Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: y5Hqnaw6qAVZUGsFrs7GDrvokrVWprcLmfxR5CggARI=
Subject key identifier: 64:E8:F8:BC:68:87:00:88:14:84:82:A2:DF:2E:CE:D4:16:D6:AB:42
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 019A3157DFD327ACAB17CE7FA6BC12151CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 1700
Signing time: Wed 29 Oct 2025 19:00:33 +0000
Manifest this update: Wed 29 Oct 2025 19:00:33 +0000
Manifest next update: Thu 30 Oct 2025 19:00:33 +0000
Files and hashes: 1: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: QOfraDUurekxAeLdfWXgrId9PiY9MjXyQZXmwKb75zE=)
2: pu3w7UCd4Jix5FHNDyD1wbsxi8M.roa (hash: J6M/UUbbX9rFSK6+ULPDexwZqprBkdzi2+HoEA2BwBc=)
3: rLSgQK3eROYoGVjeEkatzbeLiUo.roa (hash: cRiivZzTe4i6byml8FTWqC2r60f1JUGBkptLQN0rfQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:31:57:df:d3:27:ac:ab:17:ce:7f:a6:bc:12:15:1c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Oct 29 19:00:33 2025 GMT
Not After : Oct 30 19:00:33 2025 GMT
Subject: CN=64e8f8bc68870088148482a2df2eced416d6ab42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2f:d5:81:41:ea:bd:e3:57:8e:bb:e6:36:1c:
0e:ce:81:38:02:94:ef:e9:ca:90:2e:29:8b:8f:8e:
5d:50:bf:c0:55:2e:fe:72:c1:79:be:a3:8e:94:70:
8d:05:88:43:d1:22:fd:80:a5:d3:14:9a:4f:72:13:
b8:94:1b:b2:a0:fa:5f:36:90:9c:da:38:28:bf:95:
76:49:b8:32:b6:e9:24:f8:00:68:91:fe:cf:8e:a5:
af:af:95:4a:22:f7:63:85:27:02:69:52:d7:39:c4:
22:87:07:0a:6f:9a:6e:34:52:bf:37:17:91:c0:c2:
39:b6:a4:13:66:d1:82:30:b3:7a:bc:a5:e2:64:4f:
f7:38:a6:39:da:55:f2:9d:a1:38:02:b8:b9:c4:7b:
32:b8:87:c0:a9:a4:ab:e6:6c:bc:96:3b:41:4a:5e:
02:dd:1f:d5:0b:36:56:1b:fd:cf:e6:67:b4:95:d9:
7e:25:f9:d2:d6:48:5b:1e:05:f0:ed:63:33:be:44:
50:71:f2:66:0d:7d:e2:aa:6f:f3:af:3d:00:4c:58:
0e:ae:59:a4:d7:7c:52:c4:62:7d:4d:a3:63:51:9b:
50:b3:d2:64:b1:ff:15:35:e9:09:6a:1c:7e:f5:af:
bc:f6:c9:4f:09:ee:9a:0d:92:81:88:11:3e:10:33:
a2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E8:F8:BC:68:87:00:88:14:84:82:A2:DF:2E:CE:D4:16:D6:AB:42
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a6:af:1e:d7:58:b1:8b:7c:e9:c8:b2:b3:82:5f:7f:96:67:
b7:b4:37:0b:79:65:ba:0d:0b:e0:8f:ab:6d:49:d6:54:f3:26:
8d:96:eb:e1:13:ce:8b:23:36:37:1a:9e:6c:5c:23:f6:b0:b7:
d0:20:93:73:2a:95:e2:74:78:71:eb:00:2f:62:bb:18:44:ca:
fa:68:ca:42:73:8a:1f:da:7c:4b:56:c5:c2:cc:15:0c:7e:b8:
b3:91:1a:e6:2d:79:6c:64:15:87:60:c6:d9:99:ea:6e:ba:c3:
d3:16:b1:46:fb:c0:5b:84:0c:00:fb:ef:53:ea:e2:4d:de:a9:
c1:b5:e2:98:64:71:17:75:8d:55:a6:2a:ea:3c:05:01:86:06:
5e:50:e3:f4:4e:63:27:4d:4a:68:38:63:28:fe:a4:e4:c7:49:
d7:43:ae:74:ed:a7:82:1a:a5:f7:6e:b8:00:6b:bf:96:a8:63:
50:9c:f6:75:df:2e:a5:50:6a:45:c3:32:72:37:6e:8b:21:f6:
53:ae:a6:fa:d8:f0:3d:26:16:35:50:b0:fa:d8:cb:02:a6:11:
56:ac:9b:4a:ee:a3:54:06:11:c9:32:ad:54:4a:86:ad:9e:4f:
e2:00:50:db:5c:91:a4:df:8c:fc:c7:dd:fa:a7:12:a7:64:55:
9e:7c:e3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 00:38:05 2025 by rpki-client