Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
File: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft (raw, json)
Hash identifier: HZ3ZBduLBRuDjeF0QLwWtgHSwB5meJVe2CqFpQ4rO48=
Subject key identifier: 6E:E2:73:FF:35:19:70:61:79:98:72:28:F7:2C:82:96:62:78:C3:FB
Authority key identifier: 2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85
Certificate issuer: /CN=2f593b254a9c3fac81652502f1c43c2201c16a85
Certificate serial: 019A53E43C713894FE9DBF33E68293ED3431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
Manifest number: 0B12
Signing time: Wed 05 Nov 2025 12:00:57 +0000
Manifest this update: Wed 05 Nov 2025 12:00:57 +0000
Manifest next update: Thu 06 Nov 2025 12:00:57 +0000
Files and hashes: 1: L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl (hash: WS7sH2B5mXKfh78MtTQnRDynYoaTvW1cZCuZrxfPZQg=)
2: vWKAelL_NB0Uv3QL4eiyHgV8KWE.roa (hash: 8Qqsv2KL8HLbO42iXxI9f+63WUGpq4hCsqW23tu/9Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:3c:71:38:94:fe:9d:bf:33:e6:82:93:ed:34:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f593b254a9c3fac81652502f1c43c2201c16a85
Validity
Not Before: Nov 5 12:00:57 2025 GMT
Not After : Nov 6 12:00:57 2025 GMT
Subject: CN=6ee273ff3519706179987228f72c82966278c3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:80:a4:d6:df:27:3d:35:20:86:a2:12:f3:5b:
06:21:09:48:ae:4f:28:2e:13:61:2c:59:e1:a6:e4:
5b:a9:0f:14:8e:20:d4:93:59:24:ec:19:0c:90:aa:
2e:3e:e5:a3:3b:86:c9:03:d3:13:31:be:fe:e4:d8:
90:31:1c:a9:ab:a6:f6:45:45:84:fb:e2:b0:1a:7c:
c7:c2:89:bb:46:b0:8e:70:6e:f6:61:0f:44:e0:23:
e6:5a:20:34:24:b5:dc:98:3c:e1:fd:5c:ac:ab:3a:
ea:21:6e:26:e9:f7:5e:c5:c7:c2:a5:59:16:8c:ae:
9d:44:20:4b:f8:64:15:c8:a5:59:2b:0a:c1:d7:11:
8d:89:7c:cf:49:31:c5:db:9b:8d:a2:34:3c:13:c1:
0f:40:9e:28:38:d4:14:03:b7:e2:c6:bc:05:39:1b:
de:54:da:10:c5:f2:f4:a6:66:f0:9b:32:80:6b:2c:
7e:27:ca:d4:d2:51:5b:08:1f:97:77:af:85:bd:fe:
90:8d:fb:aa:fc:75:14:b0:bc:2a:79:cf:2c:50:6b:
44:27:b9:8a:ad:1a:9b:af:1a:60:f7:d1:c9:1c:74:
bb:4d:e1:a1:62:5f:31:3b:20:c9:0e:4e:46:f1:f9:
42:d8:a5:c7:dc:75:bf:3e:b5:49:a0:fd:0c:f5:68:
ca:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E2:73:FF:35:19:70:61:79:98:72:28:F7:2C:82:96:62:78:C3:FB
X509v3 Authority Key Identifier:
keyid:2F:59:3B:25:4A:9C:3F:AC:81:65:25:02:F1:C4:3C:22:01:C1:6A:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ef3608-acd4-45e1-9d32-c3bb847600cd/1/L1k7JUqcP6yBZSUC8cQ8IgHBaoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:cf:3d:75:93:8b:5d:a3:fc:3b:48:ce:12:91:8f:2a:92:ea:
fe:66:7a:82:01:86:fa:00:b2:ee:d3:c2:91:01:3e:04:74:de:
d1:5c:93:76:ac:21:35:0d:bb:bc:b5:3a:58:b3:60:9f:fb:78:
b1:53:54:19:2a:91:80:1d:0c:8f:dc:4c:d7:21:72:b0:a2:0f:
6c:6b:b2:83:d7:d1:50:30:f0:0f:df:9f:a2:42:fd:8e:ca:a2:
37:e0:86:58:68:41:79:49:e2:7f:d8:2c:39:0b:44:87:dc:f6:
8d:01:bc:6f:84:38:80:d4:07:fa:27:59:e1:da:a1:05:bb:a9:
da:a7:c6:61:87:2d:7a:5b:97:73:24:7b:ea:f2:c3:ed:f7:d8:
13:04:b0:78:b5:af:a4:dc:ed:58:7f:c1:fc:1e:fd:ab:1c:56:
1e:c1:2c:7f:26:ec:20:c8:f0:23:9d:bd:83:31:31:a0:7f:6b:
47:0f:3e:dc:f7:2e:58:86:ff:a6:35:9a:2d:a6:9a:e5:54:b7:
04:09:c7:01:91:59:29:d0:39:64:44:b0:e3:a1:27:84:6c:1c:
fb:68:96:67:73:14:80:3e:10:3a:05:35:36:59:1b:c7:a2:58:
2c:61:6d:47:17:4a:b2:3c:a0:24:12:33:25:6d:49:b7:c2:1d:
d0:8b:7d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:09:38 2025 by rpki-client