Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
File: l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft (raw, json)
Hash identifier: 3qBJYOyZPgioUhSPqM8W0j8r7xUeOQX7sgndnLiwuJI=
Subject key identifier: 3A:8E:14:D9:67:1B:4B:92:D9:E8:52:7B:3A:07:22:94:78:1A:CF:CE
Authority key identifier: 97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
Certificate issuer: /CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Certificate serial: 0199FCFD2AA17B4CFD89245F68657EFE7FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
Manifest number: 0970
Signing time: Sun 19 Oct 2025 15:01:13 +0000
Manifest this update: Sun 19 Oct 2025 15:01:13 +0000
Manifest next update: Mon 20 Oct 2025 15:01:13 +0000
Files and hashes: 1: Dlst4zdGN0XEjaRKAVG2aUW3Zys.roa (hash: JUWMAM2lZQg8cUdPcrThF2mh7HbwsAT1N8ME9RsjW/U=)
2: l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl (hash: mIldC8oxhcifHmQpVl3hXi0CJe97aDmIM7LqIUZLjJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:2a:a1:7b:4c:fd:89:24:5f:68:65:7e:fe:7f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974506f3f202d86849bb4dd5c7539d22b4df5182
Validity
Not Before: Oct 19 15:01:13 2025 GMT
Not After : Oct 20 15:01:13 2025 GMT
Subject: CN=3a8e14d9671b4b92d9e8527b3a072294781acfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:48:e0:a4:0a:07:84:2f:8d:8e:3c:89:a6:
09:99:16:88:28:cf:dd:26:11:21:9f:d0:e0:6c:36:
98:ee:ee:c1:c2:38:6d:8b:f6:7d:b9:a8:fa:e0:5f:
3a:4c:06:ff:ea:81:a3:49:9a:ab:fc:a3:1e:94:72:
d3:53:ba:f8:bd:33:55:1f:86:9f:13:82:77:dd:7f:
1b:d8:80:bc:ef:36:ab:f7:77:56:94:c3:5c:47:2a:
8f:5c:ea:18:ea:ee:b0:17:20:d4:a2:19:34:aa:28:
b8:3c:54:4c:0c:02:67:d3:6f:fe:ca:78:0b:d4:7e:
10:3a:4d:e3:5d:03:5a:a7:6b:86:eb:1d:8f:cf:4b:
6b:2c:85:4f:c9:01:7b:c5:cd:6a:d2:a1:ca:ed:0e:
75:71:f6:17:5e:b9:72:83:fc:0b:79:dd:76:df:2a:
43:3e:1f:63:6f:92:f3:3c:0a:49:5c:b1:d6:d7:04:
5d:3f:7b:db:99:b1:ba:4c:95:46:c3:bb:65:55:6d:
32:5e:d5:cb:ee:9e:46:eb:df:df:c0:98:4d:71:2c:
be:0e:e5:b3:ab:79:b7:8e:dc:cc:5e:4d:61:40:4e:
0a:4f:da:c6:42:35:4c:7c:78:fe:db:e3:cc:79:64:
40:73:71:f3:48:48:1e:1c:d5:48:86:56:5f:4d:03:
21:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8E:14:D9:67:1B:4B:92:D9:E8:52:7B:3A:07:22:94:78:1A:CF:CE
X509v3 Authority Key Identifier:
keyid:97:45:06:F3:F2:02:D8:68:49:BB:4D:D5:C7:53:9D:22:B4:DF:51:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0UG8_IC2GhJu03Vx1OdIrTfUYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/930caf-76ee-456c-afe0-a25255329dc0/1/l0UG8_IC2GhJu03Vx1OdIrTfUYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1f:93:9e:f9:33:5f:54:b0:30:b8:87:7a:30:30:92:99:6e:
f3:f8:61:a9:50:61:63:57:e9:85:b7:ea:63:df:8b:81:a9:70:
33:e3:57:c0:ca:89:1c:60:e8:73:cd:89:76:3f:4c:85:51:10:
7d:72:1c:62:de:fb:29:93:88:3c:b8:3e:42:b6:df:b4:43:ca:
54:e7:f0:28:01:e0:89:b5:b0:a5:2b:a8:23:b8:1f:e8:21:cf:
ed:d8:69:44:70:29:5d:9e:be:09:a3:13:48:a2:81:83:a8:20:
36:b4:a5:5a:74:c9:f3:2a:07:bc:60:17:d0:6c:5f:92:cd:76:
88:6f:f5:25:ae:93:fa:8b:9e:e5:81:39:7c:b6:10:eb:0a:d4:
e3:10:f9:ac:cf:fa:09:0c:ee:d4:16:75:f6:98:93:78:cc:25:
c9:96:32:b9:6b:4e:3d:a2:3f:7e:4b:44:09:3f:a1:0b:2c:48:
a0:18:e0:ee:45:4e:4d:e2:d0:62:65:a1:7a:78:64:13:5a:6b:
4d:14:ee:73:4d:c6:06:89:76:3e:a0:61:13:ca:5a:31:b1:45:
b9:6d:be:c7:1b:bd:57:35:d2:e9:97:5f:6d:5c:7a:af:6e:7d:
5c:a9:05:70:02:ba:2f:2c:3d:f4:ce:e6:f4:0f:fd:a3:46:e7:
48:65:cb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:18 2025 by rpki-client