Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier: 9i1YAMqRUFGjB2dztXownfm9qLXuHSx8bEOkembHAv4=
Subject key identifier: 3F:38:8A:04:14:5A:DA:7C:41:02:16:48:57:3F:12:6A:9A:43:67:92
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 019A51BEF531CB030600A93F1CA8C54A32CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number: 0A1E
Signing time: Wed 05 Nov 2025 02:01:00 +0000
Manifest this update: Wed 05 Nov 2025 02:01:00 +0000
Manifest next update: Thu 06 Nov 2025 02:01:00 +0000
Files and hashes: 1: QZlBG2kRh6vni73fkptkgN279c4.roa (hash: XJG4jHJv96gh6e1pmElIHEBthdc/xrtURDP4u20xHEU=)
2: jODSDZiB_9CDcQXiT4tsxNlR8Ac.roa (hash: JEMeTXjwzca2z04dyMlf/bVf4aF3EAXQNY7E1cjOdx4=)
3: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: LxNB6kEI/gO2p8mq/KzlwrJoOzqR+5tHbD7yAe2M/rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:f5:31:cb:03:06:00:a9:3f:1c:a8:c5:4a:32:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: Nov 5 02:01:00 2025 GMT
Not After : Nov 6 02:01:00 2025 GMT
Subject: CN=3f388a04145ada7c41021648573f126a9a436792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6c:54:99:ce:8f:07:9a:9c:f7:e1:6b:f5:42:
7e:2c:fd:88:28:2b:35:22:ea:3a:76:da:8f:5f:b0:
a2:83:18:75:ee:29:6e:98:4b:0b:0f:9d:7a:ea:89:
54:5e:80:96:16:00:ef:19:27:fb:a9:59:8a:10:87:
de:fa:0f:0c:0a:78:8e:9c:e5:36:62:ef:df:a2:19:
2a:3e:4c:72:ee:dc:40:31:47:e7:2a:d8:7b:ec:8a:
9c:f3:31:cc:db:5c:78:e7:14:48:97:10:bd:3a:00:
b8:05:aa:48:ce:66:70:bd:00:1c:69:46:6d:ae:68:
cd:65:59:23:c8:5c:c6:f0:8d:ec:a7:69:1e:fc:49:
18:f9:ff:4a:4e:53:9f:b7:a6:5d:b4:b5:8d:c9:57:
84:60:39:46:3e:39:55:7f:56:8f:72:40:b2:29:06:
a9:0a:c7:3e:c2:db:ca:20:8f:bb:22:24:06:90:f4:
5d:00:06:a1:a2:da:8b:21:3f:64:51:4d:db:1d:7d:
df:6b:b4:3c:20:22:23:91:bb:d3:97:c8:a6:64:bf:
bd:ab:4a:1d:85:99:29:6e:3b:7b:d7:00:3a:57:fe:
0f:a6:ce:b3:37:e6:c1:a5:e9:8b:30:c2:10:47:80:
a4:6c:21:e2:3a:d5:73:91:5f:80:fe:50:97:1e:d3:
9c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:38:8A:04:14:5A:DA:7C:41:02:16:48:57:3F:12:6A:9A:43:67:92
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c8:a8:2d:19:9b:67:c7:1a:b0:98:c4:9d:30:e2:72:ce:ab:
9b:07:df:1d:a6:9c:c0:ea:bb:e8:1c:2b:b8:b2:20:6f:3c:4b:
f1:bb:54:db:fa:d3:c2:0a:cc:05:88:e3:61:23:fc:b3:17:07:
ab:69:56:80:71:f5:bd:cc:43:3f:26:37:82:fe:a6:2f:bd:05:
5e:90:40:6f:27:48:89:44:65:70:bb:4f:7d:c3:de:3f:92:1f:
a6:78:bc:4b:e3:a4:44:f9:39:d8:85:fe:b1:ac:c9:61:f6:d6:
36:04:d8:98:c1:aa:c5:6b:ef:3c:ac:ef:71:f6:76:9c:73:88:
64:57:4d:8e:d1:70:8a:22:ea:57:1e:1e:fe:87:1d:59:45:45:
b2:cb:25:2d:00:13:fa:80:fe:e3:19:9f:41:08:7b:f8:f5:af:
72:40:51:80:a4:88:59:a2:41:c6:54:27:f8:ad:84:96:9d:47:
13:c6:77:67:66:10:32:a5:3f:f6:f6:ca:73:5f:af:a7:9d:68:
ff:92:b1:f5:5c:c3:31:38:97:22:dc:25:16:20:fe:c4:49:cf:
d4:6b:09:6a:0a:eb:39:31:68:54:41:84:5a:8d:3d:ac:33:25:
f4:d5:e0:ce:ef:56:4b:9c:03:dc:03:ab:5c:ee:c5:9c:9b:22:
b0:07:0e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:49:04 2025 by rpki-client