Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
File: l4TMfBsz0nl3_M2zSzzClKKkCIw.mft (raw, json)
Hash identifier: pHvDqbTBscFduTTAKSk7qqVDezdLKc7az1wnsvHsWAY=
Subject key identifier: 0E:65:8A:C9:D0:C1:11:70:D7:16:2A:90:4B:18:A1:6D:28:F3:3E:48
Authority key identifier: 97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
Certificate issuer: /CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Certificate serial: 019A71EEF05489F7F49229708DC876124DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
Manifest number: 06D2
Signing time: Tue 11 Nov 2025 08:01:15 +0000
Manifest this update: Tue 11 Nov 2025 08:01:15 +0000
Manifest next update: Wed 12 Nov 2025 08:01:15 +0000
Files and hashes: 1: ZjdD3KktHTJ1RlykxrS_PX6Dfls.roa (hash: rQU1YZETtvcj8idrb5JBb64s2ExLklRkDK8ZmIHJSuk=)
2: l4TMfBsz0nl3_M2zSzzClKKkCIw.crl (hash: JStpXmZQdHeRf9XtHkv3Mkhde0naOctK2GUmOG6NpeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f0:54:89:f7:f4:92:29:70:8d:c8:76:12:4d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9784cc7c1b33d27977fccdb34b3cc294a2a4088c
Validity
Not Before: Nov 11 08:01:15 2025 GMT
Not After : Nov 12 08:01:15 2025 GMT
Subject: CN=0e658ac9d0c11170d7162a904b18a16d28f33e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:0b:32:26:46:0f:f6:73:52:2f:80:6f:94:
f2:ec:74:18:40:ad:4c:71:83:9b:c1:c2:59:11:d4:
b8:a8:95:21:d1:5f:39:ba:c6:a6:a7:b5:05:06:cf:
c6:25:21:6a:fe:86:d6:bc:11:f9:7a:ca:85:ef:0a:
74:2b:5d:1c:3b:70:6c:15:1c:a9:30:29:98:70:3d:
71:d4:a2:7c:6e:50:cf:68:68:95:03:56:15:93:4b:
12:db:0f:4d:80:f2:90:f3:5b:17:3a:3c:a8:f5:ec:
43:05:77:51:17:62:6d:eb:e3:45:57:f4:91:cb:7e:
44:31:ab:30:89:d1:22:5f:46:16:69:9f:66:ad:4d:
0b:13:9e:d0:67:94:02:03:fc:a0:63:97:7f:0e:29:
f5:ce:ad:3e:da:31:16:b2:8a:78:08:37:0f:d0:ef:
aa:86:dd:2d:b5:cc:7a:d6:ff:5c:2d:ec:bc:4f:dc:
b4:e1:ba:f4:8f:70:0a:f0:6e:a9:6c:7b:33:a1:b9:
f9:94:49:a3:6c:41:b1:78:60:de:8c:c9:ae:f8:ae:
12:4d:15:46:3e:95:3f:b6:8e:ec:68:76:f5:31:a6:
e6:9e:54:38:be:74:1a:c6:f6:1e:a0:7f:c7:95:6c:
b1:86:66:16:62:fc:75:e2:26:09:c3:67:7d:1f:c8:
75:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:65:8A:C9:D0:C1:11:70:D7:16:2A:90:4B:18:A1:6D:28:F3:3E:48
X509v3 Authority Key Identifier:
keyid:97:84:CC:7C:1B:33:D2:79:77:FC:CD:B3:4B:3C:C2:94:A2:A4:08:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4TMfBsz0nl3_M2zSzzClKKkCIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b851d2-717d-4344-84bb-c886fb6b3bcd/1/l4TMfBsz0nl3_M2zSzzClKKkCIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:28:d0:07:23:7e:45:5b:46:77:bb:53:12:3d:ac:1b:2d:e7:
39:ee:e5:4c:c8:25:d1:bd:ce:80:c9:f7:9a:86:a1:f9:6a:f8:
ff:07:c2:8d:3a:f5:37:32:b5:da:c5:14:4c:85:e6:1e:b9:22:
2e:a3:07:33:c9:13:35:35:c6:2b:de:7a:75:a0:07:e6:95:5b:
d3:7b:d7:c5:59:9a:79:4b:78:2f:78:99:b4:56:41:22:63:d2:
68:96:f9:d8:c3:ec:59:8e:5f:e5:9c:d9:e9:16:5e:32:c0:6f:
b7:ea:cb:01:e8:d3:03:45:ec:47:88:a2:39:f8:fc:39:57:15:
06:4b:9d:43:5b:53:f7:f7:76:58:10:44:5a:85:04:88:42:de:
37:6c:b5:43:32:66:a6:dd:37:83:3e:35:1a:a1:b6:08:f3:a2:
e7:78:ba:78:8e:29:d4:f9:6b:ff:71:36:58:7c:78:67:b0:b3:
8b:8c:cf:99:16:e6:c1:46:b3:ca:cf:ac:6e:75:b8:1c:d0:fa:
ad:3d:4d:33:90:36:84:a3:61:2f:f5:73:f1:3b:c4:23:a3:4d:
53:18:0d:35:78:22:01:75:27:2b:ec:4d:60:60:2c:0b:45:bc:
2f:62:41:c9:10:91:67:de:61:5d:29:56:c3:95:e8:ee:cc:df:
0a:35:a1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:42 2025 by rpki-client