Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
File: l-y52NNIlBZmfumV9fTiGje2-fg.mft (raw, json)
Hash identifier: FFyahj24bhO6DM9uZtxD0V9vIR15FmFGXNnUxFL5Jw4=
Subject key identifier: C1:BE:F6:5D:09:75:F7:37:92:C3:D8:DB:E3:03:1B:B4:7E:C5:AC:C9
Authority key identifier: 97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
Certificate issuer: /CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Certificate serial: 019921B0D19BFE377DC89AF0A28E96FD9AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
Manifest number: 06FA
Signing time: Sun 07 Sep 2025 01:01:00 +0000
Manifest this update: Sun 07 Sep 2025 01:01:00 +0000
Manifest next update: Mon 08 Sep 2025 01:01:00 +0000
Files and hashes: 1: YEAGUvq4a0uBKUxsvBxbjQaBFyI.roa (hash: GNqYAmNWNIrSRNz7fZ+tj/pHZ5I/AkpnVRtGA7RbM20=)
2: l-y52NNIlBZmfumV9fTiGje2-fg.crl (hash: iOvsaLc+sHHRWI4VHsEvyTtKZQ9K/mFVtes/mKty2Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:d1:9b:fe:37:7d:c8:9a:f0:a2:8e:96:fd:9a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Validity
Not Before: Sep 7 01:01:00 2025 GMT
Not After : Sep 8 01:01:00 2025 GMT
Subject: CN=c1bef65d0975f73792c3d8dbe3031bb47ec5acc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:27:08:29:25:ee:10:9f:97:55:1f:ed:eb:
7b:02:08:0d:db:9b:ab:27:a3:cb:c7:57:2e:fe:70:
a7:21:05:2b:8e:e6:15:39:58:5a:4d:ea:df:4c:09:
6c:b7:2c:c6:e6:f1:cf:9d:0e:96:d8:ff:ea:35:74:
52:84:e5:07:60:3c:82:f0:7b:ff:29:de:62:4b:22:
27:6e:25:a8:d0:0e:83:b4:ef:b6:4e:1f:c4:3d:c7:
fb:47:7d:ff:9b:cd:98:67:cd:5b:30:d9:d8:09:c9:
f9:df:28:7b:80:b1:72:0e:f8:87:77:86:48:8c:ce:
13:74:6b:ce:a6:bb:bc:ea:61:05:ee:3c:a1:b1:7c:
ff:40:8a:48:c3:84:8e:a0:56:20:b0:06:c2:b1:a3:
38:41:48:27:2d:6a:c7:44:b1:fb:3f:8b:65:5b:25:
cf:f2:44:70:6a:46:9a:ba:f9:f7:e7:c1:eb:c4:1d:
19:e9:cc:f3:87:f2:69:77:ad:46:cb:7f:f0:26:49:
bc:37:ba:3b:78:ae:02:86:58:a5:56:3d:f7:3b:d5:
94:80:7f:1e:48:9a:cf:d3:07:76:2f:5a:64:82:0f:
b2:6f:65:bd:5c:df:bd:cc:05:76:57:08:bb:96:29:
d9:4d:de:3f:fa:5e:17:ef:34:35:f4:d0:8f:8d:25:
e7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BE:F6:5D:09:75:F7:37:92:C3:D8:DB:E3:03:1B:B4:7E:C5:AC:C9
X509v3 Authority Key Identifier:
keyid:97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d9:88:e7:67:cf:23:d0:2b:cd:40:e9:e9:5f:97:ce:7a:40:
d8:10:b4:bd:7f:4a:b0:25:99:8b:cb:a5:8b:8c:62:ea:8c:1a:
68:61:0c:0d:02:5f:25:f9:b8:d7:af:73:ab:bb:b5:cf:5a:27:
c3:e3:ae:79:c0:6b:31:9a:88:14:42:0b:aa:1e:ce:be:5a:77:
74:04:83:e0:b6:9d:75:5f:6c:fe:d5:d5:e9:52:e2:4a:81:d9:
c9:c3:93:b7:d5:11:b4:3f:86:8f:d0:70:cc:f1:db:46:07:5a:
2f:71:14:0b:41:7c:ff:92:dd:fd:34:0f:78:43:75:bc:18:22:
c9:b4:48:ec:29:bb:08:2f:cf:a3:1c:7d:30:5f:0c:49:e3:01:
19:96:14:87:9c:2c:85:5d:f8:dd:f2:82:7b:0b:fe:7a:d3:dc:
05:01:3b:1f:fe:e3:42:a4:bb:e2:24:48:1d:66:c1:4a:01:da:
75:72:db:5b:bb:2b:08:56:eb:d1:63:ba:c8:0c:32:cc:14:e7:
b8:56:26:2c:36:11:bb:ed:3c:4d:60:de:0f:e7:88:f2:03:c7:
38:ab:db:ff:4d:ba:cd:19:d2:a1:3d:ba:94:28:f4:a6:77:7e:
3e:f3:ad:90:0f:08:14:e3:1b:86:ad:c4:5d:a9:4d:85:2f:0f:
9f:f6:5b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:01:35 2025 by rpki-client