Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File: l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier: alIROEmxqlMIXXBjxungANp8cSR378xzjW2mRiJ1eJQ=
Subject key identifier: E4:1E:97:D9:F3:DA:DB:8B:52:E9:90:48:57:CB:29:24:53:65:37:E3
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial: 0199FF22734A5CB2090F6C3BF2907A55BF39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number: 05BD
Signing time: Mon 20 Oct 2025 01:01:11 +0000
Manifest this update: Mon 20 Oct 2025 01:01:11 +0000
Manifest next update: Tue 21 Oct 2025 01:01:11 +0000
Files and hashes: 1: 0u5MB7MHn7bL2gqyo5sqX2hHnxg.roa (hash: dTLKNW3bqLmuZGafffFw/K7jFyKobZ/sSRa/waRYTh4=)
2: V2RodRkZh7eC6bXk6s50iKPnz20.roa (hash: flwyJ5HDdlUN6kAnMIhAje5bgLCjv6WkxqxL4dovgJw=)
3: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: AXCQsaNOgjhLVlCvqYNDBkFE0DQ92HCWIUGYyI6/J4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:73:4a:5c:b2:09:0f:6c:3b:f2:90:7a:55:bf:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Validity
Not Before: Oct 20 01:01:11 2025 GMT
Not After : Oct 21 01:01:11 2025 GMT
Subject: CN=e41e97d9f3dadb8b52e9904857cb2924536537e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:b7:6a:d8:5f:af:4a:e5:d7:ba:9e:5a:a4:
6d:5e:6a:06:89:71:14:c5:f4:e2:78:cc:b6:a9:d1:
93:42:16:88:20:eb:e3:9c:8d:9e:3d:00:f9:94:b7:
66:38:49:b8:ce:5c:8a:97:6b:12:3e:bf:59:b2:fe:
48:09:a0:04:0d:e0:5c:f3:02:dc:c7:24:ec:14:e0:
ba:c4:c6:ed:5d:26:a0:4d:9f:b5:07:ed:60:3c:5f:
8a:6e:78:33:b6:c4:ae:60:8d:b2:73:e6:bf:07:e0:
ba:04:29:8b:52:bf:0e:12:1f:5d:be:ec:ef:8d:08:
bb:00:84:b4:57:e6:c3:3e:cf:53:59:ff:83:c8:86:
15:b3:eb:94:1b:18:2c:0d:fd:66:13:39:77:8b:32:
76:2d:d7:3a:d8:66:aa:12:60:a6:24:4d:09:2f:61:
fa:3e:02:ef:93:e2:59:5b:36:6b:83:95:28:80:8c:
48:f4:70:fd:92:56:d4:3d:bc:32:be:d9:d2:3f:6a:
aa:b1:7f:e6:9a:7c:90:90:75:ce:bd:7b:83:63:92:
89:92:f4:9f:08:09:78:10:2e:3d:a5:cb:b9:fd:cf:
3a:44:27:f4:6e:c0:80:db:7a:5f:b1:bf:42:2a:01:
1a:8f:26:d5:de:67:24:59:0e:8a:52:05:c8:82:a9:
18:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1E:97:D9:F3:DA:DB:8B:52:E9:90:48:57:CB:29:24:53:65:37:E3
X509v3 Authority Key Identifier:
keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:1a:f0:3c:26:ac:58:6f:d9:c2:aa:c8:c9:5c:d3:c9:7d:ce:
2a:e5:1a:66:15:19:9e:22:80:10:2d:59:ca:2e:03:0d:6d:eb:
84:94:5d:57:81:fc:2f:d1:15:68:8b:84:66:bd:a5:95:b1:e3:
4b:cd:5e:38:cb:af:26:59:b1:c9:f9:71:98:7d:67:84:bd:fe:
33:d9:ff:44:7a:f1:5b:0d:ba:28:04:9a:6a:86:cb:3f:1e:58:
33:41:f3:ef:8d:a8:c5:5c:35:78:de:93:5f:59:3a:97:87:11:
3e:42:ae:b0:c4:4d:2e:70:0c:e1:38:4e:e5:ea:75:39:79:d2:
58:66:7d:5b:a4:06:e6:6c:2d:af:eb:d0:14:25:8d:e1:0b:97:
3a:d2:df:a6:dc:d4:e9:15:63:82:fe:a6:64:23:f5:9e:fa:b2:
8e:88:43:52:26:de:59:27:dd:9a:20:56:96:d4:a8:62:8f:1a:
d0:37:f6:87:59:0c:50:15:df:71:31:7b:e8:60:d5:4b:5c:b1:
73:cb:fc:04:46:c7:88:73:22:77:af:f1:f7:5a:d3:d1:a5:35:
a4:4c:01:16:43:64:42:da:21:ec:83:59:7d:5a:3c:69:cb:7a:
9c:e1:a3:b1:9e:9c:c8:f5:22:92:37:b6:fb:bc:6b:9c:4a:74:
f4:4e:60:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:25:56 2025 by rpki-client