Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
File: L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft (raw, json)
Hash identifier: AWBaPiDt+a/2tAoLfR6SjzalAHdg4iZjgZVpyI5Yx+A=
Subject key identifier: FD:AE:0B:D4:62:09:E6:D5:2D:9B:92:7B:43:E4:82:C5:4D:52:35:19
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 019A4DE1BE60205214DAF354CE6225B646B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
Manifest number: 1722
Signing time: Tue 04 Nov 2025 08:00:31 +0000
Manifest this update: Tue 04 Nov 2025 08:00:31 +0000
Manifest next update: Wed 05 Nov 2025 08:00:31 +0000
Files and hashes: 1: L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl (hash: 1qcf5ebKPRJUbhrJaOl1+RZKXPc88ldn84Tzev31TKw=)
2: bRCOse-YwXmlb0_TSMXc_qYW3rA.roa (hash: WyPtlgmhHmNvXP6MvNpXQnH3k3dVLs2cy4XeQO/f/1I=)
3: fAHDNBDkI_AF6qq1tyOEO6kTePQ.roa (hash: Z61YKLaWLdELIVxMnTFbl/EfpJa3Mw9qoqybZW0fjXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:be:60:20:52:14:da:f3:54:ce:62:25:b6:46:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: Nov 4 08:00:31 2025 GMT
Not After : Nov 5 08:00:31 2025 GMT
Subject: CN=fdae0bd46209e6d52d9b927b43e482c54d523519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:db:4e:e7:74:4b:ec:da:07:e6:ed:3e:3e:c4:
cb:57:02:47:a7:45:e0:85:ce:59:cd:26:d6:c3:7c:
9d:ac:c7:25:6b:88:4a:69:2e:6f:11:81:49:7c:2a:
59:86:71:d3:cc:4f:10:36:bc:d9:30:a8:5a:dc:d3:
ff:56:b2:ce:57:3f:7b:0d:0a:76:36:76:ea:0b:ec:
7c:ca:2d:7f:52:c3:ce:09:0d:71:86:ad:d8:8a:4b:
d0:67:d8:d8:2e:c9:e2:e9:de:c7:11:57:7b:2d:07:
ee:a4:f6:c0:11:10:9e:44:ba:b0:2d:e3:3b:db:81:
1c:f6:2f:3c:5a:b0:36:2c:26:5d:9f:74:c4:e2:c4:
8e:ba:2c:65:48:1c:ae:e8:d3:bf:d4:41:1d:bf:a0:
b0:fb:91:c8:fc:fd:08:a5:ac:5f:06:9e:95:2b:8c:
37:cc:d4:d5:c0:e4:fa:73:3f:6f:af:3e:14:95:dd:
7d:62:4c:27:04:28:de:5a:17:10:b4:49:16:3e:74:
65:c3:c1:40:e3:25:a1:6f:d0:2a:4a:e4:d3:df:16:
12:aa:e9:0c:1f:b3:f5:8e:6f:f4:60:ae:8e:87:e6:
9f:42:2e:33:b4:c3:18:18:1f:f7:c8:bc:2d:f8:c0:
78:19:e6:24:d8:34:dc:dd:b8:87:e6:d0:46:c2:2a:
d7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AE:0B:D4:62:09:E6:D5:2D:9B:92:7B:43:E4:82:C5:4D:52:35:19
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:60:43:f5:d8:26:77:e0:ce:7c:ab:eb:67:4c:f9:79:23:3a:
64:b5:fc:b8:35:18:bf:95:8f:22:dc:5e:ab:7b:f4:b1:b2:8d:
b1:41:e2:3d:1d:28:88:f3:b6:ae:e5:42:72:7d:d9:b9:77:6f:
3c:02:e0:c3:99:f7:2c:86:3c:b2:87:90:5d:3b:67:0b:ec:d5:
a6:f5:1a:04:5c:d5:f3:92:af:ba:be:a4:cc:64:35:f7:8b:d7:
f1:67:fa:e1:76:60:bc:52:68:3a:6f:1f:e6:d9:4b:02:bd:a8:
ae:b8:b3:d3:d3:dc:45:6f:78:76:31:30:e2:3c:a1:ce:de:f1:
7a:eb:70:11:30:cc:ee:55:66:f9:f7:64:42:47:00:25:48:a4:
a5:c2:19:1f:87:6d:77:b5:7b:49:9f:c1:90:b8:db:1c:f4:ff:
02:35:36:e8:72:57:27:e6:07:44:29:c8:f9:a5:af:6e:d3:20:
06:2b:07:a8:45:07:4f:d0:3f:fb:6d:4a:fc:d4:b3:67:7a:d7:
c0:5f:14:0c:7b:c0:03:2b:ac:b7:42:fa:95:c9:c1:de:9d:d9:
3e:4d:7e:67:d4:74:8a:b0:a5:ec:95:03:0f:47:50:ee:cb:b6:
39:a4:3a:6e:ad:db:69:f8:98:15:39:d8:c7:fd:ac:62:b8:26:
a7:9b:aa:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:24 2025 by rpki-client