Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
File: 0x1LlB4GS0a8Ka9kW8dUcE06lME.mft (raw, json)
Hash identifier: xSIYNEXpGyxsEgCYOVMLEknEfobDU/OLnE/A2nXkrG4=
Subject key identifier: 63:68:A7:10:93:D0:10:CF:7F:E0:72:2F:29:83:F3:27:62:28:ED:82
Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
Certificate issuer: /CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Certificate serial: 0199FCFD1C72AD6CCE2C047B2E8ECA1379EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
Manifest number: 0698
Signing time: Sun 19 Oct 2025 15:01:10 +0000
Manifest this update: Sun 19 Oct 2025 15:01:10 +0000
Manifest next update: Mon 20 Oct 2025 15:01:10 +0000
Files and hashes: 1: 0x1LlB4GS0a8Ka9kW8dUcE06lME.crl (hash: W8vV/8c9BXS8QlroaznUdvR4os1jloNjErpbF8aCsWU=)
2: gHq9MWf0hbMmILKUMKXWOxVNz_8.roa (hash: WUjQnD6G2qjaHXGAi0bK2NbXe4/t3hrnEoAgLC0ACio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:1c:72:ad:6c:ce:2c:04:7b:2e:8e:ca:13:79:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Validity
Not Before: Oct 19 15:01:10 2025 GMT
Not After : Oct 20 15:01:10 2025 GMT
Subject: CN=6368a71093d010cf7fe0722f2983f3276228ed82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ff:83:ed:37:34:0a:d6:e8:d9:c9:ba:a5:b9:
1a:7d:98:2a:0b:a3:32:83:7e:19:d7:d9:04:2f:60:
1b:46:01:4a:a0:4d:2a:ff:eb:c4:61:99:75:f7:4a:
7b:41:46:bb:5c:05:3d:cf:87:6d:0f:80:bc:a6:ec:
3c:ee:7a:ce:0a:0b:3d:93:cb:f3:82:d5:c5:88:1e:
04:dd:44:62:a6:73:d0:9e:cd:24:b8:d1:b1:2a:18:
84:fe:17:c2:45:0f:2b:60:75:b9:2c:02:71:af:ad:
7a:02:88:5b:4b:84:4c:85:d0:c3:a9:7f:98:52:9e:
f2:cf:9d:3e:96:15:dc:26:53:42:c7:22:63:fc:14:
67:66:fa:86:f0:f1:c8:0f:e9:7f:ea:29:45:3a:b6:
97:45:49:44:d3:53:28:a7:73:f1:6f:ab:af:dc:2a:
c6:04:6f:09:69:c1:eb:df:3d:b9:f1:46:56:4c:e4:
9a:87:58:b4:99:d2:8b:4e:0a:98:ac:68:8e:ae:31:
26:a7:9b:cf:51:ca:fb:e2:19:92:bc:32:c1:0e:58:
be:a7:ec:e5:3c:00:ce:b6:aa:ea:0a:20:ee:27:7b:
18:da:24:19:1f:fd:60:19:90:b1:45:f1:05:3a:d0:
73:4c:55:23:2b:fc:50:28:e9:ae:b4:e8:52:bf:b8:
d7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:68:A7:10:93:D0:10:CF:7F:E0:72:2F:29:83:F3:27:62:28:ED:82
X509v3 Authority Key Identifier:
keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:58:6b:01:39:f2:1b:08:3e:da:1a:76:ab:bf:e6:01:98:91:
02:2f:86:b8:81:2c:eb:19:a4:7d:e6:fa:18:17:45:49:f0:5b:
4f:8e:2b:51:dc:51:0d:c6:00:7d:86:97:0f:79:15:5f:c6:44:
fb:bb:0e:51:03:57:cb:29:3e:75:f3:ff:80:10:05:4c:9f:ff:
ba:c4:56:f9:5e:b7:37:d8:ec:41:96:7a:31:fd:92:c6:a0:53:
16:9d:ef:f7:5b:29:3d:59:af:8b:35:c5:d8:40:2f:23:73:92:
6d:7c:42:47:4a:df:4c:44:bf:7d:77:24:02:a0:35:ea:00:56:
10:0f:ad:74:8a:bc:83:2d:8e:e7:3b:8e:e8:68:a5:52:e4:56:
d5:0c:13:9c:96:fc:d0:8c:66:68:70:e4:13:04:e7:c9:5e:a0:
56:27:96:33:58:e1:46:77:23:47:14:f1:ca:2e:96:2d:68:8f:
64:d9:aa:37:b0:3b:83:93:be:e7:a0:41:b7:3c:ef:f9:b6:31:
98:4a:93:56:74:6f:b3:3e:3d:71:ef:eb:cb:53:83:65:c4:8e:
0f:b8:61:94:09:83:83:3e:09:69:61:1c:9e:48:9a:a1:3d:dd:
d3:82:1f:b1:0e:73:b2:12:30:18:85:7a:1d:0e:69:71:cf:c6:
80:c3:ef:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:10 2025 by rpki-client