Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
File: L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft (raw, json)
Hash identifier: mtToUbh/Ep7TV8fJGRXQ3p92MM/mhldnqwm2NXVu58U=
Subject key identifier: 62:F8:D2:BD:4E:0D:FF:34:69:80:55:FA:6C:85:42:CC:E1:58:D6:0F
Authority key identifier: 2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
Certificate issuer: /CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Certificate serial: 019A4F2AFC929B4051985A11596721A86402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
Manifest number: 140D
Signing time: Tue 04 Nov 2025 14:00:08 +0000
Manifest this update: Tue 04 Nov 2025 14:00:08 +0000
Manifest next update: Wed 05 Nov 2025 14:00:08 +0000
Files and hashes: 1: EOklS1jQhodfalq3XsKaGavo1eQ.roa (hash: 6pvw71E3U09DjHAZOtzmEdbNxf9UgqaL8hPYZIda5pc=)
2: L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl (hash: vBT6rTY7tCLqVIDHuKflCu/D7enMEstvERq9Wdz8Mww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:fc:92:9b:40:51:98:5a:11:59:67:21:a8:64:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Validity
Not Before: Nov 4 14:00:08 2025 GMT
Not After : Nov 5 14:00:08 2025 GMT
Subject: CN=62f8d2bd4e0dff34698055fa6c8542cce158d60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0b:65:04:0a:37:6c:1b:b8:26:06:8e:16:39:
28:cb:a9:40:ce:3e:b2:49:5f:c0:2f:71:ea:23:4b:
b3:42:09:f6:92:65:4d:0b:aa:4d:bb:6c:1b:1a:a5:
18:dd:46:39:21:d3:67:53:67:a5:48:2b:5a:8f:9a:
fe:c4:0c:93:13:9d:09:74:1b:c0:45:a2:09:35:16:
8b:ac:4f:71:80:cd:d1:c3:bb:ba:55:7d:9e:92:18:
ef:97:04:88:7a:6d:63:ed:20:a2:9f:dc:e8:76:bc:
23:26:dd:3f:90:cc:09:db:71:02:6d:3b:dd:3b:32:
43:46:e4:b4:73:d9:7f:4e:3e:1c:07:e7:65:59:6d:
d5:72:40:ce:95:54:d6:d1:c0:db:72:bd:64:85:37:
ae:f7:e5:7b:3d:ca:e2:b9:e8:e7:5d:69:da:ca:d6:
2a:a5:6f:4c:fd:75:51:59:24:99:18:c0:f3:53:03:
51:27:fc:43:44:79:e4:ce:03:e9:09:ce:c0:3e:ae:
bc:a3:fe:e7:db:ce:87:7f:11:26:a2:a4:61:3b:2c:
50:7a:10:0e:a2:12:8d:d0:b1:30:18:26:6a:a2:63:
75:e2:14:89:8b:7f:e7:f6:b2:e5:88:25:0a:95:25:
e6:f0:55:f7:bb:e4:ef:41:cf:66:d3:24:a1:39:a9:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F8:D2:BD:4E:0D:FF:34:69:80:55:FA:6C:85:42:CC:E1:58:D6:0F
X509v3 Authority Key Identifier:
keyid:2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b7:a2:56:da:d9:10:40:4d:70:c4:41:81:d3:f7:52:8f:35:
a9:e3:11:47:99:4c:fe:ca:a5:11:98:ed:05:cf:e1:3c:26:23:
36:bb:9a:f5:e3:95:42:0d:12:82:d1:ea:47:4f:65:16:cc:ab:
43:a0:7d:25:76:fe:c7:c5:e7:91:12:9e:02:3c:5b:0e:82:b3:
c3:22:8f:b4:e8:13:32:a3:3b:c8:c5:43:5e:6c:26:b6:33:a8:
a1:27:08:b2:8b:07:1a:31:dc:0d:21:fa:cf:81:c1:39:36:97:
c1:ec:7a:5c:56:4d:8b:21:27:d1:84:ef:bd:8d:b0:72:f2:41:
57:c0:93:a6:9f:17:f0:4f:f6:95:0c:c2:97:6b:6a:50:b7:b4:
bf:0a:13:ab:8b:f4:86:f8:42:63:f8:ac:e8:fd:96:4b:00:94:
74:a2:70:9d:b1:97:45:85:c2:bb:4b:b3:a0:58:2e:6b:04:39:
54:8e:53:c5:42:8b:d9:6f:57:91:14:d1:a2:ce:5e:07:0f:bc:
30:6f:54:cb:c3:d1:ee:3b:79:99:9a:76:92:ec:a1:93:d7:29:
d2:c3:fc:27:24:a4:27:16:6c:7d:32:88:3d:4e:ac:f8:46:c3:
05:d9:9e:54:f1:04:9a:0d:4e:ea:79:27:18:60:2f:af:c4:e4:
5c:ca:b9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:55 2025 by rpki-client