Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
File: L6CLlwvIy9DkRTyJa9uCKqccom8.mft (raw, json)
Hash identifier: 36kWNwcxRShyVUk+4uBiEkXH/ET/YA9FU0Ll884YUwE=
Subject key identifier: DA:09:CD:4D:44:70:49:8F:5A:4F:E8:DC:40:78:8E:64:BA:AF:53:03
Authority key identifier: 2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F
Certificate issuer: /CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f
Certificate serial: 019A4D3D0230FD053D51A60CABFB67887C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
Manifest number: 03FD
Signing time: Tue 04 Nov 2025 05:00:35 +0000
Manifest this update: Tue 04 Nov 2025 05:00:35 +0000
Manifest next update: Wed 05 Nov 2025 05:00:35 +0000
Files and hashes: 1: L6CLlwvIy9DkRTyJa9uCKqccom8.crl (hash: FaDJOmXC7vNxsDdF7Y3KFjXhI8nHe26FLiv55Li1sXg=)
2: dp6ZCuRIqo4YLa9gbgLjmyAheBM.roa (hash: yf/5qE0uY00EXj7opiLq6SkYzRlB8nAZTXaYic2R17w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:02:30:fd:05:3d:51:a6:0c:ab:fb:67:88:7c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f
Validity
Not Before: Nov 4 05:00:35 2025 GMT
Not After : Nov 5 05:00:35 2025 GMT
Subject: CN=da09cd4d4470498f5a4fe8dc40788e64baaf5303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:3d:51:ad:c1:d8:c1:a9:b4:53:fc:74:c5:
a1:2f:b8:c6:ce:1f:13:40:e3:50:f5:cb:35:0a:59:
8f:85:3e:ad:f6:16:eb:f2:b5:a9:b2:28:82:4a:20:
33:11:e5:27:cb:04:84:7c:14:a8:bb:10:53:16:22:
db:4e:00:1c:8d:40:cd:80:c3:cc:4e:f1:a1:ae:86:
61:13:3c:91:c3:0b:85:f7:76:1e:ec:25:dd:59:8a:
d0:97:58:ab:f9:f4:2b:e1:e3:53:a2:36:8a:f7:d0:
4e:2c:17:04:57:b5:3a:82:c4:70:e1:19:55:a5:f3:
05:89:8a:53:f2:7c:c2:ef:f1:22:d2:d6:06:ca:3f:
f9:d5:f4:8d:89:6f:cc:16:f1:e9:7c:fc:a3:c9:f8:
01:0b:41:e0:1a:55:c3:26:c9:2d:de:dd:3f:a9:e5:
9d:de:aa:16:5d:b1:d5:bc:4e:f6:1e:9f:1f:5a:04:
4d:a9:79:39:a2:13:81:60:85:10:99:91:b2:7a:a9:
6b:ea:d5:b3:9d:1c:ac:a8:ff:36:b1:97:43:d6:75:
c2:98:84:c7:bf:12:2f:27:72:47:e3:d7:a4:d8:57:
e2:21:fe:5b:e2:82:59:a1:f5:88:5d:4c:c8:bd:8f:
f1:df:4e:62:f4:dc:9a:4d:1c:b5:29:d7:2b:67:61:
ee:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:09:CD:4D:44:70:49:8F:5A:4F:E8:DC:40:78:8E:64:BA:AF:53:03
X509v3 Authority Key Identifier:
keyid:2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7e:e3:c6:b8:65:09:21:04:6b:b3:c5:28:3a:3e:81:11:5d:
ca:63:81:72:ef:fe:73:0a:34:b8:1c:5f:53:b9:8d:11:7a:32:
be:b4:8c:7e:aa:0a:61:2e:18:99:8f:a1:94:c7:d5:b6:74:2a:
d1:e4:1f:dd:12:91:03:d4:70:4d:42:8f:4c:b5:5e:94:53:ac:
d1:25:d3:95:da:35:b3:b9:12:19:c8:2f:cc:dc:02:56:b2:2a:
83:8b:a6:38:be:7f:fa:4c:7a:28:68:1e:2a:36:8d:12:72:ff:
78:74:24:6b:58:70:aa:11:90:3a:ae:5c:6e:b4:65:4d:55:61:
0f:36:cb:04:40:43:2c:34:87:c1:64:0a:cb:0a:31:9a:f7:ac:
f8:2a:55:9a:ba:26:15:15:47:f9:03:d6:d8:93:fa:ac:44:38:
2a:e0:d1:9e:a5:31:1c:ee:c9:9f:6a:e7:17:e7:fb:69:38:06:
08:68:da:68:f7:6b:b3:8b:90:ad:6e:71:de:05:32:0b:10:64:
9b:b0:75:43:41:84:f2:93:10:4c:96:55:08:e4:16:9d:45:19:
de:45:34:b8:6b:c9:77:6d:23:69:ab:ed:86:d5:57:68:f0:45:
9b:3e:0c:5c:d3:37:bd:bc:5a:b4:68:86:5f:10:84:09:91:19:
b6:19:6c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:20:23 2025 by rpki-client