Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
File: l0Zhyxw45jvXi9aysdaGhqVBW_U.mft (raw, json)
Hash identifier: 8cJCCjOkqD/oKhO8fFN4IARqcH/8ot8U8oAoYJl0t+U=
Subject key identifier: 34:A1:4A:02:E3:91:58:41:2A:7A:75:8E:A2:0D:5B:FF:DD:01:F5:A0
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Certificate issuer: /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial: 0199FCFD2B6BAA9E324C7E5847E7F9F1D159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 15:01:14 +0000
Manifest this update: Sun 19 Oct 2025 15:01:14 +0000
Manifest next update: Mon 20 Oct 2025 15:01:14 +0000
Files and hashes: 1: 8JaSgFcH49HBn461hhPZA96Q-_Q.roa (hash: Sl2mmYD1LNi2hjNI4HitJOBuVcHLDBiqw8TvUNCwTsk=)
2: FCpUh7uMn_jm2jqwI2G_dP05phQ.roa (hash: FZn5zdTsckuUQUO6IXLrYuHkdb4oQF7csC6+blEeSeA=)
3: ObPAzx9vpUSewz6yMRbiwqDj92c.roa (hash: Suax9ATaK3pYDGwH5LS+lZKVuglD1H0ACxKzg26DT6o=)
4: l0Zhyxw45jvXi9aysdaGhqVBW_U.crl (hash: FSwhhs0fn5yRbZVI2KRsaXLPGh20zQ/1AtrbEHUTYuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:2b:6b:aa:9e:32:4c:7e:58:47:e7:f9:f1:d1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Validity
Not Before: Oct 19 15:01:14 2025 GMT
Not After : Oct 20 15:01:14 2025 GMT
Subject: CN=34a14a02e39158412a7a758ea20d5bffdd01f5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:3e:de:8c:fd:86:a5:ec:b6:2c:a6:4f:0a:
ec:1a:92:32:45:1a:0a:57:3f:00:99:79:cc:22:81:
b0:c4:ee:50:c3:95:b6:64:21:ea:bf:61:29:c2:5d:
4b:00:13:58:e5:14:56:f4:e5:d6:71:93:e6:64:4f:
81:93:8c:2a:4c:dc:ee:96:b6:97:a1:ed:82:0b:9d:
30:a6:cc:0a:8a:6b:c9:c7:66:6d:5e:d8:72:44:fb:
9c:7a:84:5b:f8:84:59:d5:16:a6:74:8f:f9:d5:2a:
97:fd:0d:3b:69:ac:fd:9c:3b:13:99:7f:1e:31:34:
54:40:9f:8d:35:21:cf:f0:1a:c3:e7:16:02:40:87:
10:eb:f8:31:09:a4:5f:e2:93:72:60:6c:ca:54:a4:
b3:5a:6a:e7:15:e2:60:bd:be:d5:15:b4:54:57:2a:
e6:d4:9f:f4:05:f6:82:51:d0:81:88:78:cf:58:13:
ed:98:64:61:3b:e2:33:bd:f5:e9:aa:ce:96:19:65:
70:f5:26:0f:b8:0a:2c:9b:06:12:f2:e6:8c:c5:0f:
64:44:1b:82:e7:8c:45:88:65:f9:1c:73:5e:6f:2e:
2a:a6:2a:2a:0b:65:e8:a5:9f:bb:c5:f6:b8:e4:85:
36:a3:8a:01:1b:1e:ca:da:8f:d1:92:fc:39:0f:45:
79:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A1:4A:02:E3:91:58:41:2A:7A:75:8E:A2:0D:5B:FF:DD:01:F5:A0
X509v3 Authority Key Identifier:
keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:63:93:15:77:59:22:5d:47:49:24:8e:85:d5:83:78:05:86:
ce:0b:b0:b7:37:50:54:59:d4:b3:90:65:fb:e6:23:e9:04:7c:
52:34:68:29:eb:fd:f6:cc:d2:63:16:da:d0:13:68:e1:03:c8:
46:c8:7e:2a:6f:25:6c:de:e8:98:2b:f7:cf:9a:69:e3:e7:7c:
53:b0:82:54:96:d9:a8:e0:23:69:7f:ae:30:0b:d4:5e:82:23:
60:52:e5:98:fb:59:68:fb:94:49:93:92:2d:db:1d:24:9c:a6:
70:32:a5:aa:e7:9e:41:c4:3f:cc:22:7c:dc:e9:c7:02:37:76:
30:a0:0b:a8:59:d6:a0:2b:37:3d:de:42:b7:fe:d3:16:fc:fd:
a2:02:9d:63:3f:3e:6b:fa:aa:e3:0b:28:13:aa:72:2d:04:04:
ab:c2:8c:fd:29:e5:db:d4:76:57:19:37:5e:d0:59:2e:94:93:
34:33:16:f7:3a:ec:11:cb:5a:7c:04:7e:13:9e:e1:dd:72:10:
c2:a6:e6:73:1f:24:87:0b:b3:9d:56:55:e1:bd:c9:3f:cc:b6:
27:eb:ac:67:2e:41:0d:fd:70:37:41:cc:9d:3c:01:95:8e:cb:
f9:ac:bf:05:87:1c:47:60:63:a8:ce:59:59:d5:83:75:a3:6b:
d8:20:49:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:26 2025 by rpki-client