Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
File: IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft (raw, json)
Hash identifier: byT+ZpmZILr1IKoVzZmDJwFhqbrocrZAs3Ae1vmaWco=
Subject key identifier: BD:35:27:A7:43:EB:CA:9B:4A:C6:88:49:D3:49:41:0C:F8:DC:53:C0
Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
Certificate issuer: /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Certificate serial: 019A4FD083210A705823C46DAD17938A6655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
Manifest number: 0BA4
Signing time: Tue 04 Nov 2025 17:00:56 +0000
Manifest this update: Tue 04 Nov 2025 17:00:56 +0000
Manifest next update: Wed 05 Nov 2025 17:00:56 +0000
Files and hashes: 1: 7cHudsbhVZHbppHTF_ntQT5LGaE.roa (hash: gjOnvh/cfHW6KLD8KAndHZd6PiXGNmxJ/xbLzRraSmM=)
2: IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl (hash: NJxnLvYTg6WHteQVPlN0BLM0p0xxRuDMztu4e7grNFU=)
3: neE4dadyN9p4toZpyZnUy5go7zI.roa (hash: BEYi4+FYJNnVHeQxMI/DXO867YZPToyRNjfQJzdzItc=)
4: tJRtFloSVUB88lTkNS55R53-hwU.roa (hash: 9EHkjNm0yl8lkpw4/hLkTGb/95FKLGbpXVqh6rQ6OQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:83:21:0a:70:58:23:c4:6d:ad:17:93:8a:66:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Validity
Not Before: Nov 4 17:00:56 2025 GMT
Not After : Nov 5 17:00:56 2025 GMT
Subject: CN=bd3527a743ebca9b4ac68849d349410cf8dc53c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:ee:e8:a9:00:17:35:03:08:f6:39:d3:ad:
7a:e1:10:63:fa:a4:af:b0:5b:33:4b:2b:9f:77:a4:
95:90:6d:b9:8a:25:af:f9:3f:8a:6a:4d:a5:c2:3b:
43:f1:2f:f9:06:7f:41:82:82:49:57:0e:f4:52:cd:
0e:89:7f:99:bb:4f:d8:9c:fb:ab:b2:e7:75:54:16:
e1:33:a9:54:c7:64:fc:f1:c4:f0:c5:fc:5a:a4:34:
3b:64:4f:58:d9:d8:87:f9:c8:46:ea:c4:c1:d0:e0:
95:98:e0:ff:77:f8:8d:03:e2:4f:1c:9b:30:0c:90:
6a:e7:11:9a:69:20:dd:ff:ae:24:c9:ab:3f:30:8b:
68:ea:80:28:7f:19:a3:dd:41:12:27:9d:3c:d0:56:
59:65:61:cd:27:5a:52:78:d0:c0:f0:e8:43:62:3e:
35:23:ba:86:6c:a9:95:54:bf:ae:a5:9a:a9:a2:88:
5e:f3:6a:57:51:a5:c8:47:78:c0:f2:c2:6a:91:1c:
83:46:6b:de:ba:a6:4e:96:01:ec:e2:77:48:08:dd:
0b:7b:57:af:9f:fa:0b:95:0b:cf:ae:e1:20:3b:3b:
c7:d5:73:d6:bd:32:46:82:18:66:82:6b:c2:ae:de:
89:ec:9e:ee:9c:f1:d4:ea:a5:6e:ff:5d:55:10:38:
f5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:35:27:A7:43:EB:CA:9B:4A:C6:88:49:D3:49:41:0C:F8:DC:53:C0
X509v3 Authority Key Identifier:
keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:07:83:87:a6:e7:ab:fa:87:8c:f3:77:10:37:14:d4:6b:5d:
e7:e5:cd:3e:e5:1b:50:86:92:a5:15:77:b0:ee:53:79:f6:ba:
ad:18:cf:34:1f:f9:cf:b2:65:c5:c0:c6:03:c4:9e:f2:54:8c:
28:59:b2:82:39:05:19:d0:47:9b:9d:3f:e8:de:de:20:de:07:
78:6f:4d:34:ba:5b:4e:bb:8e:5c:47:55:0d:dd:f6:10:61:bb:
5d:b7:f9:71:4d:17:23:60:80:39:60:36:65:f3:ba:44:90:16:
e3:73:73:64:84:18:73:cc:93:27:fb:7a:d5:d0:5e:73:de:de:
01:4b:db:80:79:92:1a:d2:23:81:6c:c1:64:f5:f7:57:7e:83:
c5:89:34:50:25:7e:26:44:b5:8b:5f:e0:1b:d6:44:ae:b8:82:
b1:65:ce:85:32:df:b9:46:33:b3:6f:07:97:d8:e9:51:cb:86:
35:7a:d0:06:5e:59:4b:83:01:7b:73:d0:43:5b:66:b3:c6:fc:
ac:9d:7e:be:b3:c1:8d:ae:d0:36:6d:60:4a:47:5c:46:6b:10:
ff:b7:67:b2:af:69:76:83:cc:13:de:a8:3a:16:66:b8:21:6e:
7d:1b:26:94:0b:72:f7:02:27:2a:55:b7:bf:47:ee:52:56:86:
e1:72:4d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:30 2025 by rpki-client