Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
File: L46D7v5_FLnkSQo27r2IHhY8zBs.mft (raw, json)
Hash identifier: g/PqLHG4hrlcKTDbihhlc5aVKgVDu+FSNw6zdaZLXLg=
Subject key identifier: 2C:78:7E:46:0F:39:8A:1D:49:1C:32:29:23:18:4F:7A:94:21:67:DA
Authority key identifier: 2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B
Certificate issuer: /CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
Certificate serial: 019A552D3980CDF88E3333DCD906056748F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
Manifest number: 1456
Signing time: Wed 05 Nov 2025 18:00:18 +0000
Manifest this update: Wed 05 Nov 2025 18:00:18 +0000
Manifest next update: Thu 06 Nov 2025 18:00:18 +0000
Files and hashes: 1: L46D7v5_FLnkSQo27r2IHhY8zBs.crl (hash: 1vfrKZqdcm54tGVvFCpozsVXkugLyjdO0t9onUFFbNA=)
2: ou7kmfNJPTUTO_ZY5p4au0cZuog.roa (hash: 10vYhF0nx+k3pDi2pZX1tYjYlLEGelMx798hFv/wUiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:39:80:cd:f8:8e:33:33:dc:d9:06:05:67:48:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
Validity
Not Before: Nov 5 18:00:18 2025 GMT
Not After : Nov 6 18:00:18 2025 GMT
Subject: CN=2c787e460f398a1d491c322923184f7a942167da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bb:74:b1:7e:70:77:c5:72:c2:36:26:ef:37:
f0:ba:8f:71:af:86:74:c3:93:a0:7e:71:3f:b5:80:
24:a4:68:ff:8d:10:59:6b:29:f6:be:7b:06:d1:f1:
6c:80:ca:4a:00:fd:f3:2f:f9:42:4f:6e:91:1c:02:
49:cf:b5:a8:10:74:e5:7d:c5:0f:aa:5b:b9:4c:fd:
1e:96:04:73:87:f2:29:7c:76:b8:f6:c7:44:f5:c4:
79:bb:76:4e:13:7c:3a:e8:0c:a3:7e:cb:8a:d1:2a:
74:a9:35:8d:39:68:73:3e:38:44:0f:40:28:9e:88:
60:fa:2e:2d:ff:cc:ef:d5:63:41:97:a3:e0:bb:ea:
87:55:43:dd:94:53:61:33:c1:0f:ec:75:7c:bd:67:
af:b5:9f:5b:ae:2c:08:d6:43:b2:e8:b5:05:f2:e2:
4c:91:e2:cc:96:69:eb:2e:69:8a:99:b6:40:49:c7:
02:fd:d5:e9:3c:e4:cd:95:e7:41:8a:db:55:be:5a:
f6:cf:c7:10:3e:38:d1:4f:4c:90:6d:f4:fb:5d:3a:
9f:60:ee:42:25:7b:ea:5c:b9:13:9e:10:41:f7:1c:
2a:96:8e:de:55:0e:3c:90:60:2f:30:78:91:16:c0:
ef:96:49:e0:8e:08:20:67:79:5b:6a:20:a9:a0:38:
8b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:78:7E:46:0F:39:8A:1D:49:1C:32:29:23:18:4F:7A:94:21:67:DA
X509v3 Authority Key Identifier:
keyid:2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:18:56:9e:21:ff:86:47:a8:56:40:2b:71:33:14:7d:39:45:
fa:8a:c6:0a:c3:41:94:eb:b7:16:4d:85:05:6e:ab:93:af:45:
e0:23:c1:d6:61:81:00:77:44:9c:c5:44:7b:41:70:b5:86:bd:
b5:5e:1c:64:5a:36:d4:75:55:81:5a:41:61:94:15:91:82:24:
f7:e4:bd:6f:a0:05:6f:b9:8f:8c:19:fa:70:12:51:1f:46:ef:
e8:31:7f:f0:71:0a:f9:b5:77:3e:b4:e0:8f:45:18:c6:28:b2:
a0:3f:90:53:86:91:60:f0:e3:99:65:73:c5:5c:5a:41:ef:62:
2c:97:22:12:ad:a9:cf:2d:d4:fc:71:e9:aa:4b:64:88:f9:26:
7b:27:12:2b:2f:9b:f0:bb:2d:c1:2a:19:9b:52:17:85:50:b8:
df:8a:f8:e6:bd:75:9f:12:ba:12:ec:31:f1:a6:eb:3e:01:04:
52:15:e3:72:02:79:28:22:04:d4:f3:97:7e:cd:0b:f6:58:1c:
9f:c9:58:ee:a9:98:0a:15:a6:1f:fc:d4:a2:6e:57:fe:d0:e5:
49:54:84:0a:64:5e:d1:ae:ec:65:c3:fb:aa:01:25:0c:c4:4f:
61:4f:0b:4f:77:e1:da:a8:52:c8:60:48:fa:99:56:e3:26:05:
48:ec:b5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:40:46 2025 by rpki-client