Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
File: 0x1LlB4GS0a8Ka9kW8dUcE06lME.mft (raw, json)
Hash identifier: FostR7F+GZEyVCvvBpVaZXHGHoFBUURtahpH0zRFqVQ=
Subject key identifier: DF:04:3E:4C:08:8D:06:3A:71:59:82:E2:37:41:06:65:CF:BD:97:30
Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
Certificate issuer: /CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Certificate serial: 019A4E1908423DD94ECE6636D1065714A54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
Manifest number: 06C2
Signing time: Tue 04 Nov 2025 09:00:54 +0000
Manifest this update: Tue 04 Nov 2025 09:00:54 +0000
Manifest next update: Wed 05 Nov 2025 09:00:54 +0000
Files and hashes: 1: 0x1LlB4GS0a8Ka9kW8dUcE06lME.crl (hash: U2/k6b3FhtEllPnvTbY/4VE0cd2+Guv1F4w66+XGrZk=)
2: gHq9MWf0hbMmILKUMKXWOxVNz_8.roa (hash: WUjQnD6G2qjaHXGAi0bK2NbXe4/t3hrnEoAgLC0ACio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:08:42:3d:d9:4e:ce:66:36:d1:06:57:14:a5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Validity
Not Before: Nov 4 09:00:54 2025 GMT
Not After : Nov 5 09:00:54 2025 GMT
Subject: CN=df043e4c088d063a715982e237410665cfbd9730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:08:6c:cc:7d:4d:4f:48:82:49:51:f1:ea:
b3:a6:f1:88:e5:27:b4:2a:f4:0d:66:07:88:b6:e1:
e3:6c:74:06:f3:7c:77:22:0f:db:11:43:5c:e9:de:
71:97:08:89:45:7d:82:0f:dd:59:09:90:b8:7d:93:
83:1b:61:74:a5:a3:cd:0d:c4:33:5d:24:91:97:c7:
89:80:be:19:9a:2a:1c:fd:d0:37:4a:1e:f9:8c:be:
a2:3d:ae:8f:61:27:cf:80:36:4e:b6:f1:fc:57:5c:
bd:a5:0e:1c:4a:8d:e7:ca:a0:9e:fc:c3:36:05:29:
40:23:eb:e8:05:08:c5:6a:d3:48:5a:68:78:53:13:
d4:c9:40:19:b2:d0:cb:a2:ce:8c:ff:33:81:16:24:
8f:94:c5:f8:4d:41:a3:f2:e2:09:53:fa:c1:ed:57:
38:22:9a:3f:08:a0:55:ac:7a:56:bd:17:a5:82:46:
c4:88:14:6a:fa:f7:72:3d:2d:71:92:f2:55:a8:d6:
bb:2b:a0:69:99:e0:29:95:2d:60:e8:e1:39:ee:d3:
dd:f6:7e:9a:f2:1e:ce:30:d2:79:c0:90:78:ca:e1:
16:95:f1:e4:fa:6c:f2:f4:22:e7:ef:4a:09:cc:40:
6b:b0:76:6d:96:74:7c:8e:30:df:78:f3:27:d8:e8:
46:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:04:3E:4C:08:8D:06:3A:71:59:82:E2:37:41:06:65:CF:BD:97:30
X509v3 Authority Key Identifier:
keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:51:dc:e1:1b:3c:f7:de:47:48:4d:a5:94:fc:fe:eb:1d:a6:
88:fb:ca:96:2f:1b:3b:02:69:4e:c2:93:01:16:11:db:25:2c:
90:24:a4:19:49:cf:66:08:61:0c:7d:3b:eb:b3:11:33:fd:94:
f8:4d:c6:42:6a:8d:56:fc:fa:4a:a2:2e:38:aa:1e:5a:b9:8c:
53:e3:d4:ed:44:2f:e7:96:41:97:f5:e6:08:db:d8:75:a3:1d:
1b:5c:36:18:94:86:66:2a:ab:4e:6b:1a:17:d1:7f:4d:3f:b9:
bc:b4:52:d2:a6:44:77:0c:6c:bb:aa:46:e1:00:a8:6b:fc:5a:
5e:6b:12:92:21:2a:f5:d2:5f:99:7c:32:75:4b:f4:b2:b1:e6:
93:9c:d1:c2:c2:ba:5c:85:90:47:35:fe:30:85:69:17:f0:83:
b2:cf:80:52:f0:12:58:89:48:cf:62:d9:cd:54:8f:a3:1d:d3:
23:f5:ae:52:02:8b:59:1a:75:dc:f3:68:6b:21:41:b8:dd:de:
41:b8:91:b5:aa:82:dc:e3:12:55:33:6c:7d:7c:46:70:5d:08:
d5:d1:15:ed:e3:5f:ac:73:f5:a8:55:56:b7:d1:aa:ae:37:d4:
0e:13:35:c5:b1:47:ab:36:4c:85:d4:52:0b:4a:e2:6d:66:f9:
23:ba:3d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:13 2025 by rpki-client