Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
File: L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft (raw, json)
Hash identifier: iTCWMK2I9yx1l7NtboVjrNO+tQGse7lpiTPR1p9OHYA=
Subject key identifier: 1F:D0:36:D0:33:72:B6:4E:6B:5D:A1:D2:11:9C:39:29:2B:30:3E:A3
Authority key identifier: 2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
Certificate issuer: /CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Certificate serial: 019A4D7404DDBECB24A2799B756EA53D75AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
Manifest number: 16F5
Signing time: Tue 04 Nov 2025 06:00:40 +0000
Manifest this update: Tue 04 Nov 2025 06:00:40 +0000
Manifest next update: Wed 05 Nov 2025 06:00:40 +0000
Files and hashes: 1: L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl (hash: GGRYYcrddG9Sh/NEQRtUy/VW19t2+JLBjRK0HZ0hxes=)
2: ZoHlTSWf4EeqC9A5k-qHnjmwKF4.roa (hash: 7rMi4KUfYRyetPUm0wFZARhPbAH2Hhf04z4uA0idTbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:04:dd:be:cb:24:a2:79:9b:75:6e:a5:3d:75:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Validity
Not Before: Nov 4 06:00:40 2025 GMT
Not After : Nov 5 06:00:40 2025 GMT
Subject: CN=1fd036d03372b64e6b5da1d2119c39292b303ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:d5:20:00:37:8e:48:75:11:ad:6b:3d:84:
a2:a5:d0:c6:c3:ac:fc:b2:e4:21:91:42:e2:66:59:
2a:95:ee:50:4b:63:6f:ec:ad:40:0e:d7:7a:de:c2:
88:d6:ac:f8:04:a3:fc:de:67:3d:51:38:eb:03:2a:
76:77:c3:24:9e:3d:b7:a8:c4:ff:c3:f9:48:c9:6b:
80:74:ea:e8:0d:4b:24:30:ab:61:e1:bd:21:dc:5f:
a1:88:f2:72:82:02:c8:b2:be:8d:be:ca:d5:83:af:
61:76:e2:5d:c8:32:c9:8b:da:12:a7:64:c1:5f:dd:
9e:ce:f4:ab:17:37:3a:0e:49:c5:53:5c:a0:2a:c6:
11:14:b4:1f:5e:c8:61:ba:95:5f:a9:5a:ed:55:ba:
3b:55:b7:bc:f6:f8:e0:56:65:c7:ee:6f:6d:c3:93:
14:33:d4:e2:5a:2c:11:21:8d:c0:e5:f7:c7:ef:97:
e4:f3:9a:60:e4:4c:67:83:c2:19:f5:c5:c2:f8:76:
79:5c:58:91:a5:c4:4e:7c:6c:ee:b8:8b:96:7f:89:
b5:d3:20:fe:64:7f:51:fa:55:94:aa:7a:20:d2:0c:
47:3b:b4:36:13:c7:55:f8:53:0c:6b:b6:3f:b3:84:
ca:31:12:a6:6e:9c:16:c4:e7:57:2e:30:27:46:58:
c0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D0:36:D0:33:72:B6:4E:6B:5D:A1:D2:11:9C:39:29:2B:30:3E:A3
X509v3 Authority Key Identifier:
keyid:2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3c:c7:56:dc:7f:67:82:26:c2:11:b4:0f:56:80:fe:d8:f6:
15:51:91:6f:02:f4:ba:3d:37:2e:da:d6:a2:ab:93:ca:2e:76:
2e:87:f4:52:23:5c:b6:22:0b:84:13:a3:ac:d1:7c:40:93:c5:
83:03:00:39:c0:2d:3e:e3:52:b8:3e:a2:03:dd:39:8e:14:bb:
d1:10:aa:7e:64:71:f9:df:41:01:c3:fb:fa:27:b6:e7:03:6d:
8f:59:72:5b:55:30:02:58:15:93:ef:76:1a:e6:53:b8:97:ff:
26:4d:a1:ab:27:78:50:5f:0f:b3:ed:bb:bf:ba:1b:af:65:b6:
4e:32:c9:06:7b:2a:5a:73:1c:39:ac:73:86:fc:6a:15:61:59:
52:33:66:5d:91:fa:50:2e:53:10:e3:47:69:f6:8e:a9:a4:fa:
de:c2:d8:12:03:54:c2:ed:75:f0:76:94:30:56:cc:80:e7:68:
d0:a2:1a:0c:a2:ae:94:b4:b9:f3:a0:74:b2:84:7e:75:6d:a2:
31:19:28:81:c2:11:e7:ae:5d:4d:27:13:b2:6a:11:4a:0c:69:
1e:91:de:60:b9:3f:4f:46:c1:58:3b:d4:78:37:98:e9:ee:95:
14:2e:06:b1:30:28:ce:fc:33:cb:d0:a4:93:7f:b6:f9:0f:bf:
10:79:31:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:32 2025 by rpki-client