Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
File: L_vZ3o2JUmxaSadmwfSF8J9akWY.mft (raw, json)
Hash identifier: XstPwksy7zt+EmqD1s5vCsWOheigeVKeKZUD8iChX04=
Subject key identifier: 3F:75:9F:D3:3B:76:F0:F4:8A:DA:FA:A4:1D:65:AA:DD:86:09:FB:22
Authority key identifier: 2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66
Certificate issuer: /CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166
Certificate serial: 019A4E4F580FE21746AE50CA3F072F2322BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
Manifest number: 09C6
Signing time: Tue 04 Nov 2025 10:00:13 +0000
Manifest this update: Tue 04 Nov 2025 10:00:13 +0000
Manifest next update: Wed 05 Nov 2025 10:00:13 +0000
Files and hashes: 1: L_vZ3o2JUmxaSadmwfSF8J9akWY.crl (hash: 8zDmELr7oSAA3g+0JtTktmjat8qDo/KEkVTcMsnc8As=)
2: mXwM3P_PQQyVSERAjNUZUTUhWjg.roa (hash: 4+JoMMio3r7vvH6PXd1vvlGKdXZmMUa4KFkXT7FGKzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:58:0f:e2:17:46:ae:50:ca:3f:07:2f:23:22:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166
Validity
Not Before: Nov 4 10:00:13 2025 GMT
Not After : Nov 5 10:00:13 2025 GMT
Subject: CN=3f759fd33b76f0f48adafaa41d65aadd8609fb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9c:e9:be:31:ec:ec:41:dd:96:58:25:e4:5d:
79:1b:9d:0a:e3:f6:dd:92:36:0e:ea:25:52:5c:61:
93:06:dc:a1:1e:ba:a6:ba:87:5b:f7:96:7d:63:fd:
32:22:b1:f5:8f:7f:ca:99:8f:3c:d3:ef:46:64:4f:
20:07:c5:9c:8b:ae:80:d8:fe:e0:98:d2:3a:a9:51:
b5:14:62:98:ee:03:26:e5:89:73:08:b7:61:81:74:
cf:ed:9b:7b:31:0a:53:d2:b5:f5:0e:96:e0:ff:16:
f4:2d:8c:d6:8b:e5:2f:33:6e:b2:8b:57:0a:e7:6c:
41:73:66:ba:6a:02:ce:00:d5:65:7f:c5:c7:db:54:
22:94:90:3c:26:bf:1e:10:2c:e9:30:1d:88:31:f1:
db:0b:e4:e4:0d:d0:73:7e:90:9d:cb:38:f4:cd:e4:
88:e3:d3:fd:72:5a:73:31:3d:98:21:b4:8a:72:de:
da:7e:2b:f5:59:37:a6:be:99:50:d7:7d:60:db:36:
d8:cf:b9:26:96:77:90:42:15:d2:ef:ea:6b:1d:cb:
d0:78:dc:d1:d7:4b:aa:d2:4b:de:6c:51:82:2b:aa:
63:c5:04:1a:bb:57:b7:57:a8:72:ac:07:86:7d:d6:
b6:01:17:b4:4b:e7:32:fa:4f:29:28:58:04:cb:a5:
4e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:75:9F:D3:3B:76:F0:F4:8A:DA:FA:A4:1D:65:AA:DD:86:09:FB:22
X509v3 Authority Key Identifier:
keyid:2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d0:e4:07:e7:03:b8:66:ff:7a:9b:f7:4a:d6:b9:fb:74:ca:
8a:f9:aa:fa:0c:18:f4:37:1a:06:21:f1:b8:77:a6:62:91:e9:
ee:03:0d:fa:f1:47:21:44:d1:75:5e:e5:f7:72:54:e0:ea:03:
08:79:99:39:28:f1:32:87:6c:36:97:be:cb:99:2e:90:bb:b5:
b9:6e:04:18:aa:51:58:11:25:da:3a:06:72:2b:bb:47:ae:fa:
68:a1:bf:d5:cf:11:df:8b:0d:2e:0c:85:26:a2:49:79:a7:47:
78:9d:c2:e4:d2:fe:04:a4:12:48:06:cd:ba:ab:69:0e:80:b6:
d5:0e:0c:09:c2:95:86:0b:c4:46:b9:26:20:52:24:ec:ae:e5:
bb:e0:22:d9:3e:cf:ed:fe:82:ba:fd:fb:03:c0:df:0a:a7:1b:
12:44:90:91:e3:c5:92:40:a4:8c:20:78:b4:41:83:f8:19:1f:
b6:a0:ce:b8:83:da:75:15:af:bb:89:7a:ee:3c:51:84:ff:b2:
aa:18:47:50:17:05:e7:d1:72:46:94:f4:25:d4:10:40:a4:b2:
20:19:c2:43:6b:67:43:54:81:f4:7c:6d:55:bf:1e:03:6d:55:
4a:77:6b:d8:56:22:1d:f3:15:bb:44:62:a6:b5:0e:d9:10:0b:
c3:a8:3e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:05 2025 by rpki-client