Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
File: _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json)
Hash identifier: TZS40ZwG6FzHihMYObAWLKeYt5r4T5zVFCctDya4kTg=
Subject key identifier: 08:51:87:3F:C9:DB:63:78:F6:F1:B1:69:0B:E3:8A:09:B3:60:C1:53
Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
Certificate issuer: /CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Certificate serial: 019A50E3220E775DD0C0623540C7570F7C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
Manifest number: 0B7A
Signing time: Tue 04 Nov 2025 22:00:53 +0000
Manifest this update: Tue 04 Nov 2025 22:00:53 +0000
Manifest next update: Wed 05 Nov 2025 22:00:53 +0000
Files and hashes: 1: DiB_b1f0zlqZ4Y9RlICgbOGMJ7o.roa (hash: bx7gORpYBo75Iq/H/h1fyR0wOXDdKfLfUPEbvglKOL4=)
2: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: 6HdaMad3Je9xzxFlKHVeSs3L+wDPbJSzpZwnRU15wE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:22:0e:77:5d:d0:c0:62:35:40:c7:57:0f:7c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Validity
Not Before: Nov 4 22:00:53 2025 GMT
Not After : Nov 5 22:00:53 2025 GMT
Subject: CN=0851873fc9db6378f6f1b1690be38a09b360c153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:63:0e:1a:35:f2:87:3e:e7:12:fb:d9:e6:
5f:b5:c1:83:d3:70:c4:e0:84:02:cc:ea:a2:93:b9:
f3:fb:ae:a3:24:e9:74:6f:c8:33:3f:40:92:05:ac:
2e:eb:42:5f:9b:6b:ab:bf:a8:6a:97:a2:b0:b4:9c:
f3:53:20:89:fe:95:c6:d1:31:e5:3e:ab:82:6b:f8:
e2:c8:0f:b4:37:a8:33:77:bd:72:de:dd:f8:e3:d8:
ff:3f:e3:63:78:e6:a3:a0:bf:33:d9:11:56:96:36:
94:3d:2f:ee:b1:f2:03:0e:8d:08:a5:38:5c:a5:57:
87:c0:bb:c2:d1:93:9a:6f:69:2e:ec:f2:23:00:41:
8b:70:f9:e7:32:85:6e:fd:1d:dc:c2:3f:a5:7e:a0:
57:40:9b:06:12:65:72:c9:a4:b1:ff:92:5d:0d:b4:
55:3b:63:a2:76:b6:f0:3b:1e:4d:1a:af:ac:e0:71:
5c:42:87:f3:cd:f9:42:fd:f1:3f:58:94:7b:b4:60:
8e:e7:f2:49:14:49:74:38:4a:6c:32:94:29:c2:38:
e0:34:ad:06:ae:cc:5c:d1:8b:9c:ce:18:a1:c7:1d:
d8:5a:14:67:f6:84:a9:72:aa:21:dc:2a:57:39:b4:
74:02:ef:4c:21:cb:4b:49:49:f2:7b:3d:22:a6:1e:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:51:87:3F:C9:DB:63:78:F6:F1:B1:69:0B:E3:8A:09:B3:60:C1:53
X509v3 Authority Key Identifier:
keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:0f:97:83:af:9b:47:33:04:8e:e3:a3:34:f6:f8:a8:7a:e0:
11:fe:30:0d:31:46:37:a2:4c:c0:51:83:4e:54:27:25:c2:19:
b0:38:42:4c:91:1a:cd:ee:f6:70:29:cd:eb:0a:7b:a1:3e:0e:
c9:a0:71:c0:d3:ce:ea:8e:87:fd:b6:0d:e6:15:07:6d:f1:4b:
34:de:72:c9:42:78:b6:ea:4c:a1:9d:be:20:b6:6b:b0:11:48:
09:0f:58:55:3e:d7:fb:0e:54:fc:ea:9b:0f:57:04:6a:0a:91:
70:31:3d:70:6f:77:54:71:79:74:5b:58:89:65:fc:18:97:73:
9a:84:d9:e2:66:10:35:44:50:fe:79:be:9d:45:7e:18:63:03:
13:7b:8c:69:ee:88:89:9b:8d:15:a9:4a:58:a6:47:d7:97:c9:
c8:ee:79:f2:65:4c:1f:86:1d:ba:59:35:53:c4:27:07:1d:10:
e0:07:35:2c:8a:d9:bc:09:2f:ab:c4:26:5b:bb:7f:f9:88:2e:
cb:3e:6d:e4:1a:dd:f6:43:04:5b:7b:52:53:0f:ee:95:99:c7:
6a:6d:6a:d3:16:f0:55:dc:dc:e4:32:b5:3b:32:10:ce:93:09:
a7:57:a3:c4:9c:b1:3d:f9:2e:c8:ff:64:3c:90:1a:64:04:00:
81:96:b2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:49:17 2025 by rpki-client