Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
File: l96FxoT8_4PsQUirX29nzRUE-T0.mft (raw, json)
Hash identifier: VawiN+Jccb6ge3wGYKjViO8aBbvyyd7sAi39vIv/7cU=
Subject key identifier: 4E:8F:03:20:63:CD:27:DF:75:63:D1:0E:27:55:97:17:05:24:6B:34
Authority key identifier: 97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
Certificate issuer: /CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Certificate serial: 019A4EF5498D443C05E171E3D9A87EC6ADDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
Manifest number: 1224
Signing time: Tue 04 Nov 2025 13:01:29 +0000
Manifest this update: Tue 04 Nov 2025 13:01:29 +0000
Manifest next update: Wed 05 Nov 2025 13:01:29 +0000
Files and hashes: 1: aNefWas-v_WpGI-_669JeJcpGCE.roa (hash: AyqK/NRp/xUAyry2Wae2nQWK8xpykIL1yZ7NXpMhO2U=)
2: l96FxoT8_4PsQUirX29nzRUE-T0.crl (hash: waH56hMl9oymlRBz3vmEI7jkup/SElt26yCU3JkPVKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:49:8d:44:3c:05:e1:71:e3:d9:a8:7e:c6:ad:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Validity
Not Before: Nov 4 13:01:29 2025 GMT
Not After : Nov 5 13:01:29 2025 GMT
Subject: CN=4e8f032063cd27df7563d10e2755971705246b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:1f:04:84:e2:df:aa:df:32:be:af:90:6a:
03:54:b1:3d:a8:8f:43:9a:75:ab:5a:c0:de:f4:4c:
a3:7a:2a:3a:fe:85:84:ad:db:f6:7c:21:a4:ba:f4:
47:b8:0a:c2:25:4a:00:ba:28:19:c6:d0:28:26:06:
39:3a:b2:be:22:d2:cb:fe:02:1f:f9:e0:01:ba:47:
44:c9:1b:c0:d2:74:a4:9d:c2:0e:37:f1:df:c9:c3:
4d:94:6d:3f:00:f1:1c:2d:dd:e4:aa:1a:7a:ba:f9:
59:94:e4:e1:69:54:7b:c7:fa:24:16:0a:ac:25:19:
e6:13:6f:53:0e:14:c4:0d:50:b5:dd:e4:78:25:3f:
bc:ff:af:eb:90:6c:66:cd:d1:57:84:7b:09:86:5d:
bd:a2:60:fc:cf:f9:8d:b4:3b:5f:5d:99:0c:bb:cd:
17:72:cc:cb:1b:81:19:8e:4e:4b:39:47:2f:af:10:
cc:fa:a9:74:0c:04:81:e2:85:1c:10:d7:b1:22:1e:
5e:62:b0:8f:c0:34:ec:12:64:62:96:eb:d1:2e:22:
1e:30:e3:8a:bb:d8:ed:7b:da:da:7b:75:a3:a8:ff:
71:39:f4:4b:fe:42:0d:d5:01:17:cc:d5:d7:2f:2b:
97:04:6b:ed:e5:8d:3c:e3:af:48:9c:bf:b8:23:e1:
2e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8F:03:20:63:CD:27:DF:75:63:D1:0E:27:55:97:17:05:24:6B:34
X509v3 Authority Key Identifier:
keyid:97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ce:86:70:e3:b4:63:0d:6e:3d:5b:ff:a9:4f:f2:81:fb:e6:
f4:75:a9:9a:22:00:ea:b4:c4:74:79:bd:4d:e1:87:87:de:26:
91:ff:ae:da:40:93:65:71:56:41:1c:af:2d:73:cf:4b:b5:9c:
a5:38:8a:2f:52:28:d5:90:c9:47:0f:db:09:a9:b9:e4:aa:82:
fd:53:39:9b:c3:82:89:29:2e:bd:9b:30:f6:30:10:f3:8a:e9:
1b:c3:e6:90:5a:69:7f:26:d6:9a:77:15:85:f6:a7:ae:13:e2:
ab:a9:1b:9f:2d:26:39:f0:e4:4f:50:21:e2:90:20:5b:3e:97:
0f:e5:7e:12:be:6d:f4:bb:68:00:be:59:46:7e:1f:18:2c:00:
36:2a:ac:3e:6b:32:11:9b:9f:00:fd:90:9e:28:74:75:77:d8:
18:7c:98:ab:4b:8f:b6:4e:6d:4e:e7:8d:84:14:b4:5d:e7:05:
64:6b:2e:27:55:42:4e:14:b0:6c:39:64:11:9f:91:e7:35:dc:
af:68:44:1a:db:5a:0a:96:59:04:7b:92:3f:2c:7f:e5:72:d3:
4c:c5:a1:c0:5e:26:40:fb:9a:bd:e8:0b:05:6d:2a:ec:17:68:
34:69:1c:f1:6b:6c:be:13:55:f1:49:31:65:45:c3:5b:9e:ca:
8e:43:33:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:39 2025 by rpki-client