Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
File: licbYtGOSsd8YQlpDqrkzDTQ6bY.mft (raw, json)
Hash identifier: m5iDMq7I6Y8vBrM/zM1dM59a/hRq1spMzGuozGAgIUs=
Subject key identifier: 1D:01:43:87:54:54:6F:CD:08:7C:52:C6:62:F9:CE:00:DB:02:F1:C9
Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
Certificate issuer: /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Certificate serial: 019A4E8645407DBE3F23593F726949EF5B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
Manifest number: 0BC2
Signing time: Tue 04 Nov 2025 11:00:13 +0000
Manifest this update: Tue 04 Nov 2025 11:00:13 +0000
Manifest next update: Wed 05 Nov 2025 11:00:13 +0000
Files and hashes: 1: IaAYctjYC9OdNTPcnTixy2ccUzU.roa (hash: eOFbMC4GCXw4TW2u0+c7a73RmqtvjAxvsy3+jqBN21w=)
2: X6SMQ0jEGeZDJ_4uYPtUEXmYusc.roa (hash: FdAgr11itjQmO3uyq8UgNfN1pT9LErTuoVrKYdZ843k=)
3: licbYtGOSsd8YQlpDqrkzDTQ6bY.crl (hash: HI4ROq9vqjrbjruBdAhvhdkmkXjHOwcdhAyYQhltnZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:45:40:7d:be:3f:23:59:3f:72:69:49:ef:5b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Validity
Not Before: Nov 4 11:00:13 2025 GMT
Not After : Nov 5 11:00:13 2025 GMT
Subject: CN=1d01438754546fcd087c52c662f9ce00db02f1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:e3:a0:39:19:ae:6e:4a:f1:67:36:c2:76:
00:af:00:9c:47:b7:a2:8e:45:60:88:07:27:06:80:
ac:0c:7d:b5:28:7a:de:92:50:30:28:d5:86:78:de:
7c:41:6c:36:d2:a6:41:f7:93:8e:ac:75:56:17:d3:
39:b9:58:1d:f3:28:ed:90:87:46:0a:ed:ec:b8:b8:
dc:72:d8:69:71:5b:09:07:d1:b9:30:b8:23:45:6a:
a7:91:8b:ce:1f:51:9a:e2:8f:91:71:3b:f0:b9:cd:
06:6f:82:b6:70:60:f6:6c:71:90:5b:71:3f:1b:94:
4d:09:3c:6f:3b:3a:d6:3f:c0:c0:a7:e0:e9:e7:87:
78:84:1d:fa:85:06:ae:6a:f4:74:9c:ba:f1:05:9b:
e4:9d:f9:f5:6a:d1:02:57:98:d4:23:78:ec:fd:78:
74:1e:3a:23:04:bb:c6:49:e6:1d:88:3a:f0:61:7b:
5a:ea:8d:83:b2:44:a9:18:e7:bc:e1:9e:3d:a9:3e:
c4:fc:dc:51:c6:5d:c9:09:0c:23:f8:2e:07:86:9b:
66:71:a3:61:05:0a:2b:19:7c:f3:4a:6e:64:4f:a9:
3a:ad:f2:42:c8:97:78:c5:8b:02:e9:5d:16:37:a7:
b3:71:08:cd:78:64:c5:43:00:0a:91:65:32:91:86:
3e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:01:43:87:54:54:6F:CD:08:7C:52:C6:62:F9:CE:00:DB:02:F1:C9
X509v3 Authority Key Identifier:
keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:29:70:83:c2:fd:ee:fa:51:ed:ab:c8:16:0c:af:aa:1c:e4:
26:22:15:b6:5d:b8:fc:bb:55:4a:31:25:24:7b:4f:cc:de:17:
c8:f8:c8:3f:f4:18:c3:e5:e8:2d:29:96:d8:85:7d:74:d6:05:
42:45:6c:a3:fc:92:32:43:63:97:15:8d:19:83:5f:27:85:8c:
0f:fd:ef:f1:81:20:8b:4d:da:eb:ee:0c:61:c8:f0:bc:14:43:
b5:f4:47:67:f2:96:b0:8a:14:31:af:86:0c:67:5b:ee:98:51:
b6:b4:7f:da:69:c4:8e:10:bd:95:77:d8:b6:df:7b:e7:f8:dd:
fa:9d:f2:10:bd:44:48:82:ec:45:0d:5e:42:f0:80:d8:fd:80:
67:cd:e2:13:e1:85:d6:f0:b1:34:c3:fe:b9:bf:12:01:79:2d:
9b:68:9f:8e:9a:ea:42:9c:d4:1f:55:18:a9:08:58:1f:88:a4:
4b:30:00:98:6c:6d:7e:e2:5a:c3:ad:47:6a:8a:8b:70:5c:b6:
c5:62:8b:c4:63:85:e1:62:8e:22:83:8c:9e:13:5f:ba:f6:a5:
c8:93:ff:63:c2:b2:1a:d3:1c:2f:1c:70:bf:93:c8:30:e2:de:
4c:65:df:3c:b5:d6:09:cc:f6:88:4d:aa:64:95:d6:8f:02:9c:
00:5b:8d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:18 2025 by rpki-client