Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
File: L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft (raw, json)
Hash identifier: rPlCa0Bxd9gvereXZhYblm7fByRtUk2pIdyTII/5Emg=
Subject key identifier: 48:A2:25:48:9E:D2:9F:AE:3A:69:1F:01:54:B0:4C:43:F5:A5:73:94
Authority key identifier: 2F:9C:C6:A3:F4:C2:38:19:30:BA:8D:1A:F0:D9:5A:BE:C0:96:81:E4
Certificate issuer: /CN=2f9cc6a3f4c2381930ba8d1af0d95abec09681e4
Certificate serial: 019A52D169F8B3A51611D1E7CF2603296E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 07:00:47 +0000
Manifest this update: Wed 05 Nov 2025 07:00:47 +0000
Manifest next update: Thu 06 Nov 2025 07:00:47 +0000
Files and hashes: 1: L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl (hash: PWK6eZnuc9uoxMCNiFWIrRVDKj6XLjh22hpGJqHI2fY=)
2: TYDdD2uxFpvnn7BeeyNRIhrYOWU.roa (hash: aAKeZOkxG98jWI5WqK0AaKLmvqEXTtJ8l1136XOUFDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:69:f8:b3:a5:16:11:d1:e7:cf:26:03:29:6e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f9cc6a3f4c2381930ba8d1af0d95abec09681e4
Validity
Not Before: Nov 5 07:00:47 2025 GMT
Not After : Nov 6 07:00:47 2025 GMT
Subject: CN=48a225489ed29fae3a691f0154b04c43f5a57394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:49:e8:f8:a0:2a:ed:25:82:89:e9:9a:4b:
63:62:1d:fc:46:cd:fa:ab:a1:e0:28:e7:27:fe:37:
10:56:59:fe:b0:f1:d0:22:93:fb:21:c6:4b:79:ae:
fe:97:8c:8c:e2:91:6b:0f:93:29:d2:32:31:17:6f:
aa:93:70:a7:7d:93:5e:a8:e9:e4:95:35:42:26:e5:
84:45:16:d2:72:f0:85:12:80:7f:38:99:ad:6b:7f:
0e:92:32:56:bc:fc:68:de:8a:94:02:c3:ef:40:ca:
92:34:f1:06:79:a5:42:c4:aa:ec:d5:93:fd:63:fb:
3d:d1:08:82:0d:4a:ad:d1:ee:f7:fa:7d:59:22:07:
e2:75:65:34:ab:bf:e8:e0:9a:f0:24:3d:ad:d4:55:
de:e0:a1:93:c4:54:78:82:62:a3:db:49:7f:37:be:
df:ab:e0:41:1b:dc:bf:e8:f4:2e:76:58:1e:0a:2a:
67:87:02:26:62:bf:46:6c:62:2b:21:0d:c8:70:d2:
a7:ac:b4:48:aa:e5:9c:dc:3b:a3:1f:8a:d9:c6:a0:
11:9a:88:a1:8f:93:0e:5f:ad:76:52:ad:f2:2d:4b:
3d:f6:4f:6b:81:e7:18:90:d3:a8:62:c0:e8:8b:d6:
94:bb:8d:b8:b2:d1:b8:6e:71:64:70:52:7d:cb:92:
6f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A2:25:48:9E:D2:9F:AE:3A:69:1F:01:54:B0:4C:43:F5:A5:73:94
X509v3 Authority Key Identifier:
keyid:2F:9C:C6:A3:F4:C2:38:19:30:BA:8D:1A:F0:D9:5A:BE:C0:96:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c7:c0:81:0d:59:8d:a7:7b:fa:dc:0a:7e:b9:ae:0d:db:99:
f8:48:77:e8:d1:1b:4c:97:b6:5e:6a:93:c8:f3:2f:60:64:fd:
a0:c2:4c:36:8f:88:dd:61:ff:bc:ef:02:1d:60:b7:cb:52:7b:
17:e1:1f:a4:86:b7:43:1d:95:bd:fd:17:d7:0e:24:c1:eb:ba:
99:41:b1:91:2d:5c:2f:4d:81:b4:52:10:db:77:37:a9:08:d2:
b8:1e:96:cb:c6:07:42:e5:fb:f7:67:f0:f9:01:04:a8:4a:1d:
91:10:96:b5:0b:7a:75:a7:81:d9:de:14:ad:b8:e7:3e:19:83:
a6:53:af:7b:74:02:df:50:8e:f3:b6:92:4b:e3:1b:b6:b7:93:
da:23:85:c8:50:ae:39:82:62:b0:c0:1a:9a:57:ff:47:52:6a:
0d:ca:79:0f:b2:ea:9b:e3:a5:32:c2:dc:30:a8:91:ea:29:c9:
81:5f:df:d0:db:df:ca:be:ff:32:a0:43:bc:7e:52:3e:61:dc:
18:8a:42:95:0e:a2:d2:1a:9e:66:51:9a:2f:32:ff:8e:4f:66:
67:33:59:50:3c:a0:b8:9e:5a:3b:da:90:8c:33:1a:12:d6:f7:
7e:e7:fb:e4:2f:28:c6:d5:61:01:3a:66:80:55:88:ff:c5:70:
56:36:ee:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:30:43 2025 by rpki-client