Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
File: l8AN4AfUqkpAMdR2ELObd0kIv0k.mft (raw, json)
Hash identifier: y3tZBHbClk+0I+JO0/eh94UlkcFEqU7WgeZXoTwCnbM=
Subject key identifier: CC:B3:60:2E:6E:8C:AA:02:0D:15:AE:46:09:A3:EB:83:1A:35:20:BF
Authority key identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
Certificate issuer: /CN=97c00de007d4aa4a4031d47610b39b774908bf49
Certificate serial: 019A73A5DBAB52A6E86B57FFCC1CD96B6C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
Manifest number: 0305
Signing time: Tue 11 Nov 2025 16:00:40 +0000
Manifest this update: Tue 11 Nov 2025 16:00:40 +0000
Manifest next update: Wed 12 Nov 2025 16:00:40 +0000
Files and hashes: 1: 6v3xaZ7YrvMvQdKxxjWwKZ-HZN4.roa (hash: hWUPq5N6t+RwJdEvOikw63sUGiZaD6rAh+UZM/+TLZM=)
2: l8AN4AfUqkpAMdR2ELObd0kIv0k.crl (hash: CNGF5+aofatL72VAQ2yZiVQshYDV0UwNH5psx6yY2YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a5:db:ab:52:a6:e8:6b:57:ff:cc:1c:d9:6b:6c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c00de007d4aa4a4031d47610b39b774908bf49
Validity
Not Before: Nov 11 16:00:40 2025 GMT
Not After : Nov 12 16:00:40 2025 GMT
Subject: CN=ccb3602e6e8caa020d15ae4609a3eb831a3520bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:3d:bf:2d:1f:ca:38:22:49:c7:f5:65:36:
fe:59:39:0d:bd:be:34:e4:29:08:3b:b7:68:68:c4:
e6:a3:c7:1a:22:f5:d2:9b:b7:85:d0:e1:c2:2f:f4:
be:c9:23:81:55:f0:05:80:6d:99:b4:2a:82:93:eb:
e0:31:bd:7b:0b:a0:d7:3d:7a:0f:96:ca:48:60:0f:
d2:7d:4d:03:08:44:63:a8:64:9f:af:8d:f4:10:04:
58:e5:85:eb:4c:90:57:2a:cb:3b:89:92:bb:14:ec:
a0:4b:7d:a9:7c:d3:1e:ca:26:b7:a9:f5:83:20:8e:
37:11:60:10:00:27:0a:77:28:8d:be:67:8e:5c:9b:
6c:12:81:5a:2b:f5:59:71:7a:8d:2c:1a:5c:fa:b7:
ea:1b:22:51:df:30:d8:37:0b:d6:d9:26:e0:99:a2:
ab:72:09:0a:54:7a:1a:d3:29:c2:00:89:d3:2e:16:
1d:40:80:01:05:c5:08:80:be:05:86:a4:01:d3:4e:
12:a5:ad:ed:2a:6d:c0:f3:db:7f:5a:db:57:20:ad:
5f:0a:14:59:5a:ff:4e:b7:1e:fd:ca:81:8b:6a:24:
0c:23:4d:02:89:33:6e:03:91:82:21:27:e4:ab:11:
64:48:9a:32:db:5f:47:dc:77:a0:ec:e7:16:70:6e:
fa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B3:60:2E:6E:8C:AA:02:0D:15:AE:46:09:A3:EB:83:1A:35:20:BF
X509v3 Authority Key Identifier:
keyid:97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:14:5d:49:d8:0d:f9:3e:57:12:e9:df:68:b2:c7:09:8b:1d:
2a:c1:ac:2e:0b:cf:16:12:c9:75:cd:e2:36:97:f1:dd:a9:15:
26:3f:92:8d:cc:b3:ad:e2:62:b4:59:15:1e:4b:f1:76:69:31:
d4:bc:a0:ff:17:a2:57:2a:8d:11:b1:a3:b5:03:9d:08:60:7b:
8c:12:43:d7:06:21:e0:ad:e5:9e:d7:b7:1a:28:44:22:01:00:
2e:c1:11:53:f1:8b:c4:95:19:76:ff:56:04:c7:5a:60:e9:97:
ce:0f:1d:d8:47:48:8c:1f:51:03:c7:98:fa:e2:dd:2d:2d:24:
b4:ca:0a:e2:b6:a9:64:5a:09:1a:33:6a:ea:19:c6:aa:e0:3d:
0e:2a:4c:bb:28:dd:d5:55:bf:1c:d9:13:86:08:34:4a:39:0f:
0d:7e:4f:81:7d:0e:be:86:cf:2c:5a:4d:ab:38:6e:d2:5d:a7:
29:a0:c4:69:77:d7:c1:2d:de:fc:f8:48:de:df:2b:2b:0d:a2:
c5:ec:d9:c6:36:a0:07:d0:69:d2:63:f7:aa:97:ea:c0:6e:c7:
d0:77:8d:32:ee:eb:cc:1f:7e:f3:49:86:42:75:76:cc:c2:75:
9a:ff:1b:41:87:1b:06:a4:19:1c:78:55:14:23:b0:77:79:a4:
02:a1:9a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:10:44 2025 by rpki-client