Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
File: l4TMfBsz0nl3_M2zSzzClKKkCIw.mft (raw, json)
Hash identifier: w4ifATrmwhSFQ+8w2X1ELPbUTWc+Pyf2GFbPyvXbZs4=
Subject key identifier: 00:EA:E8:38:4D:49:1A:93:BE:D6:C2:44:12:C1:0D:5F:11:B8:FF:7B
Authority key identifier: 97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
Certificate issuer: /CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Certificate serial: 0199FFFE9603E6E32AE73E13091FDE6D5BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
Manifest number: 0697
Signing time: Mon 20 Oct 2025 05:01:38 +0000
Manifest this update: Mon 20 Oct 2025 05:01:38 +0000
Manifest next update: Tue 21 Oct 2025 05:01:38 +0000
Files and hashes: 1: ZjdD3KktHTJ1RlykxrS_PX6Dfls.roa (hash: rQU1YZETtvcj8idrb5JBb64s2ExLklRkDK8ZmIHJSuk=)
2: l4TMfBsz0nl3_M2zSzzClKKkCIw.crl (hash: m18ocBWG3mS7WbmLCG77utJUFhNju0Be8ymDeJNdQmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:96:03:e6:e3:2a:e7:3e:13:09:1f:de:6d:5b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Validity
Not Before: Oct 20 05:01:38 2025 GMT
Not After : Oct 21 05:01:38 2025 GMT
Subject: CN=00eae8384d491a93bed6c24412c10d5f11b8ff7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:15:f4:1a:09:68:99:7b:cf:bd:21:c6:69:
94:1d:39:4b:cc:63:18:7c:f4:60:06:67:d6:27:52:
bc:4f:8a:ee:a6:23:0b:e0:79:45:ff:84:bf:66:7c:
48:01:60:a5:46:e2:bd:29:20:5e:cc:64:f7:a4:fd:
82:f4:12:22:09:56:90:99:d3:d1:56:a1:91:f3:6a:
c9:56:e9:b1:69:54:1a:51:d2:5b:d8:4e:7b:04:ba:
1a:42:52:6d:ca:b8:26:16:9f:95:30:32:01:b1:d9:
fa:52:1a:52:7d:fb:97:cc:60:98:1d:3e:df:33:de:
58:0f:e0:a4:0d:75:85:33:e6:46:48:ac:89:fb:ec:
d2:e0:f7:42:12:e0:0c:c7:96:53:e2:10:d0:92:32:
d8:dd:bd:50:ba:31:f7:1c:c5:6c:e7:88:e2:ae:3d:
95:70:44:63:3f:ac:6d:2b:01:8d:47:af:f3:d2:bb:
67:1f:6f:3e:df:6c:d5:0b:85:3c:e7:97:7a:da:78:
dd:46:ba:63:82:40:a0:97:15:7e:74:d4:7c:ba:07:
39:2b:cf:7d:e8:b9:b3:88:85:d0:80:08:10:28:93:
07:51:f0:f4:df:fb:c5:a3:5f:1b:34:a9:ea:27:c0:
1c:e7:83:44:a9:6e:bf:34:36:59:32:b4:95:dc:70:
a6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EA:E8:38:4D:49:1A:93:BE:D6:C2:44:12:C1:0D:5F:11:B8:FF:7B
X509v3 Authority Key Identifier:
keyid:97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:30:a0:55:7c:5e:c4:f8:77:f2:bb:30:2d:2d:30:55:2a:b0:
f0:7b:5b:ee:e9:68:20:25:76:c5:c3:88:30:11:66:f6:d7:92:
8c:5d:32:70:af:72:32:b8:57:78:a8:5d:33:00:4f:4d:70:75:
24:2f:86:6a:6d:32:2e:c8:62:79:2e:34:6b:a6:5d:75:c7:31:
36:b7:d7:22:3c:cc:bc:15:44:c5:b0:56:6a:3b:2c:11:9e:50:
73:f8:d6:c9:d4:bc:83:39:2f:94:d5:76:39:9c:d4:b5:52:55:
a0:4a:5b:65:4b:ab:a8:93:50:0b:4b:b4:60:56:2b:a5:e3:dc:
de:9e:0b:2a:dc:e0:f8:4f:2e:46:e9:fc:77:21:aa:6c:fd:cb:
36:2a:20:ab:ce:70:c3:8f:44:8e:a1:1c:e0:13:61:6f:b9:a2:
30:86:8a:4d:c0:a0:7d:42:29:4f:5f:c5:68:f0:42:34:80:05:
f3:7f:9d:d0:19:38:1b:3a:50:2b:75:50:6d:4c:ec:47:86:46:
3e:08:99:44:41:75:f4:66:37:d4:5c:78:03:28:fa:7b:bb:a3:
aa:cc:4a:1c:f2:ea:6e:ed:22:0a:3e:29:3b:98:25:6a:b6:51:
58:61:99:ff:9b:24:98:db:83:2a:9c:93:bf:c5:2b:04:45:f8:
53:9d:f5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:12:24 2025 by rpki-client