Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
File: l6r4kriZHowCd5yy24ZNMh7r6QU.mft (raw, json)
Hash identifier: tY40HkMYHeht6Ycbs8xFb5Fqpc/CDzPXgPyfDJwcs/s=
Subject key identifier: 8A:98:06:8F:94:78:DD:1A:3C:0E:FC:F9:EF:E1:F6:FE:46:57:26:E2
Authority key identifier: 97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
Certificate issuer: /CN=97aaf892b8991e8c02779cb2db864d321eebe905
Certificate serial: 019A22C0D168D07E63BF9C93B335337A0E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
Manifest number: 0DD7
Signing time: Sun 26 Oct 2025 23:00:53 +0000
Manifest this update: Sun 26 Oct 2025 23:00:53 +0000
Manifest next update: Mon 27 Oct 2025 23:00:53 +0000
Files and hashes: 1: Sf5t6YxNuVy_QmmCDlAJFdLydbs.roa (hash: 84pXBKdWUeBM3XRDHyhAVZXwwfPh9reL6aBdIjVrlKs=)
2: l6r4kriZHowCd5yy24ZNMh7r6QU.crl (hash: ZQlvyOUxnp+ZXbSxt68smsrNzCrnS8UtezuD5j2nq3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:d1:68:d0:7e:63:bf:9c:93:b3:35:33:7a:0e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaf892b8991e8c02779cb2db864d321eebe905
Validity
Not Before: Oct 26 23:00:53 2025 GMT
Not After : Oct 27 23:00:53 2025 GMT
Subject: CN=8a98068f9478dd1a3c0efcf9efe1f6fe465726e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cc:e0:36:69:d7:5f:54:2b:09:d1:c1:2d:f9:
bc:ed:8d:04:61:b8:b5:bc:42:3a:b3:a0:e3:09:41:
62:3e:6c:06:c1:7f:aa:8e:cb:b8:72:83:3f:ae:c8:
2b:33:99:ac:75:cf:72:11:f6:b1:c9:71:50:bf:16:
d7:7d:85:6b:ac:ad:3a:3b:74:67:b4:77:de:d6:20:
e0:e8:33:ee:93:aa:b0:1b:da:fd:45:bd:6b:9f:39:
31:aa:77:19:a1:70:2b:50:ee:7a:84:f5:77:33:d4:
f1:30:a4:b9:f8:59:6e:09:e4:6f:ad:2b:f8:a6:ab:
f4:a2:5d:e7:95:d5:bb:fb:d3:0f:92:c4:b8:68:60:
76:c5:98:06:02:39:7f:76:38:8a:a7:e8:1c:a7:0e:
d5:39:b3:f6:9c:c3:5c:ef:4a:73:f9:59:e9:bb:94:
02:d7:b3:ee:79:b3:9f:ba:f1:1b:99:4f:8a:e9:9f:
2f:7d:94:4f:b8:b3:85:d0:9b:c5:90:e4:b4:87:3a:
f4:6f:0d:e5:bb:7f:07:bf:fc:f8:bb:e8:c7:c6:1f:
ed:55:45:39:5e:1f:68:f9:6c:0e:57:0b:6d:92:ef:
0e:35:e2:b2:56:91:59:f4:73:cc:5a:86:07:65:e5:
fc:03:89:3b:1c:5c:11:6d:74:b4:87:f0:84:4b:9e:
70:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:98:06:8F:94:78:DD:1A:3C:0E:FC:F9:EF:E1:F6:FE:46:57:26:E2
X509v3 Authority Key Identifier:
keyid:97:AA:F8:92:B8:99:1E:8C:02:77:9C:B2:DB:86:4D:32:1E:EB:E9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6r4kriZHowCd5yy24ZNMh7r6QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41fe1b-2f0e-4faa-9fd4-ca746867dac8/1/l6r4kriZHowCd5yy24ZNMh7r6QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:85:c0:41:30:33:a9:f4:ab:38:2f:59:b7:7f:a3:b1:2e:f6:
f6:d6:00:e2:e1:c8:31:68:35:e4:b1:d9:08:52:b7:67:6a:8e:
4b:4c:03:5d:7e:d2:ce:35:36:e9:b5:5f:32:f6:cc:55:9a:56:
70:33:1d:e2:8f:4c:ab:38:84:ae:25:21:cc:c6:3b:4f:37:d6:
ae:47:5a:8c:51:17:a8:07:18:25:0b:28:45:cd:95:a8:2d:38:
ee:d3:54:ab:48:2e:22:f5:65:a8:06:2d:c6:4e:da:3c:73:19:
f1:f9:58:71:5a:f8:bc:39:85:c7:fe:34:74:d2:46:bb:3c:4d:
1d:86:a4:13:bb:cc:39:17:3e:da:79:34:a2:1b:5e:ca:ba:96:
0a:40:fe:a8:09:4e:54:b0:d6:4a:32:78:0b:e4:b6:43:e7:48:
8f:e0:0b:e4:2f:6d:c2:13:f5:61:d8:a8:86:65:74:0f:8c:46:
02:54:e2:72:b7:08:46:1f:3a:98:a8:2b:6c:dc:1f:7c:02:a3:
12:b0:a1:54:39:36:b0:15:a4:a7:2b:2c:c7:60:98:86:4b:b9:
4c:dd:12:b4:71:ba:83:01:25:bc:c2:a3:78:e9:3c:9b:9a:5f:
5a:67:f4:34:49:5c:9e:44:8c:47:25:9f:ca:3a:f2:6d:8f:57:
d1:fd:9f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:55 2025 by rpki-client