Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
File: L45RIlad5SzVCux5NJS_HOfCX8g.mft (raw, json)
Hash identifier: seV6HDVyzXZwZLankIBuyBbGW0LaU7SFozj4Ne3HbEg=
Subject key identifier: 47:D6:6D:F7:D4:5F:BE:95:AF:71:D8:62:2F:FE:7D:D6:81:A0:B4:58
Authority key identifier: 2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8
Certificate issuer: /CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8
Certificate serial: 0199FAD7F878F19FE9B1ECCDD089EFECBAE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
Manifest number: 0D95
Signing time: Sun 19 Oct 2025 05:01:21 +0000
Manifest this update: Sun 19 Oct 2025 05:01:21 +0000
Manifest next update: Mon 20 Oct 2025 05:01:21 +0000
Files and hashes: 1: 4inp3rmc8abBZrSpYG-9NzczLIs.roa (hash: qFrZA2CrZBITypnTYdQbhEuRjClc/T+Pn0jtn1pc/ok=)
2: L45RIlad5SzVCux5NJS_HOfCX8g.crl (hash: zplM87z9fjbHdMswBh+mynnTXomNcd+B+QkG+KDOIDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:f8:78:f1:9f:e9:b1:ec:cd:d0:89:ef:ec:ba:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8
Validity
Not Before: Oct 19 05:01:21 2025 GMT
Not After : Oct 20 05:01:21 2025 GMT
Subject: CN=47d66df7d45fbe95af71d8622ffe7dd681a0b458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:41:cf:1c:a5:91:14:6a:c7:1d:66:47:ee:
ee:65:20:a8:8f:dc:80:c5:46:e0:3e:71:ae:91:bc:
0b:b9:23:11:d5:74:b2:b6:7a:e1:65:0d:a6:fd:88:
7a:c7:9d:40:e3:85:a3:15:9b:87:ed:0b:16:5e:29:
2d:e0:1c:92:0e:c3:c6:03:01:da:11:ba:50:8b:44:
27:48:d7:9b:19:57:14:7f:f2:03:33:51:81:10:f1:
e2:a0:9c:27:9c:ed:93:5e:3f:85:b7:35:7b:8b:2b:
e9:ae:1d:52:2e:fd:70:59:ff:5a:ec:aa:01:c7:cd:
15:58:8f:05:74:ac:1c:d2:9b:d6:b8:63:ad:b5:4a:
4b:13:48:74:78:d2:9f:f4:64:f3:bf:21:5c:22:f0:
e5:3a:b1:7e:ae:64:67:54:00:62:1f:7f:9b:93:e5:
b4:7d:a3:00:94:d3:2d:17:82:f9:fd:cf:1b:86:8b:
4d:0a:8b:bc:98:a8:1a:7d:12:4c:f2:bd:7c:c3:98:
20:90:91:67:b6:77:90:9b:b2:aa:8c:46:3a:89:3f:
0c:f8:95:dc:ff:c0:fe:71:d6:85:25:95:53:7f:22:
40:48:2a:a0:f4:70:f5:be:ba:55:46:1d:6b:2f:98:
bc:c7:c2:7f:d3:91:26:84:28:8c:83:c6:58:27:d1:
36:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D6:6D:F7:D4:5F:BE:95:AF:71:D8:62:2F:FE:7D:D6:81:A0:B4:58
X509v3 Authority Key Identifier:
keyid:2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4a:21:dd:26:08:09:eb:3c:68:85:43:9a:e2:7d:d5:0f:56:
8f:dd:59:73:6a:10:8c:68:5f:a8:0c:6c:14:82:78:4c:1d:aa:
1e:b8:ec:39:fb:b9:e9:c6:da:82:4e:e9:ea:a5:79:7c:4b:e3:
76:2c:2f:89:ec:63:07:6d:49:18:24:8a:3c:33:8e:17:28:55:
23:a3:e3:80:93:40:36:69:10:18:da:b0:db:10:b5:c1:21:58:
f1:a3:12:e8:81:d2:07:fc:aa:cc:b3:9b:0b:bf:11:73:cf:17:
12:c2:53:ef:b6:2f:ab:ad:5e:83:2d:5e:a9:d6:eb:2c:b7:b4:
fc:c4:c8:e9:40:01:da:8d:86:f5:c9:8e:31:d8:38:22:58:27:
5f:3b:5a:43:33:73:46:90:b6:41:db:57:86:57:ff:84:74:cf:
7d:5f:ab:5b:e0:b7:34:22:ce:19:ec:98:d7:46:e0:6e:ec:61:
67:fd:a0:27:40:1b:ea:6e:99:db:5c:3c:eb:5c:78:26:f0:19:
ee:32:16:0e:bc:03:b0:d3:5c:7d:b9:3f:67:35:ff:6d:85:c1:
4e:4a:74:a7:d5:b4:2c:7f:9b:fb:27:a1:4b:99:ec:12:4c:0b:
1f:25:be:d7:ab:1a:f8:91:b4:a3:13:13:c2:e1:1c:cb:4a:a4:
4b:43:01:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:16 2025 by rpki-client