Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
File: l3C_I3XVm6gamVXAei8KIyZLYag.mft (raw, json)
Hash identifier: ROJG15jgoGqJ7JqAc6XV2A3SWIIeriFIQvzlQyXs3Bo=
Subject key identifier: BF:C2:E3:D4:AE:F2:26:93:24:03:DD:00:C8:B1:D6:35:33:EE:3D:55
Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
Certificate issuer: /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Certificate serial: 019A4FCFD7C9E9AC1E30522E783A68EB5E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
Manifest number: 08BB
Signing time: Tue 04 Nov 2025 17:00:12 +0000
Manifest this update: Tue 04 Nov 2025 17:00:12 +0000
Manifest next update: Wed 05 Nov 2025 17:00:12 +0000
Files and hashes: 1: 1cgE3uMD9UQj0N9D1NwFutRDIfE.roa (hash: sz+QlLmzVk2yB4VM7ft/t4trcbfch70ucXLho0/P3wo=)
2: Ps7ItdcqBOZwFy7JAglhbkmvgec.roa (hash: Yq/VfNMV/+Kg/XB3DpV+ctEtAUoBDR8xyYarG7XLgw4=)
3: l3C_I3XVm6gamVXAei8KIyZLYag.crl (hash: vwp15n5BXsAeQIppBZWNXHlXppS4lrjnZRc4MlogB5g=)
4: nn8N_U11uSgPsYKzqfF8emHLewY.roa (hash: UE2WeYKjsQLQDIQ6fpdM8tvgC0pZW+64uPlpd0Qrdgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:d7:c9:e9:ac:1e:30:52:2e:78:3a:68:eb:5e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Validity
Not Before: Nov 4 17:00:12 2025 GMT
Not After : Nov 5 17:00:12 2025 GMT
Subject: CN=bfc2e3d4aef226932403dd00c8b1d63533ee3d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:79:c9:ed:a8:66:8f:d6:a1:bd:c4:54:29:
0e:0b:e5:34:5b:5b:d8:6c:6d:21:2e:c3:ab:e5:ae:
ff:be:8a:60:a0:15:73:44:4c:2e:5d:7f:85:cd:21:
c2:a3:80:34:da:e2:42:86:11:92:51:d9:6e:80:45:
c1:94:23:b8:c0:34:8d:04:c7:6d:08:ed:25:bc:18:
b8:84:11:1f:19:44:07:43:b0:f4:83:3f:8b:85:33:
b0:fa:04:da:fb:9a:89:1f:77:71:29:e9:5a:3a:34:
fe:ec:1b:74:db:30:3c:24:aa:68:cd:ff:57:ae:77:
24:6b:bc:c8:1a:89:16:fb:c9:31:d7:2e:42:c8:9d:
c9:13:52:5e:fc:f1:3d:a1:1f:22:73:36:31:49:d8:
35:32:42:65:9d:3e:4b:4b:72:8d:e0:97:55:45:1d:
a5:8d:56:0c:e9:ba:3c:6e:b2:3a:43:45:b8:c7:5a:
69:fa:41:ed:cc:45:dd:b7:17:34:18:2c:ff:09:d9:
20:33:5a:eb:73:28:97:ef:29:bb:39:65:81:d9:cb:
c5:d8:2c:00:fb:d5:4f:30:d7:0c:5c:55:79:6b:f5:
02:9d:13:d3:f6:d6:14:7e:17:75:56:61:7a:cc:d8:
26:59:69:ba:a1:53:ca:24:37:56:20:05:7e:40:11:
db:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C2:E3:D4:AE:F2:26:93:24:03:DD:00:C8:B1:D6:35:33:EE:3D:55
X509v3 Authority Key Identifier:
keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2e:32:ac:fc:f4:f9:0a:88:20:18:3f:e4:f1:24:59:26:d8:
2b:3e:bc:06:34:f4:bd:6d:17:27:1e:e4:c4:6a:cf:4f:bf:ee:
72:5e:5e:fc:91:d2:c2:ee:e7:fa:56:3a:23:ce:9f:08:b7:12:
61:98:84:b8:fd:3b:93:98:dc:ea:8c:65:ed:1b:55:a9:23:78:
93:dd:86:af:b4:42:13:b1:a5:39:e1:e9:ea:11:ca:55:d3:11:
62:46:11:ea:b7:05:bc:88:a8:94:3a:3a:db:aa:a6:5e:0e:21:
05:27:9d:23:e5:fc:a9:8e:57:bb:19:e8:25:e6:28:f8:78:4c:
5c:2d:f0:1c:6c:3a:4b:30:96:6a:43:ee:8d:0c:81:24:03:f0:
50:c9:f3:41:ee:1d:fe:b9:da:b4:0f:26:7a:91:7c:44:ba:58:
21:6c:a0:6d:08:04:2c:a5:fa:38:77:57:6a:74:18:93:c5:db:
2f:f8:71:b2:f7:0b:a5:6c:63:6e:98:a7:e2:79:7a:94:9c:4c:
2c:41:7f:39:29:79:34:d7:9a:4d:0f:9d:ec:a8:16:32:ec:fd:
85:dc:48:f5:ee:7a:9c:ba:3f:5b:c1:6b:98:dc:f0:d9:84:e7:
80:2b:fe:0a:57:a3:75:e2:c5:28:c5:a5:c4:22:61:6f:f4:de:
e6:66:b7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:53 2025 by rpki-client