Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier: SL+0Xix5Yn0YwzQGz3qPV0MZ6BVIZWhg/95fr8jk6dI=
Subject key identifier: 4D:BB:F0:0F:CD:BF:28:31:A0:0D:5E:6B:95:E4:14:B2:21:79:87:F8
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 019A51877F7A52B5E696043C9F376AFE6C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number: 14CF
Signing time: Wed 05 Nov 2025 01:00:25 +0000
Manifest this update: Wed 05 Nov 2025 01:00:25 +0000
Manifest next update: Thu 06 Nov 2025 01:00:25 +0000
Files and hashes: 1: GmVe1_dUtE2thDPnKTTodQa1WTk.roa (hash: +YHOaXQXUcLXYGboOZLBoqiMUEPBTb2ggQGekMwXWOE=)
2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: q6SIofNXcgbwLiVpeASSCKIEzdPb7XMbIa925oBOUic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:7f:7a:52:b5:e6:96:04:3c:9f:37:6a:fe:6c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: Nov 5 01:00:25 2025 GMT
Not After : Nov 6 01:00:25 2025 GMT
Subject: CN=4dbbf00fcdbf2831a00d5e6b95e414b2217987f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ee:75:29:44:24:6d:be:24:76:c1:33:3b:41:
ed:0d:d4:7b:8e:4b:b6:cb:95:19:70:d3:1c:8c:02:
f4:e0:0b:b2:77:a8:87:43:77:68:47:cc:1a:64:51:
5b:5e:9b:c4:f9:08:dc:75:0f:b3:28:fd:c4:39:d7:
76:a0:bd:28:2f:6c:76:4f:2c:f2:5f:f7:2d:e8:f8:
ee:84:86:84:cc:06:93:f2:56:a4:f7:b6:f3:66:c1:
d2:bc:68:82:75:64:bc:ca:92:8d:fa:59:68:d6:67:
5c:f0:6f:7d:68:83:fa:c1:9c:4f:d5:64:d6:38:af:
8c:fe:a5:14:57:83:27:dc:f5:d6:ba:c8:42:66:14:
1c:fb:dc:b7:cd:a4:8d:c2:4e:6a:dc:93:14:2f:47:
30:a5:38:b3:b7:cd:e5:fd:46:29:02:5c:ca:a2:32:
b6:52:db:58:03:39:20:53:7d:8e:46:50:03:08:35:
d5:af:82:f5:4b:5c:65:17:15:59:ac:09:fa:8d:62:
f3:f1:f1:db:0d:15:d7:bb:30:e6:a2:bb:e3:26:d0:
1e:24:29:41:4b:80:da:0c:0e:99:a8:1a:cb:52:0c:
25:c4:4e:df:f6:1c:5b:34:1b:4a:cc:d0:3d:a1:67:
25:c4:2f:2c:24:41:da:49:ca:cb:09:14:fa:a8:bb:
57:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BB:F0:0F:CD:BF:28:31:A0:0D:5E:6B:95:E4:14:B2:21:79:87:F8
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:96:82:36:2f:82:23:0d:33:2c:e0:7e:4d:be:2b:95:5a:c9:
11:30:55:aa:9f:4e:1c:16:4c:ee:40:bc:f8:d6:58:52:64:66:
df:d1:7f:9d:18:eb:30:91:77:e1:bd:8e:85:8c:fd:97:c8:1e:
87:53:15:dc:39:f7:30:92:b5:f9:d8:46:78:aa:ba:e4:36:bf:
21:6e:7d:13:ba:d1:43:fc:63:9b:88:28:22:3c:18:08:25:b8:
17:12:3e:69:e1:03:42:8a:91:aa:47:c6:d2:93:e2:42:a2:bf:
4d:fc:7d:64:c8:97:b9:38:e3:6c:7c:da:54:1e:71:63:82:77:
71:7d:9c:85:d7:ff:cb:78:9a:f1:dc:1b:68:92:e0:d2:79:75:
f4:01:76:f7:72:5e:37:6a:a9:dd:d7:0d:cd:41:ec:14:e9:77:
c8:31:f4:27:0e:4e:79:44:fd:a8:bc:fb:a2:7e:0d:1c:e0:5c:
b5:fc:78:f7:93:a2:7b:a1:6f:35:11:d2:18:a6:f3:95:00:5b:
97:51:8a:e0:38:53:d6:94:3d:68:e3:48:cc:bb:1d:b9:86:a6:
cb:4e:88:54:07:ea:83:98:2d:e2:07:3b:a5:d6:6f:59:f4:8e:
17:4e:5d:12:53:1a:36:9f:c3:96:4e:d6:e8:cd:2b:61:8b:01:
25:49:33:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:26 2025 by rpki-client