Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
File: L6TocLw3rJcx_m_PloLrZX5QvKM.mft (raw, json)
Hash identifier: hQFukCgdBH5vebP7nZnYSD6mSGFwVKRrjYTxB9GmV7g=
Subject key identifier: 84:9A:F4:83:A5:44:D7:87:90:7C:A8:64:A1:D2:C4:11:47:E8:C8:49
Authority key identifier: 2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
Certificate issuer: /CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Certificate serial: 019A500736423646712F298C08FB148B5CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
Manifest number: 122B
Signing time: Tue 04 Nov 2025 18:00:41 +0000
Manifest this update: Tue 04 Nov 2025 18:00:41 +0000
Manifest next update: Wed 05 Nov 2025 18:00:41 +0000
Files and hashes: 1: L6TocLw3rJcx_m_PloLrZX5QvKM.crl (hash: +O0Hwdp97VIuQPuQoghxdoCIQUYhymUd4iHMHjKhesg=)
2: m7j41yWDEfLAx4I6fuINswAyiXA.roa (hash: dDqFpGebxjdBoXgviJqZBlxaNfM8q5rLJMGVfhQeHKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:36:42:36:46:71:2f:29:8c:08:fb:14:8b:5c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Validity
Not Before: Nov 4 18:00:41 2025 GMT
Not After : Nov 5 18:00:41 2025 GMT
Subject: CN=849af483a544d787907ca864a1d2c41147e8c849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:21:da:61:f5:46:89:25:da:33:c1:fc:33:eb:
f0:2d:37:de:09:57:f2:fe:05:04:4c:bb:db:b3:0b:
f1:4a:42:22:94:88:14:9b:c5:80:b0:5f:92:34:cf:
4d:fc:05:26:75:18:59:9d:27:71:2c:cb:ed:44:fb:
b9:f8:6e:59:bf:29:2f:91:96:cd:b8:56:a4:f1:d4:
e1:bf:72:d8:c4:33:af:9c:8d:9a:62:c8:6b:ed:7b:
cc:15:c0:39:c3:3f:53:61:10:52:dc:a3:c5:1d:39:
b1:6c:5d:07:c5:08:dd:1c:17:89:24:59:fe:51:d4:
6d:be:3a:61:90:e3:83:87:75:ab:7b:63:3c:c6:27:
6d:0b:6a:80:e9:da:8c:41:be:73:c3:21:2d:5f:f1:
00:ab:06:70:b2:02:0f:1f:4b:96:ff:c1:5a:59:e9:
e1:62:33:3a:e2:f6:c5:27:12:78:7f:d1:f8:ea:fe:
75:2c:95:d8:8f:cc:04:a1:3c:16:08:89:03:d1:1f:
d5:3d:e4:ae:0f:25:07:aa:8d:cc:22:e0:60:15:b9:
11:87:14:a5:da:6f:18:7a:e3:7e:29:43:7d:15:c1:
0b:31:9a:27:4d:2e:7f:f5:75:af:ed:2a:01:39:f6:
4b:6a:ab:55:66:93:da:6b:80:de:d0:66:7a:b8:46:
df:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9A:F4:83:A5:44:D7:87:90:7C:A8:64:A1:D2:C4:11:47:E8:C8:49
X509v3 Authority Key Identifier:
keyid:2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fa:2a:59:ae:77:e9:fc:30:bc:c1:07:42:98:de:c7:9a:7d:
7a:cd:d5:98:fd:47:eb:89:9b:28:6c:35:be:12:cf:e2:7b:ae:
