Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
File: L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft (raw, json)
Hash identifier: Dp81EYeX+MeX3a7SdlqozA5Lk7gVzH4Ke8KLl1Y2J3o=
Subject key identifier: D1:E0:8F:F9:24:6D:74:00:EE:37:76:CE:1A:09:6E:34:6A:0F:9C:EA
Authority key identifier: 2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
Certificate issuer: /CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Certificate serial: 019A4F62218B3992048629A792011713D6B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 15:00:22 +0000
Manifest this update: Tue 04 Nov 2025 15:00:22 +0000
Manifest next update: Wed 05 Nov 2025 15:00:22 +0000
Files and hashes: 1: 8vDMjaVS40emmzGFVsGL0I8-fQo.roa (hash: ZQlfpvu51NDsYdzNjhzj60BOHewjbF75+WG+cK0BDP8=)
2: L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl (hash: h+5FBln/nBxe8Mz4fBGjRUvFVtrfXNPsCMb6VztkzgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:21:8b:39:92:04:86:29:a7:92:01:17:13:d6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Validity
Not Before: Nov 4 15:00:22 2025 GMT
Not After : Nov 5 15:00:22 2025 GMT
Subject: CN=d1e08ff9246d7400ee3776ce1a096e346a0f9cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f8:43:23:00:6e:bb:00:3d:c5:71:54:96:1d:
5d:1f:cf:a7:4c:12:72:4a:5f:35:3f:4a:07:90:44:
dc:c7:08:6f:02:ac:9c:b7:2f:91:74:a4:11:38:80:
3e:9b:1f:b2:73:3a:35:ef:2b:23:91:f1:70:77:e2:
22:b5:83:70:3c:cc:0e:65:f5:16:2a:81:8c:5e:d4:
d2:51:63:d3:8a:c7:5e:ef:37:b8:76:b4:c6:70:e9:
14:84:54:83:4d:3b:57:f9:dc:5c:f6:58:89:5e:60:
15:b5:34:d5:f1:a9:06:d6:9c:5e:b7:d8:97:3b:02:
b8:6d:6c:3b:75:5e:1e:dd:21:65:05:35:6b:38:cb:
b3:78:ba:8b:51:89:de:fc:49:5c:b5:b8:e7:6d:7e:
9a:84:22:99:93:d9:42:7c:71:23:95:bd:69:a9:9a:
99:c5:51:f3:31:d0:46:1f:98:6f:7f:53:cf:a0:40:
1b:0b:f6:e1:a3:07:ea:56:fa:60:b8:69:54:d2:aa:
f6:88:66:84:98:93:f4:a2:ba:d7:5f:e3:3f:19:d0:
be:3f:b3:7c:c0:39:f9:37:fa:ab:eb:ae:b8:d3:1f:
ec:0a:9d:20:e6:4d:d9:ff:af:69:24:95:0c:be:3a:
2e:b2:bd:41:aa:66:0a:88:14:5e:89:84:9a:8e:25:
ea:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E0:8F:F9:24:6D:74:00:EE:37:76:CE:1A:09:6E:34:6A:0F:9C:EA
X509v3 Authority Key Identifier:
keyid:2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:eb:12:88:11:79:76:19:b7:e5:fb:eb:8a:da:00:a0:8e:48:
78:10:2a:3e:3e:9e:ac:db:6d:e6:1b:dc:a4:1e:95:13:90:1d:
c8:b7:03:ca:e2:cc:dc:77:42:88:24:93:be:bc:f7:4b:eb:92:
7a:2f:30:da:c1:66:2e:32:63:55:85:41:ff:97:3a:4a:0a:ca:
c2:0b:38:03:12:f3:76:bb:7c:ef:0f:e2:3b:06:e0:4d:bb:8d:
3b:16:ea:68:3e:e9:fa:41:2d:9c:cf:5b:0e:70:f9:9b:48:bf:
cf:57:20:b5:f2:c1:fe:e2:54:f5:73:74:41:fc:c0:a4:0d:82:
99:8f:53:fa:cb:ba:cd:4a:84:48:84:fc:fd:a3:d9:a2:6d:a9:
77:6b:a3:91:01:28:b7:ec:53:ab:2c:1b:ff:d3:ff:94:be:57:
9d:0e:08:8d:ce:f6:f5:27:83:17:20:0f:3f:54:56:9f:ca:95:
25:d8:7b:06:88:26:82:c1:7d:9e:79:10:e1:f6:f5:77:8d:f1:
e4:fa:ce:39:2f:56:b1:6d:8b:78:31:6c:b1:7b:f8:9b:91:67:
c9:a0:6f:67:2e:95:b2:7e:53:62:c5:c8:c5:67:2c:62:fd:08:
1a:ae:b9:80:24:6b:48:a1:01:a9:d7:64:44:fd:58:51:1f:9b:
c9:9e:dc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:52 2025 by rpki-client