Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
File: l0Kd6LzDvkdKu9or4qidDzIIw4U.mft (raw, json)
Hash identifier: BEOE4NUnibuoXEJpaK49/oCa2/ZdHCX9g+wNNDNup38=
Subject key identifier: 4B:CE:B6:A9:21:F8:0D:8E:79:78:81:55:27:99:61:18:9A:C7:E4:DC
Authority key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
Certificate issuer: /CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Certificate serial: 019A7225F2AC334BD7965DE6AA2394D1A51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
Manifest number: 1037
Signing time: Tue 11 Nov 2025 09:01:20 +0000
Manifest this update: Tue 11 Nov 2025 09:01:20 +0000
Manifest next update: Wed 12 Nov 2025 09:01:20 +0000
Files and hashes: 1: HTyoOey4HT5zP_JyxfBfKahHFmY.roa (hash: QyYp6qHPSKM0SQk6N5S4fNiWDVTxBA9QRWpKOqYhb4w=)
2: l0Kd6LzDvkdKu9or4qidDzIIw4U.crl (hash: PnZrivy7TQ96L33DegIlVeAnbuokGTChJgWdfc86z90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f2:ac:33:4b:d7:96:5d:e6:aa:23:94:d1:a5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Validity
Not Before: Nov 11 09:01:20 2025 GMT
Not After : Nov 12 09:01:20 2025 GMT
Subject: CN=4bceb6a921f80d8e79788155279961189ac7e4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:60:fc:93:54:13:93:71:a0:db:6f:30:17:
99:49:d3:cc:fb:0b:52:9d:18:40:8d:e9:73:a2:ad:
96:51:b5:7f:cf:18:68:94:50:4b:0c:80:ee:f7:69:
a0:50:53:5d:3d:a4:53:81:ba:a5:51:4e:54:3b:5f:
ec:8b:9b:15:2c:21:24:f9:ce:1a:a7:8a:e6:db:16:
e2:54:d4:96:d2:01:fb:f8:05:26:ac:2d:02:01:39:
08:be:36:9b:b4:27:5c:d2:80:1c:51:bf:f7:c2:9a:
b0:8a:0d:10:94:17:6f:ce:51:a1:52:44:08:fc:45:
22:2a:15:11:c7:60:01:de:f7:04:d4:42:bf:4e:db:
c3:a2:ff:5e:8d:1a:4a:ab:cb:b0:47:a0:09:95:a9:
8f:0c:6a:a5:14:ef:b8:14:8f:26:5c:ac:66:da:b0:
8c:55:bf:e9:87:3a:f3:94:08:af:f6:40:dd:1e:b8:
a2:f0:9a:ea:bc:2e:64:68:a6:06:60:b8:72:74:32:
0b:0d:80:19:31:20:cd:1b:ff:69:2b:40:ed:9e:b1:
1a:20:39:6c:4f:66:93:03:44:b8:a0:d6:b2:ca:90:
75:0a:8c:ce:d7:45:a9:5f:d2:2a:fd:e5:90:f4:97:
7f:45:e4:dc:f6:ec:2c:82:45:bc:e2:09:3b:10:66:
cb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CE:B6:A9:21:F8:0D:8E:79:78:81:55:27:99:61:18:9A:C7:E4:DC
X509v3 Authority Key Identifier:
keyid:97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:db:5d:0f:8a:7c:67:57:03:b2:0b:ef:98:27:ff:b0:92:16:
a7:9a:cb:61:62:4a:2b:04:6b:28:04:6a:db:37:b8:de:ad:67:
64:9a:57:ab:83:77:32:72:2b:d7:c9:a8:fc:30:c4:ef:90:8a:
55:a1:84:9c:d0:8b:28:94:c2:a4:a7:1d:51:24:f8:a0:ea:5a:
df:64:41:e2:9f:5e:e1:84:0c:ef:b6:e0:c8:d8:20:22:f2:d3:
17:c7:05:31:2b:3f:b7:46:45:5a:b0:c8:cc:1f:a1:1e:7b:94:
b5:5f:e3:92:b2:00:45:da:63:48:cd:f1:35:21:2b:ea:c0:ad:
8b:99:27:3d:09:01:54:7b:25:d7:d3:a5:8b:e6:83:ec:30:13:
d1:ec:ba:ec:2d:67:58:dd:7c:06:82:ea:f0:3e:95:d3:85:da:
2f:4e:d3:a1:d9:0e:db:7c:72:3d:f7:c1:76:34:06:19:77:7f:
d0:dd:03:12:d9:c2:5b:d1:ff:23:28:a6:be:35:ff:0a:47:7a:
75:2a:f9:8d:51:27:dd:4e:0a:79:e3:fc:92:3b:c7:51:0b:44:
9d:1e:0f:7c:95:32:81:61:73:2d:b5:81:2d:c5:59:4e:78:66:
5c:c5:cd:6f:64:a7:1a:54:e7:01:df:7a:68:15:18:46:49:f9:
9e:dd:a4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:42 2025 by rpki-client