Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
File: L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft (raw, json)
Hash identifier: p/tTtKEJ1e3UThDpV+DW9t3uz708lyRfn6g6rAU8Yho=
Subject key identifier: EB:82:6D:12:D4:77:B7:9B:21:FE:65:DA:6C:5A:7E:A4:C7:66:78:F1
Authority key identifier: 2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC
Certificate issuer: /CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
Certificate serial: 0199FBEAEA940FF664B95C2FE08EFA8FCB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:40 +0000
Manifest this update: Sun 19 Oct 2025 10:01:40 +0000
Manifest next update: Mon 20 Oct 2025 10:01:40 +0000
Files and hashes: 1: L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl (hash: mJcfB6S+iKFEzZjOMl8E0GLJPl1SunAzmuVn4AhNeKY=)
2: Vec_C6RiaudIxR6DQyYXgE_U-TY.roa (hash: MAwYc1OA3xQJeom5DQYcF+PCN/vQZIWajJ/StbTU5Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ea:94:0f:f6:64:b9:5c:2f:e0:8e:fa:8f:cb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
Validity
Not Before: Oct 19 10:01:40 2025 GMT
Not After : Oct 20 10:01:40 2025 GMT
Subject: CN=eb826d12d477b79b21fe65da6c5a7ea4c76678f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:bd:46:db:17:e4:67:a7:86:32:9e:4c:cb:
88:c9:9c:21:47:b5:d3:04:5e:15:e2:3b:98:6a:1d:
0e:6d:77:3f:d3:16:d4:39:38:18:0c:33:73:19:8a:
49:14:c0:de:68:30:02:67:7c:74:a9:ea:ba:fe:57:
8e:96:bb:18:a4:02:94:2c:74:a3:00:08:9c:eb:76:
1f:2d:b2:f9:3f:cc:c8:f6:cc:98:a7:5c:cf:02:b2:
c0:a6:8f:2f:b5:ca:7f:2b:6c:6e:a5:c9:5d:ca:5c:
ff:00:af:f7:37:de:d0:da:99:60:fd:60:cb:23:37:
6e:60:0f:97:b0:fb:64:6e:b1:e4:75:a5:03:2a:b0:
55:27:cf:ef:05:d8:f8:b5:14:6d:03:25:d7:dd:60:
56:8b:7e:1a:3f:b3:10:17:f6:41:e2:e7:bf:ae:6d:
db:9a:2c:d1:d7:dd:b2:d9:54:f2:8b:13:23:f1:21:
c9:09:06:e5:72:5e:d7:a3:d8:f0:7b:8e:65:3e:60:
55:9c:ae:a7:05:ec:20:8b:3b:06:8f:a2:ff:60:49:
7c:f8:d9:37:c7:7f:80:6a:bc:d6:8c:90:70:2b:16:
e7:92:97:ff:62:80:10:41:d3:70:9c:5e:7a:85:84:
f4:ff:ef:73:da:b6:14:f2:24:0c:97:c2:ef:5c:1b:
97:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:82:6D:12:D4:77:B7:9B:21:FE:65:DA:6C:5A:7E:A4:C7:66:78:F1
X509v3 Authority Key Identifier:
keyid:2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9c:90:ad:b3:c0:4c:80:72:3e:cf:ed:7e:94:12:a1:87:d4:
44:b0:7a:a6:f6:82:69:23:a6:75:00:3d:f6:fc:3f:5f:63:5b:
4f:f4:ca:6a:51:21:3f:30:65:cd:21:b9:73:af:e5:73:2d:28:
1b:35:63:fc:d6:93:55:2b:8c:97:73:89:7c:f3:ac:17:2d:38:
b6:f8:07:3b:42:0f:6d:b5:30:e1:0f:5a:8a:92:bb:02:44:72:
79:a3:90:1a:8a:54:3f:da:3a:02:e5:8f:2c:8d:99:e3:c3:f0:
37:57:49:23:7c:00:88:8f:d0:85:1e:bb:11:ee:ba:c3:a6:bb:
9f:d8:98:e0:de:ab:7e:00:0e:16:5c:c9:ff:cf:09:b8:10:50:
35:26:bd:72:3f:a8:a5:21:be:d7:14:9b:50:0c:1b:9b:f7:59:
c5:26:39:ce:b4:f9:b4:b7:1b:0b:c9:80:35:a3:f3:17:e1:aa:
f1:db:d4:f8:fe:22:46:aa:13:1f:cb:79:01:cc:8b:75:b4:ed:
7d:06:5d:22:54:67:39:23:52:6a:76:ef:08:6f:1d:16:91:a1:
d7:7d:c0:24:14:11:57:8f:59:09:72:d1:a1:ca:77:3a:94:59:
b8:44:13:57:38:2b:f8:d4:33:f0:bc:19:77:47:86:e6:d1:c4:
1a:45:53:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:39 2025 by rpki-client