Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
File: l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json)
Hash identifier: A8x+AD7DEew7COaY/UmWPEMD4lFg+NVPVr8Nf+UNWP0=
Subject key identifier: 6B:5A:F4:09:41:14:EF:F8:E0:43:35:D2:FA:64:5B:47:99:9D:5A:8C
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial: 019A71B8F755FA1705FDFBC35D59E87C5D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
Manifest number: 172C
Signing time: Tue 11 Nov 2025 07:02:18 +0000
Manifest this update: Tue 11 Nov 2025 07:02:18 +0000
Manifest next update: Wed 12 Nov 2025 07:02:18 +0000
Files and hashes: 1: Bb283EmMHgO869T1EeLsRpmJeYs.roa (hash: Nwt8fGBRV8sOt4t4VlNYBdMwpGMpgaO/PFcGpK3ITpc=)
2: dZKiynV1KRUB63s1S23kLXoELXM.roa (hash: uX/2Ee9kxHZZdlU8CO8raSIbXckmFA2hSc0ftFZonCA=)
3: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: TZT+WefsOb8o6xxTXW2B3RamKx7x6zmNfi3bOQwS7Bw=)
4: qJCRilc3Ebh9B_aySeVMKldeveM.roa (hash: ioODI+aP1jwlezBm9lY+fz3m5yXxE8s++45dvu8zDyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f7:55:fa:17:05:fd:fb:c3:5d:59:e8:7c:5d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Validity
Not Before: Nov 11 07:02:18 2025 GMT
Not After : Nov 12 07:02:18 2025 GMT
Subject: CN=6b5af4094114eff8e04335d2fa645b47999d5a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:ad:ef:8e:e3:be:95:57:ef:90:12:6a:10:c9:
28:a9:cd:3d:a9:61:95:29:95:49:00:2c:b2:5f:20:
c5:0c:17:cb:50:84:76:0b:72:3c:8f:72:1c:97:73:
fd:72:aa:1a:75:79:9c:71:53:bf:fa:82:a9:8f:ff:
d7:6d:40:6a:ce:66:5f:17:c9:f8:f9:e3:30:b8:af:
48:36:87:12:98:9c:67:48:96:11:9b:14:a6:09:98:
6f:30:6a:e5:2d:ae:fa:30:20:98:df:ac:7a:c2:17:
d6:11:9c:01:c0:d8:89:0b:68:76:6c:4a:fc:03:6d:
87:cd:60:98:49:fc:31:c1:f7:b6:e9:f2:fa:d3:7c:
01:c8:1c:59:12:1a:b0:b7:50:df:ea:84:44:5c:7b:
04:ad:12:c8:b6:91:ff:57:52:22:aa:fd:72:89:79:
58:42:96:88:6d:10:af:86:af:cf:51:7e:1a:1a:6d:
c5:2b:8a:f3:be:11:aa:36:11:ca:c9:69:6e:7c:46:
9c:53:99:7f:89:d6:b2:e3:24:a5:7d:13:9f:d8:6a:
9e:62:74:1e:31:36:56:67:6d:0e:05:f0:a0:6e:49:
49:4a:0d:c9:73:68:36:f3:33:70:2c:75:3d:39:a2:
d2:58:a4:94:73:c3:12:37:52:f7:b1:70:84:9a:4d:
96:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5A:F4:09:41:14:EF:F8:E0:43:35:D2:FA:64:5B:47:99:9D:5A:8C
X509v3 Authority Key Identifier:
keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e7:24:04:95:03:a1:01:91:89:c0:fd:01:e1:0b:5e:5e:a3:
47:0e:27:1a:9c:2c:54:cd:20:3e:dd:9e:d3:7c:c9:10:76:1d:
d6:10:ef:19:13:5a:4f:91:4f:51:d3:e0:5e:eb:24:2a:e1:7d:
93:b4:42:ae:1c:b0:73:99:19:84:c0:0c:be:54:40:ac:35:f9:
d0:dd:cf:c3:2f:78:0b:be:98:36:2d:d4:d8:ac:82:3d:36:a0:
5c:c4:fd:4e:b7:93:2c:ae:06:c6:7d:01:da:11:a9:86:ae:2f:
9f:89:14:c6:59:13:bd:05:f9:d5:ef:f3:a2:3e:36:c3:14:3f:
91:62:1d:62:56:80:7f:e2:3d:4a:d8:43:99:be:ff:52:c1:4e:
31:9a:20:9b:62:2f:da:76:b0:c5:2a:10:db:c6:30:56:0b:fe:
1a:a0:44:b2:aa:4e:92:37:10:d6:40:ca:37:80:b4:01:11:cd:
91:55:55:ca:1c:91:aa:7d:5e:dd:de:d9:ca:67:8d:ec:08:29:
21:75:4d:e5:20:d1:0e:19:11:5c:30:fc:ee:b3:f6:27:65:9a:
1a:79:a2:2e:e7:34:b4:8f:88:6e:35:aa:26:4b:96:5f:ea:b5:
bb:26:a1:89:78:95:c7:44:40:e5:bd:97:ce:49:ff:53:2c:12:
9c:e3:f2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:03 2025 by rpki-client