Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
File: L2ANKR1II4Na8QOq057eBb0SybY.mft (raw, json)
Hash identifier: YtMi3qquuRcyvzYDr1RZux8u1kxB3lVtXKDHDHcxyA0=
Subject key identifier: 98:C6:D3:8E:8D:44:BC:0C:02:6D:61:57:EC:C0:FE:18:17:D7:4F:4A
Authority key identifier: 2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
Certificate issuer: /CN=2f600d291d4823835af103aad39ede05bd12c9b6
Certificate serial: 019A522C277BF42FBADFED577212EB5437E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 04:00:16 +0000
Manifest this update: Wed 05 Nov 2025 04:00:16 +0000
Manifest next update: Thu 06 Nov 2025 04:00:16 +0000
Files and hashes: 1: L2ANKR1II4Na8QOq057eBb0SybY.crl (hash: pgFDRmLia9aZ9/3PTepIXGjznyA+beTnImIljXYztWY=)
2: pqKGvQcYODMxijEGtk7mPTU_Tr0.roa (hash: ZlDmL3k6HQGAT39givBrII+8Db8zx8Fa+aDyGXQWZzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:27:7b:f4:2f:ba:df:ed:57:72:12:eb:54:37:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f600d291d4823835af103aad39ede05bd12c9b6
Validity
Not Before: Nov 5 04:00:16 2025 GMT
Not After : Nov 6 04:00:16 2025 GMT
Subject: CN=98c6d38e8d44bc0c026d6157ecc0fe1817d74f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8d:6f:0f:04:fe:0d:12:df:f5:72:ef:ee:3e:
d8:84:b8:e3:87:a0:48:03:64:fd:2d:87:14:63:49:
60:64:a8:ab:07:e2:e0:44:64:16:07:af:5e:b3:f5:
8c:c3:2b:5b:80:96:71:92:67:24:4c:45:0c:7b:95:
fe:c8:17:4a:a0:0b:ee:af:da:45:85:0f:c2:31:8f:
78:35:48:31:37:6c:e1:54:99:87:f8:e3:c1:bc:69:
8a:c7:22:1e:1d:0f:e8:f3:3a:77:9b:a0:f2:e9:39:
c1:20:80:ba:79:42:96:e1:f7:f7:eb:ab:64:1e:3f:
fe:0a:fb:f8:8d:52:fa:ac:9d:18:b5:fb:e7:87:a2:
36:ef:81:db:0a:ac:d1:81:ff:5c:99:7c:1e:a5:de:
5b:1c:3a:0e:42:ad:dd:be:c0:28:51:4f:6c:d6:cb:
18:79:51:05:26:04:98:b4:85:97:08:12:6d:b1:83:
c0:e6:d1:12:4e:5d:b5:24:8f:2a:ac:17:5d:13:d3:
ba:1e:5d:fb:1b:36:42:32:ed:46:78:14:94:78:29:
75:1e:c8:7b:8d:cc:29:09:24:28:12:b0:f1:41:76:
5a:af:bb:d6:83:f5:9e:78:90:9f:a3:8e:4f:1a:c6:
03:c0:cd:05:24:2c:01:66:7c:b5:e9:fe:f2:f5:ef:
1b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C6:D3:8E:8D:44:BC:0C:02:6D:61:57:EC:C0:FE:18:17:D7:4F:4A
X509v3 Authority Key Identifier:
keyid:2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b3:dc:1d:5b:31:56:ec:5a:6e:8d:93:34:86:52:84:28:9e:
31:66:96:e7:dc:20:1e:81:f7:0c:ba:b0:a4:af:c8:11:20:77:
