Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
File: l1lSndMXBkXXbPasBllQbMZJypA.mft (raw, json)
Hash identifier: y9NfoMnJ6Fj6jCxb7nIi/xcv552VNPtSi7xyELWBFxQ=
Subject key identifier: A9:CF:D0:FE:A3:2B:C0:D0:A1:47:C5:67:AE:B8:9C:EF:30:9D:05:41
Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90
Certificate serial: 019A209C361551AD2DB730AF95301A1FA5E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
Manifest number: 140D
Signing time: Sun 26 Oct 2025 13:01:39 +0000
Manifest this update: Sun 26 Oct 2025 13:01:39 +0000
Manifest next update: Mon 27 Oct 2025 13:01:39 +0000
Files and hashes: 1: 0CXMUaTMQIKH6epSkL7Djl138G4.roa (hash: 7ikpmMwL3KhBT/ey6JF8CQkgs9c+Pq5I2Oo9Rhvfk8c=)
2: 2E_YHRCuF5MHTxlMx4c1H-5_vdo.roa (hash: cd6fZP84XkBNWRqBbhJXNCRjH3aM1q5IULZkt1L/R08=)
3: l1lSndMXBkXXbPasBllQbMZJypA.crl (hash: WaVpLRB5/sDTI9Emr5OoB3d8lvKmAPvlYAw3IoB/apo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9c:36:15:51:ad:2d:b7:30:af:95:30:1a:1f:a5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90
Validity
Not Before: Oct 26 13:01:39 2025 GMT
Not After : Oct 27 13:01:39 2025 GMT
Subject: CN=a9cfd0fea32bc0d0a147c567aeb89cef309d0541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:b6:e3:37:8a:7e:db:56:cc:24:57:47:71:
17:40:26:95:7f:6b:07:a9:f4:aa:b1:81:6a:d2:d8:
ae:e3:f8:74:cd:4f:c7:3e:92:cc:7b:9d:dd:11:db:
20:64:98:ce:4f:dc:f8:e7:c2:d6:5b:d3:e3:52:35:
f7:6d:44:be:54:e3:41:19:fb:69:4b:0b:67:90:26:
3c:9e:20:75:5e:42:8f:ae:a8:e5:12:98:d9:a0:dc:
5c:e1:63:b5:7a:e5:7e:f7:7d:49:1d:6a:41:6c:45:
a8:af:a3:1b:bf:da:e7:38:2d:b1:06:f7:1e:e9:da:
b4:d5:aa:f0:4d:12:a9:81:a3:7a:06:72:02:ec:0b:
52:3e:a5:94:1a:be:0b:5d:7b:9b:94:50:7d:23:10:
e8:4d:a0:91:58:9f:09:55:a5:9d:b9:18:ec:b6:3f:
5b:c2:c8:8f:bc:a6:51:80:ed:0b:2b:2d:ad:8f:b6:
4a:2b:fd:8a:cc:ed:ec:34:52:ce:b8:42:cd:45:43:
fb:f3:eb:1f:27:09:a3:7f:69:40:53:97:9e:25:1c:
c9:86:10:56:2c:4f:18:f9:a4:e6:1a:e7:71:bd:4a:
84:0b:a6:d1:b1:49:12:81:80:a4:34:f7:ca:56:dc:
78:4f:ae:fe:66:4f:fb:82:be:48:98:5b:3d:8a:3f:
c9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CF:D0:FE:A3:2B:C0:D0:A1:47:C5:67:AE:B8:9C:EF:30:9D:05:41
X509v3 Authority Key Identifier:
keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8c:0c:86:b6:9f:54:af:bf:fe:8b:89:08:f8:54:d8:9b:6a:
18:8a:cd:a0:a0:82:ad:5d:e5:b0:73:77:2e:83:a8:87:5d:61:
32:59:53:7e:3d:b1:94:70:13:29:d9:f4:23:be:61:44:3e:66:
72:1c:28:fa:41:74:53:df:e5:d6:e1:6f:fa:ad:ed:ff:cd:40:
43:e0:8e:b1:13:ac:91:eb:13:9a:48:23:2a:5a:48:75:14:ab:
5d:dc:96:8f:9e:b7:dc:94:01:b5:af:89:9d:42:60:e9:84:a3:
d9:d3:8d:da:1f:a6:85:f6:af:d5:99:83:57:e4:45:b9:26:a1:
6d:64:85:da:7e:a9:89:df:b5:7e:8d:33:fd:7a:5c:08:df:38:
32:12:ac:35:c5:9c:b1:57:93:dc:3e:4a:11:3f:06:ef:df:0c:
c9:0f:62:b2:a4:b3:ef:8e:1a:12:86:14:e7:4a:a2:74:8c:bd:
cb:56:8c:09:44:e6:d5:1b:e0:57:19:d0:b4:19:2c:09:8a:35:
af:c8:7b:45:dd:ca:62:31:97:ed:46:01:d3:d2:aa:af:69:5d:
f0:e2:8d:5f:bd:9f:60:c7:bd:83:10:07:8a:3d:1d:77:5f:f1:
54:4a:8f:92:a7:92:d9:93:1c:6a:58:fd:d7:ea:b3:e3:a6:e4:
7e:8e:b1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:06:54 2025 by rpki-client