Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
File: l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft (raw, json)
Hash identifier: 3P5vOF/+E86fIhUp9G5krAUKoXBS4fk4atEmkZn3B+c=
Subject key identifier: 87:42:53:F9:5F:0A:68:1E:27:D1:C8:CB:91:A4:9A:E7:EC:FF:71:67
Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
Certificate issuer: /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Certificate serial: 019A006C4F27140517C44522C5E458A26F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
Manifest number: 08E7
Signing time: Mon 20 Oct 2025 07:01:29 +0000
Manifest this update: Mon 20 Oct 2025 07:01:29 +0000
Manifest next update: Tue 21 Oct 2025 07:01:29 +0000
Files and hashes: 1: 0i_YlSLjNRB30UESNfxOlGgXI04.roa (hash: mrgCCvd59tuwyCrIfMNAZk14JnYczApGJpZMZMc86cI=)
2: l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl (hash: A9imxtGLEJDbEiX/tQeYx1apZeaFuns+cTRUIYf22YQ=)
3: nYzAsbllFT7Lr_SB7POfofSL3LI.roa (hash: EHarQeauYC+jtiVvfxPF0hW/Y2vVhZb67l4OYu1uAWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:4f:27:14:05:17:c4:45:22:c5:e4:58:a2:6f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Validity
Not Before: Oct 20 07:01:29 2025 GMT
Not After : Oct 21 07:01:29 2025 GMT
Subject: CN=874253f95f0a681e27d1c8cb91a49ae7ecff7167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:eb:84:0d:4e:1a:61:83:a3:9d:e0:ec:af:
72:09:a5:69:5e:c4:39:24:71:56:69:b1:15:ea:0b:
34:8e:aa:33:33:6d:05:a0:5e:45:bf:d4:b5:16:03:
65:4d:1a:f3:e8:ff:f0:5c:4f:8b:f6:c2:f3:4b:b9:
c6:ec:14:ee:b1:5d:a3:4d:5a:9f:c9:b4:83:ce:d3:
2b:a4:8b:72:7d:41:80:1e:ed:d5:f1:ef:36:a6:90:
c7:6c:da:c7:1a:91:36:70:a7:bd:7e:68:98:d7:cf:
18:88:fd:dd:4e:da:d5:b3:91:00:f6:56:0f:e3:1e:
c8:ff:50:a9:b0:76:0e:95:2f:60:30:5d:33:dd:8c:
c9:5c:0b:61:f9:69:de:28:38:53:ce:70:aa:ff:0a:
4c:a1:87:d9:19:48:1a:3a:33:ad:51:57:da:69:90:
3b:08:72:c5:10:a4:d8:2c:d8:78:36:da:95:d4:e0:
7d:9f:47:b3:47:e0:07:f7:36:de:0b:cc:21:fc:af:
74:c8:7e:18:04:42:3a:ba:45:7e:7a:65:7f:9f:70:
83:d0:97:83:73:ee:c0:74:7d:8c:1c:13:a3:3a:26:
f6:a4:b1:19:51:90:2d:37:22:7f:b9:03:b0:c8:ac:
cf:75:b3:b5:ad:ab:16:f1:b5:64:5e:0b:56:ad:30:
ae:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:42:53:F9:5F:0A:68:1E:27:D1:C8:CB:91:A4:9A:E7:EC:FF:71:67
X509v3 Authority Key Identifier:
keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:70:5d:f9:3c:02:0e:71:23:0c:4d:65:36:a8:68:4d:63:b2:
03:e3:d2:bd:64:4c:7e:28:49:2e:6d:7c:0d:33:12:ac:d8:6c:
9a:64:7a:d6:a2:14:16:2b:c8:4e:94:4f:9d:30:10:e5:36:f7:
e3:fd:81:9d:5d:40:96:3d:08:7a:c0:42:f8:76:45:66:f5:22:
80:7b:5f:95:9a:37:56:52:8b:94:21:9e:06:9e:3a:37:b2:16:
81:fb:a1:c8:ac:85:3b:eb:f6:53:a8:65:bb:ba:8e:46:64:8c:
ca:bb:1e:64:24:ba:88:f7:27:1a:88:9e:b6:63:d8:d5:10:6b:
e8:1a:82:d7:66:1a:ca:df:59:9d:60:31:73:43:d1:00:70:6c:
5b:27:ec:3d:97:40:ac:14:02:b9:1a:23:c6:32:72:09:6d:fc:
1d:02:79:5e:32:2c:a2:74:c0:d1:ae:59:77:29:cd:02:0d:c8:
f9:96:48:a6:2d:02:f8:4f:f7:15:23:16:57:75:c3:be:b5:20:
95:53:a9:23:96:bd:90:d7:32:49:c8:fd:80:ce:2c:39:8f:e9:
a6:de:ce:0f:20:ba:33:ae:40:01:58:fc:5c:1b:4b:9a:d2:a0:
0a:83:5b:dd:7a:64:fb:0d:8b:bd:cc:60:da:45:02:8b:52:4c:
9f:0d:ce:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAbE8nFAUXxEUixeRYom9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NWM5ZmZhNjVjM2M5YjU3YzU0OWU3MmNkNmRjNzAzMDA1
YjJlMGUwHhcNMjUxMDIwMDcwMTI5WhcNMjUxMDIxMDcwMTI5WjAzMTEwLwYDVQQD
Eyg4NzQyNTNmOTVmMGE2ODFlMjdkMWM4Y2I5MWE0OWFlN2VjZmY3MTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszLrhA1OGmGDo53g7K9yCaVpXsQ5
JHFWabEV6gs0jqozM20FoF5Fv9S1FgNlTRrz6P/wXE+L9sLzS7nG7BTusV2jTVqf
ybSDztMrpItyfUGAHu3V8e82ppDHbNrHGpE2cKe9fmiY188YiP3dTtrVs5EA9lYP
4x7I/1CpsHYOlS9gMF0z3YzJXAth+WneKDhTznCq/wpMoYfZGUgaOjOtUVfaaZA7
CHLFEKTYLNh4NtqV1OB9n0ezR+AH9zbeC8wh/K90yH4YBEI6ukV+emV/n3CD0JeD
c+7AdH2MHBOjOib2pLEZUZAtNyJ/uQOwyKzPdbO1rasW8bVkXgtWrTCuEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdCU/lfCmgeJ9HIy5Gkmufs/3FnMB8GA1UdIwQY
MBaAFJdcn/plw8m1fFSecs1txwMAWy4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85MmVjZWEtM2YzYy00YmFhLTgzNGIt
MTI2YzdiNDhiODQ3LzEvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85MmVjZWEtM2YzYy00YmFhLTgzNGItMTI2YzdiNDhiODQ3
LzEvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnBd+TwC
DnEjDE1lNqhoTWOyA+PSvWRMfihJLm18DTMSrNhsmmR61qIUFivITpRPnTAQ5Tb3
4/2BnV1Alj0IesBC+HZFZvUigHtflZo3VlKLlCGeBp46N7IWgfuhyKyFO+v2U6hl
u7qORmSMyrseZCS6iPcnGoietmPY1RBr6BqC12Yayt9ZnWAxc0PRAHBsWyfsPZdA
rBQCuRojxjJyCW38HQJ5XjIsonTA0a5ZdynNAg3I+ZZIpi0C+E/3FSMWV3XDvrUg
lVOpI5a9kNcyScj9gM4sOY/ppt7ODyC6M65AAVj8XBtLmtKgCoNb3Xpk+w2Lvcxg
2kUCi1JMnw3OiQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:25 2025 by rpki-client