Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: WnAn/zmX78dON3odBs36ADgIq6xLscz3U+ICcx28uBE=
Subject key identifier: C0:84:30:A8:3F:E5:72:0D:C7:DF:D3:74:C1:08:1E:6F:CC:2D:AF:B6
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 019A4C610DB5883985734D4F8A939FA74B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 01:00:20 +0000
Manifest this update: Tue 04 Nov 2025 01:00:20 +0000
Manifest next update: Wed 05 Nov 2025 01:00:20 +0000
Files and hashes: 1: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: WkGNpyYfB0Lj/C/ao0AHbCOidEuBlcILJR1DIZiYRxw=)
2: pu3w7UCd4Jix5FHNDyD1wbsxi8M.roa (hash: J6M/UUbbX9rFSK6+ULPDexwZqprBkdzi2+HoEA2BwBc=)
3: rLSgQK3eROYoGVjeEkatzbeLiUo.roa (hash: cRiivZzTe4i6byml8FTWqC2r60f1JUGBkptLQN0rfQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:0d:b5:88:39:85:73:4d:4f:8a:93:9f:a7:4b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Nov 4 01:00:20 2025 GMT
Not After : Nov 5 01:00:20 2025 GMT
Subject: CN=c08430a83fe5720dc7dfd374c1081e6fcc2dafb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8a:d1:43:b2:c8:c7:ee:16:dd:d2:a3:89:6b:
1d:8e:dd:08:3d:ba:6f:fb:69:3d:51:a3:4d:ac:f9:
87:f5:c9:bb:59:73:fd:53:62:4f:09:4b:bd:5d:9f:
fa:1c:2a:3f:3a:49:78:f1:43:6a:7a:aa:f9:e2:59:
e2:3e:82:0b:7e:a3:e5:35:ce:94:90:31:47:c0:14:
05:8a:20:a3:df:73:06:f7:20:ad:dc:be:e0:85:f8:
ed:64:ff:8e:3c:b7:e7:b2:da:56:fc:a1:59:bb:02:
b8:af:3a:b6:27:3a:16:07:83:4a:fb:d1:1d:d7:e4:
e4:6a:d4:59:db:99:14:7b:90:7d:43:5d:14:23:38:
1a:0c:7d:71:7d:94:dd:a9:64:d1:ad:0e:02:c6:87:
d9:a6:c2:00:ee:64:8d:82:27:2b:d9:78:c9:62:e4:
18:99:2c:bc:59:2b:c4:ec:c6:01:a2:f9:66:3e:79:
19:a7:9e:f0:c9:e0:f2:4f:9c:a4:9e:a5:d5:b6:7a:
53:ea:47:9e:51:9a:d7:84:1b:b3:09:50:cf:28:3f:
b2:a2:3c:b9:36:eb:de:7b:a8:79:00:2a:5f:51:12:
d7:e8:d3:93:bc:31:e3:73:48:ae:f4:84:b6:1b:e9:
d9:7d:c0:6e:40:40:41:2f:b2:21:a4:8c:90:2d:17:
0e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:84:30:A8:3F:E5:72:0D:C7:DF:D3:74:C1:08:1E:6F:CC:2D:AF:B6
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9c:40:c3:c7:22:fd:39:59:48:1f:e1:30:43:9d:0a:e8:dd:
04:bf:4f:dd:bc:ad:1d:fc:87:42:9d:38:54:db:22:66:d0:95:
93:60:81:e7:c0:3b:39:00:d7:1d:77:66:e7:21:67:d8:90:49:
1b:c7:c5:d7:f3:50:9d:3f:bd:a3:34:97:99:bf:aa:ad:49:29:
ef:90:7d:a1:03:a0:d4:98:2c:8a:5d:a9:ab:b1:38:0f:d7:cd:
49:26:2d:48:13:2a:64:ed:08:d0:71:21:93:e2:18:20:20:bb:
b2:29:a2:9c:88:19:a9:1e:ce:ae:83:e6:e9:24:a1:fe:05:b1:
ee:07:4c:47:a1:43:f1:36:7e:7f:8f:55:bd:b1:42:96:a9:eb:
d5:40:96:98:e5:d9:19:8f:0b:78:9c:06:d9:4f:0d:66:af:ac:
6b:cf:fd:dd:10:4c:c0:13:e9:3b:0a:d5:ef:8f:34:5b:8a:f7:
46:41:9a:a7:c1:96:e2:6f:f7:c6:50:02:30:04:d0:cf:03:40:
78:f3:c0:be:3c:39:c9:f2:76:4c:11:35:83:45:2d:2c:00:af:
31:2a:fc:cb:06:5e:79:f2:56:5b:b2:56:39:d2:a6:d6:4b:71:
e1:a0:c4:00:8f:1c:c0:29:3b:e1:4f:bd:3d:03:f8:ce:11:c2:
50:5d:af:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:24 2025 by rpki-client