Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
File: _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json)
Hash identifier: /ec577OUkUWcnjI2/xRho1JRNZ7ovNF5aKFrbXiSRHM=
Subject key identifier: B1:8A:B6:3E:C4:F5:7E:D5:27:04:78:11:C3:6B:63:67:92:46:F7:1D
Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
Certificate issuer: /CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Certificate serial: 019A52D19849EE8FCAD026CBF396E25D955C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
Manifest number: 0B7B
Signing time: Wed 05 Nov 2025 07:00:58 +0000
Manifest this update: Wed 05 Nov 2025 07:00:58 +0000
Manifest next update: Thu 06 Nov 2025 07:00:58 +0000
Files and hashes: 1: DiB_b1f0zlqZ4Y9RlICgbOGMJ7o.roa (hash: bx7gORpYBo75Iq/H/h1fyR0wOXDdKfLfUPEbvglKOL4=)
2: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: rIPs5lopL+//Khi7f+yCv10Vhc/rFtoGBU6sg3K/8eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:98:49:ee:8f:ca:d0:26:cb:f3:96:e2:5d:95:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c
Validity
Not Before: Nov 5 07:00:58 2025 GMT
Not After : Nov 6 07:00:58 2025 GMT
Subject: CN=b18ab63ec4f57ed527047811c36b63679246f71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:82:e4:09:96:c8:79:26:ed:b5:24:36:6d:
ad:2d:fb:ea:b7:60:ce:39:cb:21:72:f9:49:f5:fc:
2b:63:6f:63:52:3c:84:a4:eb:39:da:d8:46:1b:fb:
75:d1:88:79:70:cf:7e:c2:7a:db:1b:9f:db:8b:29:
98:0c:cf:78:7d:42:a9:86:0e:9e:36:e2:fd:12:35:
c9:fa:b0:6e:ac:ac:18:ac:32:a5:fc:3a:82:f1:5c:
8a:d6:3e:0e:07:95:08:78:fb:dd:f7:d5:14:85:39:
4f:60:70:62:99:85:9b:24:22:08:b3:d3:18:62:a4:
60:18:87:66:89:05:bc:f8:43:b3:65:a7:7b:2b:6d:
12:00:2b:ac:cf:6f:34:9f:49:e8:c8:97:31:c9:18:
70:c8:3a:ed:2f:ec:2d:81:87:fb:1a:16:df:b9:4a:
8e:e1:78:90:f2:d4:bc:92:ee:b8:83:10:f0:4c:d2:
fc:b1:65:cb:e2:a7:fb:4f:f3:a1:ba:1c:cf:01:fc:
06:95:fd:0f:3c:1b:7f:ca:51:cf:ff:8c:16:2c:15:
61:99:8c:19:f9:dd:8e:d1:6e:aa:58:4d:03:37:e8:
70:18:5a:02:ac:f0:45:14:4b:ff:cd:69:90:49:a9:
63:af:c9:13:6f:97:ca:c9:f9:aa:80:bc:fb:88:6a:
c2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8A:B6:3E:C4:F5:7E:D5:27:04:78:11:C3:6B:63:67:92:46:F7:1D
X509v3 Authority Key Identifier:
keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:4e:3c:5b:68:f7:a9:ef:76:c5:2a:fb:4e:47:7e:89:80:98:
6a:3e:3d:99:68:a2:04:09:a5:eb:78:68:b6:94:d7:c4:43:1a:
34:ad:c5:04:23:7c:1b:a5:06:5c:74:37:40:9d:74:fd:cb:b2:
56:b8:6e:b6:25:35:ae:14:37:3b:83:65:b3:52:44:71:d2:b4:
f5:5b:51:c5:f2:80:72:b0:d1:78:6a:4b:53:2a:e2:cb:ce:a5:
e8:6d:2d:92:7c:e1:72:98:23:56:48:3d:80:81:6b:c1:1f:55:
cb:5e:5d:fa:98:59:89:ec:a3:d7:56:85:5e:2c:2d:0c:af:45:
1c:b6:d5:f6:5c:aa:76:58:86:62:af:54:f2:51:b6:11:d5:a5:
72:30:e5:b0:eb:ab:2b:de:ef:8b:e7:9a:c5:fb:3d:da:e5:ec:
37:49:16:1c:12:22:38:f7:9f:e2:6a:09:09:e3:d9:eb:00:28:
4a:10:20:ba:0b:bc:41:7a:a9:9e:18:20:c4:43:3e:cf:e4:ae:
92:59:4b:0d:e1:de:be:80:71:e0:1d:a5:b6:ba:22:cb:7e:14:
fa:d7:f6:63:bf:85:7a:a5:ba:11:56:65:13:1f:eb:a9:d2:b5:
35:3c:19:ab:af:d8:28:ca:c3:4e:73:b4:97:65:cd:0f:84:8c:
6a:1a:83:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:18:42 2025 by rpki-client