Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File: L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier: oPLfFkOVbDzK0r18pEujeoEdGqx1D55KY+SCamFZ2oU=
Subject key identifier: EF:E6:81:62:CD:30:83:02:FB:B6:C9:A2:A6:EF:B7:89:78:24:F1:F1
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 019A00DA0BA4F9155E2EDC9B033EB829B002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number: 07F9
Signing time: Mon 20 Oct 2025 09:01:21 +0000
Manifest this update: Mon 20 Oct 2025 09:01:21 +0000
Manifest next update: Tue 21 Oct 2025 09:01:21 +0000
Files and hashes: 1: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: rx5rd59zOc0eTNkDo7P9XGR9bfHTWDRZYoWRo6ETL68=)
2: jCfDa1o9-67BNQODivTRRldEbdY.roa (hash: 8Y6qhIf9Ka0kdUNg/SnNbfjipainSlycgW7SSV7AHSU=)
3: om141KzkG2-4eMZ-f0PthIkpE80.roa (hash: cw3Iskxz7drppI2oVPr2KEtsT6+wW7KALNNnzpIfPOQ=)
4: vA4JTCZBPjorS9CM--5uNxgqUOI.roa (hash: C8BQR0NQXngOUVQVK+k99B0pWs9mjN+aAreX6gH4h2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:0b:a4:f9:15:5e:2e:dc:9b:03:3e:b8:29:b0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: Oct 20 09:01:21 2025 GMT
Not After : Oct 21 09:01:21 2025 GMT
Subject: CN=efe68162cd308302fbb6c9a2a6efb7897824f1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3a:59:ac:16:c4:c0:1f:a4:00:15:e8:00:5f:
f2:cd:76:3c:26:38:99:a3:1e:eb:5b:bb:9d:dc:f5:
97:1c:26:d0:01:f9:57:c1:a3:5b:40:40:eb:65:89:
19:ab:58:ae:27:47:82:16:0b:95:16:1c:4c:c8:85:
f7:b8:5b:c4:73:81:1c:8c:73:23:7b:0b:e7:1b:22:
da:a7:b2:4c:a7:10:9b:cf:a1:98:1e:38:ef:18:53:
ac:d5:64:49:85:3c:a7:17:db:55:3a:ad:ca:fe:3f:
e5:23:00:bb:71:71:72:98:33:20:50:78:24:a4:8d:
d8:03:34:79:72:b1:a5:62:2e:e4:6d:0d:8e:59:f7:
ba:d6:1c:43:c9:65:c3:38:e5:72:93:a4:13:f4:29:
8f:2b:82:42:5a:47:90:dc:d1:c4:2e:e8:a4:95:e2:
a5:78:7a:56:1a:2d:e2:33:4b:3a:47:5e:4e:03:4e:
34:67:3b:b9:07:9b:54:d9:76:eb:56:fe:70:c9:76:
52:36:e7:0a:8d:97:d5:cb:fe:a0:8d:17:8b:d7:15:
34:1d:de:9a:08:3f:31:27:66:1b:61:91:96:09:f5:
8f:81:cc:36:39:ab:0c:5c:ae:90:24:71:fb:68:90:
5c:41:24:8f:0f:ef:0b:4f:75:65:4b:3a:bb:cf:20:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E6:81:62:CD:30:83:02:FB:B6:C9:A2:A6:EF:B7:89:78:24:F1:F1
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:fd:50:87:dc:3d:da:11:5b:78:9c:96:d6:bb:5e:64:55:05:
78:0d:f5:f8:54:6c:84:84:9d:a1:aa:fd:78:73:b9:1a:8b:44:
ac:0d:b3:c7:51:20:87:44:c7:22:a7:e1:8a:c4:05:60:7d:60:
5b:2f:00:3f:82:70:7a:d0:36:aa:a7:68:88:37:2b:c3:21:04:
f9:89:1d:46:86:e0:ff:48:e8:2d:5f:98:b2:6f:1a:9f:d9:37:
8e:e2:db:02:28:fd:b3:69:51:8e:59:38:34:38:e8:f3:2c:19:
13:49:e7:ac:71:0f:19:50:d8:6e:e9:20:f3:5b:05:31:72:a1:
69:c6:95:a6:2d:17:5b:56:5f:6e:64:5b:23:95:31:05:e3:d1:
9f:82:d2:29:df:10:ce:39:0b:00:d1:a6:d1:81:42:8a:7d:00:
d2:d3:0b:40:7e:de:f6:a1:bd:75:ba:20:8d:af:d4:95:05:0c:
d7:d1:22:b0:ab:4e:de:ea:39:36:55:dc:fc:e8:65:9b:f5:00:
cc:5b:91:17:dc:f7:32:1f:c5:8e:0b:e6:2c:ae:cf:4d:1e:49:
bd:4f:5c:3c:b5:4b:76:b4:39:08:1c:d2:6e:a6:22:78:92:d6:
22:53:ae:ac:20:4d:d2:8f:eb:d5:ab:e0:24:a0:16:59:17:f5:
4c:0c:e8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:06:06 2025 by rpki-client