Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
File: l-y52NNIlBZmfumV9fTiGje2-fg.mft (raw, json)
Hash identifier: tPo2+3VPm0s/R6YMNwZGdS7LDjKIjKK00iI2OCBqnWQ=
Subject key identifier: F4:6C:55:30:51:84:0D:05:43:3E:84:02:74:AF:46:BF:BA:5D:06:89
Authority key identifier: 97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
Certificate issuer: /CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Certificate serial: 019A71B837D7F20FFC6F219A2061CB1832C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
Manifest number: 07A8
Signing time: Tue 11 Nov 2025 07:01:29 +0000
Manifest this update: Tue 11 Nov 2025 07:01:29 +0000
Manifest next update: Wed 12 Nov 2025 07:01:29 +0000
Files and hashes: 1: YEAGUvq4a0uBKUxsvBxbjQaBFyI.roa (hash: GNqYAmNWNIrSRNz7fZ+tj/pHZ5I/AkpnVRtGA7RbM20=)
2: l-y52NNIlBZmfumV9fTiGje2-fg.crl (hash: PO2cfwokGtbwAgfGurkUBbUCVpMk1OJl9hUbaOK8Rc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:37:d7:f2:0f:fc:6f:21:9a:20:61:cb:18:32:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Validity
Not Before: Nov 11 07:01:29 2025 GMT
Not After : Nov 12 07:01:29 2025 GMT
Subject: CN=f46c553051840d05433e840274af46bfba5d0689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:d1:84:73:ae:e6:3c:6e:2a:65:7a:07:75:
16:26:21:0f:a5:1e:8a:cf:61:06:ba:34:1a:b8:80:
57:6e:7b:c4:e9:b2:e0:2d:28:9f:d1:4c:aa:cb:99:
9e:67:b5:d0:9c:04:6c:f8:1c:a2:be:bf:9f:d6:16:
79:e1:3b:cb:55:c5:bf:a9:d0:3a:21:82:ca:e8:3f:
89:34:1c:74:f8:fe:82:bc:cd:01:d8:21:35:a4:f6:
46:0a:0c:48:9f:f8:42:15:3d:3c:8f:4b:89:16:1d:
25:b3:96:81:36:80:92:f0:88:17:78:05:e2:4b:15:
1d:1b:d3:0b:76:41:22:0e:5c:11:fd:d1:85:a7:52:
19:8e:07:55:96:2c:f4:4d:fe:75:62:24:6b:6f:f1:
d7:07:c6:49:2b:dd:59:20:cc:0d:7e:55:2b:fa:2c:
f2:b8:50:85:30:38:6d:69:95:35:ee:ab:ac:ea:03:
e2:bd:0a:e4:b8:22:20:eb:42:bd:01:4f:3d:01:8b:
62:c0:03:f0:c2:12:3b:27:08:ef:72:f1:6e:65:cc:
d7:4a:f1:6e:65:bc:1a:12:35:f6:bd:88:6a:70:d0:
ad:87:29:4c:f4:ff:e0:d9:5d:dc:89:50:da:11:76:
86:f2:40:a0:fe:93:e5:bd:c2:a9:89:2b:0a:d2:8d:
d5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6C:55:30:51:84:0D:05:43:3E:84:02:74:AF:46:BF:BA:5D:06:89
X509v3 Authority Key Identifier:
keyid:97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:fb:04:5a:7f:0a:40:58:b2:0b:22:98:6c:a3:b1:4c:b7:4d:
8e:53:7e:e7:29:73:d2:33:70:a6:ae:db:30:14:20:d8:f2:a1:
