Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
File: l96FxoT8_4PsQUirX29nzRUE-T0.mft (raw, json)
Hash identifier: HZVbvkyYyMAA8jTZPHNzurMnXBzRI6CfZcLpQVoDYrk=
Subject key identifier: BA:CA:15:D4:36:1D:A2:2B:A2:51:54:FE:8D:1E:49:7B:8B:C9:66:AD
Authority key identifier: 97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
Certificate issuer: /CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Certificate serial: 0199FBEA9B9F8C598D85CE210F76A9E20F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
Manifest number: 11F9
Signing time: Sun 19 Oct 2025 10:01:20 +0000
Manifest this update: Sun 19 Oct 2025 10:01:20 +0000
Manifest next update: Mon 20 Oct 2025 10:01:20 +0000
Files and hashes: 1: aNefWas-v_WpGI-_669JeJcpGCE.roa (hash: AyqK/NRp/xUAyry2Wae2nQWK8xpykIL1yZ7NXpMhO2U=)
2: l96FxoT8_4PsQUirX29nzRUE-T0.crl (hash: wGmQb69KKmfd6ozzW7hr145y/VSjKJ8w7dGEumf1dSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:9b:9f:8c:59:8d:85:ce:21:0f:76:a9:e2:0f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Validity
Not Before: Oct 19 10:01:20 2025 GMT
Not After : Oct 20 10:01:20 2025 GMT
Subject: CN=baca15d4361da22ba25154fe8d1e497b8bc966ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:dc:7b:1f:97:fc:d1:2c:7e:82:88:d0:c9:f2:
c1:a8:7e:76:56:9f:91:32:15:bf:71:b0:2e:46:44:
1f:e1:d5:85:2b:64:7b:cc:aa:a3:e7:78:06:88:d3:
65:85:7b:68:25:ea:d1:e1:37:62:bd:79:7a:8c:12:
3e:1d:16:fe:6d:b0:9d:cb:af:f3:b8:72:71:69:7c:
4d:74:98:b5:39:fb:09:56:c4:50:80:cc:e9:30:69:
3e:6c:f7:68:a9:cb:06:5a:69:12:89:71:3d:d1:00:
01:a4:9e:7b:b2:ba:1d:9e:00:54:51:5a:4f:96:b1:
fb:b1:74:88:0b:b7:e2:39:6d:24:82:19:bd:9e:9e:
29:16:61:50:9e:99:f3:98:ee:28:43:e2:86:e5:d1:
fb:7e:17:a8:a1:f2:90:e0:71:c5:a7:bc:35:4d:e5:
c9:a4:ad:53:aa:a2:c4:39:68:79:63:67:19:8d:a0:
a6:f9:69:76:91:d0:5a:b3:6f:a8:b0:36:a7:f3:0e:
e2:4b:6c:72:42:b9:bc:4f:eb:c9:a8:5b:61:87:39:
52:dc:ae:73:78:d7:cd:94:fd:65:8f:49:c2:83:54:
6e:1d:21:bc:5a:36:ce:aa:f5:ff:ba:be:d2:6b:fe:
0d:d5:c1:74:cb:1b:63:f4:56:6c:fe:2e:51:e1:59:
c6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CA:15:D4:36:1D:A2:2B:A2:51:54:FE:8D:1E:49:7B:8B:C9:66:AD
X509v3 Authority Key Identifier:
keyid:97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c0:d3:b2:72:c9:ad:1c:90:fd:61:ba:e8:ea:05:1a:62:0e:
f1:a3:78:dc:8d:b8:5a:33:31:f4:5d:78:56:12:30:3b:64:97:
69:f2:8b:93:a0:52:56:84:c8:26:01:94:a6:0b:bd:d6:a9:6c:
3f:c5:ca:d4:69:c7:ae:1d:5f:83:d2:eb:9d:7a:c5:c6:f2:b0:
09:86:3c:f2:33:14:6d:ac:5b:4c:5c:e6:a9:cc:2b:dc:68:bd:
6a:31:cc:51:a0:67:e2:e3:57:9f:59:27:fd:d5:a3:71:ff:19:
1a:fb:84:7f:4e:90:55:f0:c5:ec:de:cb:48:be:fd:6b:32:2d:
51:43:ab:8c:43:a9:30:03:3f:1d:42:2d:79:c3:50:40:43:90:
5d:2a:9b:43:e2:7c:cf:4c:c1:1b:90:d5:a0:92:86:aa:c9:bf:
a3:ac:27:69:78:70:7b:bd:d8:0e:8b:c9:20:c3:32:1b:08:4c:
00:c0:3c:df:64:94:bf:9b:49:05:1e:a6:c8:88:2b:08:c9:71:
0a:8b:6c:0b:1c:fa:58:59:e1:44:f4:ae:09:81:2d:bf:49:cb:
58:d1:97:ce:33:28:6d:c2:cb:a9:08:06:ac:21:c7:17:a9:94:
a1:4a:7e:c1:55:0a:dd:67:f5:60:5c:e6:6f:32:f3:52:d5:b1:
4a:ce:0c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:27 2025 by rpki-client