Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
File: l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft (raw, json)
Hash identifier: DbkfiBOt78BHuH2yGqpbCvL7TV8I7OLvadU51bDs9q4=
Subject key identifier: 0B:A3:83:6F:87:5D:17:E9:83:4D:BC:DA:33:FC:88:44:57:3F:C2:67
Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
Certificate issuer: /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Certificate serial: 01992443B750D744EC887297C718AD0FA1DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
Manifest number: 0875
Signing time: Sun 07 Sep 2025 13:00:41 +0000
Manifest this update: Sun 07 Sep 2025 13:00:41 +0000
Manifest next update: Mon 08 Sep 2025 13:00:41 +0000
Files and hashes: 1: 0i_YlSLjNRB30UESNfxOlGgXI04.roa (hash: mrgCCvd59tuwyCrIfMNAZk14JnYczApGJpZMZMc86cI=)
2: l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl (hash: zrd1rk/n94bxBPyum7QmVxWig/jOM+zG0E/L1MKdjCk=)
3: nYzAsbllFT7Lr_SB7POfofSL3LI.roa (hash: EHarQeauYC+jtiVvfxPF0hW/Y2vVhZb67l4OYu1uAWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:b7:50:d7:44:ec:88:72:97:c7:18:ad:0f:a1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Validity
Not Before: Sep 7 13:00:41 2025 GMT
Not After : Sep 8 13:00:41 2025 GMT
Subject: CN=0ba3836f875d17e9834dbcda33fc8844573fc267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:3f:43:82:12:02:f8:9e:89:06:b4:b6:aa:
ee:4e:cd:df:2e:77:3d:d0:4e:e9:4b:d2:1a:33:e4:
66:d0:04:6a:42:7b:dd:0d:16:83:24:2e:de:0b:88:
ae:1f:45:05:a4:8c:4d:67:a6:cc:d6:28:81:92:35:
9e:49:0a:4f:23:c1:fa:c6:af:42:a1:1d:46:94:6c:
e9:42:72:de:1b:43:6e:34:97:49:fc:83:27:77:db:
0f:7c:90:00:1c:19:c3:49:dc:c5:15:8b:2e:d9:97:
f3:e2:6f:f0:28:81:af:82:84:06:06:3b:bc:4e:76:
85:78:40:95:40:e1:eb:0e:ea:36:ec:10:f3:b1:ff:
b2:87:52:4e:aa:b7:de:08:1b:3b:27:d1:7a:7c:c0:
a9:84:fa:00:62:2f:88:65:2d:4b:17:4d:99:41:dd:
26:3e:30:93:ee:da:ac:4c:ce:b4:1b:c5:0c:6f:c7:
e1:62:e5:2c:29:ec:a4:ef:bc:88:38:08:74:13:ad:
6e:e1:87:2f:d6:c0:7e:72:5b:58:e2:3e:67:26:c6:
99:23:6b:fb:55:f3:df:ca:34:a8:0b:3e:5b:b1:78:
c9:05:70:ac:9d:f6:0e:5c:2b:f4:e0:79:67:26:da:
a0:9f:87:a1:ba:07:cf:f3:38:00:25:fd:9c:56:d7:
cf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A3:83:6F:87:5D:17:E9:83:4D:BC:DA:33:FC:88:44:57:3F:C2:67
X509v3 Authority Key Identifier:
keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:86:00:ae:f9:e3:c5:9e:7e:10:4a:f5:fa:2a:76:9d:cd:3a:
d8:0b:13:40:f8:1d:bb:07:77:34:f6:42:b0:11:4b:54:c0:b0:
28:22:ea:c3:1f:3e:1d:c3:3c:11:c5:02:47:dc:14:04:74:01:
3a:35:10:88:63:da:71:7a:20:71:61:f1:e9:08:e0:07:e8:8c:
93:1e:15:01:b5:40:d7:32:27:00:4a:90:08:cb:8f:f8:6c:97:
b9:43:bb:39:77:0e:66:ac:20:eb:c0:d3:c7:d7:a1:c8:61:f1:
cf:86:b1:2e:9f:b5:a7:ee:11:f7:30:b2:94:b8:96:c4:87:03:
fd:fb:88:a7:c5:f9:c4:90:1f:d0:d2:ee:8f:fb:ae:55:33:93:
98:5c:7f:20:c7:b9:e0:07:6f:b0:8f:fb:2e:b7:3b:d2:49:ed:
2c:0e:78:79:99:c3:c8:20:c1:fc:36:a2:08:dd:bd:9e:99:bf:
08:94:46:d4:6a:35:b1:dd:3e:cc:ea:2c:23:20:70:24:19:f5:
0b:86:bd:e3:a3:f7:d8:4b:72:aa:8c:66:61:43:5d:66:a3:4c:
99:09:1a:ef:a9:2d:b7:6e:78:f8:4f:e1:44:cd:a7:89:a3:ed:
d7:cc:fd:ac:f8:fd:4b:c3:44:f8:14:16:b6:06:d1:47:98:ef:
04:76:8e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:43:35 2025 by rpki-client