Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
File: L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft (raw, json)
Hash identifier: YjA7pg+NWwyP3j1Qe8y1O/BvA5Yu/6gs+eoDtcDNM2M=
Subject key identifier: 72:EC:18:15:32:98:CE:3C:0E:42:B2:7F:19:EB:E6:4A:84:8E:02:53
Authority key identifier: 2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
Certificate issuer: /CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Certificate serial: 0199FE47379E3051F15BC6705EF35D14EB36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
Manifest number: 16CC
Signing time: Sun 19 Oct 2025 21:01:44 +0000
Manifest this update: Sun 19 Oct 2025 21:01:44 +0000
Manifest next update: Mon 20 Oct 2025 21:01:44 +0000
Files and hashes: 1: L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl (hash: ird7P/2VXw2LkjJOs3CkehreKrMmI7t+18o5X+RSFIc=)
2: ZoHlTSWf4EeqC9A5k-qHnjmwKF4.roa (hash: 7rMi4KUfYRyetPUm0wFZARhPbAH2Hhf04z4uA0idTbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:37:9e:30:51:f1:5b:c6:70:5e:f3:5d:14:eb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Validity
Not Before: Oct 19 21:01:44 2025 GMT
Not After : Oct 20 21:01:44 2025 GMT
Subject: CN=72ec18153298ce3c0e42b27f19ebe64a848e0253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:7a:69:bf:62:9a:e6:a3:5a:4b:74:b7:67:
a6:11:fc:56:8d:06:76:0a:e8:f9:f4:15:83:b3:09:
cf:73:88:19:84:49:af:ac:d5:9b:3d:92:44:a3:04:
5f:0c:53:34:ce:48:62:b3:e4:d2:33:43:6e:86:02:
07:50:56:6e:de:7e:02:42:cb:a9:ce:cd:aa:85:7c:
b6:34:35:a7:4e:2a:8a:c9:55:bc:ed:d7:8a:39:a0:
ea:6e:b7:89:69:54:02:7e:26:cf:9a:e7:4f:03:83:
89:7a:69:ee:19:ce:a6:fd:13:f5:b0:ae:b4:e3:6e:
66:9f:be:07:ca:a1:09:0f:f1:5e:f0:1f:87:71:52:
7b:0c:99:45:be:0f:e6:95:94:9a:cd:fa:fd:94:70:
bc:bc:80:ca:f3:c1:6e:0f:0b:bf:8c:59:09:ef:2b:
b1:24:c4:a7:b9:d4:5d:90:0a:90:24:70:89:8b:82:
88:b9:25:a6:db:c2:69:af:1b:da:81:dd:6d:d2:ba:
ab:e2:8f:28:81:45:93:91:80:0d:cb:ac:6a:35:b4:
83:ea:7d:5e:90:c4:72:07:17:66:04:2c:58:f6:30:
3f:39:28:7c:9f:20:66:7f:2a:08:27:a0:dc:97:c7:
76:dc:e9:4f:a8:af:0b:40:4c:eb:b7:c5:c8:d7:a5:
7c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EC:18:15:32:98:CE:3C:0E:42:B2:7F:19:EB:E6:4A:84:8E:02:53
X509v3 Authority Key Identifier:
keyid:2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:38:66:a2:c7:b6:3a:9b:2b:76:d8:36:13:88:9d:d5:52:3c:
96:c4:25:39:8c:47:52:15:12:ff:35:36:cc:80:6b:6f:3d:3c:
27:eb:ca:69:67:10:0c:77:7d:9a:d9:11:a1:2b:c1:b7:15:ad:
dd:ee:5d:5f:11:67:02:22:9f:5b:9d:5c:93:3d:9c:5c:3b:ba:
3b:66:84:8e:7a:d0:11:d6:d9:08:a8:ea:85:53:cc:ea:bc:ac:
8e:77:ce:1e:ba:e2:ef:f7:db:9a:f7:a4:ae:72:28:a3:f4:a3:
16:f2:3f:07:82:2c:9a:36:29:00:89:5f:5b:bf:fa:74:6e:4b:
2b:65:b2:90:42:31:b6:7a:da:57:b8:6d:f3:b8:42:c2:cd:65:
3a:bc:d8:27:da:2e:47:58:86:29:f1:02:87:d5:06:b1:73:58:
4b:0d:42:17:25:2d:78:82:7b:f4:6e:d2:16:71:7d:bf:d6:4e:
86:1f:ce:5d:99:a8:68:a5:69:12:8f:36:41:71:08:ff:c0:fc:
5e:59:55:a4:6a:4c:aa:b6:64:a2:f3:9d:ca:30:ba:03:c3:72:
a1:d9:94:b9:dd:b8:5b:88:3e:ac:b7:c1:52:ad:0d:a8:28:7c:
bf:3a:33:dd:02:b1:40:65:22:24:e3:e9:63:bd:50:54:f5:ce:
f9:89:75:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:25 2025 by rpki-client