Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
File: L5FDTuFsYTNOwnDfVox3oLXeBSo.mft (raw, json)
Hash identifier: 4a2bJY9DkGZSf83JnrEuRA6mASBOXVj51R2MsLJgtpA=
Subject key identifier: 65:16:5A:52:A8:BD:08:76:20:30:5F:DE:45:33:AC:19:5A:F9:1D:B3
Authority key identifier: 2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A
Certificate issuer: /CN=2f91434ee16c61334ec270df568c77a0b5de052a
Certificate serial: 019A4F62E663C4060A94C1E9721135EF724D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
Manifest number: 0DF2
Signing time: Tue 04 Nov 2025 15:01:12 +0000
Manifest this update: Tue 04 Nov 2025 15:01:12 +0000
Manifest next update: Wed 05 Nov 2025 15:01:12 +0000
Files and hashes: 1: L5FDTuFsYTNOwnDfVox3oLXeBSo.crl (hash: 6QhnB+Rt51EnDwYiNInEgODJmydBQWGseCdZmbQ1HZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:e6:63:c4:06:0a:94:c1:e9:72:11:35:ef:72:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f91434ee16c61334ec270df568c77a0b5de052a
Validity
Not Before: Nov 4 15:01:12 2025 GMT
Not After : Nov 5 15:01:12 2025 GMT
Subject: CN=65165a52a8bd087620305fde4533ac195af91db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:72:a8:36:bc:b1:c1:d2:c5:1c:5d:cb:fd:13:
f1:86:07:da:a0:23:5c:da:b2:4c:81:59:1f:ca:fb:
30:0b:14:e3:e7:ec:c1:4e:20:c5:78:da:b4:3b:17:
e9:97:69:01:d4:6a:b5:4a:c2:3e:24:a7:04:eb:31:
f3:d8:83:eb:8c:64:37:fb:24:b3:28:de:03:8f:46:
e2:52:bc:f4:d8:b9:9a:8f:8b:de:11:1b:60:19:89:
69:96:dc:ed:7f:04:6a:c0:38:e6:8a:d9:27:d0:d6:
e7:eb:e4:65:ad:47:97:26:02:56:81:eb:60:77:22:
da:89:8a:8b:3d:ae:a2:af:11:5f:9e:39:95:da:84:
fe:f5:68:8f:98:f8:f5:72:fa:f2:88:d2:f8:99:f9:
ba:e6:89:08:81:71:25:29:b1:0d:4f:66:fb:3f:c4:
70:2a:70:cd:76:76:2f:bc:f1:a0:5a:8f:0b:74:7c:
c6:7d:8e:8c:3f:a9:2e:7b:a6:72:d9:d8:b0:31:3c:
e7:97:dd:a2:a0:b8:b7:83:a1:9f:d4:95:6e:a4:dc:
25:b6:81:e8:ac:5c:c0:b2:08:8a:ea:b6:6d:66:e3:
41:76:f7:07:b1:6b:5b:7c:91:3d:0e:22:da:95:cd:
a3:77:b1:12:55:21:08:46:ef:9c:7f:c1:cd:a9:ef:
a7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:16:5A:52:A8:BD:08:76:20:30:5F:DE:45:33:AC:19:5A:F9:1D:B3
X509v3 Authority Key Identifier:
keyid:2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c1:63:b5:42:f0:cb:22:2e:5d:7d:d8:56:c8:2e:41:1f:b2:
c1:e6:05:bd:55:93:50:07:07:cf:c0:f0:7f:56:25:76:2c:d3:
cb:a8:b3:4e:02:c0:0e:03:84:0d:5f:d6:57:53:01:88:a4:f2:
93:f3:85:ea:8d:8c:0c:5d:c4:af:0e:f0:82:c4:db:0f:79:28:
60:a5:a6:45:08:83:41:e4:71:b0:14:68:c2:30:99:ba:31:2c:
62:c2:15:51:2c:69:74:d6:f0:59:25:56:85:57:3d:fe:98:8a:
f8:eb:f6:47:13:1b:6a:05:13:e2:0e:06:4f:0a:db:0c:46:76:
8e:d8:38:35:66:fa:29:e4:ed:ba:67:9a:72:90:a0:b5:be:92:
21:86:59:cb:9a:af:f6:9c:9d:5e:10:34:69:4e:6a:54:32:00:
8a:cb:8a:ae:d0:64:00:94:08:1d:51:e5:ef:38:52:84:f7:ae:
1b:65:94:28:2d:e5:97:f4:13:ed:2c:c0:05:a3:8d:db:e2:63:
1a:42:1c:b1:d9:24:d6:27:c3:7f:48:93:9f:fb:84:14:3d:e6:
59:00:e9:86:95:03:ce:ca:1b:91:28:f9:e6:84:1f:75:9c:46:
f9:99:a1:c3:2b:70:40:c5:07:c9:b1:ed:c1:e3:69:11:31:61:
19:c0:cd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:50 2025 by rpki-client