Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
File: L6CLlwvIy9DkRTyJa9uCKqccom8.mft (raw, json)
Hash identifier: wN8nChcoQjLJEb3waTtZTBcymGAoXQKUkxF09ml/bjA=
Subject key identifier: B2:15:71:76:53:2C:9D:60:C5:DA:7A:AF:5F:76:5B:06:7A:5A:B5:F5
Authority key identifier: 2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F
Certificate issuer: /CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f
Certificate serial: 019A03DA3B4B4286F640FEF0A7347D3396FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
Manifest number: 03D7
Signing time: Mon 20 Oct 2025 23:00:24 +0000
Manifest this update: Mon 20 Oct 2025 23:00:24 +0000
Manifest next update: Tue 21 Oct 2025 23:00:24 +0000
Files and hashes: 1: L6CLlwvIy9DkRTyJa9uCKqccom8.crl (hash: hNu3svv/3SNvH+i8bxajoay01sHpFSJTE4BSF2JfsUQ=)
2: dp6ZCuRIqo4YLa9gbgLjmyAheBM.roa (hash: yf/5qE0uY00EXj7opiLq6SkYzRlB8nAZTXaYic2R17w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:da:3b:4b:42:86:f6:40:fe:f0:a7:34:7d:33:96:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f
Validity
Not Before: Oct 20 23:00:24 2025 GMT
Not After : Oct 21 23:00:24 2025 GMT
Subject: CN=b2157176532c9d60c5da7aaf5f765b067a5ab5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:66:a6:70:de:40:b9:31:71:ba:ac:40:26:
6a:27:3d:68:7d:03:18:d5:5c:90:b3:b7:79:6d:d4:
14:cd:bb:9d:e6:d2:4c:54:99:82:83:30:1c:8f:45:
f9:2b:74:d2:06:b0:5d:ef:3e:17:bf:df:11:6d:c5:
63:dc:aa:f8:27:88:ce:04:83:47:1f:37:eb:48:9f:
6a:b7:44:19:95:3f:47:ea:36:33:40:99:31:3d:ad:
7a:4d:ac:67:f9:0e:bd:9e:77:9f:6a:c1:ed:6f:b0:
11:7f:fc:80:bf:84:e4:a2:bd:49:59:d9:99:3b:ca:
84:e5:82:e4:96:8e:9f:7d:fc:87:79:f9:ca:7d:ad:
4d:28:51:60:b9:33:79:9c:ac:33:be:b1:56:03:22:
96:b0:15:fb:52:b2:f7:1a:25:89:a7:0b:6f:78:8a:
95:23:12:65:92:d9:a5:7a:f3:d2:b8:67:cf:e6:5a:
6d:a2:bb:2b:c4:ff:0f:4e:46:02:8b:e5:db:db:36:
93:6c:92:cc:28:80:1f:29:5c:e8:32:a6:6f:9c:6e:
9d:4b:73:a2:38:c5:04:34:ae:ed:26:af:81:07:9c:
2f:a6:83:f5:1a:8b:cf:3b:1e:f4:48:30:3f:c4:e2:
ac:0f:a8:bf:00:f1:16:e9:4b:4e:7a:67:26:12:e8:
93:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:15:71:76:53:2C:9D:60:C5:DA:7A:AF:5F:76:5B:06:7A:5A:B5:F5
X509v3 Authority Key Identifier:
keyid:2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f3:e9:5b:40:80:90:a7:2c:40:79:be:8c:50:b1:81:53:34:
51:b9:7c:0c:a1:5a:28:f7:3a:24:09:61:65:8a:3e:33:08:ca:
b8:d0:e5:7a:dc:2f:44:33:ef:eb:5f:44:08:57:93:2e:5d:57:
6e:af:0f:17:1a:2d:29:f0:22:43:9e:0a:73:57:0d:0d:78:ec:
23:a7:b2:c5:24:4f:5e:16:1d:1b:b8:16:fc:5b:e4:41:c2:b0:
5b:35:42:fb:9b:19:99:8b:54:ea:79:55:29:b8:1e:c6:a3:c3:
8a:10:13:d7:c1:d1:77:23:50:5d:1a:13:d9:a5:68:b1:28:96:
c4:4f:b8:9e:ab:dc:16:df:9f:15:05:c6:48:c3:e2:fc:c8:ba:
2e:e0:9a:3c:81:18:ee:ce:36:0f:e4:84:ef:e8:2b:73:ed:73:
5d:9d:97:69:af:da:0a:1e:4b:51:9c:96:e4:e8:ee:b1:ba:06:
b4:18:78:17:85:09:a8:c6:d7:89:a5:bd:1f:fd:c8:66:cc:35:
d9:38:3f:b8:8b:60:5d:88:68:79:bc:fa:49:e2:41:75:3d:35:
55:ea:7a:67:21:6f:cd:94:dc:37:99:49:3c:f8:a6:aa:d7:7c:
8c:8f:9c:22:32:3f:ee:a3:7e:4e:ac:cb:69:6d:02:3a:a6:2b:
fa:f7:6f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:06:44 2025 by rpki-client