77:36:e6:b8:97:17:79:25:4f:5e:75:7c:aa:12:2f:b4:51:42:
17:b4:08:7c:15:0a:fa:f7:c9:f4:2f:57:37:e9:c6:aa:61:11:
a0:00:bd:88:54:32:a0:af:a3:ed:d8:e2:10:b4:fe:b9:b0:f4:
d3:0e:0e:20:19:e6:e6:3f:62:fb:d3:96:1e:32:e7:ab:79:0c:
46:5a:19:d6:ba:d3:86:eb:58:5f:b7:51:d8:f3:d5:4e:61:19:
31:ac:ef:da:41:ce:f3:46:5e:12:69:30:cf:49:a4:dc:ec:18:
9f:b7:b5:e8:21:24:d4:b6:de:4e:55:85:b2:8f:ce:9a:01:f6:
fe:47:70:88:d4:3b:01:b9:d4:d0:be:b3:53:76:e7:36:c7:6c:
fb:a9:95:8e:5c:2b:cf:4a:66:6f:c2:73:b0:26:bc:bd:ea:4c:
0f:84:ca:21:f8:71:98:30:d1:25:03:60:cc:5b:16:c7:3a:be:
1f:81:0c:bf:c9:8e:68:41:cb:2b:a5:20:fd:3c:5a:08:0d:62:
f5:1a:ff:47:81:1f:10:eb:c3:06:80:00:a3:44:f6:99:60:66:
f6:70:ff:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBzZCNkZxLymMCPsUi1z5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTRlODcwYmMzN2FjOTczMWZlNmZjZjk2ODJlYjY1N2U1
MGJjYTMwHhcNMjUxMTA0MTgwMDQxWhcNMjUxMTA1MTgwMDQxWjAzMTEwLwYDVQQD
Eyg4NDlhZjQ4M2E1NDRkNzg3OTA3Y2E4NjRhMWQyYzQxMTQ3ZThjODQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyHaYfVGiSXaM8H8M+vwLTfeCVfy
/gUETLvbswvxSkIilIgUm8WAsF+SNM9N/AUmdRhZnSdxLMvtRPu5+G5ZvykvkZbN
uFak8dThv3LYxDOvnI2aYshr7XvMFcA5wz9TYRBS3KPFHTmxbF0HxQjdHBeJJFn+
UdRtvjphkOODh3Wre2M8xidtC2qA6dqMQb5zwyEtX/EAqwZwsgIPH0uW/8FaWenh
YjM64vbFJxJ4f9H46v51LJXYj8wEoTwWCIkD0R/VPeSuDyUHqo3MIuBgFbkRhxSl
2m8YeuN+KUN9FcELMZonTS5/9XWv7SoBOfZLaqtVZpPaa4De0GZ6uEbfWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISa9IOlRNeHkHyoZKHSxBFH6MhJMB8GA1UdIwQY
MBaAFC+k6HC8N6yXMf5vz5aC62V+ULyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZUb2NMdzNySmN4X21fUGxvTHJaWDVRdktNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zZjYzMTAtZjU2Yi00MTY1LWI4ZmUt
OWI4N2YyYWZiZDdmLzEvTDZUb2NMdzNySmN4X21fUGxvTHJaWDVRdktNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8zZjYzMTAtZjU2Yi00MTY1LWI4ZmUtOWI4N2YyYWZiZDdm
LzEvTDZUb2NMdzNySmN4X21fUGxvTHJaWDVRdktNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvoqWa53
6fwwvMEHQpjex5p9es3VmP1H64mbKGw1vhLP4nuudzbmuJcXeSVPXnV8qhIvtFFC
F7QIfBUK+vfJ9C9XN+nGqmERoAC9iFQyoK+j7djiELT+ubD00w4OIBnm5j9i+9OW
HjLnq3kMRloZ1rrThutYX7dR2PPVTmEZMazv2kHO80ZeEmkwz0mk3OwYn7e16CEk
1LbeTlWFso/OmgH2/kdwiNQ7AbnU0L6zU3bnNsds+6mVjlwrz0pmb8JzsCa8vepM
D4TKIfhxmDDRJQNgzFsWxzq+H4EMv8mOaEHLK6Ug/TxaCA1i9Rr/R4EfEOvDBoAA
o0T2mWBm9nD/6g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:33:31 2025 by rpki-client