Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
File: _l1M3gmNHKh_Tgqe64VZKOg9KT4.mft (raw, json)
Hash identifier: vnGqDVCHXvCQ4kNQ0Q+sbil7GsimNjcGofpuMRcoHa4=
Subject key identifier: 31:D8:0E:E7:75:3A:E7:8E:76:14:51:6F:2A:3B:A7:6B:C2:41:76:95
Authority key identifier: FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
Certificate issuer: /CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
Certificate serial: 019A4D060981DF4E5E4155A48CE85E1C549B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
Manifest number: 0765
Signing time: Tue 04 Nov 2025 04:00:32 +0000
Manifest this update: Tue 04 Nov 2025 04:00:32 +0000
Manifest next update: Wed 05 Nov 2025 04:00:32 +0000
Files and hashes: 1: _l1M3gmNHKh_Tgqe64VZKOg9KT4.crl (hash: dgPldTujZK2bJtLivXCAwNUMtVco7Pl+Rg3d+HzYTYo=)
2: utZx0LvAiHOeptZQC75VXrzHyuM.roa (hash: wu5n7/gdVFeYXS3ZTu6uD37jiOfb6f60vWQYmSZ9Xfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:09:81:df:4e:5e:41:55:a4:8c:e8:5e:1c:54:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
Validity
Not Before: Nov 4 04:00:32 2025 GMT
Not After : Nov 5 04:00:32 2025 GMT
Subject: CN=31d80ee7753ae78e7614516f2a3ba76bc2417695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:56:71:e1:ae:45:09:06:d5:68:a1:97:e7:c5:
6d:5d:92:56:34:3a:3c:7a:bc:fc:4c:bb:2e:4d:20:
7a:b6:26:c5:45:2e:cd:9d:af:19:0a:a8:f8:1c:a9:
c5:bf:9d:94:c3:1f:be:91:af:c9:ae:da:43:e6:bb:
60:ab:92:8c:d1:a4:2f:70:f1:8c:eb:0a:a2:bc:b3:
76:34:5d:1e:39:b5:5d:8c:de:fa:7a:b9:d9:99:78:
e3:c1:8b:bc:61:8e:9f:b6:e6:9f:7d:93:f7:c0:a6:
f4:d7:33:da:03:49:ed:e3:26:05:17:cc:ba:b4:69:
2a:41:87:06:6a:c4:7d:23:a7:5a:77:67:11:20:04:
b4:44:b5:2b:91:3e:17:d0:1f:30:6a:00:1b:49:83:
72:21:be:63:cf:30:30:a2:0d:4e:01:1d:09:a4:2d:
55:48:d6:b0:5d:a2:fe:2c:ac:dc:46:41:94:76:e8:
b8:67:3e:ab:90:2a:c0:4d:3e:a5:6e:4a:d8:4a:47:
57:c3:a7:73:1d:46:32:a4:af:c3:b9:15:1f:a9:7c:
09:f0:a3:36:2b:43:a5:95:39:be:15:c8:8a:80:9c:
d0:6b:f3:6e:77:8c:47:5c:dc:05:bd:92:7f:f0:02:
78:9d:61:d1:a6:83:8b:1f:46:38:7b:c4:7c:40:0c:
cd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D8:0E:E7:75:3A:E7:8E:76:14:51:6F:2A:3B:A7:6B:C2:41:76:95
X509v3 Authority Key Identifier:
keyid:FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:06:c5:f2:4b:0f:74:df:2c:fe:5f:cd:17:d0:9b:76:ab:ce:
5c:2e:e2:e0:c0:c7:73:93:90:be:6b:fa:98:03:6d:d2:f9:e0:
0e:62:a5:5e:e8:9f:1a:f3:13:13:1d:de:d9:db:59:e6:48:06:
e4:74:b6:eb:c4:87:ee:ba:73:a2:68:3b:83:ed:e6:9a:52:86:
0a:dd:55:95:a3:30:de:54:46:cc:b7:27:d4:6f:bd:56:bc:d5:
06:b0:89:27:db:eb:d5:d2:c3:39:64:ad:56:66:28:79:24:ec:
ee:53:2b:08:9e:e8:50:44:3f:62:33:93:4d:d5:e8:c5:69:ee:
fe:46:2b:62:f9:bc:2b:8b:93:b6:3a:4f:f7:61:2b:2b:44:3d:
c1:28:1d:db:cc:66:9d:f7:1c:aa:b7:63:d3:b2:2c:1c:8b:ed:
2f:f5:17:55:c8:6c:bd:20:ff:c1:df:b6:7f:37:48:ad:66:1d:
03:52:c2:f4:46:a6:61:8c:0c:ed:53:48:e6:4f:24:ec:22:a4:
76:90:58:ec:b6:17:e9:92:cb:98:dc:7c:15:f2:20:11:ba:1c:
30:64:f7:0c:55:ba:a9:1a:1e:8b:b1:28:21:1b:47:c2:1d:d3:
9d:02:40:06:90:82:ef:4e:2e:67:36:d6:46:32:73:f2:c8:c6:
58:5b:4d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:21 2025 by rpki-client