Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
File: L45RIlad5SzVCux5NJS_HOfCX8g.mft (raw, json)
Hash identifier: uV+uCuqoZW5OuaMDf6FpaaU+yJLDxgChkEgq7WxfmVo=
Subject key identifier: A7:16:33:D6:DD:B9:70:17:74:36:02:74:E3:0D:2E:78:EC:F8:2D:EA
Authority key identifier: 2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8
Certificate issuer: /CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8
Certificate serial: 019A4DE1F26FE507CD4A496F96C0FD22B2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
Manifest number: 0DC0
Signing time: Tue 04 Nov 2025 08:00:44 +0000
Manifest this update: Tue 04 Nov 2025 08:00:44 +0000
Manifest next update: Wed 05 Nov 2025 08:00:44 +0000
Files and hashes: 1: 4inp3rmc8abBZrSpYG-9NzczLIs.roa (hash: qFrZA2CrZBITypnTYdQbhEuRjClc/T+Pn0jtn1pc/ok=)
2: L45RIlad5SzVCux5NJS_HOfCX8g.crl (hash: usOHVr7TFWI2G2KWC42xr+ieQpwhh6oFvbMJvX7A/Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f2:6f:e5:07:cd:4a:49:6f:96:c0:fd:22:b2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8
Validity
Not Before: Nov 4 08:00:44 2025 GMT
Not After : Nov 5 08:00:44 2025 GMT
Subject: CN=a71633d6ddb9701774360274e30d2e78ecf82dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:d2:60:39:9b:d5:34:cc:78:a6:76:d1:15:4a:
97:02:d1:ff:d9:f0:04:03:a2:c8:87:6e:30:c5:e1:
c5:09:8e:90:af:24:e5:dc:48:b5:91:68:e7:37:db:
f7:89:3f:71:d6:05:74:4a:ee:39:31:52:9c:f8:53:
57:3d:59:28:30:54:74:f5:fb:48:4f:dd:12:5e:21:
59:d2:a8:f9:15:a0:ab:31:ba:59:91:31:82:b0:d5:
09:57:d3:61:20:df:dc:b9:90:73:7c:12:0b:d4:0e:
35:e0:6e:26:c0:c2:1a:87:22:e6:27:d0:f1:7a:ce:
4c:31:42:91:44:de:36:3a:b2:c5:ad:78:d2:0b:fe:
bb:a3:ce:ca:c8:fd:6d:0f:71:15:08:b7:aa:4c:fb:
d0:4b:76:0f:dd:c4:65:bd:d6:44:b1:58:db:8f:2c:
bc:af:83:c1:1a:91:d3:2d:31:31:d2:5c:cc:df:6d:
75:12:b3:3f:57:53:71:26:a9:d8:2f:e6:89:e2:b8:
18:62:66:86:9a:8c:95:4d:98:9a:01:d4:7b:9c:55:
91:83:93:91:7a:12:02:b5:f5:85:55:80:41:55:fd:
da:3d:b8:6a:4a:26:18:b6:ec:b0:50:69:88:82:4f:
b2:fc:14:d6:1b:a9:1c:7a:61:9f:fe:83:7e:39:2a:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:16:33:D6:DD:B9:70:17:74:36:02:74:E3:0D:2E:78:EC:F8:2D:EA
X509v3 Authority Key Identifier:
keyid:2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f1:b7:70:53:7e:8c:4f:69:a6:7e:e6:aa:3e:6b:63:12:9a:
81:c7:3e:bc:34:bf:1a:a2:cb:89:00:e5:59:18:45:07:c5:a3:
89:26:0d:9f:b8:e0:a6:12:f1:b2:1e:44:23:d6:ee:ac:2d:e7:
85:de:a5:c1:2f:e7:56:c6:34:e2:e3:69:11:50:0c:9b:26:e4:
12:c9:0c:69:2f:d8:a9:93:9a:d3:06:76:f7:d2:5e:93:28:28:
cb:f8:d0:c7:be:83:f0:6a:94:7f:21:dc:78:06:1e:90:84:a3:
fb:44:6d:d3:4e:bb:24:b6:75:b6:24:59:03:9e:f3:c4:95:5b:
ae:f3:41:77:44:10:21:50:e1:be:f6:14:1f:d5:fb:80:90:40:
d3:7d:5b:c1:a2:f3:b6:52:31:6a:ca:7b:69:6a:86:0c:eb:48:
0d:be:87:f8:fc:43:da:cb:b3:52:15:fd:f7:1a:8c:11:fa:64:
cb:5c:fe:27:92:29:ad:26:f3:4d:c2:ac:6f:51:d0:96:1c:2f:
ac:11:85:8f:ee:7a:94:0a:ea:07:79:c2:fb:c1:33:3d:6b:23:
24:36:61:05:a4:ca:a8:b5:c9:33:30:7b:53:2a:79:49:f0:c1:
e0:e6:15:88:9a:88:db:27:45:93:04:d3:bb:e7:d7:e8:43:2e:
64:d9:53:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:46 2025 by rpki-client