Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
File: lIlI8N1eL7CpArl5ypxcGkT5j6E.mft (raw, json)
Hash identifier: 757+AkJ/iVFqONChTcLM+Keu9r+TNA6fL/6p+MhKgho=
Subject key identifier: 4F:0E:53:ED:3F:BE:6E:FE:C0:C4:31:6C:63:74:D1:35:2E:2C:38:7D
Authority key identifier: 94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
Certificate issuer: /CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Certificate serial: 019A4E863C9F59BA7BD93CF8683E9B914998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
Manifest number: 139B
Signing time: Tue 04 Nov 2025 11:00:11 +0000
Manifest this update: Tue 04 Nov 2025 11:00:11 +0000
Manifest next update: Wed 05 Nov 2025 11:00:11 +0000
Files and hashes: 1: PqIFggzIk_ANiqqFNJr1_Xaymmc.roa (hash: EhtNg//JemmQlKzA50IitdtWxLjPUBVE2aJwJpTUs+g=)
2: lIlI8N1eL7CpArl5ypxcGkT5j6E.crl (hash: DMbay60F/aLpKlixQKv8nY3mhiDq/DmEBQCTqeXCr9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:3c:9f:59:ba:7b:d9:3c:f8:68:3e:9b:91:49:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Validity
Not Before: Nov 4 11:00:11 2025 GMT
Not After : Nov 5 11:00:11 2025 GMT
Subject: CN=4f0e53ed3fbe6efec0c4316c6374d1352e2c387d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9c:42:84:fe:be:e8:94:f9:96:65:a4:8b:eb:
81:7e:23:b5:3d:46:17:7f:b6:5b:27:79:a9:f7:9e:
ad:db:a1:73:dc:b4:47:9e:04:4e:e9:bf:6d:64:9c:
2c:85:ab:e1:1f:0d:e7:47:9d:9b:60:09:aa:30:41:
2b:88:fb:03:60:5a:a5:c3:86:06:79:59:38:3e:df:
8a:fb:2b:1d:97:1c:23:94:bc:c4:15:ae:20:a1:19:
4a:d1:96:aa:d1:52:22:54:de:0e:7e:a8:b8:55:be:
77:ef:d4:ea:90:2e:94:77:61:15:04:3e:20:b4:8d:
93:06:12:a0:80:b7:87:2f:b1:0b:7c:4c:ca:82:77:
84:e5:85:e6:6f:c2:15:9f:6a:81:11:d9:93:07:95:
79:09:14:63:4d:9e:f2:dd:84:ac:31:f9:af:71:61:
63:b4:bf:ee:a1:70:66:6d:35:0b:1b:d1:ce:61:7c:
0d:99:2c:88:b6:db:78:ae:0d:ac:f0:d9:0d:65:96:
0d:28:50:5e:47:f5:29:6a:61:01:f9:87:07:bb:85:
e3:40:94:89:9a:7a:0c:c9:b1:d0:9c:0d:f5:94:f4:
3f:7b:d3:07:f2:61:63:7c:0d:be:a3:0b:f8:e9:d3:
c5:31:80:e8:18:d9:0c:a8:79:fb:47:e6:22:5d:7c:
d9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0E:53:ED:3F:BE:6E:FE:C0:C4:31:6C:63:74:D1:35:2E:2C:38:7D
X509v3 Authority Key Identifier:
keyid:94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9d:4c:f4:53:92:14:0f:85:4e:90:1e:02:69:9c:50:12:e7:
87:44:1d:0d:91:9c:9a:f9:15:35:46:74:c8:c9:ee:06:fb:cb:
e5:8c:39:02:ea:8d:9b:4b:9b:eb:bd:a3:9b:ad:f1:1c:a6:70:
f6:50:ed:40:11:91:29:40:ed:a3:78:63:0e:70:17:cf:d4:89:
3d:db:55:93:e4:34:3e:65:99:26:47:79:04:28:77:1d:8c:f1:
7b:cc:4f:e6:7c:66:1a:92:9e:89:75:eb:bf:c8:04:55:96:33:
ab:4f:e1:6a:36:bb:17:c0:0c:c3:5c:0d:39:b1:c0:63:fa:59:
dc:cf:65:c5:b9:ce:b1:58:93:e0:8f:4c:49:98:b5:a5:18:7f:
0d:4d:c7:04:d8:70:f3:e5:d3:5d:4b:92:c5:ae:41:d5:5d:3f:
b5:3c:ec:b4:00:88:d3:7b:6f:b3:4c:a6:dd:9a:23:b0:6b:7d:
0d:63:39:8f:40:5c:ff:a3:fb:61:a6:77:10:9d:44:01:02:d2:
be:71:d6:a3:04:3f:0c:a7:6a:46:da:f0:1d:f9:4c:3a:d4:85:
a4:55:1e:5e:d0:e2:0c:bd:ae:c5:56:69:4e:70:71:a1:98:71:
00:ec:37:cf:9c:3d:18:45:8a:f5:f9:0d:5c:24:96:d0:17:b9:
85:0a:f3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:26 2025 by rpki-client