Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
File: l0417CGA2uvRvz3URAOp4L_LVso.mft (raw, json)
Hash identifier: DeEAAoYXcDU4iEIaPVgjMMtSpE1mX0VfKEzk8FgFQWw=
Subject key identifier: 22:A0:1E:D0:23:D9:D8:3D:F0:DC:A1:7E:76:96:4B:50:08:62:77:66
Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
Certificate issuer: /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Certificate serial: 019A725CCBAF001939AC8F59EF1460FAF370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
Manifest number: 0692
Signing time: Tue 11 Nov 2025 10:01:15 +0000
Manifest this update: Tue 11 Nov 2025 10:01:15 +0000
Manifest next update: Wed 12 Nov 2025 10:01:15 +0000
Files and hashes: 1: HxAtI9yKZCbpxH862uX_45QQRAI.roa (hash: 3h+38XAT5SiIVpNs8Lk+14nxc9RTgj1HBur0gfSR11E=)
2: d-gD_stjAzo445PqKWpkeuPKi48.roa (hash: N9NpLKhmhDQnk+b+LZB+ZZNehcKI5fvIIHeixBGutWI=)
3: l0417CGA2uvRvz3URAOp4L_LVso.crl (hash: XUViuTgbU1/1GZE1YLkJlRc2nR2OH6KkRyrIccnfjkc=)
4: mEa-TLKrSv59f8M6kG19lj9ZNsk.roa (hash: B4NNTwi5q8vUiOtaP5idLpSIlDDRQuKnJ09MN8x4pKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:cb:af:00:19:39:ac:8f:59:ef:14:60:fa:f3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Validity
Not Before: Nov 11 10:01:15 2025 GMT
Not After : Nov 12 10:01:15 2025 GMT
Subject: CN=22a01ed023d9d83df0dca17e76964b5008627766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:31:f1:f6:82:30:05:cd:6e:bd:37:48:09:ae:
fc:14:bb:04:d5:32:69:37:16:20:ee:b2:03:e7:b5:
05:ea:2e:e0:34:5f:7d:c9:a5:d0:e0:81:78:67:ae:
a5:80:e9:59:d3:9f:e7:af:21:cc:93:f1:f9:b1:e1:
23:b9:42:ea:4c:5b:00:2d:f0:55:70:72:4d:9d:31:
a7:68:78:d6:12:ba:80:f2:34:6c:d9:3c:de:1a:d0:
35:1b:1f:aa:07:d0:d0:84:30:ca:4d:48:33:d6:44:
e7:0d:ff:93:c0:c3:cf:d0:21:7c:8e:ff:c2:72:16:
e5:e5:45:98:cd:04:10:3a:10:dd:1f:af:11:a9:1e:
04:d1:2c:23:56:02:28:dc:fe:87:91:b7:2d:d6:a2:
d9:05:f8:e8:88:7d:0d:3a:4a:0d:25:37:c1:6a:02:
7f:c3:9d:46:f6:6c:74:63:73:db:77:6b:39:79:ac:
b6:02:27:e1:6a:da:06:8e:dd:c1:ff:d3:54:0c:01:
33:93:08:ff:69:2d:9e:77:96:21:50:22:c8:25:c1:
6a:f0:64:c8:88:ab:8d:1e:f7:c9:57:e8:4e:c5:7f:
2d:3a:4c:5f:ef:bd:a0:85:9d:01:b5:b8:64:cf:57:
43:66:b7:4e:86:4d:05:45:87:b3:33:82:19:ef:5c:
64:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A0:1E:D0:23:D9:D8:3D:F0:DC:A1:7E:76:96:4B:50:08:62:77:66
X509v3 Authority Key Identifier:
keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:01:77:f4:63:db:9e:e9:94:01:ef:8d:70:f0:01:9c:e0:36:
77:f1:95:04:47:64:a7:72:dd:e0:28:91:19:2b:89:81:84:35:
98:3a:11:a8:9a:20:6c:9a:ec:79:8b:20:8f:34:62:b7:3e:50:
b8:ce:82:91:4f:36:05:b4:e0:51:30:16:e5:20:65:92:5e:7a:
57:45:7a:69:bf:2c:51:94:35:a7:12:8c:93:01:40:ae:f2:0e:
e1:10:ca:f7:c5:f4:b7:59:f9:5c:14:42:e0:8a:54:52:68:26:
32:f6:6f:33:d8:5d:7a:52:98:01:cb:e5:70:3d:87:30:92:2b:
1f:f5:94:85:57:2b:60:c1:bd:78:36:f4:06:b8:80:bf:94:09:
1d:b9:a5:e4:47:19:d4:ec:6a:30:a5:3f:d9:72:92:e4:1a:77:
7f:71:b7:15:8c:e4:a7:49:1c:e3:3f:5f:e1:3c:c4:f5:f9:59:
17:78:3d:66:85:5b:e1:d8:46:22:dd:f6:a7:73:dc:7b:c2:d3:
a0:9e:48:6e:af:25:1a:00:59:35:7a:09:17:af:34:7e:87:e5:
08:5b:c9:cc:d8:62:9b:0f:c0:31:de:b3:5e:e2:91:ef:7c:d3:
5a:49:f4:b0:49:8c:3a:ce:57:05:e4:75:6a:cc:36:14:1e:8f:
e2:23:28:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:48 2025 by rpki-client