Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
File: l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json)
Hash identifier: jlv1F3HyD8RNcYdlPFfkuJnrBS0xmhsuibN935tHZgg=
Subject key identifier: EB:65:D9:5E:C2:AD:F0:FC:6C:B6:7C:4E:2D:36:8F:2D:EC:46:15:F1
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 0199FC21A45B8B0D43B75D72A551DB419D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
Manifest number: 14D7
Signing time: Sun 19 Oct 2025 11:01:26 +0000
Manifest this update: Sun 19 Oct 2025 11:01:26 +0000
Manifest next update: Mon 20 Oct 2025 11:01:26 +0000
Files and hashes: 1: 9fuYulUVxtgS2OdAoDqw73sL458.roa (hash: 4sliq0762rmQYCBsPA1iMqCrKBq5MvjcOahYDnYc2F8=)
2: GCT36J3n1OxX-WHPNyMOxT30V1I.roa (hash: a5Pszieg/F5+mp8skMSq3X98683NVjkxEMhhyfalK24=)
3: M3nuXRHV-HSVCrPsQchhdr5_x7Q.roa (hash: yixO/lM/jrXq6xFtI0OoJ7LnqzWDwB/3Pvi4UUX0Sqg=)
4: SMFHgAd465jvbKDW6YZwTehlmXs.roa (hash: mo74I69JinqweIsRPNZbaqL0YDRPxBEE9SrCUOt17NI=)
5: eMOtJLHyRS0nlVfkPs9ZYV2sfJs.roa (hash: bEXIrBrzj/GHJADmo6N/Mu/Sg4DT82z14P1KN6YbAzU=)
6: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: pQwLLHCF/fvBUAXEnv0A1Bxz4+9bFgoA+4zPIPKKQS4=)
7: p906kmkgY0qUYyVJw53cck20ZMc.roa (hash: RM2au0VYfH5622DYXzfGpU015sseQv18gBHvKAhN9Co=)
8: u_kbu4tkIYiihS4--NXiyToxNhs.roa (hash: txkFHVV6Yy9iysc9+92y5JAS1DKWEBihN2iYh4NZA9g=)
9: z-gzGRp6g46RfhDlKhHGqEoG68k.roa (hash: zEuoDm3Q5DkSIXVAGKauWFsGpEgi0zHMp7amnQaC+g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a4:5b:8b:0d:43:b7:5d:72:a5:51:db:41:9d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Oct 19 11:01:26 2025 GMT
Not After : Oct 20 11:01:26 2025 GMT
Subject: CN=eb65d95ec2adf0fc6cb67c4e2d368f2dec4615f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:bf:e7:27:85:fe:d0:73:eb:df:48:1c:f2:
3c:d9:8f:5d:f0:e5:69:01:42:19:92:0c:f7:78:0b:
3b:74:db:e6:ef:fe:48:96:9e:cd:a1:ac:67:e1:b4:
6d:70:1e:21:9b:2a:b9:3f:2f:f9:a6:df:07:e3:36:
2a:a7:c7:35:29:80:2e:4a:35:42:a3:9e:95:be:a6:
c2:44:14:73:a5:63:52:8a:5f:53:0f:87:5e:b5:be:
78:39:b0:a5:12:f3:b9:19:4a:ce:1a:fd:e5:1c:a6:
4f:79:a7:62:07:0d:fd:56:79:25:f7:ac:ae:1a:2c:
90:c0:10:84:0e:51:72:d7:d0:da:b0:a1:06:8f:f8:
38:d6:af:25:ac:e6:aa:2a:a5:d8:17:d2:d3:66:2d:
49:e5:42:7c:70:e5:dd:98:62:72:d3:06:42:ef:ba:
90:6a:85:57:d5:5d:c9:fd:36:e8:07:a6:d3:0c:35:
88:2d:22:06:fb:41:4d:0e:b5:67:c0:bc:1f:c7:cc:
59:0f:98:e5:2f:d2:2d:d5:90:db:f4:74:f5:f0:25:
1b:5a:b6:7c:4e:8c:cf:d4:8d:3f:22:52:da:67:5a:
be:ef:3b:fb:c7:88:28:7c:d4:73:24:b5:28:58:61:
6e:f6:83:94:54:f7:f8:63:94:c0:89:58:d2:d4:45:
ba:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:65:D9:5E:C2:AD:F0:FC:6C:B6:7C:4E:2D:36:8F:2D:EC:46:15:F1
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2e:ba:3e:80:ce:99:e2:25:5a:e9:54:36:d2:2e:98:07:98:
ee:6d:05:b6:61:c7:90:3e:98:09:2e:1e:79:17:eb:c1:cc:f0:
ed:e6:6a:70:b4:4e:83:a1:f3:e4:86:e2:2c:8c:cb:b6:4d:aa:
f7:e7:ba:8a:49:00:2d:36:17:88:21:f4:3c:86:50:dd:35:b5:
dd:4a:9c:c3:cf:23:f7:eb:ce:e5:06:b1:f0:ea:ce:78:d9:00:
10:1c:01:d5:a5:44:d8:f2:e3:9e:25:08:7e:54:35:ca:75:e9:
a4:4f:fb:6f:a9:6b:8d:25:a7:a0:27:6b:e0:a2:a2:ba:ee:c3:
c5:93:54:04:ff:0f:f5:ca:7c:c9:a1:88:75:bd:8d:8b:88:1c:
1c:01:bf:e9:7a:4c:63:32:4f:0a:73:9e:4f:9d:53:4f:64:09:
58:90:f8:30:d2:e9:4b:85:6a:14:36:bc:2a:4b:9c:6a:19:10:
26:e0:7d:12:9c:0e:ab:3a:99:a4:bf:79:95:1c:b5:31:ae:c1:
57:5a:92:b6:6a:8c:a4:3f:19:7d:8d:1b:c8:c4:1f:20:c1:a3:
49:93:31:4a:a2:bf:6e:aa:37:aa:36:50:80:9a:3d:ea:38:5a:
6f:e4:30:7f:a0:cc:6b:6b:6f:3d:3d:67:99:71:0a:5a:66:30:
0b:d4:c5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:16 2025 by rpki-client