Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
File: L_vZ3o2JUmxaSadmwfSF8J9akWY.mft (raw, json)
Hash identifier: FjPu713EKRSVObhW9IuLJSTtqcChJlvWYEJXLth8c6o=
Subject key identifier: C4:5A:20:1B:88:44:60:77:DE:82:74:75:43:36:91:2C:D9:F8:DC:6C
Authority key identifier: 2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66
Certificate issuer: /CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166
Certificate serial: 0199FF227D6ACCC7A83AF152A044204E0E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
Manifest number: 099D
Signing time: Mon 20 Oct 2025 01:01:14 +0000
Manifest this update: Mon 20 Oct 2025 01:01:14 +0000
Manifest next update: Tue 21 Oct 2025 01:01:14 +0000
Files and hashes: 1: L_vZ3o2JUmxaSadmwfSF8J9akWY.crl (hash: o30drFWwhWIFBIJ+rKhIe93CXiyyjnW+VOPLOkPMKwo=)
2: mXwM3P_PQQyVSERAjNUZUTUhWjg.roa (hash: 4+JoMMio3r7vvH6PXd1vvlGKdXZmMUa4KFkXT7FGKzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:7d:6a:cc:c7:a8:3a:f1:52:a0:44:20:4e:0e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166
Validity
Not Before: Oct 20 01:01:14 2025 GMT
Not After : Oct 21 01:01:14 2025 GMT
Subject: CN=c45a201b88446077de8274754336912cd9f8dc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:1d:68:fe:45:e3:f2:42:3b:e5:28:1b:40:
97:99:69:dd:aa:0b:52:f6:de:7e:62:4b:eb:2a:11:
78:90:c1:59:c6:6a:67:7a:86:37:88:c2:a9:40:58:
27:9a:16:fc:d7:1d:8d:d8:6b:f3:22:81:16:56:6f:
4c:ea:d3:13:39:9f:b9:28:51:c1:b3:cd:bc:bb:ee:
5b:c8:db:81:1b:6b:ba:43:94:6a:de:fd:42:57:89:
e7:5d:6c:0b:8d:53:1d:00:7c:e6:b4:c2:50:55:14:
0b:96:b8:9a:5e:5a:78:16:ac:d4:12:3d:4b:f3:b7:
0c:47:09:b4:b2:f4:08:46:4f:30:91:d8:94:c4:1a:
f4:b5:e2:cb:80:b8:01:60:f1:b6:02:55:b1:39:6d:
ea:66:9f:8f:32:21:7a:c9:34:eb:ea:f7:2c:92:40:
6f:f2:29:c9:d9:ea:db:fd:4a:e3:15:d7:fb:66:d6:
70:8d:27:90:61:18:a8:da:4c:d7:76:73:9e:a2:b9:
0f:8d:9a:0c:59:10:19:ef:22:cd:5c:de:c7:33:a0:
b7:76:d3:81:f4:8e:25:03:31:4d:47:46:27:f6:b6:
1a:1c:48:70:91:78:fe:f3:39:b5:c8:08:08:33:72:
c7:50:b0:d2:04:49:25:1d:15:f1:16:be:86:ef:7a:
5f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5A:20:1B:88:44:60:77:DE:82:74:75:43:36:91:2C:D9:F8:DC:6C
X509v3 Authority Key Identifier:
keyid:2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:46:a8:b1:a3:10:78:3e:d6:42:54:60:da:62:cb:00:4d:68:
9c:73:bb:29:6c:69:b2:1d:b9:ba:ae:37:87:7a:ca:76:63:fc:
17:0c:a4:34:07:c3:d8:86:07:9b:d8:ca:da:31:2c:c0:c8:47:
65:e1:c2:b2:53:46:19:37:88:86:03:da:4d:e5:4d:b9:2f:ff:
23:cc:08:e7:42:5c:b3:1d:49:52:5c:eb:ed:b8:b8:9e:a8:8d:
43:3a:a1:31:42:d3:a8:a0:62:d4:96:53:27:34:05:32:1c:1e:
e3:8a:93:ae:19:32:61:4b:f1:8a:3d:93:da:11:15:67:e7:0b:
d7:5e:77:95:7f:3f:52:41:20:74:2e:c5:56:f5:bd:c0:34:58:
41:65:63:71:ef:11:a9:05:6d:4f:6d:66:a7:58:4a:67:69:9f:
03:1d:43:68:62:84:b6:1f:73:75:e8:b8:e2:fc:a4:30:a6:02:
e7:7c:60:6f:1b:69:71:24:73:f6:b4:97:a4:7c:f4:c8:33:e0:
cd:89:da:d5:bc:90:64:7e:74:63:eb:e5:dd:59:10:9d:9d:90:
73:be:fd:ff:83:8f:ac:41:73:a3:9c:fe:3d:ca:29:dd:13:0b:
5d:39:c1:42:b6:31:24:0a:68:a8:2a:ca:b7:c1:dd:00:3b:d9:
81:f0:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:02:27 2025 by rpki-client