Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
File: l-y52NNIlBZmfumV9fTiGje2-fg.mft (raw, json)
Hash identifier: cyHujfOZDc7QI4fE6kSXOCwNbcXahpmPyKfZRTQmuOE=
Subject key identifier: 7C:CA:5B:42:63:F1:F2:FB:58:22:C9:A1:9E:3C:D6:64:D1:FF:7E:1E
Authority key identifier: 97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
Certificate issuer: /CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Certificate serial: 0199FBEB36AB2647B465FFEF72505D06827D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
Manifest number: 076B
Signing time: Sun 19 Oct 2025 10:02:00 +0000
Manifest this update: Sun 19 Oct 2025 10:02:00 +0000
Manifest next update: Mon 20 Oct 2025 10:02:00 +0000
Files and hashes: 1: YEAGUvq4a0uBKUxsvBxbjQaBFyI.roa (hash: GNqYAmNWNIrSRNz7fZ+tj/pHZ5I/AkpnVRtGA7RbM20=)
2: l-y52NNIlBZmfumV9fTiGje2-fg.crl (hash: EPLy4Sy4h0QZkWZB4xvlqGgWul1knl2L8z5SJ28l5WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:36:ab:26:47:b4:65:ff:ef:72:50:5d:06:82:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Validity
Not Before: Oct 19 10:02:00 2025 GMT
Not After : Oct 20 10:02:00 2025 GMT
Subject: CN=7cca5b4263f1f2fb5822c9a19e3cd664d1ff7e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e1:90:01:a0:39:c0:b0:09:00:36:82:62:33:
21:1e:6b:15:2c:27:34:d8:d3:27:f0:02:24:6e:29:
9f:a7:c5:f5:e7:d2:15:d2:4b:24:e9:e3:ba:bf:1b:
88:a5:90:56:56:2d:4e:bf:9a:29:33:c9:ab:02:bc:
3f:c1:3c:62:38:56:05:91:0c:06:2e:a1:b8:a4:63:
70:8b:a2:84:50:dc:eb:2f:ca:eb:74:f7:e6:29:6d:
68:6f:1c:9a:b3:02:0c:9f:e1:ce:ff:94:37:4d:d8:
02:b0:00:52:2a:29:c1:1d:e7:23:b2:c5:b1:2d:32:
99:c8:e7:74:cc:41:b9:d4:ef:0c:06:29:80:68:5b:
6f:45:dd:51:6f:0a:58:f4:a5:5b:dd:fc:d3:e1:71:
5f:5e:06:3d:47:07:2a:dd:d1:ba:f0:64:4d:76:8c:
88:fa:11:c1:2c:a4:cb:5e:86:aa:53:94:0f:c1:bd:
be:b0:91:97:0f:9e:46:1e:56:7d:b8:46:1e:89:d0:
69:44:24:b8:f5:d4:54:4e:1c:de:e9:fb:c6:b8:04:
83:41:16:92:b5:4f:26:51:9e:bd:c8:4d:f3:69:21:
d9:a8:47:bd:64:3f:3f:56:9a:ce:28:1e:aa:af:06:
54:13:16:0f:68:93:f4:a7:0a:16:17:69:61:ea:dd:
4b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CA:5B:42:63:F1:F2:FB:58:22:C9:A1:9E:3C:D6:64:D1:FF:7E:1E
X509v3 Authority Key Identifier:
keyid:97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f5:28:5c:b5:35:95:01:b2:3f:f2:cb:be:19:73:50:a1:a2:
5b:d4:3b:2f:08:a3:c8:6a:5a:9b:a0:48:cb:84:38:10:15:f3:
bb:d3:c5:26:51:9c:17:31:be:ba:00:84:a9:35:bc:5d:de:7f:
8f:10:8c:9a:4c:d2:92:9b:36:e7:9e:ae:74:cb:5d:ee:f4:a1:
ff:f0:41:3d:59:c3:33:dc:e0:bb:f1:ce:e0:33:79:aa:a3:21:
da:82:59:a9:d0:01:7a:da:82:f9:33:d3:7a:0d:a9:6d:db:57:
34:f5:0f:4a:5e:de:df:1c:9a:13:03:9a:18:99:65:40:8b:be:
10:8b:d9:a4:17:da:c4:86:97:14:22:db:00:86:14:8e:56:a8:
5c:d8:1b:dc:ce:10:65:f4:5c:c3:06:c4:92:3b:e4:32:72:af:
64:25:4d:33:dd:43:35:35:d4:ec:9b:77:d5:d4:3a:c3:25:41:
84:c1:48:7c:1c:40:f7:82:c4:cb:2e:3d:fd:b9:5a:cc:f9:28:
0b:2e:a1:85:1f:b0:00:c9:8d:ce:fc:5f:f5:b4:d6:fc:fb:f5:
3f:84:ce:10:a5:90:41:5e:8a:f0:58:6d:3e:c1:96:d5:af:b2:
3a:5a:6a:b4:8a:c1:17:c5:22:e2:a5:d2:51:58:bc:20:71:c5:
6d:4c:87:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:58 2025 by rpki-client