Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File: L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier: wMZ4+rQejLF2PFKocFgdrJ3H0L5H5E3gKDvIj7o+DQQ=
Subject key identifier: 7D:5C:EF:0F:BC:A7:90:28:E2:51:51:20:1B:36:96:35:4A:67:AE:19
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 019A5006FCEBB3639B2565CE87BBD9439087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number: 0822
Signing time: Tue 04 Nov 2025 18:00:26 +0000
Manifest this update: Tue 04 Nov 2025 18:00:26 +0000
Manifest next update: Wed 05 Nov 2025 18:00:26 +0000
Files and hashes: 1: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: Fxv/K/vCaWIBSf0MNt7WmFP/Vwf86KTKTm0ktxozYzw=)
2: jCfDa1o9-67BNQODivTRRldEbdY.roa (hash: 8Y6qhIf9Ka0kdUNg/SnNbfjipainSlycgW7SSV7AHSU=)
3: om141KzkG2-4eMZ-f0PthIkpE80.roa (hash: cw3Iskxz7drppI2oVPr2KEtsT6+wW7KALNNnzpIfPOQ=)
4: vA4JTCZBPjorS9CM--5uNxgqUOI.roa (hash: C8BQR0NQXngOUVQVK+k99B0pWs9mjN+aAreX6gH4h2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:fc:eb:b3:63:9b:25:65:ce:87:bb:d9:43:90:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: Nov 4 18:00:26 2025 GMT
Not After : Nov 5 18:00:26 2025 GMT
Subject: CN=7d5cef0fbca79028e25151201b3696354a67ae19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:aa:6c:0a:ca:02:77:f6:bc:b3:64:37:bf:9f:
98:1a:b7:0f:bb:96:d3:18:f8:f0:e2:fa:7c:86:7c:
36:8f:5c:cd:32:04:af:2d:40:72:2c:3b:23:16:6c:
94:2c:95:78:f9:7f:4a:d0:f8:79:b9:3e:38:6c:00:
e0:ba:ff:b7:a9:73:13:f7:19:8e:86:af:36:26:34:
47:0d:ea:23:9d:40:6c:0e:0a:47:9d:02:90:12:25:
31:4c:ac:eb:cf:f3:ec:bb:c2:aa:ec:88:d1:45:87:
d0:1c:d1:e0:83:5a:2e:29:e4:18:21:e7:e2:09:f1:
2e:59:6a:47:a8:36:4f:a3:7d:a3:46:7e:3a:ef:22:
ea:d3:d6:08:a0:69:c1:75:ae:88:d0:0b:d2:aa:a3:
63:d3:ae:af:7e:3d:e2:d3:b9:6f:bb:5d:73:b1:59:
d4:93:78:06:0b:33:72:22:a9:92:7e:c3:38:e0:d6:
cc:65:1e:80:b8:bd:53:28:72:31:bf:a7:57:02:8e:
26:04:4e:c7:8c:76:c1:81:8a:5b:4c:d9:fe:a1:2b:
e5:5a:a4:82:33:b4:85:b6:3a:5a:3c:c6:f4:b0:63:
6c:03:13:7b:39:f5:c7:c6:08:2b:fc:93:11:0c:b6:
10:f7:60:41:06:9b:f4:a9:94:f0:c1:4f:63:6b:2f:
c6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5C:EF:0F:BC:A7:90:28:E2:51:51:20:1B:36:96:35:4A:67:AE:19
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b6:f0:d4:68:fe:af:17:ff:46:c5:dc:69:41:4f:0a:37:c9:
e3:e6:21:d2:04:55:98:0f:26:66:bc:db:71:8a:9d:63:a4:80:
0d:6f:79:ab:0f:47:e2:3b:16:d2:11:30:ff:f0:28:b0:a6:c8:
4a:76:2c:c1:5e:f5:6e:e7:69:00:1a:c7:ba:5e:51:59:1d:97:
d4:47:ef:54:54:ab:b6:9f:2c:d9:da:57:7f:60:bd:f9:fa:97:
43:3f:f6:86:17:8f:a2:4d:18:77:e9:ed:0b:9c:d9:7d:a9:5a:
ce:a0:7f:1a:04:45:68:9d:6d:38:fd:6b:5a:bd:98:cf:72:fb:
a2:52:58:f5:54:d6:c7:82:25:20:04:ec:e6:60:5b:55:c7:de:
38:0d:d4:88:66:f3:89:dc:ea:81:f8:e0:e8:0c:9f:d4:01:f0:
b0:b4:5e:0b:be:ca:ed:c5:14:b6:e6:49:5a:2c:ae:38:1d:ec:
34:bf:a1:a7:5a:f5:12:17:58:0b:95:0f:7c:1a:6d:f4:e6:c7:
81:bc:89:e5:a1:0d:3e:00:1b:44:43:a8:b0:90:2d:c7:42:9a:
5b:85:ad:d0:19:c2:ff:6d:fa:b7:92:18:ee:3e:29:54:4a:7c:
7d:a9:1c:c6:f8:04:79:53:a8:dd:c4:c2:12:11:a2:9a:9f:eb:
25:c0:64:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:05:16 2025 by rpki-client