Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
File: _l1M3gmNHKh_Tgqe64VZKOg9KT4.mft (raw, json)
Hash identifier: b2of58+jpKM8VjBEI4ZlPM2NSDhBbNMYMIuwgZZeqKg=
Subject key identifier: AF:55:7B:13:38:C6:57:23:BB:4A:35:23:B4:3A:ED:37:F1:E0:0E:1D
Authority key identifier: FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
Certificate issuer: /CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
Certificate serial: 019A71B943A2368B5978A6F822A833803964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
Manifest number: 0778
Signing time: Tue 11 Nov 2025 07:02:38 +0000
Manifest this update: Tue 11 Nov 2025 07:02:38 +0000
Manifest next update: Wed 12 Nov 2025 07:02:38 +0000
Files and hashes: 1: _l1M3gmNHKh_Tgqe64VZKOg9KT4.crl (hash: 3cKXeYnWmn/5H5TVEEnCETYtxLkza+9KtDcA+z6Q9kM=)
2: utZx0LvAiHOeptZQC75VXrzHyuM.roa (hash: wu5n7/gdVFeYXS3ZTu6uD37jiOfb6f60vWQYmSZ9Xfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:43:a2:36:8b:59:78:a6:f8:22:a8:33:80:39:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
Validity
Not Before: Nov 11 07:02:38 2025 GMT
Not After : Nov 12 07:02:38 2025 GMT
Subject: CN=af557b1338c65723bb4a3523b43aed37f1e00e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:37:aa:0c:98:3c:4d:ee:b0:07:77:e1:92:
57:4a:dd:ea:8b:d0:d0:41:6b:99:c5:75:23:fe:06:
ce:77:9b:60:7a:7d:81:f3:31:80:66:63:00:95:a1:
db:22:41:ba:ac:de:1c:6f:84:44:92:8e:fe:2b:a2:
98:f6:b2:c6:57:e5:b2:24:3a:ee:db:70:7b:19:12:
64:36:0d:10:3a:08:ed:98:f5:fd:ef:24:78:a1:3a:
c2:ec:45:c8:a4:38:79:ae:8f:40:7e:ed:5d:87:62:
84:48:f3:dc:40:e5:c6:c5:7a:e2:3f:7d:9a:0a:d8:
d1:88:f6:83:60:57:69:ee:aa:46:c7:01:36:59:2a:
cb:20:40:c9:7e:57:0b:85:38:25:c0:00:b1:f5:86:
cb:8b:39:69:01:78:e9:21:a3:d9:d7:b9:4d:48:98:
51:3d:b3:80:bf:83:77:29:a0:ad:b4:d2:fe:45:66:
f0:72:de:87:97:56:14:3f:64:5c:69:aa:cf:49:25:
6a:d3:ea:73:76:fc:36:cf:81:82:77:b4:c5:8c:f2:
7f:03:b2:e3:4b:99:f2:22:b0:9f:5a:a1:fd:40:f7:
0e:d4:f9:ad:15:fc:49:9e:a3:77:48:5b:2e:3d:df:
21:09:aa:41:38:4b:f1:62:87:6f:64:3a:d2:5f:3f:
21:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:55:7B:13:38:C6:57:23:BB:4A:35:23:B4:3A:ED:37:F1:E0:0E:1D
X509v3 Authority Key Identifier:
keyid:FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e3:48:26:ac:78:67:1e:ed:5e:9c:8c:19:97:fb:d3:40:54:
7c:71:57:ac:05:1c:bd:d5:44:c7:3f:fd:d4:75:b7:90:24:77:
c1:f6:a2:5f:90:af:07:6a:48:f0:ec:69:36:d8:11:f0:43:7c:
73:89:56:b4:1b:b8:12:da:f3:24:ef:ca:72:95:d6:17:af:1a:
3b:a5:ec:ff:a7:e3:ca:95:f3:7e:50:2a:86:c8:49:e4:38:7e:
f7:c4:b7:c6:80:58:55:6e:6b:68:69:20:85:ef:1a:60:79:24:
67:9b:07:bd:3e:e0:11:eb:4b:b5:cc:04:8b:12:c3:6b:ea:68:
5a:7a:de:d1:04:00:62:1f:e1:e5:d0:8c:dd:74:9f:7a:31:29:
71:34:c5:ca:75:38:a1:7a:18:f7:16:8b:95:e6:66:53:ec:6a:
37:5d:5e:bb:2c:06:f7:c8:60:56:23:4c:3a:47:bf:c8:e7:46:
c3:e8:81:87:8d:f0:c2:31:6a:74:78:cd:95:28:cb:69:b3:51:
5c:fd:f5:39:70:3d:71:95:a5:b3:ed:a3:34:76:4a:86:81:49:
84:3c:e2:13:0f:19:5f:45:e2:06:a9:21:44:a2:e0:49:b6:45:
f4:b3:2b:85:5c:b5:f8:42:0c:fd:c3:2d:54:d8:82:15:13:fc:
d0:c0:8b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:43 2025 by rpki-client