Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: WeY3Cw1+o0Flt0KAixiAf6FztPDEaOm20wzEtQUikcc=
Subject key identifier: 13:81:66:60:32:A3:88:C9:5D:F8:97:28:C6:0C:31:57:EB:A9:56:C1
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 0199FE1033063475EC5D61B39B836A91D295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 052A
Signing time: Sun 19 Oct 2025 20:01:38 +0000
Manifest this update: Sun 19 Oct 2025 20:01:38 +0000
Manifest next update: Mon 20 Oct 2025 20:01:38 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: xB5sVNTMg14cKs2dOvwZQAxCq6Ae5Sjt9cK/SyYo218=)
2: WxBvM9AzXvcGUxLQO7mjVfKZ8SI.roa (hash: MlBmuxBYdT/UhZRE0mpsF297g9H8Aa5t6UDiR3XGbFU=)
3: hGYvey0NL7kedoZnW8NGK9NdHUE.roa (hash: j/gjt7b1AkCBiDU1S/YvmfcXT2lTvik+0pgkIhPCV+w=)
4: zhUAq4pe-9N-dxfCl2d78EjPTb0.roa (hash: uyxGbVsUozb8CGUZeB9rmoW8CVbBZTPJHf+JK7e+rn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:33:06:34:75:ec:5d:61:b3:9b:83:6a:91:d2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Oct 19 20:01:38 2025 GMT
Not After : Oct 20 20:01:38 2025 GMT
Subject: CN=1381666032a388c95df89728c60c3157eba956c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:c9:69:e6:5b:de:31:bd:0b:66:93:e8:22:
e5:7d:1b:5b:c3:36:1c:7f:32:c2:73:25:42:b0:05:
a2:65:60:d6:03:72:1e:5d:fd:f6:9f:69:b9:0c:07:
58:bb:d8:c4:5b:36:cc:f0:ac:9f:a5:31:10:b4:46:
cc:ef:64:b9:22:b8:0f:ec:f4:60:db:43:a7:f5:a0:
e9:5b:d9:ad:2b:34:87:d3:89:6b:ea:cb:2e:dc:eb:
a1:05:31:78:38:5a:b1:2d:2b:45:77:08:7b:c2:15:
22:c8:ed:f5:ff:31:8e:88:ac:bb:05:f0:f2:69:a2:
82:24:4b:97:cd:b7:2d:78:cf:6f:1b:08:d1:96:7e:
9b:e4:e2:95:dc:8f:8a:f2:03:e6:66:7f:9e:2c:7b:
4f:40:e6:b9:28:21:0e:54:c7:bc:9b:28:c9:02:b9:
10:41:11:2b:16:ea:63:ac:d2:31:11:4b:ab:d2:69:
ab:c6:22:74:81:46:81:63:1d:d5:27:b6:f0:d6:eb:
b5:9b:aa:5c:00:54:e1:33:bd:41:ea:e7:48:93:33:
26:0b:36:f7:ae:0f:b6:a3:79:94:e5:98:ab:5b:3c:
aa:c6:e4:ec:06:8c:40:d1:94:7f:07:c9:d6:6f:27:
cb:3a:a1:bc:83:b7:c8:f4:fb:dd:30:16:ce:90:58:
aa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:81:66:60:32:A3:88:C9:5D:F8:97:28:C6:0C:31:57:EB:A9:56:C1
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:64:91:16:9a:54:8d:a0:82:6d:83:b1:c5:b9:7d:b4:f4:f9:
b7:f8:80:04:0d:24:5c:31:b5:69:d8:d1:6e:24:39:9d:23:9c:
2e:54:e5:09:46:37:64:13:fd:27:bc:9c:c5:18:d3:a1:50:97:
63:5e:f3:fd:9a:cb:20:2a:e3:7b:94:5f:cd:4b:fb:3a:a6:0d:
f4:b0:bb:89:d9:99:ff:d3:7f:85:43:8c:0d:74:02:f7:ba:34:
84:dc:ee:6d:f7:4b:9e:e9:e2:71:d7:be:46:6b:0f:1d:9f:1a:
a7:c9:32:43:5c:dd:99:2d:7d:31:1b:51:54:d9:94:ad:1a:29:
d6:59:28:ea:69:9f:33:55:5e:37:d6:bd:ea:7b:43:b0:87:ae:
a8:05:de:8e:48:26:17:df:3a:03:78:de:cd:a6:0c:b7:32:3c:
f3:ff:c2:22:5e:2f:51:15:88:f8:8c:85:77:a5:42:2d:47:52:
16:df:88:fa:7c:5b:cb:c2:25:32:83:64:95:44:96:a4:96:fc:
c6:6f:55:c7:8a:33:63:21:fb:f9:78:1f:d9:07:34:f3:57:db:
44:61:44:a3:6d:dd:ec:52:c6:42:86:04:11:ae:a6:9b:ee:12:
42:1f:8a:f7:47:ca:5a:93:c4:b5:87:be:b0:08:bd:ed:c3:c0:
ca:02:ac:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EDMGNHXsXWGzm4NqkdKVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmN2EzMmM3MzdhYzMwNzgwNzQ3NmE2OTdiMGJhZjZiOTAw
NDU2OGUwHhcNMjUxMDE5MjAwMTM4WhcNMjUxMDIwMjAwMTM4WjAzMTEwLwYDVQQD
EygxMzgxNjY2MDMyYTM4OGM5NWRmODk3MjhjNjBjMzE1N2ViYTk1NmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTHJaeZb3jG9C2aT6CLlfRtbwzYc
fzLCcyVCsAWiZWDWA3IeXf32n2m5DAdYu9jEWzbM8KyfpTEQtEbM72S5IrgP7PRg
20On9aDpW9mtKzSH04lr6ssu3OuhBTF4OFqxLStFdwh7whUiyO31/zGOiKy7BfDy
aaKCJEuXzbcteM9vGwjRln6b5OKV3I+K8gPmZn+eLHtPQOa5KCEOVMe8myjJArkQ
QRErFupjrNIxEUur0mmrxiJ0gUaBYx3VJ7bw1uu1m6pcAFThM71B6udIkzMmCzb3
rg+2o3mU5ZirWzyqxuTsBoxA0ZR/B8nWbyfLOqG8g7fI9PvdMBbOkFiquQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOBZmAyo4jJXfiXKMYMMVfrqVbBMB8GA1UdIwQY
MBaAFC96Msc3rDB4B0dqaXsLr2uQBFaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTkt
ZTk1YTI0OTYxNTdlLzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTktZTk1YTI0OTYxNTdl
LzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGSRFppU
jaCCbYOxxbl9tPT5t/iABA0kXDG1adjRbiQ5nSOcLlTlCUY3ZBP9J7ycxRjToVCX
Y17z/ZrLICrje5RfzUv7OqYN9LC7idmZ/9N/hUOMDXQC97o0hNzubfdLnunicde+
RmsPHZ8ap8kyQ1zdmS19MRtRVNmUrRop1lko6mmfM1VeN9a96ntDsIeuqAXejkgm
F986A3jezaYMtzI88//CIl4vURWI+IyFd6VCLUdSFt+I+nxby8IlMoNklUSWpJb8
xm9Vx4ozYyH7+Xgf2Qc081fbRGFEo23d7FLGQoYEEa6mm+4SQh+K90fKWpPEtYe+
sAi97cPAygKs6g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:30:23 2025 by rpki-client