Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
File: l4kxgrFnGJg7wAjI0If43co9hhQ.mft (raw, json)
Hash identifier: LXfUrxtRmKhgrJx+HLNlaPWRHGu0EMJan5vgRm5G3HM=
Subject key identifier: 8E:E8:2F:B1:49:BE:6D:17:6B:E2:A5:7C:95:E5:86:0E:0D:3E:CC:1C
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Certificate issuer: /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial: 019A4C2A5010743436263A98E8E9DDD43797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 00:00:32 +0000
Manifest this update: Tue 04 Nov 2025 00:00:32 +0000
Manifest next update: Wed 05 Nov 2025 00:00:32 +0000
Files and hashes: 1: aqDSlJI6fRe1RN2uayTTFYQxD-s.roa (hash: KcsQCykFuSuY+9QOJB4kYVylQTDKAT5qMJFTxYEhYPg=)
2: cQ6SdnmY7fIgfdAemGXpWF1FOPQ.roa (hash: rE5sWP16qEy550XaQGyvVum39Vv1f9SuBJn5Bpfsn24=)
3: is06NJF_pdLdCky9_vvySjLbIWk.roa (hash: iohuFwFwemTLBjzODMRz2CDiXJBSgnTn1Frh7C6hyPQ=)
4: kAy4RLfssItqnKihng08SJ24kLU.roa (hash: NzDxF5VtRsVHoeFsy5okPqrnmIPsJbnNlHuQYgmsl+0=)
5: l4kxgrFnGJg7wAjI0If43co9hhQ.crl (hash: gMGaZ5UtHUIfErb5V5PBm9roy9gGU4QjBbm31ee5kBA=)
6: oRY9iKk0D5CyNjGBBRC8EKK0Png.roa (hash: ptEHHc6sV9bAwsAg48r335Aq1U2u7iI0S6DteNymbm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:2a:50:10:74:34:36:26:3a:98:e8:e9:dd:d4:37:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
Validity
Not Before: Nov 4 00:00:32 2025 GMT
Not After : Nov 5 00:00:32 2025 GMT
Subject: CN=8ee82fb149be6d176be2a57c95e5860e0d3ecc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:07:cf:58:4b:f2:e6:94:ed:0b:a5:b5:0b:
12:76:4d:2f:09:89:da:96:6f:a9:9b:81:87:32:78:
d6:48:d5:52:23:2c:fb:91:0a:ca:ed:ee:39:50:e8:
e4:15:30:29:cc:32:41:62:1c:d3:d3:b8:cb:7b:78:
fe:36:36:6f:b4:19:21:60:ad:eb:19:d9:a8:ae:3a:
b1:ce:d8:f0:b2:f1:dc:69:74:b7:2d:86:c6:12:71:
41:0d:f5:7c:b8:32:1a:2a:f0:b3:6d:4f:6b:d5:aa:
33:e5:0c:73:fc:55:d5:e4:52:41:d6:f9:5c:81:f8:
d7:11:28:c2:da:6f:1a:4c:46:ed:c0:34:e5:4b:70:
92:12:91:c7:1e:da:2a:54:da:70:d5:7d:57:ec:e9:
5a:ef:e7:b4:ec:7f:31:ef:f5:d5:92:0a:0a:0e:2c:
9b:cf:7f:3e:4f:fe:24:57:26:4d:0e:ae:21:46:dd:
a8:3d:2b:a2:34:2a:4b:8a:13:a5:4e:7a:83:9c:28:
ce:84:7e:f6:6a:1d:2a:25:28:9f:ac:52:88:db:01:
97:97:df:62:84:63:71:d2:8f:af:31:9c:84:89:78:
20:77:5a:0a:60:94:7a:2a:36:cb:47:70:63:e2:4e:
a4:2d:be:16:cf:04:c1:6d:25:3c:d0:f5:44:53:7e:
ff:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E8:2F:B1:49:BE:6D:17:6B:E2:A5:7C:95:E5:86:0E:0D:3E:CC:1C
X509v3 Authority Key Identifier:
keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c9:b6:3c:ea:60:61:bc:59:56:cf:bd:2b:3b:19:09:69:a8:
d4:2c:ab:31:02:db:86:a0:96:93:2e:a9:e9:ec:70:d6:c3:d8:
14:f3:b4:c8:de:89:07:6b:0c:bd:83:8f:34:64:8f:be:55:78:
02:a3:ef:bc:e3:6b:f5:03:da:1c:cc:5c:fd:b1:26:1b:ff:7b:
ba:3f:1a:8d:a7:3d:c8:89:b4:e6:6a:2d:b9:26:28:18:a8:fe:
ee:2c:9f:79:cf:3c:68:1d:80:9d:5b:16:44:3f:f0:d3:e9:57:
54:55:1a:b6:32:2e:4d:d4:bf:4a:cc:44:1f:ef:88:89:52:54:
b9:67:1c:cb:87:f2:85:9c:fa:d3:b4:e3:48:89:85:54:88:b9:
e6:f0:ab:25:5d:76:3d:de:65:72:e2:31:1a:b5:73:d0:66:c3:
46:83:b2:9b:96:6b:73:e7:ee:b4:8f:be:05:e1:52:a9:96:86:
c8:88:3e:50:89:ce:d4:d3:c4:9f:41:57:57:d0:f5:a3:d5:e8:
9e:a8:bb:b7:c8:67:01:61:df:2c:c8:e6:3c:86:98:1b:37:30:
e1:5a:39:df:06:c2:ce:d2:c6:97:b7:38:d4:f8:7d:11:52:15:
77:c0:8e:69:9b:33:ed:14:11:6c:4d:55:5b:7f:0f:67:8f:86:
d7:4f:a5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:04:25 2025 by rpki-client