Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
File: l79b5z8YIydEmN9So3U10T2lvmI.mft (raw, json)
Hash identifier: G+veS6su+E8K0NRKQsH3B20Cw6Dw9Lxus2PLCyp6RnA=
Subject key identifier: FE:94:55:CA:BB:9D:3E:B0:6A:42:78:6E:EA:B8:11:97:71:76:A5:54
Authority key identifier: 97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
Certificate issuer: /CN=97bf5be73f1823274498df52a37535d13da5be62
Certificate serial: 019A4DAA78C2EECBB9FDF91EBEBC7EB2E066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 07:00:08 +0000
Manifest this update: Tue 04 Nov 2025 07:00:08 +0000
Manifest next update: Wed 05 Nov 2025 07:00:08 +0000
Files and hashes: 1: HWzBieo8pIQmRXoRuWfRIehTEwE.roa (hash: JynDcSW3QZoBehAT3uFmeO42DtekqQpNN7+NxcQtvOQ=)
2: l79b5z8YIydEmN9So3U10T2lvmI.crl (hash: w4H9rgeckVWzDRQO/uKfwzggLF8iFttUJ4PN7uNbpSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:78:c2:ee:cb:b9:fd:f9:1e:be:bc:7e:b2:e0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bf5be73f1823274498df52a37535d13da5be62
Validity
Not Before: Nov 4 07:00:08 2025 GMT
Not After : Nov 5 07:00:08 2025 GMT
Subject: CN=fe9455cabb9d3eb06a42786eeab811977176a554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:da:2d:c7:03:7c:7b:52:65:3f:24:41:91:
86:f2:df:59:97:61:e4:80:42:cf:e1:3b:ce:2a:1f:
d4:0a:d7:d9:04:b5:f6:80:0a:11:df:35:a4:8b:c8:
39:14:bc:76:16:b6:79:c9:62:e4:89:9f:dd:dc:83:
24:99:2a:f4:11:d2:d8:fe:92:8d:b9:54:a2:f1:9e:
3b:fc:89:71:41:69:d7:bc:d2:d4:4d:8f:cc:35:f3:
df:69:e2:ab:52:54:46:c7:6c:a0:72:5c:71:a6:1f:
76:6e:61:4d:bd:9f:56:51:0f:83:b6:88:69:dc:12:
aa:aa:00:06:ad:83:50:9e:23:d8:b4:02:9f:f1:47:
73:9a:a0:43:d1:38:31:80:cc:62:a8:a2:8b:0d:f7:
11:e8:3e:f3:eb:c4:74:47:e5:83:86:ad:25:51:f0:
73:97:2c:dd:b3:4d:91:81:c8:07:4c:90:d2:6a:89:
e9:70:8d:e3:30:59:5c:1c:61:e8:2e:b9:ff:90:03:
f5:c2:88:87:a8:6e:d2:81:62:e6:dd:60:18:d1:66:
c6:b9:b1:c2:e2:d9:21:3b:91:5e:45:97:a6:ce:d2:
6a:b8:6b:74:6d:27:38:ec:1b:a0:45:b2:4d:1b:4e:
4b:8f:1e:a3:82:1f:2a:e6:5d:f3:b5:89:d7:40:39:
4f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:94:55:CA:BB:9D:3E:B0:6A:42:78:6E:EA:B8:11:97:71:76:A5:54
X509v3 Authority Key Identifier:
keyid:97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:59:08:eb:5a:58:73:02:0a:67:9b:5d:db:6e:94:20:2f:75:
7d:09:bb:eb:bc:21:ef:50:31:0b:71:31:2e:40:aa:95:9b:ab:
5d:5e:11:3b:37:e6:dd:20:b9:90:f6:9f:ec:aa:85:e9:f3:bd:
50:df:48:e8:30:40:4c:79:f6:ec:9e:2e:e4:8e:aa:b5:55:fc:
1d:4c:de:bd:0b:32:30:db:4b:85:08:1d:5b:9a:6a:f3:18:f7:
2f:6a:e4:b5:eb:3d:0b:ad:0b:be:9f:6e:8f:c3:54:e6:31:49:
51:80:39:bf:d3:5f:36:fc:c0:9b:dc:d5:80:cf:ff:48:30:ab:
ff:ea:15:70:e1:52:ea:4a:22:0f:fe:a6:02:27:a1:06:50:09:
36:23:2f:76:a6:57:78:e6:6d:8c:1e:64:21:30:23:f4:89:89:
9e:c8:06:b3:4b:97:bc:72:8e:42:e4:50:67:0a:29:ad:a7:0e:
50:fa:90:a6:a0:47:75:e3:80:e6:a8:cb:b8:e0:78:4b:b5:d9:
2b:99:f4:d9:b9:28:05:a9:92:eb:7c:8f:8e:b5:a7:80:d6:cb:
fc:e1:64:c8:d3:58:9c:af:bf:e3:a7:49:51:7e:a1:41:a9:96:
bc:9e:32:32:67:19:7c:6b:81:19:1c:9e:7b:61:1c:24:a8:fe:
3e:f5:d0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:48 2025 by rpki-client