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d3:b5:68:15:76:68:ef:73:e0:57:8f:63:c3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97948bd6f2ad158e624fd8e89e9ef5f1bdb1d39a
Validity
Not Before: Nov 4 13:02:04 2025 GMT
Not After : Nov 5 13:02:04 2025 GMT
Subject: CN=e44a9057c3700cfd8a4822e93e9ebcaf2b921401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4c:c7:ba:d4:e1:be:b1:ff:f5:0e:9c:60:33:
33:a0:49:90:0c:3d:00:c9:a0:4f:46:e7:75:67:45:
ee:56:14:3e:21:99:0f:19:af:ef:c3:d6:27:c4:92:
a7:8e:7f:44:1f:14:18:9a:bd:3e:a4:ff:fc:e7:7f:
cf:d2:3e:1b:75:ab:c7:1e:06:62:4f:b9:7c:96:e4:
fc:b2:07:f5:8a:60:8f:f1:60:6f:d5:44:04:ea:26:
7e:5c:ff:f3:3e:6f:55:8b:fa:85:9a:43:a2:2f:54:
4b:a8:07:f3:be:51:a3:bb:50:e0:9e:cf:f4:39:15:
ca:fd:83:50:fb:18:ca:88:ce:be:90:89:e0:f5:69:
44:dc:63:98:f7:ce:f9:32:ff:ea:c6:91:fe:f4:35:
06:37:10:ec:3f:4f:5a:bf:81:c8:9d:db:bc:bd:bd:
54:68:e5:80:e8:8a:48:99:82:0f:3b:44:d3:ad:c8:
c9:e9:a9:5d:50:df:6f:aa:63:a5:ee:9c:81:75:38:
3e:66:05:99:0c:b6:76:45:8e:3e:8f:d9:fa:4f:f5:
28:61:b0:e6:fd:10:f4:9d:68:4a:e6:29:ea:cc:f7:
9b:99:ad:5b:9b:52:f0:f4:93:30:98:78:40:fd:2a:
3c:39:44:71:42:48:90:fb:ba:11:f8:af:00:2d:1f:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4A:90:57:C3:70:0C:FD:8A:48:22:E9:3E:9E:BC:AF:2B:92:14:01
X509v3 Authority Key Identifier:
keyid:97:94:8B:D6:F2:AD:15:8E:62:4F:D8:E8:9E:9E:F5:F1:BD:B1:D3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5SL1vKtFY5iT9jonp718b2x05o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c727bf-7709-4b33-b618-a6c5000c7184/1/l5SL1vKtFY5iT9jonp718b2x05o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:27:95:51:aa:dd:71:29:31:f4:83:4a:54:e8:4c:30:a7:18:
fd:db:35:cc:87:3e:08:4d:84:c9:46:e7:a4:91:fd:40:6b:a8:
74:3f:11:6a:87:01:8e:cd:a2:5d:97:04:5d:2d:d5:1e:6f:b1:
97:86:94:b3:43:f4:66:ab:71:93:2c:82:d9:03:bd:b7:11:92:
1d:10:5a:47:77:11:1d:7c:ea:5b:49:3a:7a:ce:91:15:a2:a1:
90:9f:9c:25:ca:32:7d:d3:7a:c2:13:59:35:92:de:1b:55:5e:
bb:1d:99:d9:82:8f:a5:91:61:eb:a8:98:96:11:14:ae:b7:a4:
d4:ec:eb:70:21:4f:b4:45:11:d7:47:ed:2b:0a:69:d8:ed:9e:
f4:a2:f6:48:15:70:0f:e9:82:7b:f6:7e:61:82:fc:2f:63:d2:
e0:06:f9:53:64:e6:16:81:42:8a:1c:c9:98:b9:a1:6d:9c:65:
b0:ff:5b:a2:98:2e:d3:c2:f6:a9:38:5b:be:6d:b9:c0:72:b7:
19:12:e2:e8:6a:e0:b9:70:86:b4:de:30:64:d6:5e:5d:72:8d:
2c:b2:ea:67:4c:eb:36:d8:3e:0b:ef:55:39:b0:d8:a7:ee:a4:
9b:d2:e4:bb:4c:85:f0:89:5d:b5:b8:82:38:f1:28:aa:9a:98:
0b:be:e2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:36 2025 by rpki-client