Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
File: l0kuzDe64rn4HaApOFgX1DPFBGc.mft (raw, json)
Hash identifier: qC+Lf7D5nR+rR2TYUHpSfX4laRyTW5+qrDfdPq0JCTU=
Subject key identifier: CB:0B:75:19:E9:2D:61:55:53:43:8D:6E:30:34:71:8A:E3:E7:70:63
Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
Certificate issuer: /CN=97492ecc37bae2b9f81da029385817d433c50467
Certificate serial: 0199FCFD5AEB223F81AA12D24F9F5DFD9F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
Manifest number: 0BDE
Signing time: Sun 19 Oct 2025 15:01:26 +0000
Manifest this update: Sun 19 Oct 2025 15:01:26 +0000
Manifest next update: Mon 20 Oct 2025 15:01:26 +0000
Files and hashes: 1: GIv286-shw2KQ9cHbSFZoILsF4Y.roa (hash: n0V2P6i8c6cHkiGOtEBdR3HlibGvUywK0wCobqEXaiI=)
2: l0kuzDe64rn4HaApOFgX1DPFBGc.crl (hash: NE3L3qARkglymiCi6UpwSUv4VYWHwAVNgi6RIwZsYvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:5a:eb:22:3f:81:aa:12:d2:4f:9f:5d:fd:9f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467
Validity
Not Before: Oct 19 15:01:26 2025 GMT
Not After : Oct 20 15:01:26 2025 GMT
Subject: CN=cb0b7519e92d615553438d6e3034718ae3e77063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:47:b3:5c:1b:44:b3:99:a0:99:e5:4b:2d:6e:
5e:ab:20:3a:75:6f:05:06:ee:44:5f:f9:c7:de:4a:
40:2d:6a:cc:9e:52:f9:4b:12:b0:9c:eb:e3:51:9b:
a6:d4:41:2a:e3:dd:ae:98:03:34:84:d7:22:e7:d2:
e3:2f:a9:4a:a7:ff:c7:20:a4:12:b5:c6:0e:85:bf:
a6:1b:39:9b:02:15:3b:a7:e1:57:41:2e:38:2d:71:
ed:ab:c0:90:85:24:bb:59:99:8a:62:0c:84:0b:c0:
ea:3d:cc:78:e2:50:c1:73:d4:2f:82:97:c7:9c:7a:
43:c4:8a:6f:44:0b:ab:8b:9a:31:ce:4c:76:08:e7:
51:62:69:65:fa:25:15:3e:45:9d:6b:7a:d3:e1:da:
8c:f7:44:a4:c7:bb:87:65:41:b9:85:a9:90:d1:e2:
f3:8d:23:92:06:b5:41:5d:ca:e7:12:b5:6f:46:ce:
17:ca:9e:91:13:fd:f7:4a:c4:f3:fe:b0:c5:7f:8e:
52:80:8b:ad:dd:15:79:6a:98:c9:27:79:9d:95:4a:
21:f5:6c:17:90:55:ee:92:b2:0d:e8:c4:40:cf:e0:
31:50:73:54:4a:60:b8:df:44:4b:e9:d0:1e:95:c4:
e3:ea:f6:b5:52:a2:5d:c1:d0:6d:34:0c:bc:3a:4c:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0B:75:19:E9:2D:61:55:53:43:8D:6E:30:34:71:8A:E3:E7:70:63
X509v3 Authority Key Identifier:
keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a4:12:85:f2:5e:f7:b0:90:8b:67:ce:3a:31:6f:8d:a5:5d:
25:13:a2:69:7e:b0:ea:d0:a2:ad:ef:bb:70:1a:e6:2e:18:ad:
95:a0:a0:ed:7d:98:88:8f:52:a3:97:18:dd:6e:67:e2:4b:8d:
5a:88:c8:6e:92:76:bc:e5:47:81:48:95:77:23:b0:e2:6b:97:
ec:e0:6a:e2:5c:62:63:d4:24:65:cb:7b:39:89:09:ab:ae:5e:
a0:6b:1e:e5:10:dc:6d:0d:a0:7b:19:af:d8:a4:14:81:7b:9e:
e4:fc:8b:6c:de:11:7d:35:ec:99:d2:99:5a:17:a9:57:d2:24:
7e:28:d1:c9:bc:a6:60:5b:ec:b3:5d:6d:42:e9:48:6b:ac:05:
cf:16:a4:27:5b:34:2e:ab:fa:0a:f8:42:40:b8:3f:df:7f:f7:
82:00:d1:de:61:19:ea:6a:06:d2:22:7e:42:94:e7:aa:af:6b:
8f:3c:5a:12:62:73:d5:ee:92:ab:0e:66:19:6c:c4:be:95:d3:
30:82:86:53:2c:15:53:78:c2:30:7a:c7:71:2c:0d:f7:d6:5f:
d8:7e:83:08:57:a7:60:86:c4:40:1f:a3:20:3f:73:d5:81:f9:
b9:e5:79:e0:6f:40:a4:b8:54:db:ab:0c:73:24:5c:c8:0b:cc:
a4:8b:0f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:01:59 2025 by rpki-client