Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
File: l8yglS24qp_l5XA8bxiaBqV_S7E.mft (raw, json)
Hash identifier: JTlZ82LU05zYIe1saomYF9eVQWvOTzsOZyS3EN6uBFw=
Subject key identifier: 93:90:26:D6:E2:61:6C:C6:86:5A:A5:C2:58:CC:1C:79:76:5D:29:CC
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Certificate issuer: /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial: 019A4B187EF2C8853DF83F1F9A35EB68A057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
Manifest number: 1717
Signing time: Mon 03 Nov 2025 19:01:27 +0000
Manifest this update: Mon 03 Nov 2025 19:01:27 +0000
Manifest next update: Tue 04 Nov 2025 19:01:27 +0000
Files and hashes: 1: 0fTjjyjaiEMTmN0qEGg30Ao2zns.roa (hash: bVrLoN7n3oaO1XYgZx8crHTGWgcotUS3skM4/csJhUA=)
2: Eem0N3GXMChoR9TCOhSTBkWIdjc.roa (hash: igndwr3EyynLXRXaxAnOCIr8pyhy15Y9vo4ph2wbRZ8=)
3: SZcqM2MymNLwtybzmnw-E1d2RJk.roa (hash: jRh3gj1EqHTeeiOWY5OcArwxYUApFn4YAZHaSARNuyY=)
4: l8yglS24qp_l5XA8bxiaBqV_S7E.crl (hash: 1KzM/zG5xHMiY90U+BETNjZEWnrRS+hCVUiNfESZRsE=)
5: safrg3kATgNbdktyHNaBTUQ20Fg.roa (hash: rMOUfy4ZM5vd45QmK8llUEFz0T+7f/LFtDqbEYg/alc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 15:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:18:7e:f2:c8:85:3d:f8:3f:1f:9a:35:eb:68:a0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Validity
Not Before: Nov 3 19:01:27 2025 GMT
Not After : Nov 4 19:01:27 2025 GMT
Subject: CN=939026d6e2616cc6865aa5c258cc1c79765d29cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:77:e5:6d:44:b1:07:4a:c0:e9:a0:36:56:88:
9c:24:89:68:b0:b0:2b:d2:49:f9:c4:58:99:7b:64:
73:93:0b:20:bb:81:29:ff:af:b2:eb:5d:66:ee:10:
9e:14:c3:b2:85:22:aa:08:1d:11:7b:26:a9:91:cd:
a4:2a:01:08:22:e0:aa:bd:6c:e4:cb:f2:29:80:b1:
25:94:35:99:07:93:ee:2a:49:27:51:6f:f5:b1:e2:
26:65:95:ee:7b:b1:24:8a:52:a7:f1:1a:f7:b2:60:
bd:40:50:22:e4:98:39:aa:9e:1e:67:a0:bd:06:71:
12:ca:04:10:e2:b2:94:3b:bd:9c:43:4d:2c:cc:dd:
c6:62:19:c3:f4:db:7e:fc:46:2d:bc:5a:49:73:f7:
0d:98:50:7c:39:e9:3a:84:b0:6f:65:2c:49:c0:70:
f9:7a:37:49:25:09:ab:9e:a2:38:ba:80:fe:26:91:
d4:7c:b8:4e:9a:2b:ba:ec:bc:a8:65:e6:d0:7c:ed:
a8:f4:02:6b:21:1e:12:4e:a0:ec:32:96:02:5a:af:
b0:55:f6:83:7b:56:e1:65:32:cc:ce:d1:87:cc:16:
1f:0c:be:d9:af:84:76:84:76:18:09:75:60:db:87:
1a:f4:43:8a:2b:be:42:1e:74:9e:58:ea:c3:1f:81:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:90:26:D6:E2:61:6C:C6:86:5A:A5:C2:58:CC:1C:79:76:5D:29:CC
X509v3 Authority Key Identifier:
keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:dd:bb:7d:c3:66:dc:9f:b9:0e:b1:6e:c0:2b:73:4b:ac:5e:
a5:af:58:74:27:98:11:49:4b:77:3f:61:8b:0c:21:c0:7d:62:
fc:b3:de:f4:fe:26:fe:b7:b7:1c:1a:79:50:06:79:5a:43:b9:
23:d7:2b:4f:21:0b:50:43:9b:c2:fc:5c:8a:7c:5d:fc:9c:fb:
0a:73:db:cb:8e:17:0a:7c:c2:cf:0f:c8:51:8b:01:75:a9:94:
87:3e:e2:fe:5f:49:6d:58:2b:f6:49:2c:76:df:97:0e:4e:62:
e5:c8:48:8e:3a:45:3b:59:66:10:7b:6b:62:39:c5:e1:19:df:
6c:00:67:d2:c0:34:96:32:15:4d:3e:72:ba:d0:eb:cf:3d:d3:
e5:9d:df:25:41:1f:ac:ab:13:05:4e:20:0d:6f:a7:37:1d:1d:
77:49:46:10:68:9b:06:ed:85:32:30:26:4f:fb:76:0b:8e:cd:
b2:0b:c1:56:ba:f8:00:4c:86:32:f2:5b:9a:bf:09:a6:0d:e4:
fe:5b:fe:f1:40:fa:df:e3:0a:1e:ea:43:ad:af:79:7f:81:6c:
6f:09:e1:69:79:99:2e:78:b8:b0:7a:46:74:d7:41:71:4e:ba:
13:be:b9:f2:8f:c0:bd:cf:2d:2d:db:45:86:1c:1c:c0:68:e5:
64:8a:24:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:41:07 2025 by rpki-client