Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
File: l8dX8vOyKQu8KNZfm98AFvYfE5c.mft (raw, json)
Hash identifier: TazrK2BjXFV3lUZaJIg4DNgw+Y65C95eikIFC62rub8=
Subject key identifier: BA:6B:00:17:37:4B:EF:31:D1:B1:BF:68:7C:D0:40:F1:06:19:32:37
Authority key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
Certificate issuer: /CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Certificate serial: 019A71B94BC8EEDFFDD4C01528F2CF6AED3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
Manifest number: 16C7
Signing time: Tue 11 Nov 2025 07:02:40 +0000
Manifest this update: Tue 11 Nov 2025 07:02:40 +0000
Manifest next update: Wed 12 Nov 2025 07:02:40 +0000
Files and hashes: 1: jrvc6kmWjKHmuF_8SsZy0ZuPTP8.roa (hash: Z+xoWww5SsoPK3NcXFL/FecEhSX4cgiZ8Poe3txV32s=)
2: l8dX8vOyKQu8KNZfm98AFvYfE5c.crl (hash: fAdMjq6Z/UQtdestPMTVz2T+I9qhTMrw4FG44kNpeto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:4b:c8:ee:df:fd:d4:c0:15:28:f2:cf:6a:ed:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Validity
Not Before: Nov 11 07:02:40 2025 GMT
Not After : Nov 12 07:02:40 2025 GMT
Subject: CN=ba6b0017374bef31d1b1bf687cd040f106193237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:bb:1e:8d:6e:9f:9a:63:6c:a0:aa:73:bb:
d0:8d:4b:99:eb:2a:92:f2:8a:3c:c1:63:7c:17:1e:
6f:c0:f5:af:3c:df:36:65:72:bb:ed:4e:3f:62:61:
9f:bd:6d:24:0f:94:1b:83:e3:10:73:c8:ab:ef:ca:
4a:2f:de:9f:ac:19:fe:cb:11:00:2e:45:32:d5:41:
3b:50:ce:2e:4c:49:c9:6c:fc:84:49:a3:9e:91:0f:
cf:6b:e8:b2:57:8c:02:85:ef:5b:53:af:7c:ed:aa:
48:9a:95:da:0c:5c:d4:6f:7c:e6:1e:2d:3d:f0:fe:
60:08:b7:07:ab:07:10:64:86:b4:6e:b8:7f:a6:bd:
80:a2:40:76:ad:40:e2:8d:7b:6b:d4:10:6d:02:47:
a4:7b:1b:fe:4e:a1:6f:a1:62:16:db:13:d2:93:59:
30:26:10:cc:9f:03:90:78:be:b5:c0:40:c3:0a:93:
97:4d:41:a7:7b:c1:94:ff:61:4b:b9:79:32:67:88:
5d:cd:de:84:a3:8b:79:54:74:cf:ee:db:bf:18:01:
4f:0d:5c:d7:27:a6:d1:4d:c6:86:1f:28:9d:60:9a:
8e:73:be:ec:e0:52:da:9d:5c:2a:81:89:69:4a:82:
bf:d8:8b:4d:63:10:bc:5c:79:3f:94:5b:88:c1:ec:
2b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6B:00:17:37:4B:EF:31:D1:B1:BF:68:7C:D0:40:F1:06:19:32:37
X509v3 Authority Key Identifier:
keyid:97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:fe:b7:7f:e8:52:c4:2a:81:d2:a2:4d:99:6e:7c:d1:64:a6:
4d:e8:b7:95:77:d5:b2:b0:82:a2:92:c5:e2:67:19:4d:43:28:
3e:e3:53:2e:4f:95:e3:fd:68:62:55:f3:c3:7d:9c:16:f7:41:
94:fb:3b:6e:dc:53:c0:21:7b:20:99:c4:39:14:17:6d:2f:0c:
f2:7f:20:0a:f7:21:b3:50:88:f7:0f:42:ae:f3:5d:72:10:ca:
b5:df:9a:ae:29:88:cb:79:23:ac:49:66:f2:f1:a0:5d:3f:0d:
36:a1:8f:05:8c:68:e9:d3:83:c4:8d:33:f7:85:ad:51:7f:7f:
30:24:a4:df:61:4d:75:b5:50:8e:62:09:09:07:df:df:fc:dd:
3b:e6:60:4d:d5:3d:cf:d9:db:47:1c:18:50:d4:6e:4a:a4:31:
d2:90:d7:ee:91:ad:75:8e:be:35:ea:14:86:93:24:e4:ae:c5:
c3:bf:d9:37:c1:3d:8a:8a:a5:e2:9e:d7:71:ea:bf:ab:26:40:
30:58:6f:d5:c2:84:4c:65:0b:37:a3:8a:7d:46:ee:cf:49:b8:
6b:dc:90:f7:86:22:ea:10:d9:65:44:e1:0a:9a:65:1c:8f:4b:
98:c4:1e:ef:95:ca:1b:96:a4:27:55:11:63:cb:51:60:7c:cc:
43:72:2e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:30 2025 by rpki-client