Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
File: l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft (raw, json)
Hash identifier: qZPau8g+AvZktHN8H1x16tFR69GFU0G4EfN6wDzy+P4=
Subject key identifier: 0C:14:F2:E2:D9:EF:39:C9:10:D3:3A:38:9F:7C:44:04:C9:34:E6:02
Authority key identifier: 97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E
Certificate issuer: /CN=97a23bb0aca9d226d05adfac08554181c48ef82e
Certificate serial: 019A4EF4286DE7719521795CA6D33E795229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:15 +0000
Manifest this update: Tue 04 Nov 2025 13:00:15 +0000
Manifest next update: Wed 05 Nov 2025 13:00:15 +0000
Files and hashes: 1: YVg_2iB1D0i_33LG7yJEAknUwCM.roa (hash: LAKKZLtOPGoM/C7ZDpXW5Qjmcc0Ag72bwBoz/cyOViA=)
2: l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl (hash: 3JI9KLQuNibdl6QTuefjRgHDsoahM07Mzie6hHARS08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:28:6d:e7:71:95:21:79:5c:a6:d3:3e:79:52:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97a23bb0aca9d226d05adfac08554181c48ef82e
Validity
Not Before: Nov 4 13:00:15 2025 GMT
Not After : Nov 5 13:00:15 2025 GMT
Subject: CN=0c14f2e2d9ef39c910d33a389f7c4404c934e602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:5b:37:9d:cf:94:e5:46:d7:8a:c0:38:b4:
21:39:46:d1:67:98:f2:88:d7:2f:54:24:f1:0e:d0:
89:1e:2b:02:ce:ef:ad:8e:f3:7a:28:e2:c2:e4:fb:
ab:53:a2:23:9f:c2:7b:19:c4:2a:fc:c4:4b:3d:06:
6a:c9:68:cf:ac:92:c0:62:89:1d:52:12:83:91:27:
61:44:58:1c:9b:ef:37:6b:f5:bc:c8:74:fb:65:8d:
9e:14:6d:69:e7:97:00:db:f3:aa:6b:d6:f1:18:4e:
0d:d7:da:ff:7d:43:7e:aa:78:2e:9b:29:76:03:67:
b5:98:dc:12:9e:d4:a4:fb:98:0e:a6:1f:1f:43:1e:
ef:3e:90:dd:12:61:1d:7f:cc:52:24:b6:e0:6f:26:
e2:ab:34:79:91:ef:21:09:7e:5b:be:8d:a1:2b:e4:
7a:0b:aa:c5:f8:ae:78:fe:4e:85:9e:de:73:98:26:
83:50:34:fe:e5:8c:54:9c:30:3a:7c:3d:67:b1:b0:
7e:c2:71:98:4a:80:8f:83:37:54:fd:01:97:68:94:
ab:71:c6:c5:03:42:1e:8a:60:26:0d:cf:c6:3a:b1:
c2:fc:90:c2:68:22:24:18:77:77:c9:17:3c:0e:9e:
3b:f9:4a:38:ed:3e:3e:5c:80:80:d1:05:90:ef:b7:
b8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:14:F2:E2:D9:EF:39:C9:10:D3:3A:38:9F:7C:44:04:C9:34:E6:02
X509v3 Authority Key Identifier:
keyid:97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4d:84:d6:5c:9c:cf:49:83:40:6c:13:c9:b4:26:89:2e:ab:
27:18:e8:17:0c:3b:ec:0b:e4:c1:2f:6e:da:5a:69:a8:cb:31:
d9:64:11:37:0c:4f:fe:c1:03:46:02:a1:23:a5:82:55:43:62:
53:76:48:c3:8f:18:f2:01:46:91:8f:e3:d4:6e:3d:3c:2d:b1:
19:40:ed:dd:7a:7d:93:3a:0d:c6:9f:3a:5b:04:9c:ac:9e:83:
63:d1:b8:9b:24:20:60:48:c5:f9:9d:fb:b0:b1:53:a3:80:94:
f1:58:84:53:07:c9:15:35:16:b4:47:39:63:f5:35:d6:65:e4:
f6:9e:86:16:82:ce:bd:6b:c6:f2:db:c5:ea:d3:f3:bd:66:b9:
e7:8f:75:a3:7b:36:38:ed:f8:c0:b2:93:2f:e8:89:39:4b:ca:
a3:61:ea:d0:c9:7e:b2:bd:b0:80:64:15:15:f8:51:4e:11:01:
8d:d0:d7:62:43:9d:7f:05:02:0f:74:7e:83:44:71:8d:60:d2:
52:bd:b5:ba:11:10:d6:5a:38:fe:4d:49:b6:9c:9f:52:1a:e1:
2f:9a:e6:e9:51:04:4c:42:00:b1:17:26:d6:af:dc:9b:98:02:
25:07:cd:bd:e4:03:ab:73:9a:32:8e:ca:cc:80:69:9a:92:57:
6b:8b:24:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:29:35 2025 by rpki-client