Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
File: L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json)
Hash identifier: HBLOXJSuBEQmYxY+VtKcR/08WyxEYGut17AuDGvIgiQ=
Subject key identifier: EF:AB:5F:9F:AA:7B:AA:D0:D1:72:B2:73:F7:F9:CF:A8:6E:B8:87:2A
Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Certificate serial: 019A4EF41C52B3F5D2CCD74CFA990B2FACD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
Manifest number: 0614
Signing time: Tue 04 Nov 2025 13:00:12 +0000
Manifest this update: Tue 04 Nov 2025 13:00:12 +0000
Manifest next update: Wed 05 Nov 2025 13:00:12 +0000
Files and hashes: 1: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: +Mcg9a/zsz+8PQKucwWLB99z453aTvDAL98uNqzCED4=)
2: mKj7VCU5no5LHtut8FCNTeMgxrs.roa (hash: 07We1y7VE9nXCcX30DqvaFWOJDVjyaLC5AtO5yEYVdI=)
3: xhqwO8h-NtHmNo7-Qs1PvAeqCns.roa (hash: euSAJF/P/Pf62S03sCfYP3rS1wT/ay20A2O2n4ybt1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:1c:52:b3:f5:d2:cc:d7:4c:fa:99:0b:2f:ac:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82
Validity
Not Before: Nov 4 13:00:12 2025 GMT
Not After : Nov 5 13:00:12 2025 GMT
Subject: CN=efab5f9faa7baad0d172b273f7f9cfa86eb8872a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bb:e1:12:d5:ee:81:3b:57:84:3c:21:f7:58:
13:77:db:b9:61:36:8b:e4:b6:6a:9c:95:23:4e:93:
61:1e:1e:e9:67:d2:7b:ad:74:6c:3e:c2:e1:ba:17:
57:ec:8c:e4:b7:5a:b6:70:f4:a3:2b:9f:4b:de:4c:
b5:58:a0:07:4b:9c:5f:6f:b7:a1:ef:53:3a:1d:03:
21:61:e2:7c:7b:2e:ba:5e:08:e3:ac:ed:15:c0:18:
28:21:c6:0d:7b:a4:4a:6f:0c:2e:2a:52:5e:48:b0:
d8:13:bf:95:21:03:00:54:9d:e9:c0:4b:d2:61:4e:
72:11:32:c7:6b:c9:18:70:0e:b3:e1:62:84:dc:32:
1c:ca:f2:94:16:44:1d:7e:48:9b:31:5d:d6:36:58:
c2:13:f9:4c:09:ed:9b:63:b4:c9:9a:3b:22:f1:d3:
19:79:cc:73:17:2d:65:d0:81:57:d6:27:ae:97:de:
68:11:57:f9:66:50:79:1f:ed:1a:2c:aa:2d:ea:c1:
07:30:46:c4:70:73:08:7e:59:d9:b5:b6:5a:8f:ad:
85:25:b0:88:a8:35:68:ac:ca:48:f2:b7:4f:73:ab:
f4:96:19:a4:87:95:26:3f:f7:c5:91:8b:10:51:8d:
f4:22:aa:de:de:fb:db:e9:c5:cd:4d:f8:39:ef:e9:
c7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AB:5F:9F:AA:7B:AA:D0:D1:72:B2:73:F7:F9:CF:A8:6E:B8:87:2A
X509v3 Authority Key Identifier:
keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:59:75:8e:46:de:9c:3d:79:4b:8d:13:fd:20:97:15:37:d0:
20:21:79:9f:58:10:68:cf:0b:9d:aa:38:af:77:e1:57:1f:e9:
64:9a:47:d2:09:ee:da:49:d9:ad:8f:fd:29:4a:5d:be:fd:d4:
f5:74:a2:d4:2d:8c:0d:78:25:00:d6:8f:3e:75:0d:4d:f9:f5:
ed:12:fd:c8:4d:3a:3b:c8:23:f5:51:9d:75:1f:3a:5f:b2:07:
70:39:88:54:00:47:92:71:94:57:ae:39:f8:b4:43:9e:6e:53:
b5:01:76:21:86:5e:fe:82:e3:8e:94:1f:ea:a0:30:56:60:48:
19:1c:2b:1f:18:d2:95:72:ea:c4:b1:af:d4:04:1e:5e:7d:67:
9e:00:30:b6:53:b1:18:4d:aa:a6:65:6e:c0:3c:2d:79:8b:87:
f8:0d:d2:a6:00:bf:6c:62:45:57:2d:2b:4d:2b:58:3a:13:ef:
f3:6a:f0:d0:95:ef:41:6b:66:39:e7:27:75:1b:a1:8a:65:51:
c0:80:5e:8d:14:da:92:19:64:99:37:b9:30:3f:3c:c0:e3:3b:
bf:80:9d:3d:cb:3e:b7:b6:69:8b:86:e5:a3:61:6c:f4:29:ad:
bb:9f:cc:86:d5:9f:4a:d5:3d:eb:50:aa:60:f5:45:e5:cf:12:
c4:d3:bb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:35 2025 by rpki-client