Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
File: l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft (raw, json)
Hash identifier: aiixQwQnrXosXj0p+tAYL4bpUf/+AbOsLaqu63ZjLQ8=
Subject key identifier: 6B:53:04:23:DE:FC:E2:FF:AB:19:99:A0:50:25:75:F2:70:39:61:E0
Authority key identifier: 97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
Certificate issuer: /CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Certificate serial: 019A52D149F63A385A33DB7D3D169AE2C088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
Manifest number: 02EF
Signing time: Wed 05 Nov 2025 07:00:38 +0000
Manifest this update: Wed 05 Nov 2025 07:00:38 +0000
Manifest next update: Thu 06 Nov 2025 07:00:38 +0000
Files and hashes: 1: KGvd9Dk5_a_R1xkL2TWSdydfpdk.roa (hash: HlescFWLzPsD70c5CcwFp2ufdRCBYWVscapXjHm9XI4=)
2: l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl (hash: wS/e85zYBtlWuL8QIK9aoT14IJ7/5E3/d4JiRzqJLxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:49:f6:3a:38:5a:33:db:7d:3d:16:9a:e2:c0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ccc0ecdceb7c4da912e1d792bd16e622af4a46
Validity
Not Before: Nov 5 07:00:38 2025 GMT
Not After : Nov 6 07:00:38 2025 GMT
Subject: CN=6b530423defce2ffab1999a0502575f2703961e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ee:30:03:d9:06:1e:e3:1e:a2:7b:52:72:9a:
62:2a:55:fe:f2:e6:83:f8:2f:70:c5:9c:58:e0:5e:
49:c7:ae:63:23:63:2c:a9:d9:65:3f:29:8a:b5:01:
a3:e2:50:8f:ac:d5:f4:72:66:66:ad:f2:c0:ac:81:
f3:5f:a5:64:af:63:22:e3:c0:59:d3:3f:23:47:8f:
b9:b7:06:df:37:b2:27:45:5d:df:fd:98:2b:b7:be:
49:8d:da:e6:c1:dd:69:76:5a:b7:91:a0:4e:3d:ae:
dd:f5:24:57:ce:df:cf:81:95:74:cc:85:08:5f:fa:
c0:8d:00:51:a8:f2:8a:54:a1:62:a3:48:b4:62:59:
99:be:b6:58:28:3a:92:d4:49:66:c4:6e:87:18:23:
33:27:a0:e1:4b:9d:0a:51:44:c0:da:23:09:7d:d9:
de:a3:97:b7:0e:c8:13:f0:ed:62:55:1f:e1:d3:cb:
05:98:d9:b6:72:3c:39:72:8a:c5:95:c3:da:71:96:
25:96:64:6a:aa:d1:0b:c1:83:93:5f:68:86:3e:ed:
5d:8b:e0:9d:a9:80:a5:b7:46:c2:31:08:87:81:6b:
d7:da:37:f4:61:ac:df:2e:42:9a:df:d5:45:59:6d:
d4:46:7e:73:fb:bc:14:64:92:c5:f6:c5:42:74:d1:
19:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:53:04:23:DE:FC:E2:FF:AB:19:99:A0:50:25:75:F2:70:39:61:E0
X509v3 Authority Key Identifier:
keyid:97:CC:C0:EC:DC:EB:7C:4D:A9:12:E1:D7:92:BD:16:E6:22:AF:4A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8zA7NzrfE2pEuHXkr0W5iKvSkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0aa4dd-3faa-4b3c-b4c0-93d17a29c0a9/1/l8zA7NzrfE2pEuHXkr0W5iKvSkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c1:43:aa:cc:ae:98:8c:5b:57:57:2f:6f:54:fe:18:de:7c:
ad:ab:db:6a:1a:7b:10:87:e5:df:80:3d:a2:36:bb:59:25:00:
64:aa:5b:55:5e:39:76:d8:5f:bd:c4:1f:61:58:37:e5:f1:e2:
63:bb:6f:fc:99:52:6d:f9:ff:af:8e:9a:9d:af:58:32:e1:3e:
9b:07:e8:59:3e:6e:2c:44:25:63:1f:11:63:43:5b:15:18:ff:
ea:33:2d:48:c5:a2:83:90:1f:eb:41:92:51:de:89:94:f9:d8:
4d:06:b3:23:2e:97:0d:a0:e6:bb:f7:7f:f1:45:29:64:9c:75:
29:60:e2:6a:ce:ac:a5:3a:20:bc:bf:3e:96:d8:6e:50:6a:5a:
f0:9e:ec:c6:4b:f8:13:d4:e6:77:f1:e6:39:38:a1:a9:7c:38:
97:29:f5:4b:62:49:96:26:43:ad:51:c6:22:ac:0c:db:11:a0:
c9:75:72:3f:a9:cc:db:f6:bb:f2:36:30:48:29:95:20:0f:72:
83:52:2b:32:5d:fe:9f:18:c9:3a:1e:b2:44:ec:eb:af:20:b6:
04:20:bd:af:a6:1c:7d:47:14:c5:1e:5d:1e:9e:9f:a5:d9:f3:
b8:ac:17:97:f6:72:69:f4:6a:5c:8e:32:a3:2f:e2:df:19:0e:
29:0f:4e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:14:41 2025 by rpki-client