5a:2b:c0:63:68:82:0f:62:7d:f1:3d:7a:cc:67:65:51:fe:1f:
fb:80:4d:85:61:91:0a:98:47:67:e6:5b:7c:df:08:20:89:95:
55:86:37:a9:d7:7c:99:86:9e:a7:6c:29:27:ed:91:a6:57:3e:
5a:4d:e2:8b:0d:2b:46:08:13:f7:60:71:ac:ed:ac:0e:c7:0f:
c2:06:5a:8c:81:dc:f4:97:27:6d:dc:fc:ad:0e:74:ee:4f:22:
3d:39:d7:bd:4b:49:2b:a5:a2:2d:73:82:2e:43:b9:2b:fe:2d:
6d:f1:60:1b:0c:36:52:3a:73:e5:63:d2:07:f2:21:1c:43:0f:
8c:e9:d1:70:36:c8:18:37:7b:27:80:b2:59:a3:e0:3e:e7:d5:
e7:b1:c6:d9:b2:c9:4b:cb:c2:fb:84:4c:60:df:bd:9b:c7:dd:
d5:fc:02:03:d2:cf:97:ce:9c:3f:37:e9:0f:3e:6c:c3:b4:04:
d4:a7:10:f7:4b:12:b2:b3:e4:7d:c1:33:5f:c4:fe:48:a3:d3:
b8:b1:18:b8:18:a5:d1:28:28:a8:fd:b8:7b:cc:85:67:93:7f:
04:2b:9a:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuDfX8g/8byGaIGHLGDLBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZWNiOWQ4ZDM0ODk0MTY2NjdlZTk5NWY1ZjRlMjFhMzdi
NmY5ZjgwHhcNMjUxMTExMDcwMTI5WhcNMjUxMTEyMDcwMTI5WjAzMTEwLwYDVQQD
EyhmNDZjNTUzMDUxODQwZDA1NDMzZTg0MDI3NGFmNDZiZmJhNWQwNjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvznRhHOu5jxuKmV6B3UWJiEPpR6K
z2EGujQauIBXbnvE6bLgLSif0Uyqy5meZ7XQnARs+Byivr+f1hZ54TvLVcW/qdA6
IYLK6D+JNBx0+P6CvM0B2CE1pPZGCgxIn/hCFT08j0uJFh0ls5aBNoCS8IgXeAXi
SxUdG9MLdkEiDlwR/dGFp1IZjgdVliz0Tf51YiRrb/HXB8ZJK91ZIMwNflUr+izy
uFCFMDhtaZU17qus6gPivQrkuCIg60K9AU89AYtiwAPwwhI7JwjvcvFuZczXSvFu
ZbwaEjX2vYhqcNCthylM9P/g2V3ciVDaEXaG8kCg/pPlvcKpiSsK0o3VSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRsVTBRhA0FQz6EAnSvRr+6XQaJMB8GA1UdIwQY
MBaAFJfsudjTSJQWZn7plfX04ho3tvn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbC15NTJOTklsQlptZnVtVjlmVGlHamUyLWZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NzUwZWUtMWJiYi00NTcwLWJiODMt
NTlkOWQ0OGVhM2IxLzEvbC15NTJOTklsQlptZnVtVjlmVGlHamUyLWZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NzUwZWUtMWJiYi00NTcwLWJiODMtNTlkOWQ0OGVhM2Ix
LzEvbC15NTJOTklsQlptZnVtVjlmVGlHamUyLWZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfsEWn8K
QFiyCyKYbKOxTLdNjlN+5ylz0jNwpq7bMBQg2PKhWivAY2iCD2J98T16zGdlUf4f
+4BNhWGRCphHZ+ZbfN8IIImVVYY3qdd8mYaep2wpJ+2Rplc+Wk3iiw0rRggT92Bx
rO2sDscPwgZajIHc9Jcnbdz8rQ507k8iPTnXvUtJK6WiLXOCLkO5K/4tbfFgGww2
Ujpz5WPSB/IhHEMPjOnRcDbIGDd7J4CyWaPgPufV57HG2bLJS8vC+4RMYN+9m8fd
1fwCA9LPl86cPzfpDz5sw7QE1KcQ90sSsrPkfcEzX8T+SKPTuLEYuBil0SgoqP24
e8yFZ5N/BCuaRw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:34 2025 by rpki-client