Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
File: l15fSPU6jbnKYPqPGDfQfzGREE8.mft (raw, json)
Hash identifier: ciWNziqGoiVdZKSnXSU8zTl3I8MP3ndcQHgrP19g4LU=
Subject key identifier: 78:F7:21:59:77:2F:1A:C4:A3:77:6B:26:BA:1E:E8:21:E0:07:BB:FD
Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Certificate serial: 019A522C7788FB928B0ABB6B75F76B8E082D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
Manifest number: 038C
Signing time: Wed 05 Nov 2025 04:00:37 +0000
Manifest this update: Wed 05 Nov 2025 04:00:37 +0000
Manifest next update: Thu 06 Nov 2025 04:00:37 +0000
Files and hashes: 1: VmXkaG5WzI9Vz_7xcXFAL06DAoc.roa (hash: uKPs/SrJH/MnTw4fYsxVa8cqGkMc8R9CKa5VOSutc0U=)
2: l15fSPU6jbnKYPqPGDfQfzGREE8.crl (hash: gl8nxpT5PndlarVdo2uzbKyUzvqsTlQIYWRw60yVE8U=)
3: t42bTlVzekO4_zka2dM08NYoS0o.roa (hash: k4lNjjF23Ae3Sbhg3LYDkwgC4ol0mKxgVNJCg94oeiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:77:88:fb:92:8b:0a:bb:6b:75:f7:6b:8e:08:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Validity
Not Before: Nov 5 04:00:37 2025 GMT
Not After : Nov 6 04:00:37 2025 GMT
Subject: CN=78f72159772f1ac4a3776b26ba1ee821e007bbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:b5:61:a6:65:50:ef:da:9f:33:ca:99:f3:
cd:05:f6:7d:5d:15:04:d1:8c:79:3e:20:02:66:b8:
2e:86:5b:e3:84:46:fe:ea:1e:3c:4f:dc:3e:7b:c6:
81:04:5a:2c:0a:67:0f:a0:31:00:b0:fc:50:cf:7d:
85:e3:0c:a0:6e:72:3d:a4:88:cd:71:5c:b5:e0:5b:
c8:dc:c1:b8:98:de:78:83:ab:78:cf:65:49:6e:60:
70:1d:24:3e:d3:95:b6:4e:a9:1b:3f:19:4d:7a:e5:
2e:89:d4:05:9a:b5:c6:db:67:f7:7b:60:96:20:e9:
70:60:1e:2f:d8:5f:c1:e3:94:07:b0:9a:2a:bc:34:
33:f4:37:84:a9:58:29:83:45:49:17:06:dc:14:a9:
40:2b:f3:2a:a2:72:cd:71:9e:6c:6b:38:cf:a8:a1:
7f:1f:cc:34:4b:74:94:06:7c:58:ec:5d:65:7b:40:
23:ac:6e:9e:d5:3f:32:ba:24:a7:72:2f:41:12:30:
f7:a6:88:68:81:7a:57:09:3e:22:29:67:a8:49:cb:
71:43:f0:f5:4a:2b:0b:e3:de:3d:91:98:96:20:0f:
81:1e:5e:ff:3c:f8:5d:66:bf:8a:da:7e:36:3b:1f:
9f:27:f2:5e:fd:57:2f:3e:e3:e7:60:be:3d:e4:bd:
de:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F7:21:59:77:2F:1A:C4:A3:77:6B:26:BA:1E:E8:21:E0:07:BB:FD
X509v3 Authority Key Identifier:
keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:8e:b9:a6:44:e7:17:b2:e4:1a:8d:41:56:5c:88:6a:d9:85:
f5:22:3f:c3:d4:e4:2d:7a:ad:c2:0c:b8:ec:b5:bc:57:50:91:
