Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
File: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft (raw, json)
Hash identifier: 6bysZNireBMBVtMSlqVHStJRi5J0TaWxMar3+CX4Wl0=
Subject key identifier: 05:3C:16:2E:58:E6:08:BC:CE:38:8E:70:30:61:9A:DF:74:38:68:58
Authority key identifier: 97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
Certificate issuer: /CN=977bfd99d35116f9c644194c36d9b646f73127c6
Certificate serial: 019A725C8F992DC091991DA844E606C66C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
Manifest number: 14E0
Signing time: Tue 11 Nov 2025 10:00:59 +0000
Manifest this update: Tue 11 Nov 2025 10:00:59 +0000
Manifest next update: Wed 12 Nov 2025 10:00:59 +0000
Files and hashes: 1: GmVe1_dUtE2thDPnKTTodQa1WTk.roa (hash: +YHOaXQXUcLXYGboOZLBoqiMUEPBTb2ggQGekMwXWOE=)
2: l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl (hash: buhY+Tzg5fsCoh6EeoA2QlnLWTNtD+NHEr0DmpOZFFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:8f:99:2d:c0:91:99:1d:a8:44:e6:06:c6:6c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977bfd99d35116f9c644194c36d9b646f73127c6
Validity
Not Before: Nov 11 10:00:59 2025 GMT
Not After : Nov 12 10:00:59 2025 GMT
Subject: CN=053c162e58e608bcce388e7030619adf74386858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:67:2b:72:3b:eb:3d:89:2d:dd:a7:01:fa:54:
e9:c7:84:4a:f0:f9:9f:73:12:da:25:e4:d1:e9:e3:
ce:03:4b:b3:e5:a2:c9:0a:5e:dd:27:85:cb:30:b4:
20:59:bb:e8:63:15:4b:cc:81:8a:bf:3d:8a:57:89:
e6:ff:cb:ea:98:f2:83:47:60:14:c1:58:43:2b:a2:
a1:7e:c1:5d:86:59:12:84:d7:9d:46:a5:c3:ca:8b:
e4:e6:8c:fb:16:eb:c9:a3:8c:87:ec:32:59:f1:cd:
91:94:32:3c:23:08:76:c8:fd:75:21:28:45:d9:ce:
91:e9:83:91:50:bc:e3:a8:fb:5f:9a:d4:6a:d6:60:
8e:61:3c:21:c0:a4:8c:2c:0a:62:df:f1:93:d9:de:
d5:23:ad:71:8c:f7:88:02:a3:6d:f8:a0:6b:2c:e6:
32:58:a1:e6:48:9d:51:89:2c:2c:7a:6f:1d:c3:56:
e9:a3:fe:12:e1:d1:b4:a2:37:14:4b:57:dd:aa:be:
ce:82:ab:57:7e:16:fb:18:52:6b:e5:fa:6d:d8:77:
77:9f:a0:a4:5a:82:88:47:8d:9e:34:0f:46:a9:ae:
ed:3e:7c:81:b4:2d:2b:a5:02:14:cf:96:25:41:e3:
15:b0:b8:dc:f2:f0:ae:9c:e7:5c:17:ba:12:84:45:
23:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3C:16:2E:58:E6:08:BC:CE:38:8E:70:30:61:9A:DF:74:38:68:58
X509v3 Authority Key Identifier:
keyid:97:7B:FD:99:D3:51:16:F9:C6:44:19:4C:36:D9:B6:46:F7:31:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b678f5-557d-4b5d-aa50-9a4ff0137012/1/l3v9mdNRFvnGRBlMNtm2RvcxJ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:84:7c:8e:84:99:e2:08:b4:57:61:c5:ea:7f:11:bf:71:aa:
03:66:de:d8:aa:e5:79:95:5b:cd:aa:c2:f9:ee:97:e9:00:51:
42:3c:15:9e:56:11:ed:53:7e:3a:b9:3f:6c:48:14:ca:77:d3:
81:20:95:50:74:6b:a9:5b:46:3e:db:4c:72:d5:4a:4f:78:96:
21:7d:21:9c:a9:72:c0:fb:26:6f:96:50:e1:b7:1f:4f:78:c6:
84:cd:c5:80:1e:1e:76:8c:6e:38:d5:e6:27:cb:f9:5e:36:4b:
35:01:61:8d:78:41:52:a8:a5:30:03:31:40:b6:08:d5:a8:14:
b5:d8:16:37:20:19:ee:63:eb:35:2f:ec:10:2a:b9:f2:8b:85:
84:e0:e1:a7:b1:5b:2b:a5:a9:54:3f:c9:57:08:6d:c1:ef:74:
73:9a:5f:ea:42:a6:56:bc:07:a4:b1:e3:a4:98:d6:6d:d9:55:
0a:39:33:6c:8a:f8:92:32:30:81:28:bc:fd:59:1d:92:2d:91:
d0:a2:20:9d:5d:ae:7d:67:f7:9d:94:39:33:fc:23:c1:34:92:
35:2d:89:bd:64:c1:02:35:84:5f:3e:54:90:5a:da:ba:09:b0:
4f:69:e4:20:4d:c1:2a:a4:77:a0:14:88:29:40:d2:93:e3:f5:
b4:63:43:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:45 2025 by rpki-client