Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
File: _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json)
Hash identifier: jNg7gSEDZ/IWtijPQQZFAjFL1FkDThHbjK+l+D7jsNU=
Subject key identifier: 60:A8:9A:52:CF:D6:A8:F1:C9:70:86:E0:96:35:16:B5:92:7F:2B:7A
Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
Certificate issuer: /CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Certificate serial: 0199FBEBCBF11E944CE59855CF3020378BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
Manifest number: 0B4E
Signing time: Sun 19 Oct 2025 10:02:38 +0000
Manifest this update: Sun 19 Oct 2025 10:02:38 +0000
Manifest next update: Mon 20 Oct 2025 10:02:38 +0000
Files and hashes: 1: DiB_b1f0zlqZ4Y9RlICgbOGMJ7o.roa (hash: bx7gORpYBo75Iq/H/h1fyR0wOXDdKfLfUPEbvglKOL4=)
2: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: t1puahynI4dQXas9gaHqppxzXfFdZwGWK9WGOxJqR6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:cb:f1:1e:94:4c:e5:98:55:cf:30:20:37:8b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Validity
Not Before: Oct 19 10:02:38 2025 GMT
Not After : Oct 20 10:02:38 2025 GMT
Subject: CN=60a89a52cfd6a8f1c97086e0963516b5927f2b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:dd:aa:e2:a3:76:0f:f3:55:eb:da:a2:17:
9f:46:5c:04:3b:b9:8e:2e:17:b1:13:9c:77:32:a9:
4e:5b:3f:ba:a6:29:24:19:b4:4c:73:ec:89:b3:24:
7e:4a:7e:8c:98:aa:e8:84:0e:35:21:88:b9:04:a1:
92:16:89:c9:9c:56:a9:ea:e7:eb:05:42:2d:21:28:
d6:79:26:2a:01:0b:d7:7a:99:1b:92:ed:a8:20:f9:
27:d0:de:cb:03:8e:3e:8c:5f:c8:eb:a3:9c:8b:66:
02:5a:18:cd:31:d4:f2:67:b9:db:92:1c:1b:0e:78:
93:a0:47:0c:c1:a7:1c:47:b2:61:67:4a:ac:98:3a:
cf:95:92:a5:03:1f:08:bf:04:f0:cc:d3:e8:76:a3:
49:06:6d:de:a1:38:36:fd:3a:d3:4d:61:b7:29:cf:
95:32:66:b4:f9:b8:2d:15:de:eb:59:3b:1d:21:df:
b0:fd:3e:73:98:1f:72:ac:bf:43:28:65:2c:3e:1d:
e8:28:01:60:07:00:9d:4d:24:11:63:52:df:bb:ad:
47:78:f2:00:7c:52:93:f6:0f:74:5b:70:4b:e8:b1:
84:f6:da:69:6e:54:6b:14:01:13:08:5d:f6:dd:2c:
8b:7e:b4:ae:40:70:27:3e:0b:4a:b1:97:15:04:2a:
d8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A8:9A:52:CF:D6:A8:F1:C9:70:86:E0:96:35:16:B5:92:7F:2B:7A
X509v3 Authority Key Identifier:
keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:88:69:e2:1b:06:98:13:2f:c4:4e:e2:59:a5:6b:63:cc:c5:
b7:14:16:b1:2c:c4:c7:94:55:a3:72:71:07:dd:c7:60:0f:74:
9a:71:08:b4:65:78:3e:65:2a:41:a0:83:59:ee:63:2d:12:be:
b6:2e:69:d3:32:b7:7a:eb:a6:fd:05:ae:84:a5:1e:31:6a:8a:
ef:5f:ac:92:bc:21:50:4e:05:f9:28:df:5e:34:27:bd:a8:31:
80:5f:c3:a8:43:5a:f9:4e:b9:6c:23:58:60:3a:01:f8:2b:09:
ce:62:f9:14:39:a8:92:ff:80:94:39:6e:86:10:3c:2e:6a:d3:
98:23:94:10:ba:9d:1f:12:69:91:3b:4e:6c:1f:17:b4:d1:7d:
4e:77:62:f9:35:26:be:9b:2d:96:8f:c9:8a:89:51:3e:25:fa:
af:bf:65:e8:69:68:af:06:43:3a:88:f9:e1:b0:87:05:ee:e2:
d2:63:82:3d:70:ea:ba:14:fb:31:4f:14:dc:9e:94:3d:67:81:
4f:52:c8:cf:3d:d2:4d:fc:44:e7:7a:a3:6d:6d:bf:9e:c0:0b:
1b:78:5c:68:ee:6b:41:3f:2b:ed:72:c1:70:d0:d8:4b:13:26:
7f:58:12:c4:ee:77:ed:2c:42:2f:f1:79:66:87:e1:23:52:c2:
87:a5:39:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:10 2025 by rpki-client