Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
File: l79b5z8YIydEmN9So3U10T2lvmI.mft (raw, json)
Hash identifier: X0WT0LcjHxYVZmcAkxC2Ru85Kbw4DXm+fYwkiQhDqk4=
Subject key identifier: 03:47:D7:53:AF:17:C9:17:86:B9:C8:65:99:96:AC:59:C8:74:65:1F
Authority key identifier: 97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
Certificate issuer: /CN=97bf5be73f1823274498df52a37535d13da5be62
Certificate serial: 019A725C4EB715A5C969137DA32803FA8877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:00:43 +0000
Manifest this update: Tue 11 Nov 2025 10:00:43 +0000
Manifest next update: Wed 12 Nov 2025 10:00:43 +0000
Files and hashes: 1: HWzBieo8pIQmRXoRuWfRIehTEwE.roa (hash: JynDcSW3QZoBehAT3uFmeO42DtekqQpNN7+NxcQtvOQ=)
2: l79b5z8YIydEmN9So3U10T2lvmI.crl (hash: A2iGNLgss2a98fhYHOARBnh8r1blYOIitwpo2fz7W5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:4e:b7:15:a5:c9:69:13:7d:a3:28:03:fa:88:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bf5be73f1823274498df52a37535d13da5be62
Validity
Not Before: Nov 11 10:00:43 2025 GMT
Not After : Nov 12 10:00:43 2025 GMT
Subject: CN=0347d753af17c91786b9c8659996ac59c874651f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:54:0f:fd:5f:9e:c1:25:e1:40:cb:fb:3b:b5:
dc:79:f7:9e:bd:81:a1:ad:df:f3:d5:a1:2b:87:49:
30:e1:e3:c4:aa:51:35:42:b4:03:76:a7:e3:89:ac:
ef:0b:09:00:fd:9c:b0:6b:92:09:1f:62:33:2a:9d:
7b:f1:38:1a:fd:99:de:d2:da:bb:d1:a0:91:0f:34:
72:c3:06:77:70:9c:80:82:bd:3f:34:ad:6d:ed:67:
66:5c:38:8f:cc:ff:3a:e0:08:63:bc:26:83:de:94:
1f:52:76:af:4e:67:62:93:5d:90:57:4d:14:f5:05:
10:8a:34:bc:15:c8:1e:17:9e:93:f7:1b:ae:e6:4e:
f9:3e:9d:f0:de:2b:ae:d4:7c:d7:a3:cb:fc:8f:29:
31:08:c0:79:3b:73:1a:f5:10:c8:f8:ba:24:2b:8b:
a0:52:8d:7a:15:fe:46:11:33:14:fc:ae:30:44:2c:
c3:1e:a1:94:be:88:30:1c:4d:b6:ff:c9:06:b4:01:
97:6c:2e:7b:6b:85:83:64:8d:ab:bb:85:cd:f4:20:
9f:e3:7d:1d:50:d9:4c:a2:51:3a:a8:4b:52:a6:e7:
18:c2:5f:d8:2e:6e:0b:fc:36:3c:c2:74:ba:e2:a9:
ac:cb:c7:1b:54:89:e0:bb:1d:bb:f8:0b:75:f2:e9:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:47:D7:53:AF:17:C9:17:86:B9:C8:65:99:96:AC:59:C8:74:65:1F
X509v3 Authority Key Identifier:
keyid:97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0f:53:21:83:57:12:df:52:a8:3e:f5:0a:f5:57:56:f7:99:
0f:da:0b:cc:01:7d:e3:46:e1:c2:88:cd:80:f8:9f:2d:0e:3e:
5d:2e:ae:fb:1b:f8:39:68:59:e6:9d:e3:34:ff:d2:e2:c8:d7:
10:64:fb:4c:e3:1d:9e:a1:88:73:3a:ad:d4:f6:b0:f1:4e:6d:
e4:11:b7:09:28:69:72:55:ef:0f:75:d0:20:22:1c:48:57:65:
a5:b6:e6:f6:0c:5a:09:49:1f:e3:7e:0e:a5:d7:08:2b:d2:df:
22:43:11:0f:ae:55:58:ae:a0:da:e6:d3:2a:03:7c:85:da:63:
c4:f8:bc:a1:28:1c:1c:f1:2c:2e:c1:69:a4:45:c5:79:5f:a3:
29:6c:6f:13:81:f1:f1:3e:af:03:ec:ea:d2:57:b2:1e:b2:f2:
b9:f9:17:fe:c4:c0:74:dd:5e:74:83:ce:18:e6:8b:6b:5c:a3:
5d:8b:77:22:3f:1a:fa:bb:44:e2:6c:1a:73:a5:bc:e6:a7:c8:
35:6b:a2:b0:71:af:54:89:9e:a8:d3:83:1f:d1:d6:5a:fc:98:
3b:4e:84:c6:60:f3:61:99:54:39:5f:ef:50:1e:59:9e:77:12:
57:2e:f9:6b:24:38:b0:bf:ef:21:fb:47:73:70:84:87:4e:0e:
0f:8e:2a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:46 2025 by rpki-client