Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
File: levYBm8QkMMRnNtp6dTcQNkDBPg.mft (raw, json)
Hash identifier: DhqsfE5rFgs8TrBmTdAaLrFwtD5jlL7BHgd6Uv8J+JA=
Subject key identifier: FE:DD:DE:52:56:EE:94:98:63:E8:2C:8C:8E:8C:3D:EA:63:C5:EB:69
Authority key identifier: 95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
Certificate issuer: /CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Certificate serial: 019A4D3D4F56FF2567BE64DAD9D264C38251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
Manifest number: 1717
Signing time: Tue 04 Nov 2025 05:00:54 +0000
Manifest this update: Tue 04 Nov 2025 05:00:54 +0000
Manifest next update: Wed 05 Nov 2025 05:00:54 +0000
Files and hashes: 1: O_uK3Zu_QXJWMOuzZ4N9lrg41Eo.roa (hash: XfsGt0J7O4EdBwVu7o4CD1xoooiqwOChTXXKbThpML4=)
2: levYBm8QkMMRnNtp6dTcQNkDBPg.crl (hash: BuRsieDK3kiCJuPucHCTKDn47xUmmjkF0NvWKuZZuDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:4f:56:ff:25:67:be:64:da:d9:d2:64:c3:82:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Validity
Not Before: Nov 4 05:00:54 2025 GMT
Not After : Nov 5 05:00:54 2025 GMT
Subject: CN=feddde5256ee949863e82c8c8e8c3dea63c5eb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:9f:97:d4:69:18:51:c0:28:11:5c:3f:ff:
99:34:27:7c:75:2b:bd:a1:41:9f:df:d5:b4:4e:25:
41:eb:0b:c9:bf:dc:d8:71:d5:0f:09:0b:2e:d3:aa:
f7:7c:f6:6f:35:24:28:53:c1:d2:d6:7f:c4:d6:22:
39:08:63:36:ac:66:6f:32:4d:78:9c:ae:50:d9:90:
aa:c5:2e:e7:51:65:8b:76:63:4a:bb:9b:57:22:a2:
20:46:3f:34:e8:e5:fc:ff:f8:74:d4:8c:69:12:e3:
c6:35:37:11:73:b3:06:c5:f6:e5:1d:0d:9f:66:a4:
e5:6d:1b:b9:f3:a4:dc:c7:3f:05:5a:87:34:2e:f7:
71:4d:af:c8:ce:36:99:fc:6b:5d:a5:7f:e7:3d:fb:
2e:a7:ff:b3:60:1e:5d:c3:d2:42:08:f9:6d:af:24:
52:9c:54:f5:3e:64:62:96:5f:3e:cf:bb:74:8d:33:
ef:56:a6:73:c5:ff:52:e0:76:4f:c9:9d:7f:e4:62:
b4:6f:ca:d2:99:f0:04:4d:8a:78:6d:ab:14:37:57:
10:49:01:5b:8c:fb:c1:96:7b:ed:2d:08:d0:f8:13:
6f:5e:d7:77:b5:5f:cd:49:7d:26:cf:e2:c2:ee:72:
74:df:cf:53:ad:91:2b:36:e1:d1:a6:4f:2f:19:72:
92:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DD:DE:52:56:EE:94:98:63:E8:2C:8C:8E:8C:3D:EA:63:C5:EB:69
X509v3 Authority Key Identifier:
keyid:95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f5:d2:2e:dc:45:13:73:48:96:7a:36:fa:1c:24:a9:f3:b3:
9e:d2:6f:f7:83:c5:5e:fb:1d:b1:9a:50:3f:13:d6:1e:e3:de:
00:49:f4:31:aa:00:69:e9:c6:2c:65:77:24:8e:c6:78:6f:b9:
42:26:d0:57:63:d3:17:77:bf:84:67:78:fa:57:7e:a0:99:f0:
5e:a4:32:0f:a8:80:27:3e:0c:99:88:8f:31:a5:36:88:94:9d:
b9:1e:7e:ee:c0:6d:e7:66:31:f9:4e:f2:e5:3e:e2:27:f9:37:
a8:94:85:4c:d8:29:7c:2d:fd:61:a3:46:d6:ed:67:19:f5:96:
a3:f3:99:67:79:63:e1:2b:79:86:76:02:4a:46:aa:6a:5b:2a:
b6:33:d3:91:f6:30:64:db:16:80:64:e2:5d:91:65:49:6f:fa:
2e:24:80:05:bf:24:59:ac:08:70:40:18:3e:01:46:67:8b:0a:
c7:4b:63:87:fd:24:3a:7c:ba:3f:3c:88:45:a1:93:bb:00:fd:
1f:dd:8b:a9:91:a6:6a:b0:e7:c5:b6:3c:d7:a4:32:11:51:c8:
f4:c6:56:99:e0:ff:de:9c:1e:fa:40:96:e6:b1:57:af:cd:d8:
f0:9c:c6:6f:ab:4a:86:cd:e0:bc:ca:41:e0:6f:06:a2:eb:23:
96:4f:69:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:28 2025 by rpki-client