Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
File: l0Zhyxw45jvXi9aysdaGhqVBW_U.mft (raw, json)
Hash identifier: pLonYrRqmDg27AboDa8+ucsp6yDFxt39oRsO7ZDqAQo=
Subject key identifier: D3:15:FA:ED:24:C5:2B:C8:BB:24:57:79:18:E6:14:F1:0B:66:F4:22
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Certificate issuer: /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial: 019A4E188B82F31DA8F7E486B2DBD71022F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 09:00:22 +0000
Manifest this update: Tue 04 Nov 2025 09:00:22 +0000
Manifest next update: Wed 05 Nov 2025 09:00:22 +0000
Files and hashes: 1: 8JaSgFcH49HBn461hhPZA96Q-_Q.roa (hash: Sl2mmYD1LNi2hjNI4HitJOBuVcHLDBiqw8TvUNCwTsk=)
2: FCpUh7uMn_jm2jqwI2G_dP05phQ.roa (hash: FZn5zdTsckuUQUO6IXLrYuHkdb4oQF7csC6+blEeSeA=)
3: ObPAzx9vpUSewz6yMRbiwqDj92c.roa (hash: Suax9ATaK3pYDGwH5LS+lZKVuglD1H0ACxKzg26DT6o=)
4: l0Zhyxw45jvXi9aysdaGhqVBW_U.crl (hash: VN6tZkpXVNygjy62+V8SWI+yuN3kL1cisPRDeiZTjlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:8b:82:f3:1d:a8:f7:e4:86:b2:db:d7:10:22:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Validity
Not Before: Nov 4 09:00:22 2025 GMT
Not After : Nov 5 09:00:22 2025 GMT
Subject: CN=d315faed24c52bc8bb24577918e614f10b66f422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:78:b6:e1:1f:2f:57:e4:47:d7:35:46:d7:47:
f4:77:44:f9:45:4b:da:86:e3:e9:d9:22:b3:1f:59:
ba:a9:39:c6:15:84:20:c5:b8:c6:0a:aa:1e:50:ea:
20:6c:5c:cc:a9:1f:81:62:fb:dd:3a:51:94:3a:d2:
8d:01:11:0c:4d:cb:54:05:32:3e:4a:86:22:36:b3:
db:61:38:dc:db:ae:b4:4a:53:a6:4f:7f:75:a3:b6:
c7:37:6c:20:a5:df:79:5f:1c:ee:28:19:1b:6d:f2:
af:db:3f:07:03:9c:48:a0:09:b8:ca:15:ce:45:e2:
c4:c4:d5:d5:87:15:ef:56:fa:ba:b7:10:2a:1f:31:
07:53:2d:20:a4:bf:25:1f:47:48:61:65:f4:42:38:
0a:de:a2:00:57:4f:72:2f:2b:a3:b8:63:66:84:25:
3f:ed:27:9d:6c:82:78:77:8e:44:e6:e6:e6:3e:8c:
f4:4e:82:6b:f9:c1:16:9a:bc:db:f0:db:f5:be:31:
e4:82:90:fc:58:40:1b:6e:0b:e7:99:b3:50:9c:2f:
b4:ba:a5:63:d9:3f:6e:a3:75:03:a9:fa:14:8d:87:
f9:53:c4:c4:a7:eb:53:d9:b8:6f:7f:fb:07:36:12:
fa:91:74:c2:6d:c5:81:c1:64:20:34:0e:9a:2a:20:
cd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:15:FA:ED:24:C5:2B:C8:BB:24:57:79:18:E6:14:F1:0B:66:F4:22
X509v3 Authority Key Identifier:
keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:58:7a:f2:00:35:de:5c:df:f4:47:75:a9:62:4b:e1:f2:b8:
ac:a0:c8:e5:87:7d:b8:72:51:cb:9e:20:e7:12:20:e3:fb:84:
81:33:e2:e4:54:4d:e5:91:b0:b9:c1:d2:09:81:23:9f:53:d4:
4b:44:69:54:1d:88:6f:ad:0e:79:bb:84:40:34:de:d8:cf:42:
5e:0f:f2:97:c3:f3:b9:84:af:0e:7c:4e:df:79:ef:3d:23:24:
9f:69:19:6c:37:b9:1f:ac:fb:c9:2a:f2:18:be:a7:9a:6d:f7:
b9:62:04:cf:63:b4:75:52:51:07:bb:36:ca:39:21:d7:db:70:
3f:fc:ba:11:31:3e:fa:f5:ee:31:8c:a1:b1:0d:c5:8a:48:3c:
b7:1a:b9:4d:50:48:d5:73:6d:f2:b6:d9:bd:71:79:dd:72:cd:
b2:c2:10:a8:cf:57:ab:e9:39:a3:4c:74:aa:13:a8:aa:12:f3:
ee:c3:f7:36:0c:e7:57:7a:86:c2:27:24:25:86:70:94:5d:3e:
b8:c5:98:2c:58:20:94:cf:01:c1:25:03:1c:f4:e1:5c:a1:10:
64:c7:e6:9c:2a:c6:a4:dc:44:a1:6f:84:f0:42:eb:a6:1d:93:
5e:61:2b:5b:66:fc:f2:3f:17:62:88:88:17:57:04:e2:29:72:
f0:dc:ba:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:50 2025 by rpki-client