Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
File: lIlI8N1eL7CpArl5ypxcGkT5j6E.mft (raw, json)
Hash identifier: D7+IYEPEHLPG/n48JjsaHNHBwxQxOjuanmCdTIkUGGg=
Subject key identifier: 8C:2F:00:A7:08:57:3B:92:25:34:45:32:FC:6E:9B:B5:6B:D3:7F:60
Authority key identifier: 94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
Certificate issuer: /CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Certificate serial: 019A73386C46482814A1513A63AF00D447D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
Manifest number: 13AE
Signing time: Tue 11 Nov 2025 14:01:08 +0000
Manifest this update: Tue 11 Nov 2025 14:01:08 +0000
Manifest next update: Wed 12 Nov 2025 14:01:08 +0000
Files and hashes: 1: PqIFggzIk_ANiqqFNJr1_Xaymmc.roa (hash: EhtNg//JemmQlKzA50IitdtWxLjPUBVE2aJwJpTUs+g=)
2: lIlI8N1eL7CpArl5ypxcGkT5j6E.crl (hash: O47D7g4Fa1bmq/5UEwUd1/19hjoRJIu6gZU2fw+zefA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:6c:46:48:28:14:a1:51:3a:63:af:00:d4:47:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Validity
Not Before: Nov 11 14:01:08 2025 GMT
Not After : Nov 12 14:01:08 2025 GMT
Subject: CN=8c2f00a708573b9225344532fc6e9bb56bd37f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3b:45:94:1e:28:d1:bd:cd:96:bb:31:ab:10:
9c:d8:00:4b:8a:f9:12:00:c5:72:58:b2:2c:f4:f6:
19:a8:3d:16:61:44:01:a0:35:63:9d:0a:2d:89:82:
71:56:0b:4c:d9:a7:f5:0d:40:f8:7c:7a:23:54:04:
45:54:ea:4f:b3:48:bd:46:88:73:d5:26:62:36:a0:
dc:25:8a:6a:6b:ed:8e:91:16:e8:1c:79:ed:67:7f:
7a:cf:a5:fd:b0:a6:df:dd:a1:18:97:da:f3:31:41:
68:67:b3:5d:70:9b:3d:8b:90:0f:01:a5:a6:8e:ac:
f4:8f:9f:a2:c6:24:5c:6f:19:d3:d8:85:11:a3:f5:
76:a6:6c:6d:53:b7:71:e7:8c:05:65:2d:75:4f:f2:
ac:bb:0a:18:b5:77:ce:68:1c:bc:bb:2c:ea:1c:56:
49:dd:99:98:93:40:8c:70:cb:be:97:a0:bb:57:e7:
a5:5a:74:a3:8a:ba:01:6b:36:e8:9d:d5:e7:b4:f5:
97:e9:30:cd:4d:a0:b1:55:8c:6c:5f:0e:97:4d:45:
f7:04:fd:bf:bf:98:29:94:35:00:52:5b:b7:f1:22:
f7:1f:ca:2d:df:a4:7b:fe:d8:fd:9a:10:a3:3c:9e:
83:e7:2f:0e:6e:2f:1c:e9:26:a2:2f:b9:2e:0d:93:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2F:00:A7:08:57:3B:92:25:34:45:32:FC:6E:9B:B5:6B:D3:7F:60
X509v3 Authority Key Identifier:
keyid:94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:dc:88:0d:b4:96:41:66:47:6e:7e:a5:aa:93:80:82:19:5d:
8d:47:d9:18:89:d6:22:8b:5f:7b:d9:4f:8d:90:68:6d:5f:39:
71:76:9f:83:46:00:5b:ae:d7:7a:bb:4d:ea:c8:d5:df:6f:98:
50:cd:eb:be:6d:3b:de:d0:fa:3e:19:8c:ce:91:d4:74:db:eb:
09:2a:f6:03:3f:90:1d:b1:ed:cd:b3:be:9a:52:82:38:ca:8a:
1d:cb:d1:1e:f2:37:a1:e2:71:2a:a0:46:f1:2b:30:4e:8a:08:
71:48:b5:35:de:10:3e:60:d6:49:5c:77:fc:c7:f9:39:26:32:
d3:06:dd:6c:38:7b:1c:cb:b9:30:35:2e:a0:a8:35:e9:91:53:
04:83:02:14:41:d2:42:4b:c8:53:6b:0c:a2:a3:39:e4:fe:4b:
c5:28:b7:54:d4:5f:65:6c:bc:a6:09:67:b2:68:4c:54:a8:13:
cc:1f:d2:cc:c0:81:34:15:f9:89:ad:1b:50:1e:da:e1:fc:1d:
23:13:fb:43:78:01:97:aa:6f:3c:f6:c5:06:90:47:4a:51:8a:
a0:30:34:fe:6a:6b:95:af:61:9e:b7:dd:56:fa:01:97:42:d6:
40:3b:0d:cc:e8:26:90:46:8b:ac:eb:20:b3:c6:95:cc:1c:4d:
ea:65:a9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:47 2025 by rpki-client