3b:d2:6e:cf:5f:64:dd:e3:38:03:9b:b6:7d:1f:7a:86:5e:c4:
e9:b7:db:82:c3:c8:e5:89:5f:b7:ee:c3:59:2e:5d:f5:80:e4:
e7:ea:59:d4:6a:2e:25:e6:c5:bf:68:a3:4d:f2:e9:c4:47:68:
50:3e:a3:d5:18:18:e7:f7:68:07:3f:4d:9a:b7:43:99:44:3a:
38:49:58:5d:c3:3a:e4:04:41:6c:20:b0:3a:a0:57:42:9b:0c:
51:74:72:8b:22:a3:6f:db:38:98:85:8a:52:d2:68:08:40:f0:
8c:81:74:82:00:43:36:16:88:75:0c:b2:36:eb:00:2b:53:7a:
93:c0:c6:41:a8:72:bd:fb:05:e5:6c:69:a6:3f:3e:e8:13:09:
c5:36:29:04:f6:cd:48:08:08:cc:8e:8d:8e:6d:1b:a8:19:f5:
07:56:37:d8:11:e9:4e:92:54:eb:73:a7:65:45:df:f6:bf:a8:
83:9b:fd:ae:f9:77:1e:68:d2:bd:89:27:b0:f9:a6:43:3c:c1:
c6:a8:a2:8a:f9:e2:87:d2:dc:e2:fa:53:40:80:02:72:77:5e:
7b:51:22:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLHeI+5KLCrtrdfdrjggtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NWU1ZjQ4ZjUzYThkYjljYTYwZmE4ZjE4MzdkMDdmMzE5
MTEwNGYwHhcNMjUxMTA1MDQwMDM3WhcNMjUxMTA2MDQwMDM3WjAzMTEwLwYDVQQD
Eyg3OGY3MjE1OTc3MmYxYWM0YTM3NzZiMjZiYTFlZTgyMWUwMDdiYmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtES1YaZlUO/anzPKmfPNBfZ9XRUE
0Yx5PiACZrguhlvjhEb+6h48T9w+e8aBBFosCmcPoDEAsPxQz32F4wygbnI9pIjN
cVy14FvI3MG4mN54g6t4z2VJbmBwHSQ+05W2TqkbPxlNeuUuidQFmrXG22f3e2CW
IOlwYB4v2F/B45QHsJoqvDQz9DeEqVgpg0VJFwbcFKlAK/MqonLNcZ5sazjPqKF/
H8w0S3SUBnxY7F1le0AjrG6e1T8yuiSnci9BEjD3pohogXpXCT4iKWeoSctxQ/D1
SisL4949kZiWIA+BHl7/PPhdZr+K2n42Ox+fJ/Je/VcvPuPnYL495L3e7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHj3IVl3LxrEo3drJroe6CHgB7v9MB8GA1UdIwQY
MBaAFJdeX0j1Oo25ymD6jxg30H8xkRBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDE1ZlNQVTZqYm5LWVBxUEdEZlFmekdSRUU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9lMGIxYjUtZWRlZi00YWViLTgzNmIt
NjNmNTAzNWYzNDQ2LzEvbDE1ZlNQVTZqYm5LWVBxUEdEZlFmekdSRUU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9lMGIxYjUtZWRlZi00YWViLTgzNmItNjNmNTAzNWYzNDQ2
LzEvbDE1ZlNQVTZqYm5LWVBxUEdEZlFmekdSRUU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt465pkTn
F7LkGo1BVlyIatmF9SI/w9TkLXqtwgy47LW8V1CRO9Juz19k3eM4A5u2fR96hl7E
6bfbgsPI5Ylft+7DWS5d9YDk5+pZ1GouJebFv2ijTfLpxEdoUD6j1RgY5/doBz9N
mrdDmUQ6OElYXcM65ARBbCCwOqBXQpsMUXRyiyKjb9s4mIWKUtJoCEDwjIF0ggBD
NhaIdQyyNusAK1N6k8DGQahyvfsF5Wxppj8+6BMJxTYpBPbNSAgIzI6Njm0bqBn1
B1Y32BHpTpJU63OnZUXf9r+og5v9rvl3HmjSvYknsPmmQzzBxqiiivnih9Lc4vpT
QIACcndee1Ei8g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:33:08 2025 by rpki-client