Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
File: L6CLlwvIy9DkRTyJa9uCKqccom8.mft (raw, json)
Hash identifier: 7NReVo4HD6hdlCIrHzcRlPrFfyZEgZ8r+D6mBTcAVXA=
Subject key identifier: 47:B4:02:CB:0F:68:17:DC:FE:EA:8A:2D:5B:05:A6:1A:6C:23:62:D8
Authority key identifier: 2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F
Certificate issuer: /CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f
Certificate serial: 0199FFFE6A250446B43649932DAAF091618D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
Manifest number: 03D5
Signing time: Mon 20 Oct 2025 05:01:27 +0000
Manifest this update: Mon 20 Oct 2025 05:01:27 +0000
Manifest next update: Tue 21 Oct 2025 05:01:27 +0000
Files and hashes: 1: L6CLlwvIy9DkRTyJa9uCKqccom8.crl (hash: 4MMs0PZANzY3URrpQS5GQcr4tA6aGRaIYFEuhFNy1cQ=)
2: dp6ZCuRIqo4YLa9gbgLjmyAheBM.roa (hash: yf/5qE0uY00EXj7opiLq6SkYzRlB8nAZTXaYic2R17w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:6a:25:04:46:b4:36:49:93:2d:aa:f0:91:61:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa08b970bc8cbd0e4453c896bdb822aa71ca26f
Validity
Not Before: Oct 20 05:01:27 2025 GMT
Not After : Oct 21 05:01:27 2025 GMT
Subject: CN=47b402cb0f6817dcfeea8a2d5b05a61a6c2362d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:8c:84:20:cb:47:b8:c9:38:5b:b6:a2:83:
98:10:2c:c5:5d:fe:6e:b8:6f:95:e2:8f:be:61:21:
a3:28:c6:ec:74:9d:71:b9:58:73:59:bf:c5:9d:9f:
31:d0:8b:23:2a:f8:34:f3:02:94:de:e4:1f:09:8c:
7e:fd:f6:3f:ea:56:f4:c3:7e:0c:31:58:53:99:3a:
82:a5:da:d0:21:f8:ae:fe:de:0a:13:8f:1e:e2:04:
40:df:e4:34:79:b2:5f:df:8f:cd:54:dc:90:af:b6:
27:1f:c7:4e:19:80:2a:05:da:e1:33:f6:4b:f6:aa:
0d:0f:84:35:4c:61:95:4d:fe:21:b5:5a:0a:4c:c4:
e5:00:05:d5:0e:77:de:2b:03:50:b2:d1:3a:95:a2:
70:07:e1:4d:83:09:ed:95:0e:b3:fc:c1:0f:13:64:
15:e2:6c:d1:d3:fc:d9:22:ee:18:02:0a:58:41:eb:
cc:b3:f0:2e:79:96:9b:a1:22:3b:71:1e:71:b7:41:
27:08:99:59:97:90:b6:3e:6f:2f:60:9c:31:01:6a:
b0:ef:32:db:19:75:14:8e:8a:d8:13:c5:53:06:6e:
8d:9d:ea:9b:82:cc:3e:26:2e:a3:ab:e1:9f:fc:64:
15:e0:b8:48:fa:b0:b1:1f:00:05:72:62:84:23:92:
45:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B4:02:CB:0F:68:17:DC:FE:EA:8A:2D:5B:05:A6:1A:6C:23:62:D8
X509v3 Authority Key Identifier:
keyid:2F:A0:8B:97:0B:C8:CB:D0:E4:45:3C:89:6B:DB:82:2A:A7:1C:A2:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6CLlwvIy9DkRTyJa9uCKqccom8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/46ab42-c137-4bde-a32a-a44dd966ce50/1/L6CLlwvIy9DkRTyJa9uCKqccom8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:86:f1:a9:40:ed:eb:b2:23:17:e8:cd:c4:f2:41:e7:f5:e4:
63:88:a2:c5:8f:55:f5:e8:24:bf:18:aa:32:24:87:9d:14:ee:
97:0c:da:f1:03:3c:35:9a:d6:80:7e:36:e6:aa:a0:f6:b6:45:
38:d3:69:cf:71:74:42:d7:bc:9c:00:4f:d0:f6:57:6e:ff:6f:
00:4e:95:b3:90:98:b6:75:09:12:75:d8:7f:1a:d4:3e:d9:08:
b6:18:1a:89:bb:8e:40:1f:b8:95:0b:b4:00:a1:55:b1:59:63:
a9:db:34:42:40:2e:6b:b8:f0:65:ee:08:a1:68:0c:78:0c:f0:
29:19:2d:25:1f:b5:28:6e:28:67:0e:56:42:1b:fe:ad:47:94:
e3:21:6b:42:b0:af:cd:dc:10:84:33:b2:25:63:0e:92:8e:f0:
61:39:3e:a3:81:ae:97:73:d2:c3:57:b4:eb:eb:d1:8a:bc:e6:
10:21:4f:20:c3:b3:af:46:75:8e:8d:fe:9d:91:d2:2a:8c:e3:
9f:1e:dd:f4:1d:67:cc:ac:79:6b:c1:43:54:0d:8d:02:34:64:
9e:ff:5b:43:08:79:fd:60:24:b1:84:9e:23:13:05:34:77:33:
0c:36:ed:b6:cd:c4:6a:0e:82:76:1d:a9:5e:2b:4c:f8:c8:03:
bf:a2:64:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:12 2025 by rpki-client