Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
File: L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json)
Hash identifier: rvbfEWQmc9NuPjwtRDR1vXW9AglNuprZi5xSKl1Vnw4=
Subject key identifier: 5D:61:1A:AA:30:23:57:2D:AE:AC:75:BD:6D:46:5C:E5:A5:E8:72:AE
Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
Certificate issuer: /CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Certificate serial: 019A5307BA9C7047BB9523E87FEA2FEEE447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
Manifest number: 0F1B
Signing time: Wed 05 Nov 2025 08:00:06 +0000
Manifest this update: Wed 05 Nov 2025 08:00:06 +0000
Manifest next update: Thu 06 Nov 2025 08:00:06 +0000
Files and hashes: 1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: 7UzmGXV2JCNaaE49RDuXBFYT6Goha9d44pKwgky+z+Y=)
2: vQoI-4y6Tfml573DLn2pCriBNl4.roa (hash: 3W+CArLvUD2GX28NdlGoBAxxfe8EMtX22dfil51a9Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:ba:9c:70:47:bb:95:23:e8:7f:ea:2f:ee:e4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Validity
Not Before: Nov 5 08:00:06 2025 GMT
Not After : Nov 6 08:00:06 2025 GMT
Subject: CN=5d611aaa3023572daeac75bd6d465ce5a5e872ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:1c:26:04:8a:ac:ba:6f:2b:e4:13:62:d1:
50:75:ca:af:3a:f5:d0:9f:8a:28:a5:c5:fd:1f:fb:
b9:52:d7:99:6b:e9:78:94:3e:9e:2e:33:cd:ea:c0:
50:5f:b7:cb:a5:77:61:a7:74:37:c7:b5:8f:75:fd:
ea:85:0b:53:e2:25:89:62:4a:dd:3e:96:c0:25:65:
7e:48:34:6f:f9:db:66:02:6f:81:da:c0:ca:4f:ac:
52:04:57:bc:b9:27:8b:81:dd:74:22:8e:da:8f:f2:
bf:51:53:de:76:aa:66:61:84:cb:9f:10:fe:cf:15:
9e:47:1d:ec:72:c9:f9:d3:6c:44:72:cc:c7:59:22:
cc:2a:fe:ca:be:86:d7:81:22:f7:fa:46:86:ba:05:
c8:04:93:2b:ee:08:e8:42:67:5f:db:92:01:e2:3b:
fb:c7:96:24:c9:e9:c1:c1:ac:49:2e:1c:a1:78:e8:
b5:a6:7c:ae:d0:ef:27:e4:b3:5f:7a:a1:5e:b1:ef:
d6:69:85:36:0b:3f:04:99:21:18:a1:a1:26:d3:cf:
2e:7d:1f:2e:b0:d6:b8:bd:07:e8:0f:74:fe:f2:bb:
a3:21:aa:fe:d6:fb:d5:3b:87:b6:8a:c2:dc:ce:de:
f2:d6:11:05:b5:75:41:db:f7:c3:92:b9:a3:88:c0:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:61:1A:AA:30:23:57:2D:AE:AC:75:BD:6D:46:5C:E5:A5:E8:72:AE
X509v3 Authority Key Identifier:
keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:49:08:94:01:e1:6f:b8:31:e1:d9:d5:4c:63:39:7c:a3:6b:
92:6b:9f:18:6e:e8:2d:87:85:1e:ba:d3:26:d8:ea:a5:81:78:
f8:e9:61:6b:b4:61:da:80:6f:14:68:67:01:58:fb:15:d1:1d:
5f:5b:77:39:b4:56:a7:9e:d4:73:2a:13:1d:27:82:c4:c3:95:
61:44:a1:0b:e9:5d:c6:d6:c0:26:74:1f:78:6f:09:8d:27:77:
9e:bd:c1:19:01:20:5b:1a:a6:b1:47:44:1b:a6:d0:5a:87:bf:
af:19:7f:82:e8:f4:ce:a1:d7:7a:e1:57:ba:cd:f2:69:3e:60:
75:76:bc:8c:54:fa:82:17:93:fd:98:c9:85:b9:76:86:23:43:
9f:f1:37:a1:fd:6f:6a:ff:a8:ac:3a:2c:61:3f:b7:10:dc:d5:
b1:72:5b:d1:b5:90:a6:60:98:ff:0f:f0:14:cd:fc:37:96:26:
d9:db:85:70:59:db:6d:c5:2f:d8:85:d4:36:ed:7a:78:a3:b1:
e0:55:71:c8:f4:ea:26:35:85:fb:24:62:32:4c:80:8b:98:9c:
a7:b9:e4:32:53:22:85:44:eb:6b:a9:3a:9d:be:9d:6e:7a:c2:
b4:96:ee:dc:ee:84:f3:9e:ec:8f:02:6f:63:e2:9c:00:0c:e4:
d1:c2:2a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:32:43 2025 by rpki-client