40:d0:cb:e2:4c:af:90:2e:7c:79:06:27:d6:62:91:ae:32:c2:
7d:30:ac:0a:46:de:f5:a2:57:d7:dc:76:83:8d:29:70:23:e6:
30:49:a9:3f:1e:07:58:33:67:4c:04:15:6e:63:a6:46:45:53:
4c:ac:f3:06:c7:c4:3b:48:a5:22:55:9d:df:27:d7:74:21:5e:
d1:be:c3:79:ca:98:f0:18:83:d7:65:83:76:10:b0:45:2d:b2:
38:1a:bb:74:66:b0:95:ba:7a:87:af:fb:da:1f:b3:db:95:c9:
85:e8:ff:43:82:6a:1c:6b:13:33:bc:0b:99:24:79:53:dd:b4:
75:63:f0:da:b8:d3:31:4f:23:dd:f9:ef:f2:f7:16:c3:c9:dd:
7d:ce:8b:5a:91:a9:2e:d6:d7:b3:d5:a4:28:98:b2:1f:82:bf:
18:d9:54:a6:f0:c1:c1:3d:3d:78:74:5f:8d:41:36:7a:cb:67:
ca:20:e9:15:d4:cc:61:be:cb:7b:83:cf:31:6c:49:6e:c7:6f:
f3:51:f0:41:50:75:08:1f:41:8e:7c:39:0f:a4:b2:48:a3:9f:
78:e1:1d:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLCd79C+63+1XchLrVDflMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNjAwZDI5MWQ0ODIzODM1YWYxMDNhYWQzOWVkZTA1YmQx
MmM5YjYwHhcNMjUxMTA1MDQwMDE2WhcNMjUxMTA2MDQwMDE2WjAzMTEwLwYDVQQD
Eyg5OGM2ZDM4ZThkNDRiYzBjMDI2ZDYxNTdlY2MwZmUxODE3ZDc0ZjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo1vDwT+DRLf9XLv7j7YhLjjh6BI
A2T9LYcUY0lgZKirB+LgRGQWB69es/WMwytbgJZxkmckTEUMe5X+yBdKoAvur9pF
hQ/CMY94NUgxN2zhVJmH+OPBvGmKxyIeHQ/o8zp3m6Dy6TnBIIC6eUKW4ff366tk
Hj/+Cvv4jVL6rJ0Ytfvnh6I274HbCqzRgf9cmXwepd5bHDoOQq3dvsAoUU9s1ssY
eVEFJgSYtIWXCBJtsYPA5tESTl21JI8qrBddE9O6Hl37GzZCMu1GeBSUeCl1Hsh7
jcwpCSQoErDxQXZar7vWg/WeeJCfo45PGsYDwM0FJCwBZny16f7y9e8b+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjG046NRLwMAm1hV+zA/hgX109KMB8GA1UdIwQY
MBaAFC9gDSkdSCODWvEDqtOe3gW9Esm2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDJBTktSMUlJNE5hOFFPcTA1N2VCYjBTeWJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wNTRhNzEtODI1My00MDg5LWI5NjIt
Y2JiZjc2ZjM1MzNhLzEvTDJBTktSMUlJNE5hOFFPcTA1N2VCYjBTeWJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wNTRhNzEtODI1My00MDg5LWI5NjItY2JiZjc2ZjM1MzNh
LzEvTDJBTktSMUlJNE5hOFFPcTA1N2VCYjBTeWJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsrPcHVsx
Vuxabo2TNIZShCieMWaW59wgHoH3DLqwpK/IESB3QNDL4kyvkC58eQYn1mKRrjLC
fTCsCkbe9aJX19x2g40pcCPmMEmpPx4HWDNnTAQVbmOmRkVTTKzzBsfEO0ilIlWd
3yfXdCFe0b7DecqY8BiD12WDdhCwRS2yOBq7dGawlbp6h6/72h+z25XJhej/Q4Jq
HGsTM7wLmSR5U920dWPw2rjTMU8j3fnv8vcWw8ndfc6LWpGpLtbXs9WkKJiyH4K/
GNlUpvDBwT09eHRfjUE2estnyiDpFdTMYb7Le4PPMWxJbsdv81HwQVB1CB9Bjnw5
D6SySKOfeOEdig==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:39 2025 by rpki-client