Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: Vy470J4J4uTR+GS8FIrD6BFwMDkRIeJF4pfg1dF5khw=
Subject key identifier: 95:44:61:10:BE:F6:47:D7:DC:79:4F:D3:AC:6F:2B:0E:FE:93:42:B6
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 0199FC8FB2A3FBF200E7637A7E03559F9566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 0E3F
Signing time: Sun 19 Oct 2025 13:01:39 +0000
Manifest this update: Sun 19 Oct 2025 13:01:39 +0000
Manifest next update: Mon 20 Oct 2025 13:01:39 +0000
Files and hashes: 1: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: nwC+rb/PONLm8+bInU09p/CHtHxGpuSjr2OoG/9yy64=)
2: afVgxjAetRHf-32SfxI2xSGcZNY.roa (hash: 5+vaYR6gRkTLd8FndMtKaBU448DVyxpRSJ1taqs3pZY=)
3: qxyxQlVHUvofNzmf_XqptKckrdE.roa (hash: cKnrJAob0FIV4Kpod3nX7eoqdSn57f3LQGAcTD4ltHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b2:a3:fb:f2:00:e7:63:7a:7e:03:55:9f:95:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Oct 19 13:01:39 2025 GMT
Not After : Oct 20 13:01:39 2025 GMT
Subject: CN=95446110bef647d7dc794fd3ac6f2b0efe9342b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:9e:0b:a2:b3:47:08:15:48:15:88:40:05:
83:f9:d0:33:e0:d7:f4:9f:d4:9f:4e:6e:68:f9:ce:
58:65:02:06:a1:6d:8c:0a:b1:ae:c2:06:9e:5c:88:
26:86:54:d3:92:26:c6:9a:7f:e9:cb:28:11:86:67:
31:60:6c:39:0e:99:68:92:2e:21:54:e1:cc:66:72:
c8:36:4c:bc:42:d5:d6:af:f2:15:5d:52:9d:19:af:
0e:1e:79:0a:55:5d:9b:e7:90:79:d4:ae:6a:d9:0d:
0d:e2:b1:e2:a8:1e:8a:e8:7b:6f:b4:5d:88:d6:9e:
bb:73:f1:07:f4:1a:b2:6d:ad:3e:d8:3a:b0:38:06:
39:16:0e:d8:a5:f0:b3:d5:25:7c:25:76:9c:fa:1c:
e2:1f:b4:89:2f:c1:de:66:a1:17:cc:aa:c5:4f:8b:
6c:1a:06:9b:45:28:96:44:7c:52:c6:ef:e7:ae:72:
95:a3:f5:0b:48:54:7a:98:e7:b0:20:8b:03:ed:95:
41:b4:5c:91:2e:33:ad:48:6c:bc:79:13:0d:fd:29:
e9:d0:fb:cd:26:0d:54:d3:f6:2a:18:de:1b:8a:96:
be:90:dd:09:06:cf:b8:18:b6:6b:79:28:06:e6:49:
56:3f:86:57:af:b6:2b:52:b4:ec:d4:1f:4f:0b:2e:
07:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:44:61:10:BE:F6:47:D7:DC:79:4F:D3:AC:6F:2B:0E:FE:93:42:B6
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:66:13:94:88:44:29:1e:e3:e9:ca:13:06:5d:b3:cd:2e:da:
c2:7f:8f:29:2b:b4:bb:d3:12:31:82:d7:d0:fa:55:41:1b:23:
10:bc:84:e2:9f:38:10:aa:6d:34:f3:48:61:8e:80:07:c2:1b:
38:8b:bf:0a:62:2e:43:7b:4a:04:e7:c5:b1:1a:3f:c7:b2:4f:
fb:32:c9:07:5e:91:c7:06:75:64:d1:a0:74:ac:08:bd:1e:de:
a4:26:40:c3:94:20:7f:bb:02:5b:e6:d5:61:e6:1d:78:3d:cc:
10:1f:56:0d:52:97:5f:b4:c4:9e:91:72:a4:35:cd:73:96:33:
05:2c:fb:6a:3b:18:1b:04:e1:ee:f8:f6:cb:a7:c2:f2:fa:40:
fd:99:4b:00:af:6d:2a:c0:7c:a8:07:ae:cf:2b:c8:8e:5f:bb:
05:fd:b2:5b:f3:8c:4b:41:67:76:f4:5f:64:fb:54:39:5b:2c:
c0:f6:d9:74:b9:18:c1:2c:6b:dc:29:bd:92:a0:ce:19:a5:e5:
19:1f:74:8e:3e:ca:b6:ec:af:64:1a:c0:22:dc:33:76:88:94:
87:3e:fa:f1:d0:99:a3:d3:dc:27:7d:0e:18:61:70:7f:04:23:
7d:77:55:ca:1d:c4:95:4c:f1:f3:1d:54:31:2a:ac:62:bc:3c:
2e:f0:dd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:10 2025 by rpki-client