Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File: l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier: 8GthQU3QqdbhNlIPe9qNMKTYEyDp9Zlvimj3Tb4Z2e8=
Subject key identifier: 73:B0:B3:D6:81:6E:38:23:DD:85:E2:72:CF:BD:C6:C4:31:1A:B4:A5
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial: 019A7112DCFC60C0C4AE6BAEF99F4FFB3708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number: 05F8
Signing time: Tue 11 Nov 2025 04:00:52 +0000
Manifest this update: Tue 11 Nov 2025 04:00:52 +0000
Manifest next update: Wed 12 Nov 2025 04:00:52 +0000
Files and hashes: 1: 0u5MB7MHn7bL2gqyo5sqX2hHnxg.roa (hash: dTLKNW3bqLmuZGafffFw/K7jFyKobZ/sSRa/waRYTh4=)
2: V2RodRkZh7eC6bXk6s50iKPnz20.roa (hash: flwyJ5HDdlUN6kAnMIhAje5bgLCjv6WkxqxL4dovgJw=)
3: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: jLrbvPnf8FuUmuEanYJQuDAs8e9iyr4r+H20jGIzbYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:dc:fc:60:c0:c4:ae:6b:ae:f9:9f:4f:fb:37:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Validity
Not Before: Nov 11 04:00:52 2025 GMT
Not After : Nov 12 04:00:52 2025 GMT
Subject: CN=73b0b3d6816e3823dd85e272cfbdc6c4311ab4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a9:7d:58:7c:e3:45:59:86:c1:c3:35:70:30:
34:1c:da:f9:18:bf:b0:95:c5:d6:a3:a2:1f:e2:88:
33:63:f2:40:59:f7:25:7d:18:2c:be:f6:5e:80:3e:
af:b7:8f:cf:2f:ff:30:9d:59:39:4c:39:99:6b:80:
24:a9:98:dc:b8:b2:29:01:b1:58:5c:36:d5:a8:c2:
f3:65:c5:2b:17:63:6e:1c:61:76:3d:82:f3:e8:3d:
f1:73:7a:75:46:98:7d:86:42:e2:29:87:75:05:6b:
f6:1d:34:ea:cd:48:66:3f:bf:5e:63:e1:af:9f:ee:
47:08:58:9b:cf:e7:5b:71:67:26:ba:65:7f:41:85:
6e:bb:18:ae:9a:8a:ed:1d:34:16:ea:bf:98:b1:6f:
b0:b0:7e:32:60:37:2b:3b:b0:b9:68:19:8f:33:eb:
5a:ea:8d:6f:3a:8d:3f:9e:92:fb:fc:dc:29:78:05:
37:bf:c1:b4:80:d1:14:1b:2e:65:3f:a4:aa:aa:f7:
61:12:09:64:66:76:b2:e0:de:31:ec:a1:6a:1c:36:
2b:fb:c3:f7:c3:e6:69:22:cc:9a:cc:9b:cf:4d:1f:
20:e0:32:9e:52:bb:47:cd:72:e2:9a:33:a1:41:2c:
fe:e5:2a:f5:88:c9:c9:23:e8:73:c8:c0:cc:ac:b1:
48:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B0:B3:D6:81:6E:38:23:DD:85:E2:72:CF:BD:C6:C4:31:1A:B4:A5
X509v3 Authority Key Identifier:
keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:e4:9b:50:f6:d8:86:3d:f6:5d:57:b9:44:65:ba:1a:c2:2d:
4e:d0:99:0d:4b:17:fb:01:53:06:d7:7f:8f:fa:56:5e:79:22:
39:7d:2f:e1:65:db:9e:8e:76:f3:cb:39:20:64:2d:0e:e0:95:
e9:47:93:7e:28:eb:fb:05:d1:97:f9:8a:f6:ff:b8:2f:b5:5f:
af:b1:a0:d3:49:23:f9:3b:d7:fe:ac:74:4e:6d:1c:fd:89:49:
33:0b:ff:66:09:b5:42:4f:0e:b6:aa:8d:6e:17:0a:03:85:97:
39:96:4b:d3:92:f5:ee:fe:e3:b3:e9:49:4e:e2:26:ab:50:95:
32:e2:31:62:f5:07:8f:0e:14:89:f9:fa:47:ea:80:2a:25:13:
26:a2:a0:6e:91:38:4c:cf:d2:41:5e:f2:cd:f1:ae:4e:04:2d:
2a:07:50:0c:c0:89:e2:71:92:15:2c:a1:f7:23:6a:7f:ae:e4:
e8:52:ab:d4:d7:3a:5a:7d:64:66:b5:8e:72:9c:8a:ca:e4:f2:
24:e7:c8:af:11:33:c6:a4:ed:92:0c:39:de:85:b0:1b:80:9d:
71:2b:90:00:1b:a0:e8:81:28:e2:66:53:48:37:21:1e:41:29:
83:3d:a1:ee:18:2a:b3:b8:7e:5e:a9:aa:38:ae:2a:cf:2b:6d:
25:b1:43:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEtz8YMDErmuu+Z9P+zcIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ODhkZTFiNzU3ZWFhYWI1ZTc2YjE5NmUxNzhiNjBiNWU2
YzI0MGMwHhcNMjUxMTExMDQwMDUyWhcNMjUxMTEyMDQwMDUyWjAzMTEwLwYDVQQD
Eyg3M2IwYjNkNjgxNmUzODIzZGQ4NWUyNzJjZmJkYzZjNDMxMWFiNGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ql9WHzjRVmGwcM1cDA0HNr5GL+w
lcXWo6If4ogzY/JAWfclfRgsvvZegD6vt4/PL/8wnVk5TDmZa4AkqZjcuLIpAbFY
XDbVqMLzZcUrF2NuHGF2PYLz6D3xc3p1Rph9hkLiKYd1BWv2HTTqzUhmP79eY+Gv
n+5HCFibz+dbcWcmumV/QYVuuxiumortHTQW6r+YsW+wsH4yYDcrO7C5aBmPM+ta
6o1vOo0/npL7/NwpeAU3v8G0gNEUGy5lP6SqqvdhEglkZnay4N4x7KFqHDYr+8P3
w+ZpIsyazJvPTR8g4DKeUrtHzXLimjOhQSz+5Sr1iMnJI+hzyMDMrLFIOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOws9aBbjgj3YXics+9xsQxGrSlMB8GA1UdIwQY
MBaAFJeI3ht1fqqrXnaxluF4tgtebCQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEt
ODE3OTBmNjFlNzk0LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEtODE3OTBmNjFlNzk0
LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3OSbUPbY
hj32XVe5RGW6GsItTtCZDUsX+wFTBtd/j/pWXnkiOX0v4WXbno5288s5IGQtDuCV
6UeTfijr+wXRl/mK9v+4L7Vfr7Gg00kj+TvX/qx0Tm0c/YlJMwv/Zgm1Qk8OtqqN
bhcKA4WXOZZL05L17v7js+lJTuImq1CVMuIxYvUHjw4Uifn6R+qAKiUTJqKgbpE4
TM/SQV7yzfGuTgQtKgdQDMCJ4nGSFSyh9yNqf67k6FKr1Nc6Wn1kZrWOcpyKyuTy
JOfIrxEzxqTtkgw53oWwG4CdcSuQABug6IEo4mZTSDchHkEpgz2h7hgqs7h+Xqmq
OK4qzyttJbFDcQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:36 2025 by rpki-client