Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
File: l1lSndMXBkXXbPasBllQbMZJypA.mft (raw, json)
Hash identifier: ++Adu/OoFeU/KhQl7vOUg5QQCOTLCpnLtXQXjqHPA4I=
Subject key identifier: 9B:94:D8:C2:03:8C:13:8A:20:47:EA:1C:EB:58:04:07:59:D7:3F:6F
Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90
Certificate serial: 0199FBEC18CF9C7B8C269D92EAF6E498F9D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
Manifest number: 13FA
Signing time: Sun 19 Oct 2025 10:02:57 +0000
Manifest this update: Sun 19 Oct 2025 10:02:57 +0000
Manifest next update: Mon 20 Oct 2025 10:02:57 +0000
Files and hashes: 1: 0CXMUaTMQIKH6epSkL7Djl138G4.roa (hash: 7ikpmMwL3KhBT/ey6JF8CQkgs9c+Pq5I2Oo9Rhvfk8c=)
2: 2E_YHRCuF5MHTxlMx4c1H-5_vdo.roa (hash: cd6fZP84XkBNWRqBbhJXNCRjH3aM1q5IULZkt1L/R08=)
3: l1lSndMXBkXXbPasBllQbMZJypA.crl (hash: 7Y/kC1HE0I0RQzAja90rvAHstzOxM4HVsTpD1mPzYZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:18:cf:9c:7b:8c:26:9d:92:ea:f6:e4:98:f9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90
Validity
Not Before: Oct 19 10:02:57 2025 GMT
Not After : Oct 20 10:02:57 2025 GMT
Subject: CN=9b94d8c2038c138a2047ea1ceb58040759d73f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:b6:1c:93:db:1e:50:60:bc:95:a8:40:b5:
81:90:ee:fb:9a:be:f9:0b:bb:58:0d:cc:ae:67:83:
5f:28:49:9f:5c:1f:8c:83:f3:ab:0f:c8:ac:7f:43:
26:d7:41:1e:bf:54:fa:5e:0c:12:ee:6e:73:ce:0d:
63:89:76:2d:98:c0:20:c9:72:ce:0e:16:0b:60:aa:
8f:e1:40:63:4d:e8:d8:e4:43:77:f7:7b:8a:9b:00:
7f:00:a7:53:d5:f3:69:2c:0d:6e:cf:0d:96:97:18:
3e:d5:1c:8d:4c:56:4a:a2:57:05:73:0b:1d:e5:4e:
38:ac:33:8a:92:ed:2d:5a:bb:c7:cc:2e:bf:26:14:
aa:62:3d:9f:bf:f4:7e:82:55:aa:e2:ae:75:d5:9a:
32:7a:5d:26:78:a2:a0:8e:9c:63:e4:27:b1:4f:85:
c6:e1:ac:39:3a:09:23:20:4b:8b:26:be:97:1f:b2:
da:ad:31:3d:fe:69:f4:64:fb:ad:0d:ac:cc:54:f2:
49:67:b6:b9:b6:d5:9c:8a:75:4a:49:69:7c:6b:3d:
63:e2:7e:44:6d:d7:bc:53:29:ea:22:32:1f:d7:a7:
02:ad:b8:fc:56:90:70:29:0e:bb:3e:79:d1:69:90:
c1:23:52:a7:83:97:1f:92:c4:28:54:c8:42:e0:4b:
b7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:94:D8:C2:03:8C:13:8A:20:47:EA:1C:EB:58:04:07:59:D7:3F:6F
X509v3 Authority Key Identifier:
keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2e:64:4c:f2:b9:0b:c6:72:f7:44:29:80:50:89:6a:d9:15:
a9:5f:e8:6a:ea:db:90:2f:5c:06:a3:4a:f0:43:33:02:df:9b:
bf:89:82:2d:ca:65:77:97:e9:a7:3c:24:3f:51:aa:b3:df:e0:
b5:2c:30:b3:73:da:68:a2:86:06:d7:b6:b1:8e:1b:35:16:2b:
52:d0:ff:a1:80:f4:49:c7:32:37:03:b0:63:c3:44:db:6c:1d:
ac:9f:57:54:47:d0:2a:fc:2e:c7:0a:01:0f:8d:ad:24:7b:1e:
e1:99:21:f1:be:f0:03:e1:2f:ae:1c:bc:d5:bf:bd:1d:70:8e:
28:b8:f8:3a:a0:16:cc:45:85:76:fa:8c:7a:c2:a4:b8:17:c6:
8d:97:33:f5:0e:56:8b:14:9d:46:a6:c0:2e:b7:e9:50:a6:06:
03:97:17:1c:80:13:fa:f4:1d:74:69:89:c1:8b:fb:0d:47:0b:
ab:95:35:e5:75:65:35:49:cf:f1:77:d4:fd:f0:41:9f:f8:de:
e3:ab:6f:c5:a4:d6:b3:7d:d3:c6:46:4e:d8:8c:ee:db:8a:e6:
e7:03:80:3f:82:cb:05:9d:c1:f8:63:06:85:0e:80:9c:a3:7b:
4c:b5:bd:73:40:22:56:6e:e7:0b:2a:ce:be:36:0a:28:d1:09:
4d:1b:5e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:38 2025 by rpki-client