
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
File: l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json)
Hash identifier: uIeDOd7l968gRWfifgFuiqpl2PnmDJsJeZR77kGIHgQ=
Subject key identifier: 92:58:A3:1A:A2:F3:19:95:9A:4A:53:20:CC:92:D0:E4:E3:8D:5F:3E
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial: 0199FBEB5C46EE7676BCBABFD99B3343DDF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
Manifest number: 16EF
Signing time: Sun 19 Oct 2025 10:02:09 +0000
Manifest this update: Sun 19 Oct 2025 10:02:09 +0000
Manifest next update: Mon 20 Oct 2025 10:02:09 +0000
Files and hashes: 1: Bb283EmMHgO869T1EeLsRpmJeYs.roa (hash: Nwt8fGBRV8sOt4t4VlNYBdMwpGMpgaO/PFcGpK3ITpc=)
2: dZKiynV1KRUB63s1S23kLXoELXM.roa (hash: uX/2Ee9kxHZZdlU8CO8raSIbXckmFA2hSc0ftFZonCA=)
3: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: Hh+HwzfF9S7hNNcWNUC7QrlPEMn8oP2eVbrLf7t0ahM=)
4: qJCRilc3Ebh9B_aySeVMKldeveM.roa (hash: ioODI+aP1jwlezBm9lY+fz3m5yXxE8s++45dvu8zDyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:5c:46:ee:76:76:bc:ba:bf:d9:9b:33:43:dd:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Validity
Not Before: Oct 19 10:02:09 2025 GMT
Not After : Oct 20 10:02:09 2025 GMT
Subject: CN=9258a31aa2f319959a4a5320cc92d0e4e38d5f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7f:cd:4e:64:ad:75:af:ae:17:8e:1d:5a:81:
20:e8:fd:3f:89:8d:4c:02:7e:1b:d7:87:04:54:56:
5e:55:e5:0a:27:12:1b:33:f7:55:fe:ae:bb:b1:92:
19:40:53:91:18:bd:1f:63:2f:37:b4:af:15:c1:e8:
c6:a8:fc:74:48:09:c5:1d:5f:56:77:4d:4f:9a:7d:
c0:ca:bd:d7:2f:df:ee:e8:c6:06:33:e9:9d:ad:82:
86:b2:b6:8e:da:07:4b:9b:93:40:91:79:e1:5a:38:
9c:c4:b2:89:de:8c:e0:f2:3f:82:f9:3e:4b:a1:82:
0c:dd:71:ec:80:ff:93:dc:e3:aa:06:1c:52:ef:c5:
7c:4c:24:c3:33:72:6c:5f:b0:8b:87:de:a0:2c:c8:
1d:29:92:f4:09:a8:05:19:4b:ff:5b:7a:f4:6c:d6:
68:46:91:01:8e:ac:8a:c7:a3:29:b8:39:66:5c:db:
ff:23:40:75:f2:26:49:7c:8f:25:31:17:4d:6c:2f:
97:4a:e9:15:db:a8:85:5c:e4:2c:d2:20:0e:80:60:
ec:fd:6f:cd:82:7e:e1:43:ec:61:55:c5:38:31:77:
68:2c:5e:85:dc:0b:65:92:33:21:06:87:24:5e:29:
de:b6:21:a9:54:9b:ea:95:61:73:c0:06:f8:3f:07:
6c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:58:A3:1A:A2:F3:19:95:9A:4A:53:20:CC:92:D0:E4:E3:8D:5F:3E
X509v3 Authority Key Identifier:
keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ca:37:59:00:4b:4f:77:69:14:94:fc:67:b3:9f:66:16:1d:
fd:9c:6f:01:e1:2b:4b:e8:56:3b:0d:c2:8d:25:6b:26:ef:aa:
e3:b8:d9:36:bc:b6:55:72:a1:91:54:13:f3:de:d7:1c:6f:9d:
1b:57:4c:70:ce:9b:67:49:d5:7f:f7:a3:65:91:05:38:ad:bb:
50:86:3f:6c:c7:9f:bf:54:bf:b3:b4:a9:88:a7:7a:8a:82:61:
d1:4e:9c:d4:2e:89:17:4a:48:b0:e0:d8:27:36:d1:0b:9c:ed:
c6:5d:1e:59:35:7c:9f:9b:33:b6:f7:ad:64:e1:2d:38:02:2f:
47:77:0e:5b:21:74:62:3a:95:20:2a:89:5f:59:33:5a:b4:5e:
4c:30:e6:7d:94:8c:61:ee:d8:7e:a0:37:e6:bd:f0:d9:3d:81:
02:7c:d7:99:4a:f3:98:b9:3f:22:fa:43:62:25:ce:81:ff:1e:
d5:5e:ac:55:9c:4c:50:ce:b9:bd:e7:c0:a2:68:d0:3d:47:f8:
16:44:a7:24:23:6b:1e:ab:2e:f2:a0:6f:fc:c1:0f:db:b9:15:
af:e4:f5:fe:6a:5f:55:d6:5b:46:ec:65:cc:af:14:03:a3:3f:
60:76:2d:9e:61:03:e4:c4:93:63:bb:08:fc:9f:44:6b:1c:ee:
f7:9d:24:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:30 2025 by rpki-client