Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
File: l1lSndMXBkXXbPasBllQbMZJypA.mft (raw, json)
Hash identifier: DzjWHJTyp1FEedWX3ZnLthDvNdNHS8Y+0IU730v42pQ=
Subject key identifier: 8B:C7:1C:F5:A4:35:D3:7F:82:69:6D:D8:57:54:05:F5:9E:B1:D1:18
Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90
Certificate serial: 019A4EF52D7EA1EC3AF8730F17C50177E721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
Manifest number: 1425
Signing time: Tue 04 Nov 2025 13:01:22 +0000
Manifest this update: Tue 04 Nov 2025 13:01:22 +0000
Manifest next update: Wed 05 Nov 2025 13:01:22 +0000
Files and hashes: 1: 0CXMUaTMQIKH6epSkL7Djl138G4.roa (hash: 7ikpmMwL3KhBT/ey6JF8CQkgs9c+Pq5I2Oo9Rhvfk8c=)
2: 2E_YHRCuF5MHTxlMx4c1H-5_vdo.roa (hash: cd6fZP84XkBNWRqBbhJXNCRjH3aM1q5IULZkt1L/R08=)
3: l1lSndMXBkXXbPasBllQbMZJypA.crl (hash: GFgWvE3iXnDfMfuK/Ns9wIbLhKAyzAJ53YAbmJZmf74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:2d:7e:a1:ec:3a:f8:73:0f:17:c5:01:77:e7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90
Validity
Not Before: Nov 4 13:01:22 2025 GMT
Not After : Nov 5 13:01:22 2025 GMT
Subject: CN=8bc71cf5a435d37f82696dd8575405f59eb1d118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:66:4c:81:63:99:f9:ea:73:29:b1:ec:a6:
df:27:24:53:0b:70:bc:c9:2d:98:32:eb:66:97:e6:
75:32:07:b4:53:6c:73:63:42:d9:af:6a:dc:5d:df:
51:49:ee:63:b9:4c:da:47:9a:8a:e8:57:ba:fb:fa:
99:25:fe:a3:03:84:96:24:18:65:ba:a8:21:7b:f6:
44:4f:b5:ec:42:76:26:d0:ee:29:d8:1d:54:3d:1a:
5c:0c:b9:97:d8:07:8d:e7:f0:3d:c1:45:52:fc:b5:
96:14:50:02:db:0c:89:52:7f:d4:c9:df:82:e9:19:
e9:8e:b3:87:20:cd:84:11:93:55:25:e2:d8:ce:2a:
77:76:c5:08:fb:c6:e4:95:b4:17:61:f2:64:50:5f:
9d:7c:f3:88:38:09:c9:1e:bf:05:db:b2:c2:b5:96:
a2:14:56:3e:ad:5f:12:1b:16:cf:26:57:c9:c2:25:
c9:ea:70:bd:5f:af:38:e3:cf:f5:c3:5e:6d:39:c2:
3e:c0:8b:78:26:93:3a:38:47:27:86:89:4c:b8:39:
4c:ea:ac:e4:a9:5f:14:cc:e6:7c:90:2d:a7:03:d4:
69:e6:f8:d7:a3:e8:8f:32:76:10:cc:a8:60:7b:5e:
81:f9:e0:2b:d3:08:2e:23:79:8b:5d:b5:3e:91:64:
f6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C7:1C:F5:A4:35:D3:7F:82:69:6D:D8:57:54:05:F5:9E:B1:D1:18
X509v3 Authority Key Identifier:
keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3c:13:8d:29:fe:c4:2f:7a:32:23:f0:9a:79:d2:60:43:00:
1a:73:12:a1:4d:8c:77:b4:3e:fe:aa:10:f1:84:19:75:48:5d:
cb:0b:3a:e9:84:57:43:13:ae:81:8a:f9:53:57:d4:55:42:eb:
aa:d3:41:86:36:d8:3f:4a:3e:01:df:ee:62:45:88:bc:e8:51:
de:cb:e3:d5:2e:bf:cf:9b:63:1e:14:63:0e:57:60:d4:4e:f3:
75:00:3b:95:e3:b4:75:60:c0:7a:b3:d8:61:37:9f:9e:00:6f:
42:8c:2b:4c:81:47:83:80:a7:32:0f:28:52:f7:64:a7:aa:31:
35:11:1e:74:15:39:ca:ec:15:5e:4f:bd:05:e0:9f:89:0d:ae:
d6:a3:ac:07:e2:b1:67:03:fc:f5:cb:66:f8:6e:93:50:32:ea:
99:d0:e7:94:08:fc:29:0b:a9:e1:0a:68:93:48:15:0b:5a:45:
de:f5:75:01:98:b7:43:2e:46:2e:66:b3:d7:3b:55:42:a0:d5:
45:67:3a:a9:b1:37:10:b6:dd:80:21:68:2a:f2:18:d8:23:63:
3f:fe:c2:b8:1c:b5:dd:61:a4:93:6d:fb:fc:45:84:a7:e8:f4:
57:c5:ea:02:6b:16:61:63:88:06:04:d9:8f:1b:40:46:67:fe:
95:b9:da:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:17 2025 by rpki-client