Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
File: l9nve9MDJN7fcLrOS72ldgwyaxo.mft (raw, json)
Hash identifier: OUhWOnBfecj2smLOh15MlgH7Wck9a0csMeCm4210jRo=
Subject key identifier: 24:84:19:63:2E:13:F0:C1:93:29:98:8A:57:64:30:88:41:7E:42:2D
Authority key identifier: 97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
Certificate issuer: /CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Certificate serial: 019A240A07E830CB90D9E0C9F9864CD660F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
Manifest number: 0FBE
Signing time: Mon 27 Oct 2025 05:00:28 +0000
Manifest this update: Mon 27 Oct 2025 05:00:28 +0000
Manifest next update: Tue 28 Oct 2025 05:00:28 +0000
Files and hashes: 1: N0s8xKfa_bF09tlRJvpRIiwnl5w.roa (hash: 90x2GkpRoKN6DUPIyJuUzKhNvSMsOvRGP9u2xtqB9lE=)
2: l9nve9MDJN7fcLrOS72ldgwyaxo.crl (hash: Fe3l1JEbI+zM2rhEBXc7bcJiLVwMue4mdVKX8dDf1GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:07:e8:30:cb:90:d9:e0:c9:f9:86:4c:d6:60:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Validity
Not Before: Oct 27 05:00:28 2025 GMT
Not After : Oct 28 05:00:28 2025 GMT
Subject: CN=248419632e13f0c19329988a57643088417e422d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:d6:2f:e4:e0:cf:c0:5c:60:49:57:55:9e:
27:f8:82:29:2d:6b:21:3e:bb:12:39:ab:0b:59:ab:
89:c2:38:cc:3d:e3:25:40:64:f2:73:bc:0a:13:0c:
3c:b4:e4:75:6d:a6:d1:97:81:83:b4:57:58:4b:58:
c7:1a:15:7e:77:98:a4:38:13:b4:ce:7d:96:24:07:
14:98:50:42:69:cb:67:bd:ab:c7:fb:4a:c4:e9:66:
ee:ca:5c:38:7e:d2:a6:20:db:e6:d8:2b:d1:54:82:
50:b4:7c:7b:13:fb:33:2f:d3:db:36:d2:ad:3b:bd:
45:77:27:d9:d1:6c:fc:3d:ef:68:aa:53:01:cd:9c:
b8:cb:67:b7:48:40:c6:3b:49:88:27:3f:fe:89:7b:
a5:3f:b3:c9:53:8c:3f:eb:85:36:c7:b4:09:43:ba:
9b:8f:37:b4:a8:18:e3:f7:2f:92:ad:e3:1d:61:69:
db:d5:3c:69:2b:56:70:e6:80:58:84:1f:d5:c2:46:
75:86:32:44:35:2a:44:8b:ea:32:f9:b0:f4:e5:cc:
c1:c9:88:63:49:80:59:6e:96:bf:2b:ad:e6:23:7c:
76:27:e8:f0:ff:c5:4f:b1:fa:62:1c:b1:a7:32:3e:
36:bd:dc:01:9e:c1:b8:29:81:05:52:f8:7a:9e:98:
d6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:84:19:63:2E:13:F0:C1:93:29:98:8A:57:64:30:88:41:7E:42:2D
X509v3 Authority Key Identifier:
keyid:97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9a:ab:51:28:f1:d0:53:c3:b4:9f:f9:83:59:f3:38:7c:ed:
71:71:d9:1b:56:04:f8:21:67:4a:b6:f6:25:a7:5e:4a:cf:e4:
4f:65:06:ad:db:c6:f4:6a:40:e2:4f:d2:3b:06:9f:44:b5:54:
42:ae:92:5d:f3:a8:d3:19:14:d2:61:7a:1d:12:89:8e:e4:9c:
57:b8:d3:2f:f9:00:5e:3c:86:4e:35:7e:47:3f:75:3c:28:e5:
11:10:73:e0:f2:1b:c3:0b:e5:39:82:e9:42:6a:23:ec:d6:75:
f9:ac:b7:f8:e3:6f:0d:13:e0:aa:0e:3a:e2:ed:0c:c8:a2:a0:
54:22:a5:b7:2d:c9:01:81:53:ec:bc:06:0f:40:73:fc:96:f8:
d2:f4:7f:aa:04:2b:7d:91:35:09:66:63:d8:04:ef:da:c3:bc:
ac:64:bd:01:fb:19:46:dd:a9:60:80:d7:b8:79:f1:04:ab:f2:
cc:4c:4b:55:20:68:af:1a:86:44:77:1b:29:2c:b9:fc:10:26:
11:b2:7a:ec:07:a6:86:d0:b2:bd:93:ba:7f:6e:2b:4d:22:c3:
ed:44:c3:a1:16:dd:bb:17:da:0c:32:c0:f8:04:4a:23:be:66:
2a:ce:6e:e1:e9:f3:88:27:9f:e0:25:3d:d9:c3:5f:40:f2:c7:
3a:10:c1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:09:19 2025 by rpki-client