Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
File: L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json)
Hash identifier: PS4NwwyXEMOjJC4OG/sF3UbDyYvDqtMGjrhYBQpDYq0=
Subject key identifier: AB:F4:7B:2D:96:5F:BD:AF:04:06:0D:21:F8:DC:96:9C:DC:EC:19:65
Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
Certificate issuer: /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Certificate serial: 019A4EF5DD4D6E0665A234C43BB62EE4B0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
Manifest number: 066A
Signing time: Tue 04 Nov 2025 13:02:07 +0000
Manifest this update: Tue 04 Nov 2025 13:02:07 +0000
Manifest next update: Wed 05 Nov 2025 13:02:07 +0000
Files and hashes: 1: JnNHu3mBlI4S34lBG5gMe1SKldU.roa (hash: kmsxUGCHTVtHjCmc68XKFbTUU312Q88Sy/CYV55BiQs=)
2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: pHrbMuAo/hzp5wuZkCz70wlUJHG2/s/0cKFD59dtQoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:dd:4d:6e:06:65:a2:34:c4:3b:b6:2e:e4:b0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Validity
Not Before: Nov 4 13:02:07 2025 GMT
Not After : Nov 5 13:02:07 2025 GMT
Subject: CN=abf47b2d965fbdaf04060d21f8dc969cdcec1965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:20:5c:fc:06:f2:68:30:61:5f:66:88:26:3c:
70:10:04:6b:7d:ad:54:8b:ab:5f:76:10:83:94:66:
7a:69:7a:0e:42:8f:7b:f7:27:8b:77:f7:5d:f4:ed:
5a:a7:fa:98:ab:ab:b5:58:98:5e:e0:dd:a1:96:04:
4c:a9:6e:7b:0f:32:fc:7a:23:77:b9:08:70:06:66:
f3:84:7b:88:bd:a0:0a:38:31:ab:16:3e:bb:da:48:
3f:db:3c:4f:e5:0b:be:11:fc:3a:9a:e7:29:5e:5d:
60:01:19:72:3e:fc:2d:bb:48:c0:23:da:b9:a4:a2:
5f:c2:59:45:84:25:bd:a2:74:99:bd:b8:d6:04:49:
86:17:de:a1:ae:8a:3a:b4:4f:a0:85:3d:a0:59:ae:
b8:68:a8:83:6e:82:37:46:ff:5f:95:68:7c:44:5c:
31:89:27:5f:67:73:88:e5:54:c7:a5:d6:3a:46:cb:
8f:67:37:f1:39:d9:e5:55:cb:82:ec:64:e3:d4:af:
14:33:65:47:bf:9a:ec:91:6d:52:4a:2e:79:3f:24:
c4:71:0a:97:3c:80:51:d7:b1:81:66:17:87:15:d4:
46:f2:a4:14:ce:88:6a:a6:30:89:2f:0c:a5:69:14:
6a:d3:2e:83:11:e2:bc:9e:94:d4:f8:a9:90:66:e8:
b4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F4:7B:2D:96:5F:BD:AF:04:06:0D:21:F8:DC:96:9C:DC:EC:19:65
X509v3 Authority Key Identifier:
keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6a:52:0f:e2:bb:7d:09:5f:36:cc:79:9d:61:72:68:cd:83:
e4:dd:8f:08:c2:1d:d5:d8:55:92:c8:45:a4:8c:df:9d:39:84:
a1:c2:29:60:59:93:64:6a:07:83:b6:f4:95:54:5c:c8:22:fc:
6b:f2:ab:97:ea:9a:d8:ff:7b:58:90:4a:6e:2e:03:c1:c3:46:
14:5e:d8:67:d3:c6:c8:95:93:b3:2f:de:d3:53:4e:ed:b5:22:
f3:a9:97:a1:ff:60:08:12:72:cb:ba:7f:1d:e9:56:c1:46:0f:
c8:f7:ed:36:a2:fd:97:f9:dd:13:ff:11:13:06:79:fe:c0:f8:
13:22:21:f7:10:2b:12:4c:f7:fc:0d:0b:87:52:04:be:e8:f8:
1f:a8:80:4d:ec:e3:58:08:81:0f:ee:68:fd:66:f1:7b:ee:1d:
16:7a:bf:73:23:10:08:41:eb:19:7f:a4:f6:11:50:e8:40:9a:
70:9f:dc:d0:4e:a2:e3:25:73:48:97:4b:5a:ec:84:62:3c:04:
a7:aa:68:17:c3:0a:da:e9:5a:ee:4b:16:66:2a:0d:ef:e1:c3:
9c:de:70:40:92:c2:1c:d4:92:7e:8d:91:3b:14:43:f4:58:18:
54:50:33:ef:61:3b:4d:e1:e1:eb:24:04:12:7d:73:55:e5:9a:
4f:b0:75:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:12 2025 by rpki-client