Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: W6K1YLgyvBaCTO058Nc0YVoRdqBooSoA/sASVpNg0bU=
Subject key identifier: E7:A4:73:D6:84:F6:0D:F0:54:10:5A:69:99:31:94:37:71:6A:4A:74
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 019A4FD04DBC0482DDE3742308C65B25FABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 0CE0
Signing time: Tue 04 Nov 2025 17:00:42 +0000
Manifest this update: Tue 04 Nov 2025 17:00:42 +0000
Manifest next update: Wed 05 Nov 2025 17:00:42 +0000
Files and hashes: 1: E5z0sS7nvixPBFyRI_RWT9Plr0w.roa (hash: SNlFw+9uypuF2ztoEgq8hVfftlXP+FQlnrdAhrNkFGE=)
2: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: mf73VFRr6E7lxnAFLxWxg7qFAdxWem85xMb8KrmX/g0=)
3: OqOCQtZBHzCV5Z0xJrS8FJFSEWY.roa (hash: xZeH8Q+yxnCI5oid4Rq8ssEGEdCZgg6NEVRbko+oKkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:4d:bc:04:82:dd:e3:74:23:08:c6:5b:25:fa:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Nov 4 17:00:42 2025 GMT
Not After : Nov 5 17:00:42 2025 GMT
Subject: CN=e7a473d684f60df054105a6999319437716a4a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:80:d2:70:9f:91:de:24:de:17:00:09:ee:
dd:3f:f8:b7:3a:b0:f8:8b:b9:ae:a3:15:48:37:91:
c2:5e:53:6c:59:5b:ae:34:94:bf:36:c9:9e:f4:eb:
15:e2:43:4d:71:37:75:09:08:24:97:5e:7e:fd:4f:
17:c8:cd:a9:78:75:8a:33:84:50:8f:15:0e:8b:d8:
e7:cc:28:f8:24:8c:b8:5f:d8:62:31:5f:2f:18:ff:
fa:01:02:b6:33:1b:42:4c:24:84:11:d8:7d:fe:e6:
e5:b1:1b:96:24:ac:65:04:75:cc:40:b3:01:81:53:
b0:14:8c:9d:c9:d7:13:51:86:15:29:e8:c4:6b:5a:
be:b1:88:11:4b:0d:8a:3e:92:7f:b0:b1:fd:81:49:
1b:5c:19:e9:42:84:7f:c4:3e:32:22:cc:1a:5e:3e:
ed:1e:1f:c7:1a:9a:c8:96:60:a4:c9:07:b3:63:71:
23:10:e2:fa:41:4f:b4:b7:a5:3c:82:92:ed:cb:2e:
4b:29:f8:61:31:fe:4d:6a:8e:f4:39:3e:ba:7b:4f:
6f:e1:0a:e3:3e:93:6d:eb:57:b0:0a:f5:40:c2:2e:
f6:86:f3:9c:b9:5d:75:e3:09:66:ab:70:57:f9:92:
af:85:66:a6:7c:92:15:ca:eb:0c:90:81:15:98:f8:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A4:73:D6:84:F6:0D:F0:54:10:5A:69:99:31:94:37:71:6A:4A:74
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:79:2b:cf:58:61:e1:04:5a:a4:96:f3:ae:5a:bd:90:38:0f:
fe:74:df:a3:31:4e:5f:b6:e5:8d:f2:fe:9d:55:c7:6b:cc:de:
2c:3c:68:9c:b9:61:b5:a2:7a:ad:ed:b6:ac:2f:09:6c:ea:5e:
ea:39:ea:53:33:30:73:5b:0a:02:1c:00:1c:2b:05:46:40:44:
7f:d3:23:1a:56:68:3b:66:32:24:a1:63:d3:e2:64:a0:e3:0b:
d1:58:32:ea:5d:c8:fc:20:58:43:7c:c9:28:ef:41:36:cc:3a:
5f:67:47:a1:23:b5:f9:7a:77:3a:b0:e8:3c:e0:8f:af:3f:94:
a4:ca:1a:52:03:36:2c:67:36:41:00:24:2a:6c:4d:cc:61:9b:
71:fe:78:8b:66:c6:ba:25:c5:0a:a4:71:ef:89:0b:56:c5:32:
57:82:22:d3:02:6d:5c:d6:0a:66:63:4e:b5:29:e1:5f:36:b3:
4d:c9:9c:ce:22:ef:06:31:dc:02:fe:2b:cf:94:40:79:77:4e:
7e:7f:04:fd:5a:df:36:1e:dd:3b:2c:e4:d2:21:a1:2f:1c:55:
e5:d7:3e:9c:79:c5:2d:7e:03:38:72:42:b4:bd:43:08:4d:ca:
f2:a0:11:32:1b:4a:16:b8:7c:4e:57:90:40:fd:17:5f:dc:91:
db:79:e9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:30 2025 by rpki-client