Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
File: l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft (raw, json)
Hash identifier: YSy4vcSbp21dyG/kmGZrP+iH17hsQ8XhGimeQRZ5QU4=
Subject key identifier: E4:1A:76:02:31:A5:D2:91:10:C3:DF:31:D3:56:9A:8E:60:89:50:EE
Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
Certificate issuer: /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Certificate serial: 019A270B5BBFAF690DC1FC33069C2107848D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
Manifest number: 08FB
Signing time: Mon 27 Oct 2025 19:00:47 +0000
Manifest this update: Mon 27 Oct 2025 19:00:47 +0000
Manifest next update: Tue 28 Oct 2025 19:00:47 +0000
Files and hashes: 1: 0i_YlSLjNRB30UESNfxOlGgXI04.roa (hash: mrgCCvd59tuwyCrIfMNAZk14JnYczApGJpZMZMc86cI=)
2: l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl (hash: jO+7RQhCxebgmsYqwQaAAxCvKtBo2rVOy3mNJNQiasM=)
3: nYzAsbllFT7Lr_SB7POfofSL3LI.roa (hash: EHarQeauYC+jtiVvfxPF0hW/Y2vVhZb67l4OYu1uAWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:0b:5b:bf:af:69:0d:c1:fc:33:06:9c:21:07:84:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Validity
Not Before: Oct 27 19:00:47 2025 GMT
Not After : Oct 28 19:00:47 2025 GMT
Subject: CN=e41a760231a5d29110c3df31d3569a8e608950ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:89:32:7a:a9:87:b8:e8:9f:2f:67:b6:a9:
c9:82:a5:18:b3:a9:a3:f7:87:c1:b0:ff:6b:4a:2f:
b7:55:d6:ed:7f:2d:c1:e2:e1:09:cb:82:0d:17:27:
ab:18:dd:97:33:45:29:e9:29:e2:07:0a:4d:84:f3:
e3:55:60:f2:0c:36:f9:3a:20:ba:2d:07:7f:c8:a6:
ab:d7:31:d6:5a:f1:69:c5:df:89:b7:78:5c:a4:f7:
94:7e:77:0c:37:2e:72:3f:a7:cb:92:68:ee:62:a5:
e1:f9:a9:0c:4b:8c:f2:ff:af:9e:c2:05:5d:be:7e:
db:76:19:8d:3e:06:c0:fd:7b:9c:86:52:b0:bf:3c:
3e:ad:26:14:0b:52:a1:6d:29:96:23:a7:13:54:4c:
78:13:cd:f4:aa:cb:0b:2f:ea:3b:df:b9:bc:ef:25:
ba:15:7e:e6:6f:15:f5:72:7b:64:ee:7b:70:76:9b:
e7:0b:86:f8:94:53:62:49:a1:e1:19:dc:53:31:8c:
8a:88:ea:fc:2e:0f:30:83:26:7a:10:8f:d2:b0:15:
da:26:88:0b:a7:f6:36:b3:7d:c2:79:7e:67:12:c1:
78:f4:53:b6:1f:82:dd:86:48:2a:01:a5:68:3c:a0:
33:90:dc:42:70:60:ff:e7:0e:ce:5f:8b:b9:a0:ce:
21:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1A:76:02:31:A5:D2:91:10:C3:DF:31:D3:56:9A:8E:60:89:50:EE
X509v3 Authority Key Identifier:
keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:16:13:d8:d2:38:22:f9:79:ce:d6:60:14:81:2d:b2:d0:34:
bb:66:62:6e:96:18:c2:d1:f0:c1:c9:cf:c3:18:cd:59:ea:86:
06:38:a6:c2:fa:0b:ee:55:84:d5:c6:2b:62:52:8c:ee:46:6f:
02:cc:b2:f9:6c:fd:32:2c:2b:9f:5b:db:87:46:13:43:a0:94:
d4:53:b9:73:f1:00:70:94:51:6f:d8:bd:60:8e:34:49:d6:68:
a1:52:ba:b8:a8:76:29:5e:0f:3b:ef:40:51:c1:c8:32:be:b4:
28:17:4b:aa:2f:5f:b4:1d:0a:8e:5b:24:49:04:17:3f:78:75:
62:d4:bd:dd:b1:b3:19:27:e1:7d:cd:4b:89:97:df:81:93:35:
c2:99:76:fb:f7:6c:4e:61:72:1c:0d:50:4a:fe:c0:a8:bf:4a:
3e:18:93:02:36:cb:0f:56:5f:6a:d5:6b:1d:35:cd:bd:62:59:
1a:f1:2d:42:1d:ea:8f:50:42:48:f4:25:b9:6c:72:39:3f:7d:
a2:7c:2d:7f:ed:58:1d:4c:ed:ff:10:89:d3:53:97:c9:75:2a:
a8:ee:63:5e:60:9c:5e:18:66:11:bf:a0:ed:14:5d:3f:21:ef:
b9:ac:01:20:9b:0c:9d:04:f4:28:ed:b5:5a:ce:97:cc:74:f2:
2b:89:18:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZonC1u/r2kNwfwzBpwhB4SNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NWM5ZmZhNjVjM2M5YjU3YzU0OWU3MmNkNmRjNzAzMDA1
YjJlMGUwHhcNMjUxMDI3MTkwMDQ3WhcNMjUxMDI4MTkwMDQ3WjAzMTEwLwYDVQQD
EyhlNDFhNzYwMjMxYTVkMjkxMTBjM2RmMzFkMzU2OWE4ZTYwODk1MGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtESJMnqph7jony9ntqnJgqUYs6mj
94fBsP9rSi+3Vdbtfy3B4uEJy4INFyerGN2XM0Up6SniBwpNhPPjVWDyDDb5OiC6
LQd/yKar1zHWWvFpxd+Jt3hcpPeUfncMNy5yP6fLkmjuYqXh+akMS4zy/6+ewgVd
vn7bdhmNPgbA/XuchlKwvzw+rSYUC1KhbSmWI6cTVEx4E830qssLL+o737m87yW6
FX7mbxX1cntk7ntwdpvnC4b4lFNiSaHhGdxTMYyKiOr8Lg8wgyZ6EI/SsBXaJogL
p/Y2s33CeX5nEsF49FO2H4LdhkgqAaVoPKAzkNxCcGD/5w7OX4u5oM4hUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQadgIxpdKREMPfMdNWmo5giVDuMB8GA1UdIwQY
MBaAFJdcn/plw8m1fFSecs1txwMAWy4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85MmVjZWEtM2YzYy00YmFhLTgzNGIt
MTI2YzdiNDhiODQ3LzEvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85MmVjZWEtM2YzYy00YmFhLTgzNGItMTI2YzdiNDhiODQ3
LzEvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRYT2NI4
Ivl5ztZgFIEtstA0u2ZibpYYwtHwwcnPwxjNWeqGBjimwvoL7lWE1cYrYlKM7kZv
Asyy+Wz9Miwrn1vbh0YTQ6CU1FO5c/EAcJRRb9i9YI40SdZooVK6uKh2KV4PO+9A
UcHIMr60KBdLqi9ftB0KjlskSQQXP3h1YtS93bGzGSfhfc1LiZffgZM1wpl2+/ds
TmFyHA1QSv7AqL9KPhiTAjbLD1ZfatVrHTXNvWJZGvEtQh3qj1BCSPQluWxyOT99
onwtf+1YHUzt/xCJ01OXyXUqqO5jXmCcXhhmEb+g7RRdPyHvuawBIJsMnQT0KO21
Ws6XzHTyK4kYBQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 03:10:17 2025 by rpki-client