Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
File: l72bhlMeVEr6AwnYvip7ppFj-a0.mft (raw, json)
Hash identifier: WCd1BgP3lisjdbRuaSNnMv3l/VeJI+8tA/3GIbAc+Wc=
Subject key identifier: F1:36:E0:A9:1A:CC:7A:96:AF:CB:1D:8A:BD:D2:5E:A9:47:6C:2B:60
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial: 0199FA6A218070E9C9E0F28B6DCE1064E8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
Manifest number: 1496
Signing time: Sun 19 Oct 2025 03:01:23 +0000
Manifest this update: Sun 19 Oct 2025 03:01:23 +0000
Manifest next update: Mon 20 Oct 2025 03:01:23 +0000
Files and hashes: 1: 6rStul-KJYhq6MLDsqFqp0QCJ-w.roa (hash: UgkfY0GpWezlJwqyNlWzjCQU4cnRnYzqK30vIO1treQ=)
2: GAmyQv8-gT8CZ7d-txbZl5EhOio.roa (hash: iUcK9uyMQ6focHOP9BZWCHQasgvLPeszd6U4NOgrxL8=)
3: ZfBa2kOopYZN1zSmKbC-lmjGWMU.roa (hash: XOVEAESgfg7MRdYVfSlFUrFkfMe08NvtY8t3C+PTjsk=)
4: l72bhlMeVEr6AwnYvip7ppFj-a0.crl (hash: +LgjOn9axJW+QojYlZauhgxsanfn2LcbTbDsjZ7iNEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:21:80:70:e9:c9:e0:f2:8b:6d:ce:10:64:e8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Validity
Not Before: Oct 19 03:01:23 2025 GMT
Not After : Oct 20 03:01:23 2025 GMT
Subject: CN=f136e0a91acc7a96afcb1d8abdd25ea9476c2b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:3b:5e:16:f0:ca:09:7d:68:22:0b:3d:2b:
f2:c2:32:68:b7:0c:57:4e:4a:e0:93:ae:a6:92:6e:
7f:4b:df:68:5a:1e:2a:c5:ed:b9:c8:57:50:b8:95:
33:df:6c:0a:e9:cc:69:d1:11:b3:0d:ca:9f:8c:61:
11:2a:04:7d:d2:bb:b3:6d:50:ad:ab:35:ca:b3:35:
af:ea:7f:90:8a:ea:0f:6d:21:cb:bf:57:3f:4f:7e:
d9:41:6c:6c:47:2b:76:1e:53:35:66:bc:bb:8e:1b:
f1:16:7b:e1:6a:fd:47:7a:6b:2b:fa:29:13:fb:46:
8c:0d:ef:61:29:b7:e3:89:f4:c3:39:2e:96:06:94:
af:b8:b0:fe:6a:1b:c5:fe:1a:ad:f4:d3:14:2f:e1:
94:77:b4:83:2f:90:d7:55:9e:43:42:d3:84:8f:26:
67:d1:ed:b1:97:f3:ba:6a:5a:1b:57:ed:ab:da:fc:
1b:d6:90:f2:aa:f3:36:71:3e:69:85:ce:58:7e:76:
67:21:c9:f4:d5:31:70:af:20:54:f0:f4:e8:0d:6e:
92:c6:79:2b:f6:03:19:ff:07:be:d8:ae:09:4e:ac:
c9:01:62:22:5b:87:83:82:50:41:27:40:b0:0f:c5:
01:6d:10:c1:60:ee:2f:59:56:47:63:58:2f:5f:20:
3b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:36:E0:A9:1A:CC:7A:96:AF:CB:1D:8A:BD:D2:5E:A9:47:6C:2B:60
X509v3 Authority Key Identifier:
keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:4b:1c:81:e9:2f:33:46:8c:be:ad:7a:8c:e4:fd:4c:ac:ac:
55:ad:3d:ce:2d:e3:6d:aa:3b:8d:2c:41:cd:2b:d8:72:17:8c:
d5:df:03:f1:13:41:49:c3:0f:43:50:53:81:2f:8a:b2:05:f8:
b4:bc:fe:76:93:47:10:77:39:a1:5a:ff:b7:74:46:3c:5c:37:
2d:69:2b:ee:b0:11:cb:14:66:01:b8:83:5a:ec:57:1e:ad:a9:
aa:4c:25:0e:f6:09:3f:8c:6a:c0:35:e3:ec:01:f0:27:4c:44:
52:c7:45:7d:1b:25:59:c9:2c:6b:99:9d:cb:53:78:2c:c2:a7:
7c:ab:a7:24:46:de:25:ec:9d:3b:bf:0a:2f:ff:36:ee:2b:a1:
ab:39:ff:40:28:58:c4:9d:5a:d5:fe:cd:79:22:41:67:f3:34:
07:ff:c5:6c:d9:3f:80:f3:dc:a9:bc:04:6b:8b:9d:a8:89:95:
21:84:3b:75:4a:ce:75:fc:06:7e:6b:8f:37:da:46:2d:ec:ac:
92:1c:8c:23:76:18:a5:0f:e8:5c:f5:89:59:0f:21:7b:2f:91:
4c:66:73:f1:5a:b6:12:9c:03:4d:82:e1:be:b6:fb:ea:cb:05:
84:1f:eb:48:d8:f8:81:41:9c:62:80:8d:7c:70:9f:87:be:d8:
43:6d:87:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:18 2025 by rpki-client