Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
File: l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json)
Hash identifier: ZrWYpYpMpju0KWEikjA33QA1f39Xhnv75AjvW8c48+8=
Subject key identifier: 7E:0C:B6:0A:1F:7A:14:16:58:34:71:8C:8F:2B:61:77:B7:BF:B1:D9
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 019A4F2B64D50B7377BE2CCBB9F0C796FA2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
Manifest number: 1502
Signing time: Tue 04 Nov 2025 14:00:35 +0000
Manifest this update: Tue 04 Nov 2025 14:00:35 +0000
Manifest next update: Wed 05 Nov 2025 14:00:35 +0000
Files and hashes: 1: 9fuYulUVxtgS2OdAoDqw73sL458.roa (hash: 4sliq0762rmQYCBsPA1iMqCrKBq5MvjcOahYDnYc2F8=)
2: GCT36J3n1OxX-WHPNyMOxT30V1I.roa (hash: a5Pszieg/F5+mp8skMSq3X98683NVjkxEMhhyfalK24=)
3: M3nuXRHV-HSVCrPsQchhdr5_x7Q.roa (hash: yixO/lM/jrXq6xFtI0OoJ7LnqzWDwB/3Pvi4UUX0Sqg=)
4: SMFHgAd465jvbKDW6YZwTehlmXs.roa (hash: mo74I69JinqweIsRPNZbaqL0YDRPxBEE9SrCUOt17NI=)
5: eMOtJLHyRS0nlVfkPs9ZYV2sfJs.roa (hash: bEXIrBrzj/GHJADmo6N/Mu/Sg4DT82z14P1KN6YbAzU=)
6: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: Abc5VgSFRLFccIMFAhJUpY5PPepsMO8F3ZxKVEQCSao=)
7: p906kmkgY0qUYyVJw53cck20ZMc.roa (hash: RM2au0VYfH5622DYXzfGpU015sseQv18gBHvKAhN9Co=)
8: u_kbu4tkIYiihS4--NXiyToxNhs.roa (hash: txkFHVV6Yy9iysc9+92y5JAS1DKWEBihN2iYh4NZA9g=)
9: z-gzGRp6g46RfhDlKhHGqEoG68k.roa (hash: zEuoDm3Q5DkSIXVAGKauWFsGpEgi0zHMp7amnQaC+g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:64:d5:0b:73:77:be:2c:cb:b9:f0:c7:96:fa:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Nov 4 14:00:35 2025 GMT
Not After : Nov 5 14:00:35 2025 GMT
Subject: CN=7e0cb60a1f7a14165834718c8f2b6177b7bfb1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:f6:3e:10:38:b2:7f:96:c2:1c:f9:4e:25:
c6:9f:fe:92:80:94:0f:37:c7:c5:f0:b2:0e:01:d1:
8e:12:e5:bc:76:d5:5b:d1:2e:cb:9b:44:15:af:bb:
51:b9:c0:a6:1a:3c:5a:b4:ff:4f:13:23:c5:c0:1c:
5f:22:6f:1a:d1:58:22:28:19:b5:c6:17:ac:6d:84:
7a:38:ee:60:7c:4b:6f:27:fc:55:2f:77:fd:eb:e1:
38:cd:43:b1:9a:bf:90:6f:c6:bc:c7:1d:c6:72:d3:
88:cf:4e:d6:35:14:bf:58:ca:52:65:49:32:46:f5:
0c:38:8a:fa:8f:45:b5:73:d4:2c:cf:bd:2b:4c:37:
cb:c4:05:16:7b:67:0c:cd:58:69:8b:70:a8:a8:a6:
c3:0a:89:dc:a6:e8:f7:ef:3f:53:81:55:49:ed:4f:
8e:3b:72:22:55:72:6c:be:3a:92:b6:8e:91:9f:82:
84:30:c9:99:aa:6c:a3:4d:80:e4:19:79:29:a4:63:
b2:77:a7:b1:43:b2:ae:10:e6:91:3d:c6:d3:bb:8d:
aa:d3:4a:40:a0:f4:07:b3:3b:d4:35:9a:78:ae:ec:
1a:b7:a1:69:c0:f1:2c:d7:ab:b4:1b:eb:30:aa:30:
73:9a:08:3b:b6:69:c6:d5:86:95:2b:f8:84:25:ea:
93:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0C:B6:0A:1F:7A:14:16:58:34:71:8C:8F:2B:61:77:B7:BF:B1:D9
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:cb:44:4b:5e:4e:e5:51:9c:ee:e5:8b:12:a2:ca:9c:9e:1a:
15:dd:00:3f:9f:80:54:ed:6b:ae:3c:db:4b:ec:89:4d:b1:3a:
79:78:71:64:0c:d6:68:f6:77:96:72:ac:17:cc:88:7f:53:d7:
f0:ee:b0:77:0b:13:ef:ee:f2:bd:d5:04:d9:c9:95:ea:a6:2c:
5f:60:60:ec:42:0b:25:88:14:b5:c8:af:73:2c:27:23:b0:13:
65:d2:30:51:e4:85:72:e3:e4:84:50:07:8e:58:d0:e1:19:d8:
7f:56:f2:d6:6f:fe:c1:17:c1:c0:36:08:c3:53:15:bd:ff:22:
6e:f5:c2:e4:e9:61:a2:19:16:4d:1f:52:41:2e:ec:39:9d:09:
7f:b7:d0:b5:54:7e:e9:57:52:ea:4c:a6:c4:d0:06:9b:a9:59:
da:00:0d:fe:c2:d4:4a:25:8a:01:35:af:ea:85:ba:ba:2b:cf:
f6:59:ba:0f:70:61:3d:02:91:8d:2e:84:84:b5:cd:a0:33:ab:
f8:2d:e9:33:a2:40:8e:e7:15:0a:4c:1b:60:ed:db:6f:ea:36:
6a:ca:8f:48:5f:91:7b:ad:ff:2e:20:e5:58:0d:d8:42:a6:55:
fe:ef:be:7f:b5:f6:8c:dc:9b:05:ba:19:74:94:17:d4:b8:af:
2d:55:f4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:33:16 2025 by rpki-client