Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File: l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier: AZcCABf740GSwhLZsmCrIAWJKhuBJvA6x5FW6a9Sm6k=
Subject key identifier: A7:DC:27:42:60:C0:6D:FA:53:96:DB:3B:B9:38:35:A9:B4:B2:D7:86
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial: 0199FD346B5B9A0DE142E2BDA54C6D7E37F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number: 05BC
Signing time: Sun 19 Oct 2025 16:01:34 +0000
Manifest this update: Sun 19 Oct 2025 16:01:34 +0000
Manifest next update: Mon 20 Oct 2025 16:01:34 +0000
Files and hashes: 1: 0u5MB7MHn7bL2gqyo5sqX2hHnxg.roa (hash: dTLKNW3bqLmuZGafffFw/K7jFyKobZ/sSRa/waRYTh4=)
2: V2RodRkZh7eC6bXk6s50iKPnz20.roa (hash: flwyJ5HDdlUN6kAnMIhAje5bgLCjv6WkxqxL4dovgJw=)
3: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: HTb+UR2eTG4oT29Oeem8asR/BAQggvCncW2tOWT0FwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:6b:5b:9a:0d:e1:42:e2:bd:a5:4c:6d:7e:37:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Validity
Not Before: Oct 19 16:01:34 2025 GMT
Not After : Oct 20 16:01:34 2025 GMT
Subject: CN=a7dc274260c06dfa5396db3bb93835a9b4b2d786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c3:5d:0f:6d:45:cb:7d:34:c9:de:ce:f7:06:
ac:3c:75:0a:0a:4e:d0:e1:8f:bc:2e:60:75:95:30:
86:74:af:e9:15:77:eb:d6:a4:a4:14:92:ab:09:12:
47:83:ca:22:3c:0a:c5:c9:0b:39:6a:65:e0:1d:23:
1f:91:68:bb:81:c8:15:72:69:12:71:1e:27:87:b5:
c9:ef:fc:a5:60:99:6d:b0:17:92:7a:f9:af:4b:55:
f3:92:8e:51:65:ab:80:f4:26:f0:17:ec:e0:f9:18:
43:05:9b:ca:37:2b:f5:d5:2f:fa:a9:47:ee:c0:c0:
cc:0e:9e:2a:31:a9:a7:ec:83:e5:8a:32:4a:89:97:
23:01:d6:5e:99:c0:dc:70:27:f2:1f:13:47:85:73:
71:47:99:4d:bd:b6:8f:35:9c:ae:f8:ab:65:d3:db:
f0:b4:e5:5c:0b:4c:cb:99:a2:25:ed:2c:44:02:41:
66:12:bc:4f:a8:d6:29:55:9c:c7:9b:0b:06:5b:1c:
ce:b5:b6:d6:24:dc:b9:f2:2a:24:4c:b2:c9:f4:6e:
52:0b:0b:9d:2e:0a:a1:63:37:3b:3d:35:13:ae:32:
15:82:65:2b:f5:e8:a1:e9:ec:a2:0f:5c:83:ba:94:
08:d2:6c:67:e1:9f:dc:c7:50:8e:6b:47:19:a0:7d:
d8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DC:27:42:60:C0:6D:FA:53:96:DB:3B:B9:38:35:A9:B4:B2:D7:86
X509v3 Authority Key Identifier:
keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d2:9c:cf:05:2c:27:00:c6:d3:41:74:4c:ce:1f:fe:cb:18:
de:8b:4a:d6:30:70:5c:06:90:72:72:54:e0:f8:96:ed:23:d8:
c6:33:9f:c6:61:71:af:d2:3b:1e:69:03:21:35:88:74:de:20:
88:ca:9d:3e:30:c6:eb:61:93:db:2a:ec:47:29:cd:cd:0d:f0:
9a:56:43:5b:03:c2:2f:dd:ac:5e:e6:59:7e:05:de:6f:43:b2:
1a:f6:74:42:25:8b:d6:f6:db:b1:7d:de:3b:7f:f8:b4:41:2f:
0b:1c:97:94:fc:d7:81:66:c9:2b:0a:8c:13:6a:34:9c:30:51:
0a:e2:4d:c9:9b:7e:c1:aa:90:0a:c8:dc:ad:3a:09:1a:a3:4d:
a2:9d:fe:ef:09:37:5b:dd:1c:32:46:97:05:77:67:cc:e9:b8:
0b:60:fb:7b:ac:6f:95:e0:a5:eb:e9:c8:e1:1d:65:5b:a7:e9:
93:7b:86:21:36:2a:54:c1:c9:69:36:77:fa:14:d5:2b:6a:36:
3b:b9:71:8f:34:d3:42:ee:89:c8:3c:a8:bd:e0:48:e5:e8:3c:
5a:41:5c:21:11:d1:c3:5d:1a:99:24:c7:3e:db:f8:85:43:32:
33:1c:3a:24:f9:03:dc:54:21:b3:23:8d:93:04:38:3b:69:02:
cf:d2:b4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:06 2025 by rpki-client