Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
File: L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft (raw, json)
Hash identifier: AGOTUf6kOTH92s6JKsRaKrfRPmyJ4bOY/X0gRp38yDY=
Subject key identifier: 9D:E4:9C:C4:42:50:A2:A7:7F:56:57:DA:CC:F6:A3:9C:BD:88:FA:FA
Authority key identifier: 2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
Certificate issuer: /CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Certificate serial: 019A4E8685F1BF779B2ACE0F022B1F8D3C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:30 +0000
Manifest this update: Tue 04 Nov 2025 11:00:30 +0000
Manifest next update: Wed 05 Nov 2025 11:00:30 +0000
Files and hashes: 1: 2r0RVWDYwrAky_EBFNocrP1Orso.roa (hash: 03OdcPmwCc2pn6Q2ETr7PGvOwjdWATEEpq/X3ap3Qjs=)
2: L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl (hash: XEcK0saHQTPL1oEPaWqJzq7jVYkSdVX/gADwDPs4jo0=)
3: Swa9pMFTSLy0n_Wa3rYsyOZYvSA.roa (hash: 3zJVdSWxQTVh9llFwDq7cagzz/TNovINbw9ExqnV0Ns=)
4: raNLX_Rlhb8qt_iqRNHRfzz2onw.roa (hash: CXUwU+ePCPV8g/dv883GbgzoP+FoppZgtKTpY2iI3OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:85:f1:bf:77:9b:2a:ce:0f:02:2b:1f:8d:3c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Validity
Not Before: Nov 4 11:00:30 2025 GMT
Not After : Nov 5 11:00:30 2025 GMT
Subject: CN=9de49cc44250a2a77f5657daccf6a39cbd88fafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:de:06:5b:a6:cb:e9:72:ae:fc:22:c1:d4:
b4:92:c7:cb:f7:7c:a0:d4:20:6a:12:3e:89:b2:26:
27:5c:54:03:9c:d5:f6:10:cf:bd:b7:60:fc:cd:5f:
3d:33:0d:14:7d:38:a6:e5:38:0a:78:be:10:d1:0f:
5a:28:56:4a:31:58:6f:9e:91:81:11:99:04:6e:c0:
c8:28:8c:cc:73:c7:70:16:00:78:9f:13:95:03:59:
49:99:c1:a2:17:8d:7f:e9:7c:ff:d0:6c:18:f3:42:
3e:c1:65:50:b0:06:28:0d:76:0f:c3:d2:58:ea:7c:
e2:fc:e2:dc:99:5e:c1:ce:d3:25:f2:94:77:6e:49:
b8:e0:ca:5a:a3:15:b5:8b:e5:df:f1:85:eb:6b:7d:
eb:89:47:71:18:6a:13:52:a5:bc:37:7c:68:a8:0f:
ec:5d:8d:78:9f:6b:25:9c:91:5f:b2:91:b3:5e:46:
57:b1:59:c4:aa:a5:2f:91:b8:f9:58:28:49:43:34:
75:b7:d4:67:96:66:2b:65:ec:b9:e3:1c:c9:e6:da:
6c:4d:22:64:32:ab:3a:29:cd:40:fe:44:54:0c:bf:
07:4c:a0:f0:a0:f4:94:cf:84:e6:ac:54:85:eb:ee:
27:84:72:cf:3e:c3:40:92:e7:8d:2a:39:be:24:66:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E4:9C:C4:42:50:A2:A7:7F:56:57:DA:CC:F6:A3:9C:BD:88:FA:FA
X509v3 Authority Key Identifier:
keyid:2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3d:f7:ea:cf:73:aa:3e:b3:6c:6f:74:fb:ae:bd:b9:97:12:
e1:9b:2e:a2:e4:df:c3:62:35:de:0c:9c:74:c2:74:8d:93:ef:
e1:55:08:5c:08:77:e5:41:f3:ca:47:0f:9e:86:51:83:d8:d8:
34:85:ae:b6:7c:c7:67:4f:ea:93:3e:ae:60:08:ca:59:b1:0c:
81:fd:25:7e:1a:44:ba:dc:79:1d:7c:cd:be:ad:dc:7e:3f:43:
51:0a:9d:9d:d1:76:3c:4c:81:58:7d:95:f8:c3:ad:d7:fa:61:
ec:cb:7f:34:2b:2d:b2:04:7a:58:3c:09:7b:c9:5b:49:45:23:
ff:b1:18:f7:33:13:98:75:de:fc:87:01:4a:55:46:9c:e9:68:
d7:88:4d:de:45:eb:63:59:ca:b7:09:60:6c:f0:1c:31:d5:78:
1f:c8:dd:93:ba:ec:72:3f:5e:19:13:d4:97:b8:8d:91:89:98:
f8:da:a7:62:b9:4a:9d:71:b3:9e:80:18:10:90:28:5c:67:70:
d5:95:2b:8e:6c:c2:f6:84:b5:ab:f0:2a:64:1f:d3:e1:35:77:
33:a8:0a:32:7b:ea:4e:a5:63:5d:37:26:2f:a6:33:42:82:ff:
20:95:d3:74:7f:e7:64:0b:3b:5b:75:50:6d:a3:3b:3a:6c:c0:
fc:5b:7b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:37 2025 by rpki-client