Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
File: D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft (raw, json)
Hash identifier: 4SUpxdRCQq6KEbPRT9GNqDNsAHet63C0+y74n2tTE/o=
Subject key identifier: C1:7A:D8:C9:0F:67:60:90:65:C1:6E:FF:17:30:B2:D7:A0:67:BB:EE
Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab
Certificate serial: 019A4EF5C01FEA68B6680DE71983C6547863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 13:01:59 +0000
Manifest this update: Tue 04 Nov 2025 13:01:59 +0000
Manifest next update: Wed 05 Nov 2025 13:01:59 +0000
Files and hashes: 1: D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl (hash: ymNz7NKdofIK1kOOfZ8X35GvmQZb09pKYA2tgsO69rg=)
2: HUHlNiQYgJ4Q8Qh3sAD_OVXJBhA.roa (hash: OPxk8KCEOkzaDriX+1Y8hLRMwmqx3zDs8p9mPqnsEt0=)
3: PajWCIMvcFk4AhOAYqjPPCoKGSM.roa (hash: YLRXPcoHiAKu8WSdD1lhP04YPthD74gG0Yhmp7yGgeI=)
4: wkRan0gCCPqjhSya1MCejtYVUwQ.roa (hash: CcC9CLeeg2oAb+UFqiFxA3SwU8cWbyT2GAOTTlHtPbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c0:1f:ea:68:b6:68:0d:e7:19:83:c6:54:78:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab
Validity
Not Before: Nov 4 13:01:59 2025 GMT
Not After : Nov 5 13:01:59 2025 GMT
Subject: CN=c17ad8c90f67609065c16eff1730b2d7a067bbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:37:49:b9:ed:76:e1:0c:84:16:7d:12:f7:82:
f7:ba:9b:b9:22:88:5e:fd:6a:29:e4:cb:80:55:f8:
6d:60:42:e4:75:d2:0c:f8:13:85:f9:28:fd:7b:8b:
a7:00:c1:fa:7a:e9:1d:d0:6b:51:3a:29:fe:fe:72:
3c:35:7d:e0:a8:b9:7a:5a:1a:d0:7d:57:51:7c:0e:
65:ce:df:8c:c3:3e:73:b9:f8:7e:6b:de:a0:c4:96:
ee:14:eb:90:f2:c9:dd:1f:79:4e:90:83:a0:e1:c9:
12:b4:1e:e2:7d:da:89:45:3a:10:cb:9d:50:3c:56:
a0:4a:4e:12:45:b7:c7:ca:83:a7:27:a5:d3:78:44:
66:36:80:81:28:5e:88:41:6c:aa:5b:74:62:4f:de:
e3:ee:b8:c0:3f:fd:76:6f:01:5f:2b:3b:84:fa:01:
a8:49:50:23:56:c5:0c:03:87:8c:50:d8:a4:9b:21:
2b:d7:c9:97:bf:a5:d1:f3:f7:f4:41:f3:fd:ae:77:
ef:7d:65:6e:dd:a7:f1:46:7b:93:13:1a:03:da:02:
dc:c1:4b:50:3e:8d:ec:8c:d5:e6:04:a7:3d:40:ff:
3c:0a:27:5b:e3:18:9d:43:d1:ff:8a:24:a8:b6:3a:
c9:cc:41:69:27:36:d2:b1:b4:92:34:9d:18:fa:a4:
65:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7A:D8:C9:0F:67:60:90:65:C1:6E:FF:17:30:B2:D7:A0:67:BB:EE
X509v3 Authority Key Identifier:
keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8f:3f:0f:5c:3c:44:a2:ca:0a:9d:52:44:8d:e3:4a:ca:1e:
59:d9:5c:e0:72:e2:16:68:b4:9a:96:02:96:cf:10:4f:7a:5b:
58:48:5e:ce:af:b0:ae:5e:4b:3b:a8:7d:2c:bb:dd:50:66:39:
7d:21:02:70:78:e9:7d:af:1c:46:61:56:fa:00:92:df:f5:e7:
3d:2d:1b:37:74:c1:71:2d:f4:3e:e3:ef:c1:73:19:d5:b2:b1:
ed:60:2b:3c:eb:a4:ac:17:40:4f:26:af:2e:76:d0:e8:da:03:
1b:09:ba:8d:00:be:3f:3f:a2:1b:94:23:b6:9a:ad:c8:9d:9b:
e3:bf:91:e9:99:7e:f0:a7:ec:9f:6e:a4:ea:38:c9:cc:22:0f:
14:09:8e:05:32:81:f7:77:98:dd:db:84:ab:c3:94:5e:f8:b2:
a8:38:a6:b2:ea:1f:03:d1:97:48:81:b9:4c:7a:a8:c6:57:70:
d8:fa:89:f6:4b:81:30:92:bb:0e:35:31:68:21:45:6e:a0:11:
4e:5c:b3:ea:01:e5:1e:da:83:bb:21:6d:a4:de:b4:84:95:a6:
49:e0:6b:4b:dc:90:a0:f8:31:bb:cc:6b:7b:ce:55:11:94:da:
f2:20:f3:bf:e2:94:c3:d0:e0:e6:3c:8f:d7:ca:bd:fb:2a:44:
68:d5:86:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:26 2025 by rpki-client