Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
File: l3C_I3XVm6gamVXAei8KIyZLYag.mft (raw, json)
Hash identifier: 7osEgK7pxD9rVfTEPWZbRXUDkmPVfqrVCkHE6+WoFQQ=
Subject key identifier: 7A:58:16:7E:C3:06:83:28:E1:14:F5:76:32:E8:73:4F:3C:99:07:E7
Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
Certificate issuer: /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Certificate serial: 019A72934487EE791E7E4F7B998180819639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
Manifest number: 08CD
Signing time: Tue 11 Nov 2025 11:00:44 +0000
Manifest this update: Tue 11 Nov 2025 11:00:44 +0000
Manifest next update: Wed 12 Nov 2025 11:00:44 +0000
Files and hashes: 1: 1cgE3uMD9UQj0N9D1NwFutRDIfE.roa (hash: sz+QlLmzVk2yB4VM7ft/t4trcbfch70ucXLho0/P3wo=)
2: Ps7ItdcqBOZwFy7JAglhbkmvgec.roa (hash: Yq/VfNMV/+Kg/XB3DpV+ctEtAUoBDR8xyYarG7XLgw4=)
3: l3C_I3XVm6gamVXAei8KIyZLYag.crl (hash: XWG4X+sAkPdtGFdsOgufOwenoDANHas98CwvSE+pIVM=)
4: nn8N_U11uSgPsYKzqfF8emHLewY.roa (hash: UE2WeYKjsQLQDIQ6fpdM8tvgC0pZW+64uPlpd0Qrdgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:44:87:ee:79:1e:7e:4f:7b:99:81:80:81:96:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Validity
Not Before: Nov 11 11:00:44 2025 GMT
Not After : Nov 12 11:00:44 2025 GMT
Subject: CN=7a58167ec3068328e114f57632e8734f3c9907e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ba:08:60:aa:a7:e0:50:d1:93:31:bb:22:ea:
fc:d9:20:99:d3:09:1f:d4:2b:14:25:d1:1a:18:df:
39:f1:2c:f5:b0:10:39:9d:ac:5f:82:ce:62:33:53:
ae:32:61:79:d5:91:92:89:f7:08:84:2c:a4:6d:7a:
46:5b:e2:eb:f5:8d:ca:61:78:b9:15:5f:21:a8:c9:
83:11:6f:1c:6b:fd:3e:e2:3f:6d:cb:6f:f7:38:57:
00:e0:0c:e4:7b:db:1e:cd:c5:83:b9:e0:7d:e7:0a:
a6:1d:48:07:ea:17:9b:2b:7f:27:b5:58:6b:ee:c3:
d2:32:a3:a6:e5:d4:fb:b5:f2:fb:ad:8a:03:ca:1a:
ec:73:0e:a2:81:40:8e:e2:7f:87:8e:e2:fc:d6:21:
49:ce:6e:76:50:d3:c8:0c:68:29:db:07:26:6e:86:
90:00:53:1e:33:7c:c1:79:a5:02:e3:7f:1e:28:e6:
37:d5:95:e3:b2:09:fe:b2:e4:fc:86:35:25:07:2d:
cd:91:55:9d:31:9a:21:74:63:92:eb:b4:c2:f2:0b:
33:45:60:ea:2e:09:89:97:f6:99:25:f5:1f:47:65:
79:bc:15:64:0e:f2:fb:6e:8e:bc:db:10:95:1a:f9:
b4:05:11:6c:7f:f2:45:ef:c1:46:e3:4d:9f:93:de:
33:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:58:16:7E:C3:06:83:28:E1:14:F5:76:32:E8:73:4F:3C:99:07:E7
X509v3 Authority Key Identifier:
keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5d:1a:d0:69:a9:18:5b:f4:9f:2e:33:91:cf:41:f5:3a:4d:
06:22:51:d7:f7:15:92:5d:fd:d9:43:0b:d6:e2:34:e1:12:f4:
53:fd:fc:66:dc:57:a1:72:1c:1e:24:9b:a6:38:5e:44:27:4a:
4d:92:6d:d2:62:81:46:ce:55:f1:76:93:30:f5:6a:e0:4b:25:
9d:9c:36:bf:2a:5b:94:0a:b5:de:1c:93:20:f0:54:8c:09:7b:
53:d5:c5:29:3e:48:b3:f0:de:4f:26:77:31:32:d9:e3:18:a1:
19:58:00:93:0b:75:3d:26:6d:2c:24:57:e1:9d:da:56:de:c3:
55:47:49:04:70:23:c7:cc:d6:c4:2c:5c:30:41:be:69:4b:e6:
80:f9:59:f1:65:1a:a1:ee:35:02:51:16:d3:1b:4e:e7:02:e9:
23:7a:1c:cf:00:e0:9f:32:66:25:a0:92:91:db:36:fd:94:3d:
c4:37:31:2b:63:4d:64:df:f0:2b:e0:db:df:61:7b:b9:02:e9:
35:94:79:0e:ed:c3:7d:a0:ae:c4:93:23:44:57:6f:32:9a:e8:
29:d7:84:52:a2:9b:86:77:31:ef:c0:60:2c:9a:24:48:46:4c:
50:27:30:ee:47:bf:4c:c3:29:53:76:7f:e9:c2:e2:50:a0:8c:
98:20:94:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:27:01 2025 by rpki-client