Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
File: l96FxoT8_4PsQUirX29nzRUE-T0.mft (raw, json)
Hash identifier: Trv64cYFBoZTYrNz66DwcaDzzEGaL3mPNpnc11QIRp0=
Subject key identifier: 10:47:CC:98:0B:E3:BA:23:D9:6C:64:CA:09:47:46:18:9B:36:D6:2C
Authority key identifier: 97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
Certificate issuer: /CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Certificate serial: 019A71B859CC1FD4CCD86C21BC9C9593C4F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
Manifest number: 1236
Signing time: Tue 11 Nov 2025 07:01:38 +0000
Manifest this update: Tue 11 Nov 2025 07:01:38 +0000
Manifest next update: Wed 12 Nov 2025 07:01:38 +0000
Files and hashes: 1: aNefWas-v_WpGI-_669JeJcpGCE.roa (hash: AyqK/NRp/xUAyry2Wae2nQWK8xpykIL1yZ7NXpMhO2U=)
2: l96FxoT8_4PsQUirX29nzRUE-T0.crl (hash: A1Z/Z4lVeDMGr05oNULYTCNjchdtev9r0N+qCUp3QYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:59:cc:1f:d4:cc:d8:6c:21:bc:9c:95:93:c4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d
Validity
Not Before: Nov 11 07:01:38 2025 GMT
Not After : Nov 12 07:01:38 2025 GMT
Subject: CN=1047cc980be3ba23d96c64ca094746189b36d62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a2:23:46:86:e3:67:38:34:ec:63:91:4e:e5:
2d:9a:08:d6:80:53:a3:a5:63:85:f3:ce:e1:2c:af:
10:fa:bf:c4:04:b6:f4:a4:46:67:b7:ab:05:be:ad:
2f:c4:4b:f1:7f:28:c2:4f:3b:a6:77:1e:2a:0e:cb:
10:28:37:0f:70:b7:3f:ea:27:5b:da:88:d0:a8:64:
c5:7a:d4:90:44:7d:32:96:73:b4:5c:20:03:e4:16:
92:44:40:52:ff:d9:e0:97:a3:07:20:f8:a6:06:11:
45:29:78:ec:39:13:13:8e:ec:0a:7b:94:2b:e0:f0:
13:29:d1:ac:0d:7c:29:b5:7f:d3:ae:d5:b7:40:c4:
f6:7a:a1:9a:cc:11:ba:47:83:1a:96:8d:b5:4f:2e:
4a:f4:3b:be:51:64:e3:98:dc:08:ba:02:ca:79:e7:
11:26:55:dc:52:87:45:4b:46:4b:f9:58:3b:56:9c:
e8:9b:d1:67:1f:b0:f2:03:4b:94:df:60:0e:6f:3b:
e1:c4:70:5d:65:86:de:49:30:2e:24:5f:c1:8d:fa:
ce:87:3d:99:ca:1e:8d:4c:73:a6:cd:f7:a7:47:61:
28:01:d6:45:5c:c2:37:5b:60:56:6d:04:5a:26:60:
02:f7:94:80:e6:09:41:6f:52:da:77:30:ec:e8:5a:
42:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:47:CC:98:0B:E3:BA:23:D9:6C:64:CA:09:47:46:18:9B:36:D6:2C
X509v3 Authority Key Identifier:
keyid:97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0c:e8:4d:59:6c:5c:48:a0:08:71:24:77:68:1a:25:15:34:
75:69:5a:d7:ab:6c:17:0a:77:38:91:e4:86:35:2e:ed:82:89:
b3:53:b1:3b:dd:40:70:78:56:9f:0e:be:b4:5b:2f:75:0d:6d:
4c:44:96:f5:3a:cb:d2:8c:81:11:68:ee:28:ce:e2:4f:5b:d0:
82:b5:96:97:0d:be:37:85:89:49:70:1c:91:d9:c6:cd:b3:a3:
26:b2:52:6c:69:b9:09:19:15:a4:24:af:ae:3d:e0:84:76:20:
68:d4:ed:63:30:ce:f6:d2:f1:3d:9d:4b:24:67:c0:5e:7c:c8:
8f:3e:71:65:1f:1f:3c:f0:cc:e8:fa:ee:89:07:ec:3a:5a:8c:
fc:f3:61:a7:da:39:28:06:b3:6f:b0:9f:d4:5f:05:87:34:60:
2b:f0:2e:82:c1:80:86:f6:12:ca:f6:68:9a:03:28:20:a4:68:
13:52:ec:03:75:1c:81:02:48:b2:2d:58:93:05:2a:42:5f:c4:
b2:01:14:e4:e5:3f:38:4a:a0:dc:35:5f:64:07:7c:86:c2:32:
f2:9d:47:f0:58:61:47:8f:c7:f6:53:19:06:b7:65:90:4b:f3:
cc:40:ab:07:71:0c:cd:28:19:cb:27:aa:23:57:1c:b8:cb:d7:
ef:8f:ad:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:28 2025 by rpki-client