Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
File: L1yv1e_S3yybMJu9Xu1HppGJhLA.mft (raw, json)
Hash identifier: cQVwNtuuBnjAeyRgzRY1eURdMMTeVBfiWtZilkuBOhs=
Subject key identifier: 03:E5:DD:34:97:9F:8E:34:76:21:04:DB:E8:40:86:C4:45:E1:88:29
Authority key identifier: 2F:5C:AF:D5:EF:D2:DF:2C:9B:30:9B:BD:5E:ED:47:A6:91:89:84:B0
Certificate issuer: /CN=2f5cafd5efd2df2c9b309bbd5eed47a6918984b0
Certificate serial: 019A4EF4D203648837580F86F96801042811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:00:58 +0000
Manifest this update: Tue 04 Nov 2025 13:00:58 +0000
Manifest next update: Wed 05 Nov 2025 13:00:58 +0000
Files and hashes: 1: L1yv1e_S3yybMJu9Xu1HppGJhLA.crl (hash: t0thwBQgZpTM2zFBV/jJNgjvOkuPCQLmRu7aZttXSgE=)
2: X6bUQA_5cf8zbxjRiQVtHpjCxCQ.roa (hash: zu1RgyNxGmH89VrmCcbJJkVVqRZ4t3VoOwmmWEEmDMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:d2:03:64:88:37:58:0f:86:f9:68:01:04:28:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cafd5efd2df2c9b309bbd5eed47a6918984b0
Validity
Not Before: Nov 4 13:00:58 2025 GMT
Not After : Nov 5 13:00:58 2025 GMT
Subject: CN=03e5dd34979f8e34762104dbe84086c445e18829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:d0:cf:5b:05:48:3c:89:08:82:91:df:53:
49:43:f7:07:e7:ac:b4:07:e3:f8:23:6c:8f:c6:b4:
70:90:77:fe:3f:6d:1d:99:23:07:4a:c1:95:14:97:
07:8c:7f:c7:c4:15:93:e0:ee:f3:fc:0a:26:0b:0e:
a2:cb:1e:c0:71:81:0a:06:64:3b:ea:26:6b:0e:32:
51:f9:06:3d:d2:8c:2f:4a:b4:22:93:f8:1c:c7:06:
91:f9:1d:ed:0a:c5:3c:91:60:05:c0:12:1a:06:25:
45:38:81:d4:ae:61:64:77:97:25:12:64:c0:6a:59:
70:73:18:90:87:dc:4b:51:8a:6d:26:36:a5:47:21:
5f:2c:21:b5:78:4e:83:18:1f:49:79:b6:3a:e2:24:
15:6c:84:f1:86:8b:fd:ff:f5:f8:ff:34:a7:88:5b:
4f:e4:30:57:b9:6e:63:0d:a6:d5:0f:b9:76:c8:e4:
e5:37:71:a8:b4:e3:cb:f8:98:a4:24:a6:dd:25:66:
f8:f1:9f:92:c0:e7:cd:ca:47:1f:31:f1:bd:78:9b:
9d:14:8c:fc:29:ea:c2:41:6b:62:ed:92:9c:e6:c3:
44:d0:75:77:8d:a2:86:3a:7d:47:e1:85:76:b7:74:
5b:9f:74:61:98:38:e6:26:e3:ae:8d:9d:3e:79:26:
9d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E5:DD:34:97:9F:8E:34:76:21:04:DB:E8:40:86:C4:45:E1:88:29
X509v3 Authority Key Identifier:
keyid:2F:5C:AF:D5:EF:D2:DF:2C:9B:30:9B:BD:5E:ED:47:A6:91:89:84:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yv1e_S3yybMJu9Xu1HppGJhLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3b0ba6-fc31-4ec6-8161-ad827e3edf6c/1/L1yv1e_S3yybMJu9Xu1HppGJhLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:10:09:b4:c9:5a:22:5a:e2:0b:9f:05:0f:4e:86:e4:6b:95:
01:fa:fe:2c:68:72:2f:c8:54:b5:74:59:01:2e:bb:19:26:65:
99:0e:76:37:79:26:bb:4a:15:1d:c2:4f:25:e5:66:43:94:60:
14:8a:aa:66:d2:b2:46:d1:e2:a5:59:86:ae:c5:ec:1a:ac:c2:
13:0f:42:85:c0:94:af:39:6f:b2:f5:c0:fb:f9:f1:d1:f2:a6:
c8:cb:57:9a:f0:f9:08:72:ba:52:f4:08:a2:63:d9:ba:64:25:
26:a3:46:b7:ff:a6:f8:26:6a:39:9a:50:82:e5:74:13:71:98:
85:89:db:76:9f:db:10:5d:1d:d2:4c:fd:d4:b6:af:cb:e2:6e:
8d:90:9c:81:82:56:f2:6d:f4:3c:2f:34:93:78:5d:13:13:d9:
b6:45:9d:d0:d8:0d:15:a0:18:1f:96:00:90:b6:d2:cf:cb:20:
43:2d:fd:d6:71:76:a4:e1:43:38:ae:b6:b2:d4:7b:5e:93:77:
2d:03:64:01:84:50:0e:27:80:28:42:13:b2:88:99:1c:8c:3c:
2d:e6:f9:54:ce:a8:88:8d:19:43:de:67:4a:a4:fc:ae:11:f6:
77:fd:eb:40:11:44:52:ba:01:68:6e:3d:b0:1a:67:e7:98:3d:
56:33:5b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:02 2025 by rpki-client