Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
File: l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft (raw, json)
Hash identifier: lEkGygcNR4+ScM0zh8mmNpBmcVbXU49sCOUxqzt3R1k=
Subject key identifier: 70:46:55:7C:1E:B3:9F:78:EA:F3:3D:AF:D9:89:8C:4C:D3:B4:FD:01
Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
Certificate issuer: /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Certificate serial: 019A4F9927EF5F4A28F3E5777B163EAE8104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
Manifest number: 0910
Signing time: Tue 04 Nov 2025 16:00:28 +0000
Manifest this update: Tue 04 Nov 2025 16:00:28 +0000
Manifest next update: Wed 05 Nov 2025 16:00:28 +0000
Files and hashes: 1: 0i_YlSLjNRB30UESNfxOlGgXI04.roa (hash: mrgCCvd59tuwyCrIfMNAZk14JnYczApGJpZMZMc86cI=)
2: l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl (hash: D8JU0oJu6tUwQpoirmiLSxuEoMThEGw5dWDViqi/Aa4=)
3: nYzAsbllFT7Lr_SB7POfofSL3LI.roa (hash: EHarQeauYC+jtiVvfxPF0hW/Y2vVhZb67l4OYu1uAWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:27:ef:5f:4a:28:f3:e5:77:7b:16:3e:ae:81:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Validity
Not Before: Nov 4 16:00:28 2025 GMT
Not After : Nov 5 16:00:28 2025 GMT
Subject: CN=7046557c1eb39f78eaf33dafd9898c4cd3b4fd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:00:16:f9:43:db:2d:4b:b1:7d:1d:76:1c:26:
fd:66:3a:de:cb:b7:ff:a3:90:50:bd:92:46:f6:2b:
8f:c1:d1:dd:46:c0:29:0e:b8:34:7b:1e:54:fb:ed:
70:a6:71:c0:d5:3d:88:c4:97:72:cb:57:25:1a:79:
0a:c3:3d:84:47:93:41:d8:75:f1:59:6d:6f:58:1d:
33:10:de:f3:ea:27:16:6d:c3:76:66:71:8f:4d:93:
04:77:a8:e5:6b:b3:e8:00:bb:ad:a6:a8:33:c8:e5:
58:35:99:f5:6c:74:98:f6:3f:38:ce:1d:fb:9f:df:
06:9b:8c:07:ac:01:8f:1e:21:a4:77:a6:6e:33:da:
ab:56:5a:19:8e:63:cf:97:e2:8f:56:eb:44:ce:c3:
0f:a0:aa:a2:bd:96:97:20:ac:f0:13:90:e7:6b:e4:
9e:c6:26:2a:42:a2:57:dc:ca:a7:92:4e:4c:80:38:
3d:16:6a:e7:c3:7a:91:15:7f:52:e2:68:17:28:b8:
fd:fb:8e:63:a3:44:9b:c4:d7:d1:95:9d:66:48:bb:
c6:8f:a7:89:af:e1:bc:66:40:46:b7:f5:ac:78:c5:
be:98:db:6e:f2:bd:6c:f7:03:e4:38:f9:78:ed:56:
5f:bd:b9:fc:40:71:99:14:a4:80:32:b6:00:2d:da:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:46:55:7C:1E:B3:9F:78:EA:F3:3D:AF:D9:89:8C:4C:D3:B4:FD:01
X509v3 Authority Key Identifier:
keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:10:56:b9:d4:97:ca:89:b5:86:e7:fb:a1:51:0b:3f:0c:e2:
ff:48:2c:f1:6a:f0:e5:e9:1d:0a:c2:af:83:2d:ff:af:91:95:
95:04:8c:5d:cd:94:ff:bf:ae:35:de:6d:32:d2:3f:50:5b:46:
0f:a1:ca:d6:1c:0f:cf:d2:01:09:46:2d:fb:03:94:09:55:ef:
06:81:52:0b:35:ed:29:b4:35:58:2f:8b:57:96:a0:bd:08:96:
5f:39:ea:20:13:93:1a:cc:76:39:b1:bc:bd:31:90:89:42:c5:
63:35:01:ce:c8:4d:98:97:31:a8:3e:92:a5:ae:27:8b:f6:c7:
86:7f:bd:d8:25:36:90:0d:70:09:5b:05:9f:52:9a:28:d3:7e:
ff:a6:72:e6:17:85:8d:ba:b7:8f:7e:9f:73:9f:2b:c8:0b:57:
50:ca:6f:71:75:1a:80:1a:fc:4e:d7:c6:f0:9c:99:b4:53:b4:
5d:a5:00:1e:d5:17:c2:45:b3:31:c2:b1:c0:cd:91:e9:af:b1:
d0:f3:26:2e:70:1c:b2:9c:1c:05:97:94:49:f8:b8:ef:ba:2d:
c9:07:e3:fe:de:08:61:9c:4e:ac:c1:d4:79:1c:dd:71:e3:4b:
36:2e:00:a3:f3:f6:d8:e6:f0:6c:46:2b:e2:38:f4:20:56:28:
f0:cc:2c:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmSfvX0oo8+V3exY+roEEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NWM5ZmZhNjVjM2M5YjU3YzU0OWU3MmNkNmRjNzAzMDA1
YjJlMGUwHhcNMjUxMTA0MTYwMDI4WhcNMjUxMTA1MTYwMDI4WjAzMTEwLwYDVQQD
Eyg3MDQ2NTU3YzFlYjM5Zjc4ZWFmMzNkYWZkOTg5OGM0Y2QzYjRmZDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wAW+UPbLUuxfR12HCb9Zjrey7f/
o5BQvZJG9iuPwdHdRsApDrg0ex5U++1wpnHA1T2IxJdyy1clGnkKwz2ER5NB2HXx
WW1vWB0zEN7z6icWbcN2ZnGPTZMEd6jla7PoALutpqgzyOVYNZn1bHSY9j84zh37
n98Gm4wHrAGPHiGkd6ZuM9qrVloZjmPPl+KPVutEzsMPoKqivZaXIKzwE5Dna+Se
xiYqQqJX3Mqnkk5MgDg9Fmrnw3qRFX9S4mgXKLj9+45jo0SbxNfRlZ1mSLvGj6eJ
r+G8ZkBGt/WseMW+mNtu8r1s9wPkOPl47VZfvbn8QHGZFKSAMrYALdrzaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBGVXwes5946vM9r9mJjEzTtP0BMB8GA1UdIwQY
MBaAFJdcn/plw8m1fFSecs1txwMAWy4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85MmVjZWEtM2YzYy00YmFhLTgzNGIt
MTI2YzdiNDhiODQ3LzEvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85MmVjZWEtM2YzYy00YmFhLTgzNGItMTI2YzdiNDhiODQ3
LzEvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhBWudSX
yom1huf7oVELPwzi/0gs8Wrw5ekdCsKvgy3/r5GVlQSMXc2U/7+uNd5tMtI/UFtG
D6HK1hwPz9IBCUYt+wOUCVXvBoFSCzXtKbQ1WC+LV5agvQiWXznqIBOTGsx2ObG8
vTGQiULFYzUBzshNmJcxqD6Spa4ni/bHhn+92CU2kA1wCVsFn1KaKNN+/6Zy5heF
jbq3j36fc58ryAtXUMpvcXUagBr8TtfG8JyZtFO0XaUAHtUXwkWzMcKxwM2R6a+x
0PMmLnAcspwcBZeUSfi477otyQfj/t4IYZxOrMHUeRzdceNLNi4Ao/P22ObwbEYr
4jj0IFYo8MwsLg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:39 2025 by rpki-client