Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
File: L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft (raw, json)
Hash identifier: 75kquTP38p+2955b86DXWFIgIxBU9i/p7/qYYINTLwM=
Subject key identifier: 78:D6:18:21:60:C2:EE:BD:0F:00:1B:4D:92:06:78:83:E4:01:F1:BF
Authority key identifier: 2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08
Certificate issuer: /CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308
Certificate serial: 019A4F2B03193844C1AC0BEAA11B1C611D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 14:00:10 +0000
Manifest this update: Tue 04 Nov 2025 14:00:10 +0000
Manifest next update: Wed 05 Nov 2025 14:00:10 +0000
Files and hashes: 1: L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl (hash: cvz/N9dveAFOmbuQy41vePvtO8FfXehnxyhyFlW9aVg=)
2: O4pL8bOkm7k8Dc5goVDu8nvKS30.roa (hash: gSjW+R9kyQFRuzzqYc+aNmr8UDNGwt1WHFY4+D72xpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:03:19:38:44:c1:ac:0b:ea:a1:1b:1c:61:1d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308
Validity
Not Before: Nov 4 14:00:10 2025 GMT
Not After : Nov 5 14:00:10 2025 GMT
Subject: CN=78d6182160c2eebd0f001b4d92067883e401f1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:e0:c1:21:51:79:48:dd:d9:7a:49:0e:ae:
2a:0e:b5:24:5f:9b:ca:2c:68:d0:1b:7f:df:b7:4f:
57:d6:10:5c:2d:1c:48:e3:fa:02:62:7c:69:e9:6d:
e5:28:a5:bb:86:b4:d6:bf:82:17:22:c3:33:27:59:
c3:14:34:4a:58:ba:be:03:04:98:20:d4:94:b1:cd:
6b:86:60:6b:3c:bc:bd:35:26:f7:3c:cc:f6:85:2d:
86:23:60:45:38:bf:a2:58:71:4e:ae:c5:11:3e:98:
57:86:51:e1:18:ea:37:60:28:8a:91:75:6f:c0:24:
19:02:70:ce:f8:ff:48:a7:8c:75:2b:d3:8c:0a:b0:
5d:9d:c5:af:70:4a:c0:12:35:8d:42:1d:06:a7:78:
39:72:df:e9:4c:39:f3:0b:18:74:6f:ec:36:5e:ec:
2b:09:b2:76:ea:ae:e4:50:c6:b7:35:c3:7a:cf:9f:
af:16:3c:13:73:30:81:34:a3:27:de:7c:e0:a8:63:
2e:ac:c9:d2:2a:2c:0c:db:2f:6f:4d:b2:f3:8b:4b:
0b:e0:c0:86:74:9d:46:d6:94:30:fd:b8:39:0f:80:
5a:3e:ed:7c:26:3f:37:06:1f:84:bd:9a:66:56:7c:
bf:4a:3a:bb:41:f1:a4:3f:ad:06:a2:53:3f:2b:4a:
61:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D6:18:21:60:C2:EE:BD:0F:00:1B:4D:92:06:78:83:E4:01:F1:BF
X509v3 Authority Key Identifier:
keyid:2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e0:12:a9:79:57:2b:22:af:93:cb:57:8e:ed:f4:ce:30:b7:
c4:5e:36:24:fa:45:85:7c:da:b4:7b:e1:5e:f3:6f:7e:e9:b0:
d6:37:a8:bd:76:3e:bc:b1:12:77:d8:a6:7c:83:1e:1f:88:19:
c2:d6:27:0c:1b:63:99:a0:c6:8c:b4:d1:5b:04:48:00:a9:78:
29:67:1d:a1:b5:f0:77:c9:a0:be:a0:4b:41:1a:2e:82:b7:47:
af:0b:b8:2c:c3:c2:28:be:c9:e7:74:42:02:fd:c2:08:74:db:
f1:1c:2f:41:82:e0:5f:22:53:4d:32:b8:01:b8:f5:43:02:f2:
da:92:06:92:dc:8d:28:8b:35:2b:71:b6:6b:20:f2:e4:15:6d:
14:f9:46:96:f1:31:46:08:3d:c4:f6:f8:8c:84:8c:a5:59:fb:
14:d8:f7:d5:11:ef:d9:14:fc:8f:ee:00:7b:e1:03:db:a8:76:
c6:ec:50:49:34:8a:05:4e:de:be:cb:e3:07:2f:c9:bf:24:ae:
c5:53:09:6b:4a:34:2b:54:4c:53:70:6b:06:e2:d4:0c:44:13:
30:08:04:67:ee:eb:f2:80:ad:21:77:a3:b8:cc:c4:65:bb:9d:
74:d4:40:d9:0e:22:49:e4:08:e1:bd:5c:f8:f1:28:94:6e:13:
fe:08:98:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:54 2025 by rpki-client