Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
File: licbYtGOSsd8YQlpDqrkzDTQ6bY.mft (raw, json)
Hash identifier: 0xITcmVnkJF7idNI2FuQ144UFIJmf4I63lCRBZS45fU=
Subject key identifier: 11:68:0A:A2:70:18:35:70:E5:7D:88:CC:7E:A1:B2:29:BA:5C:14:78
Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
Certificate issuer: /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Certificate serial: 019A1E3E9DCBE587E0D11E31EA2FA6224B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
Manifest number: 0BA9
Signing time: Sun 26 Oct 2025 02:00:11 +0000
Manifest this update: Sun 26 Oct 2025 02:00:11 +0000
Manifest next update: Mon 27 Oct 2025 02:00:11 +0000
Files and hashes: 1: IaAYctjYC9OdNTPcnTixy2ccUzU.roa (hash: eOFbMC4GCXw4TW2u0+c7a73RmqtvjAxvsy3+jqBN21w=)
2: X6SMQ0jEGeZDJ_4uYPtUEXmYusc.roa (hash: FdAgr11itjQmO3uyq8UgNfN1pT9LErTuoVrKYdZ843k=)
3: licbYtGOSsd8YQlpDqrkzDTQ6bY.crl (hash: VDZp66PueIKhpmKUszJ2pNXT1+G1jQ3wpbMQfidKzbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3e:9d:cb:e5:87:e0:d1:1e:31:ea:2f:a6:22:4b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Validity
Not Before: Oct 26 02:00:11 2025 GMT
Not After : Oct 27 02:00:11 2025 GMT
Subject: CN=11680aa270183570e57d88cc7ea1b229ba5c1478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2a:ed:7a:b0:1a:ff:60:4c:ee:47:74:b7:3b:
ee:c8:f2:a1:65:ec:9a:e9:65:ba:18:d3:87:cb:a6:
06:21:c8:a3:d4:f0:d1:e6:63:88:26:3d:92:b6:8e:
5b:36:05:92:67:aa:9d:33:48:2d:e9:d5:f8:b6:60:
9e:c0:3f:c9:c6:bf:db:f0:f6:56:a9:97:4f:8a:4c:
54:86:a5:c2:26:ae:57:fd:86:50:51:da:a1:ee:df:
4b:f1:97:a6:0a:23:e3:9a:c7:1e:87:73:2f:7c:2d:
cc:f9:e7:03:29:5c:e1:a0:0f:05:f7:92:c8:bb:00:
b4:eb:03:5a:94:0a:9c:21:da:e1:45:60:f9:fd:27:
aa:10:c2:a3:31:e0:a5:8e:a4:4e:d9:fb:94:dc:8e:
d0:1d:10:28:54:42:1d:4c:66:35:9d:ae:8d:48:57:
56:bd:27:d6:2b:9c:12:e0:7e:19:ae:ac:6c:ca:aa:
8d:fb:b6:a5:5c:96:01:81:98:68:e2:ec:50:4d:78:
fb:ba:80:8a:0b:10:63:64:02:41:ea:db:b1:41:58:
20:6e:3e:5b:7c:0c:4d:5a:cb:15:38:d2:80:7a:9e:
5c:f6:2c:03:85:0f:25:61:eb:08:f6:1e:12:fc:c2:
5b:fd:1a:03:03:ab:3e:a9:10:f3:69:ed:41:24:70:
93:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:68:0A:A2:70:18:35:70:E5:7D:88:CC:7E:A1:B2:29:BA:5C:14:78
X509v3 Authority Key Identifier:
keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b0:b1:49:94:60:75:20:ad:c3:6f:65:98:61:48:4e:51:70:
f8:9f:bf:df:c8:98:41:06:ba:18:dc:92:fc:a7:66:f7:bb:5b:
91:f2:33:e3:47:23:29:db:26:b2:56:ae:f5:3c:8f:61:32:64:
e2:a2:40:11:e7:1c:d0:85:d9:cb:76:e1:0d:da:36:1e:9c:33:
6e:14:61:c9:6e:ef:0c:e9:e4:76:44:93:18:f5:5d:65:58:cd:
14:e9:74:09:fc:ae:b3:2c:9e:38:b7:ef:30:1b:90:0b:94:b5:
94:ac:b8:7b:ee:5a:c6:dd:6d:2d:ea:82:b7:c7:08:9f:f9:fe:
a0:59:1f:e6:8b:d0:f8:59:1c:2e:5c:46:72:04:9e:cd:f6:2b:
28:4e:23:16:52:47:7c:fa:a2:e4:eb:3a:48:6a:f9:c7:08:15:
b4:b7:b0:76:f0:c2:f0:a9:e9:f8:a4:65:39:bd:7a:6e:c2:cf:
e0:3e:cc:08:aa:cc:16:10:3c:71:7a:b1:0c:af:ad:ac:05:67:
fe:19:02:25:b9:c5:10:e7:09:12:23:24:64:82:d9:62:a5:65:
35:e9:b7:fa:88:4a:08:0c:29:ab:a1:cf:96:f5:9a:e2:cc:85:
7e:a8:b0:fe:a7:f5:59:7f:c9:c7:c5:12:18:b4:be:1f:b8:05:
64:96:cf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:19:55 2025 by rpki-client