Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
File: lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft (raw, json)
Hash identifier: VnE9CXtw66m+2jgcerUyaj1Zb9UpeYWdkVitn0N23jE=
Subject key identifier: 9E:8F:DD:B2:48:FB:3D:73:4C:AA:70:5C:99:D3:1D:34:2B:EA:90:99
Authority key identifier: 94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
Certificate issuer: /CN=945efd6c477806bd6b45267558d6828feec61ea6
Certificate serial: 019A71EED853727D5E954FF2226A9CEB0B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
Manifest number: 13EE
Signing time: Tue 11 Nov 2025 08:01:09 +0000
Manifest this update: Tue 11 Nov 2025 08:01:09 +0000
Manifest next update: Wed 12 Nov 2025 08:01:09 +0000
Files and hashes: 1: 7Jg06ldxKlvbz-CEYbOTLWDbPQE.roa (hash: pFruh1e8rswIQqQRB2tI9O+JmHtlnpYn4xJr1wtjctA=)
2: lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl (hash: Ro6fUc/Ent4DFqgnP4CClyHdCPi0w/NfB5CIeSWGw+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d8:53:72:7d:5e:95:4f:f2:22:6a:9c:eb:0b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945efd6c477806bd6b45267558d6828feec61ea6
Validity
Not Before: Nov 11 08:01:09 2025 GMT
Not After : Nov 12 08:01:09 2025 GMT
Subject: CN=9e8fddb248fb3d734caa705c99d31d342bea9099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f4:62:0f:0b:00:31:61:fa:65:69:62:b7:7d:
f8:19:9a:85:1e:e9:49:c5:aa:e0:cf:bf:ac:2b:b8:
ec:1e:27:50:bd:af:58:54:a2:5d:81:2f:6a:08:8b:
0d:69:57:83:ed:bf:42:d1:a3:9e:f9:66:03:60:42:
04:5b:92:ec:2e:77:d2:dc:45:75:ce:b1:27:c0:e3:
93:ee:dc:13:c9:0e:86:ca:50:3f:c4:60:8f:65:68:
15:dc:e1:60:b2:86:25:75:5a:91:dd:4c:19:1c:e8:
b7:fb:9f:df:e0:6c:87:67:2a:5e:a2:40:78:06:ae:
c3:a0:1c:11:9c:ca:5f:c1:e3:ac:a6:f9:e9:51:54:
a7:fe:e1:76:2b:00:c9:f4:ac:ed:4e:63:3e:76:81:
36:d9:b3:55:77:0a:42:22:ed:d1:32:a6:fb:38:f8:
44:3e:e2:c4:b2:b1:52:cc:9f:22:7f:a2:4f:2c:c8:
89:8c:41:51:4b:49:c8:8d:ba:b2:18:d7:5a:24:b7:
9d:f9:90:04:59:80:98:e7:e9:be:3e:42:3f:8c:45:
45:56:80:2e:20:73:55:33:be:76:c4:bc:37:17:be:
42:56:14:57:fd:10:82:24:56:f8:28:30:1f:f7:f7:
71:74:70:e0:fa:a5:cc:a8:11:c8:e6:24:cc:49:e1:
07:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8F:DD:B2:48:FB:3D:73:4C:AA:70:5C:99:D3:1D:34:2B:EA:90:99
X509v3 Authority Key Identifier:
keyid:94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:69:15:f6:18:46:32:e7:c2:38:4f:68:c6:70:df:50:54:90:
45:0e:54:cb:bf:e6:f0:e6:8d:86:28:be:ea:8c:5e:8c:67:26:
80:fc:38:c0:cc:d2:38:c7:0a:9c:df:36:3e:f7:ef:00:37:2a:
fe:fe:fb:97:34:d9:f3:48:08:03:9a:a2:ed:5d:91:31:c0:0e:
60:65:01:b3:65:1b:22:4c:db:45:62:95:c0:9f:8c:d6:c2:37:
44:90:17:65:e4:68:c1:8b:03:4c:b3:cc:c8:42:ce:da:b7:64:
32:f9:21:0e:46:25:4a:6a:d5:ac:13:65:45:93:17:bc:68:3e:
cc:fb:13:3d:9a:34:05:96:d0:af:8b:76:fb:0f:38:70:0e:a0:
47:33:66:0b:4d:98:a6:f6:e8:fe:d1:28:29:3d:11:7f:60:2b:
45:f6:0d:2b:10:65:ae:39:d8:0b:11:8e:5a:47:97:ee:fd:05:
22:56:fd:c2:8b:1e:18:cf:35:bb:9a:11:0a:42:0f:9c:cb:d2:
b2:49:ee:aa:fe:9b:e9:d4:72:61:1b:30:9c:26:c2:78:4a:37:
a4:b0:bb:64:50:9b:8b:88:75:5c:a9:b0:db:ea:b6:46:5b:6c:
8b:e6:3b:df:09:b1:35:c0:a8:f4:f0:14:79:05:f4:91:7f:54:
25:4d:17:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:20 2025 by rpki-client