Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: vcwFKWxVMEPMXPNYIJGl1iav0zJlCjEAtMbaJLjSxyU=
Subject key identifier: A1:37:1C:75:2F:EA:8C:0A:E7:C9:F0:3B:39:1C:1C:B1:8E:67:0C:82
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 019A53AD24387B529C5D1B59F66D7729F5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 0FC5
Signing time: Wed 05 Nov 2025 11:00:47 +0000
Manifest this update: Wed 05 Nov 2025 11:00:47 +0000
Manifest next update: Thu 06 Nov 2025 11:00:47 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: nbEIatg/uPos2r2y0bSl5tnio3K2E3zRvH2XX/ljTeM=)
2: aVM2JRPGoP421g9oSUNGjf9qD-0.roa (hash: 42F126y1V8CdYKNFngkqVCoN/zI9pVlEuybIcm6uoWA=)
3: vIU4Yywm4_gH0qTtuVvYBbqi0Vk.roa (hash: 7tRCC811YWihlT+yYcIFOXhADjHxLL/OK1DaYCuI4jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:24:38:7b:52:9c:5d:1b:59:f6:6d:77:29:f5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Nov 5 11:00:47 2025 GMT
Not After : Nov 6 11:00:47 2025 GMT
Subject: CN=a1371c752fea8c0ae7c9f03b391c1cb18e670c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:c0:27:a3:cb:f2:91:e9:58:3e:9f:10:f7:
b0:2f:99:64:2b:00:81:a5:75:3f:70:4d:8b:a0:1f:
cf:a5:e0:1f:02:50:62:d3:ef:56:25:a2:39:e6:85:
f8:ec:9f:99:ea:bc:16:53:66:eb:85:71:2f:bb:43:
42:42:17:0d:8a:bf:69:15:65:d8:6f:e5:59:4d:f4:
80:0d:91:ab:68:eb:ad:e0:28:f9:58:61:6e:d0:d8:
6c:63:76:e9:71:fb:49:14:9f:88:70:ec:c2:9d:72:
27:f6:2d:a7:c3:e9:8c:1a:e9:8b:40:c4:94:90:6d:
fb:a9:08:20:09:87:18:6b:17:74:fd:0c:59:36:2c:
42:0b:65:7b:79:d5:50:6e:25:79:9c:1a:5d:06:e2:
88:88:5c:45:69:37:45:f1:f6:75:30:7a:77:59:99:
eb:01:56:70:f5:56:c0:f0:d4:fb:9e:f2:ff:8e:bd:
fd:00:2e:c3:50:32:6c:b0:c2:1d:2b:6a:7a:11:4b:
5a:3c:74:a4:d4:ba:e9:37:be:e5:b8:04:b1:4a:09:
01:60:c8:0e:bc:47:4a:e2:aa:84:00:1c:70:1c:53:
f3:5f:ab:09:43:ad:b5:db:f1:f9:db:fa:39:90:af:
5b:68:9b:3d:12:66:a8:dc:4d:5c:be:a8:4b:7f:45:
e7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:37:1C:75:2F:EA:8C:0A:E7:C9:F0:3B:39:1C:1C:B1:8E:67:0C:82
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:17:26:0f:fe:ae:0b:32:4d:38:be:72:b4:89:07:7e:28:c1:
75:c4:87:1c:ed:e6:2c:30:e3:cb:f0:f2:c6:94:7d:46:1a:22:
24:0d:80:5d:56:f6:b7:4d:70:90:16:d1:77:d9:26:53:3e:c9:
9b:b1:ff:cf:7b:1a:df:bb:1f:5d:e2:57:f2:e9:88:a7:7e:20:
ab:a2:52:cc:73:b0:d6:07:97:ff:bc:4d:01:d7:9e:87:d8:a6:
c7:e7:93:ff:1f:fc:4c:36:ce:43:c7:76:37:8d:bd:af:8b:26:
0c:d5:b6:14:30:94:e3:53:ba:c0:92:ed:ec:de:4f:ef:7e:a2:
4a:2f:08:d9:d5:6d:c7:b9:28:90:d3:cf:e2:83:51:87:4a:cb:
86:a2:d8:14:6e:7f:76:b3:b4:96:e0:c8:2e:c7:76:73:e6:b9:
e8:53:18:53:36:e9:1b:29:e4:67:43:c1:29:d6:5b:bf:57:0d:
b3:0f:1a:cc:1b:c8:d4:7f:df:f9:2b:e9:43:34:cf:5d:f7:a9:
5a:9a:f0:53:b2:2e:d2:58:62:60:dc:7f:cb:b4:38:1f:f9:5b:
61:68:ba:f3:9d:bb:33:26:96:a6:77:4e:1a:b6:3e:6b:db:53:
7d:b2:e0:0c:3a:ef:be:f8:06:ba:0e:33:51:d0:2c:fa:2e:0d:
29:9c:17:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:17:40 2025 by rpki-client