Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
File: _L5iN4u1gK9O1wv6NavIQJRdeAM.mft (raw, json)
Hash identifier: 07EzGcgNKeJpLN/8SnZeS3DS/zZdEDPCZZ3I5fmIRLE=
Subject key identifier: 11:23:37:5D:75:21:39:26:ED:B9:28:50:96:0A:F2:4C:C1:90:F1:79
Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
Certificate issuer: /CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Certificate serial: 019A711358E3694151D9FB169FBC9CA4DBB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
Manifest number: 0E71
Signing time: Tue 11 Nov 2025 04:01:24 +0000
Manifest this update: Tue 11 Nov 2025 04:01:24 +0000
Manifest next update: Wed 12 Nov 2025 04:01:24 +0000
Files and hashes: 1: QnsaffS-YNNtCHhHEhQ4OKBUBSo.roa (hash: jUwDngRPHw2N9VFfgK1oar/80VGpjjFHaEr/YKYFVpE=)
2: _L5iN4u1gK9O1wv6NavIQJRdeAM.crl (hash: Roth+XGtKrJd+bMoAVv0qBFiHCPx1tLZolgMF+VcfeI=)
3: qNut__4tdZLk1BbU8qRMsO7FLqk.roa (hash: 7IpgvtFdow3hVZD4yaQg6efxiw2tuEtQLh9oReYtwg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:58:e3:69:41:51:d9:fb:16:9f:bc:9c:a4:db:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Validity
Not Before: Nov 11 04:01:24 2025 GMT
Not After : Nov 12 04:01:24 2025 GMT
Subject: CN=1123375d75213926edb92850960af24cc190f179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5d:65:b9:14:fc:10:0a:57:1e:6a:f1:1d:25:
f0:6f:76:6a:e1:4f:c0:d7:c0:90:26:4b:0f:3f:f5:
2c:12:1a:f9:75:61:a0:04:15:a7:55:2c:84:e0:b2:
3b:6f:c4:7a:70:0e:51:bf:9a:22:d1:e0:bc:67:e6:
71:f9:08:27:d1:e0:41:b4:6c:c3:4f:e6:e6:73:27:
51:22:5b:3c:21:f6:e4:56:5c:c0:06:c1:88:58:14:
81:5d:e5:d9:3e:3e:ce:72:27:29:f7:15:11:2e:45:
a8:c2:ba:4a:2c:a7:97:25:25:c9:3d:77:ee:d6:6e:
bf:61:14:92:ac:c6:31:f2:91:67:81:3b:7c:54:68:
16:03:f7:a2:76:03:ec:6b:e5:8a:98:be:76:0c:1a:
7a:c1:04:12:95:24:b8:b9:af:f3:15:f0:19:a0:ed:
fd:cb:78:64:2e:37:3f:1b:3a:94:21:94:5d:9d:49:
ec:f1:84:e6:2b:69:e8:6e:da:8f:6f:16:1e:72:3b:
a1:a8:97:af:3e:82:13:f4:1b:66:dd:9c:a5:71:e8:
9c:6e:35:69:ac:52:45:3a:09:2c:2e:ad:a4:c8:39:
6e:75:da:d9:cc:b9:29:f2:29:47:74:0f:01:9c:e9:
3d:ef:ca:0a:da:de:8c:bb:70:80:92:0e:28:eb:f4:
9b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:23:37:5D:75:21:39:26:ED:B9:28:50:96:0A:F2:4C:C1:90:F1:79
X509v3 Authority Key Identifier:
keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:71:90:fb:f3:6b:8d:bc:94:48:da:d0:ee:ec:06:7d:28:1f:
05:80:31:5b:cb:96:db:ee:33:3b:ab:ba:a7:d2:82:14:1f:9a:
22:4a:be:10:76:28:05:84:2b:75:28:4d:52:ba:06:36:87:f0:
cb:1e:41:23:a5:fa:b6:c8:98:23:41:b4:0f:f4:96:7c:5b:54:
ca:ba:57:cf:fe:5f:7c:0e:e1:40:68:c0:74:7a:4b:a0:b2:ad:
d3:38:3c:87:2d:73:70:3a:95:0e:40:7e:0d:77:0c:8c:1f:ff:
72:9d:19:81:38:7b:84:16:c5:5b:79:c9:e0:f4:22:02:15:3a:
29:26:d5:31:17:b6:16:ed:69:0e:a6:96:03:19:8e:81:2c:43:
ee:29:ff:dc:cc:da:04:b6:f2:70:b3:59:b9:21:05:6a:1a:56:
b5:0d:ac:f5:b4:ce:7b:01:eb:86:12:36:00:7a:e9:ad:0b:ff:
77:fd:fc:01:2b:10:f8:84:9f:49:ce:bf:5b:75:5b:2b:b4:c8:
a1:05:8d:41:9d:94:9f:d7:7f:3f:22:d3:82:22:63:55:8b:70:
37:ee:4d:a8:19:bf:56:dd:1b:89:23:0c:14:ee:02:6a:9b:85:
d4:43:0b:8d:ac:0a:6a:af:42:f9:70:93:92:41:40:84:b9:9c:
b1:ab:79:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:28 2025 by rpki-client