Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
File: l-rHUzef0i_2UVAz9RPcKCRjrS0.mft (raw, json)
Hash identifier: 09/1P9MQGF3WPNNKsiUtTKJ6jGlUMvD1dWcX5o0vqcI=
Subject key identifier: BF:AC:DE:FC:A5:0B:02:E9:C6:85:F4:11:CC:CE:8C:54:3C:26:4F:39
Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Certificate issuer: /CN=97eac753379fd22ff6515033f513dc282463ad2d
Certificate serial: 019A7225F515416F9124EE3331BD46C37790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
Manifest number: 0C01
Signing time: Tue 11 Nov 2025 09:01:21 +0000
Manifest this update: Tue 11 Nov 2025 09:01:21 +0000
Manifest next update: Wed 12 Nov 2025 09:01:21 +0000
Files and hashes: 1: FlOhwM63q5uT7aqavOHtoCPIxiA.roa (hash: CII+st3ErTYXreHn6XwAid/3W1WLBVtyHJl2G4GqMT4=)
2: l-rHUzef0i_2UVAz9RPcKCRjrS0.crl (hash: 5x60I5VrMY95kCkqOfVCvhX0KT0Lb/E+Q4rMtbOyHH4=)
3: nQRnHq7h_JnFS_joZF0ZMuZnfj4.roa (hash: Y4OxWT9eJWsPkC/UoZ21OhHIIi+5C+/UxC4w6spkzhk=)
4: oQshIdOiDv_qCu3Qu0L_1blek4U.roa (hash: rA5NHYZiid8aQEyiH3PeuTM4SKfbRAu+sIpmolcdW+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f5:15:41:6f:91:24:ee:33:31:bd:46:c3:77:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d
Validity
Not Before: Nov 11 09:01:21 2025 GMT
Not After : Nov 12 09:01:21 2025 GMT
Subject: CN=bfacdefca50b02e9c685f411ccce8c543c264f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:da:41:df:a0:17:43:aa:55:e0:d6:33:58:ab:
cd:f7:1a:da:82:23:b4:e4:35:c9:14:55:fc:dd:86:
ad:39:b3:a0:07:3e:72:50:3a:c3:67:de:5d:34:83:
a4:14:b9:03:3f:da:4c:4e:8a:33:70:ad:dd:01:7f:
36:f5:74:19:71:ae:17:0b:d7:a2:f1:62:c9:1d:1a:
14:59:03:51:8d:a6:d7:ba:01:09:fb:76:f9:f1:cc:
75:91:ac:86:44:2f:87:31:39:62:65:08:16:16:e6:
93:17:75:2a:dc:92:a3:b8:2e:40:7d:58:45:1f:90:
27:27:83:4e:bd:43:3f:42:c2:8b:a2:7c:98:41:86:
44:6c:81:1c:4d:68:47:23:21:8d:b8:79:8d:96:2b:
ed:0a:18:13:a9:68:56:14:64:f9:e6:0d:79:65:cb:
36:c8:f2:9b:3a:b3:48:10:ba:d9:1e:1b:1d:87:bb:
a5:a0:b7:e6:1c:a7:0e:90:e8:4a:4f:79:52:37:98:
33:ac:71:8e:3f:ad:ae:70:d0:bf:50:93:e7:1c:58:
ce:93:df:46:85:76:4a:f3:e9:bd:28:79:2b:7f:bc:
f7:9a:5c:60:bf:5a:a1:97:51:cb:cb:b0:19:b3:f7:
17:5e:ff:39:b7:d1:30:6c:d5:e5:03:c0:8f:f5:6f:
56:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AC:DE:FC:A5:0B:02:E9:C6:85:F4:11:CC:CE:8C:54:3C:26:4F:39
X509v3 Authority Key Identifier:
keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:11:90:7d:d8:25:ec:70:04:45:26:ec:84:2d:4e:8d:50:52:
cd:10:a4:57:b0:fa:b6:51:ee:49:2a:96:7e:83:6c:17:10:af:
71:0c:4e:82:4d:14:f6:3a:f6:52:a5:21:e0:1d:aa:55:b6:c5:
95:7c:93:f4:88:f0:c0:85:b2:26:23:e1:48:d0:e9:a0:80:c2:
38:ee:34:45:82:54:35:cf:c3:81:93:97:08:11:b7:2c:49:aa:
9f:9b:ef:92:b3:2d:8e:02:20:5c:0d:1a:28:c4:13:40:d5:83:
7e:dc:3f:d8:d4:91:62:f0:c2:88:ae:ac:1a:e7:62:19:7b:66:
f8:9e:a9:6d:19:52:c6:c0:1a:79:65:f6:5f:54:64:8f:23:46:
1b:4e:c8:94:79:e6:1f:9d:aa:42:d8:99:f9:d5:da:3c:b9:a2:
f4:96:d9:57:37:71:c6:f8:ba:bc:f6:d3:cd:58:5f:97:2b:58:
69:f7:0f:d7:45:51:92:fe:0f:15:05:c5:f3:4f:24:0b:dd:a6:
c2:ce:e1:38:93:7c:cd:43:3b:71:8c:e2:a5:de:aa:0c:8e:ae:
b7:5b:55:fa:9a:73:0e:59:9d:0e:4d:0e:d8:c6:c4:6d:2c:f5:
ea:68:4e:3c:6c:24:90:1d:d6:c5:26:f1:f2:b7:20:39:af:56:
e7:d1:71:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:55:56 2025 by rpki-client