Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
File: l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json)
Hash identifier: qOCdQU/ZPL6sOfF/sYe255DkA2C21NPr54HCofly9LE=
Subject key identifier: BD:90:4D:19:C2:05:42:7C:61:2C:54:80:FA:67:B7:13:D1:4B:5E:64
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial: 019A50E2BCAB4D116F6E689F73D8E37A4F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
Manifest number: 171B
Signing time: Tue 04 Nov 2025 22:00:27 +0000
Manifest this update: Tue 04 Nov 2025 22:00:27 +0000
Manifest next update: Wed 05 Nov 2025 22:00:27 +0000
Files and hashes: 1: Bb283EmMHgO869T1EeLsRpmJeYs.roa (hash: Nwt8fGBRV8sOt4t4VlNYBdMwpGMpgaO/PFcGpK3ITpc=)
2: dZKiynV1KRUB63s1S23kLXoELXM.roa (hash: uX/2Ee9kxHZZdlU8CO8raSIbXckmFA2hSc0ftFZonCA=)
3: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: WGDtxW97bB4jur2vR92LRJw9os06GQsmvsnrswoMAVA=)
4: qJCRilc3Ebh9B_aySeVMKldeveM.roa (hash: ioODI+aP1jwlezBm9lY+fz3m5yXxE8s++45dvu8zDyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:bc:ab:4d:11:6f:6e:68:9f:73:d8:e3:7a:4f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Validity
Not Before: Nov 4 22:00:27 2025 GMT
Not After : Nov 5 22:00:27 2025 GMT
Subject: CN=bd904d19c205427c612c5480fa67b713d14b5e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:c4:b9:98:9f:76:07:92:d0:9a:16:ff:5a:
0d:f5:75:bf:e1:e9:cf:af:e0:74:d1:c3:bb:59:5f:
a0:9b:9b:7c:1b:a8:5a:84:bd:48:af:9e:86:8a:25:
57:69:73:8f:de:ae:2b:04:97:13:56:1d:c6:06:4e:
15:e5:a8:4f:2a:c6:12:4c:54:97:dd:f0:53:0e:8c:
12:77:1a:38:01:56:ae:f7:82:ef:0d:01:f8:47:21:
a3:cd:0d:ce:8a:df:53:e2:e0:e3:3e:da:98:43:79:
1a:53:06:cf:0b:70:01:e9:a7:3b:16:2c:ba:b0:13:
a8:20:d2:ed:9a:d4:6f:3a:77:4a:8e:6f:fc:dd:70:
57:7f:b7:0b:e4:71:ad:bb:6f:a0:fc:4e:d4:2b:39:
f0:98:1b:be:c5:40:81:ff:70:66:f5:d1:0a:fe:5d:
4f:22:0b:d7:35:8b:ae:c6:b5:a5:ce:cc:d3:9c:d4:
28:56:3e:47:97:0f:ee:ba:f1:67:d2:f3:9d:95:1d:
67:d4:ef:64:b1:22:95:d6:f3:25:27:c8:5a:3f:95:
5b:99:26:1c:50:e3:6a:0b:3c:16:85:1e:d4:4b:6e:
cc:20:c9:07:4f:1b:60:51:5d:e6:73:21:b6:eb:37:
a8:ce:f7:ad:07:82:67:bf:0b:38:d4:9c:09:df:fc:
75:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:90:4D:19:C2:05:42:7C:61:2C:54:80:FA:67:B7:13:D1:4B:5E:64
X509v3 Authority Key Identifier:
keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6f:4c:ab:7d:10:d3:3a:25:de:b0:06:dc:0d:cf:4c:64:1e:
9b:0e:7d:78:67:c8:a9:b9:4a:e5:90:34:d3:3b:65:81:bd:9d:
2b:e5:2f:9f:c2:78:1c:e5:5c:bf:e5:1d:4d:9d:3f:32:36:be:
81:f1:72:f8:58:8a:3e:44:43:ef:ba:c0:ae:79:2f:9c:ed:1d:
f8:20:6d:c9:3b:40:17:91:6a:e2:e6:7a:03:cb:4d:1d:dc:dd:
1b:93:fc:51:ab:98:58:b9:83:9e:d7:5a:23:3c:28:31:4a:ac:
10:3a:e0:58:80:81:f5:8b:5d:92:dd:aa:7d:f3:5a:3c:3d:bc:
95:c2:7f:d5:be:77:2f:58:8c:dc:06:54:4a:53:5d:bd:76:e4:
d0:8c:3a:5f:00:d5:8a:50:47:e1:55:25:bd:d2:89:37:d8:47:
1d:e8:b7:d4:62:9e:60:0f:2f:2f:ae:71:39:d5:69:52:c5:1f:
77:49:6d:f2:0b:68:71:a2:31:4a:61:3e:26:0c:61:37:aa:c0:
89:58:d1:c5:91:ca:ec:39:58:21:6a:ed:cc:04:98:7b:c5:12:
4a:81:97:99:49:7e:2b:d6:cd:d9:5e:22:81:0d:33:91:78:fe:
9d:3a:84:fa:d6:4e:ef:8c:58:f4:81:56:8a:aa:ee:7d:a0:e9:
11:52:e5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:00 2025 by rpki-client