Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
File: L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft (raw, json)
Hash identifier: 1s4Zgggcz35J6MxLjiBh6M892rX+WIre6T4Zin+74jY=
Subject key identifier: FB:E5:9A:CE:90:DE:D1:43:BF:77:19:8C:45:2B:BD:A2:9A:7F:18:3C
Authority key identifier: 2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
Certificate issuer: /CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Certificate serial: 0199FBEB6C6A77543EB935EE1A3EFCFFC928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:13 +0000
Manifest this update: Sun 19 Oct 2025 10:02:13 +0000
Manifest next update: Mon 20 Oct 2025 10:02:13 +0000
Files and hashes: 1: L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl (hash: nP+fpb2oDjie6Er9Et8Dx17aBHK9UlSs6bOACiBCXho=)
2: fVFqHVP_QiliJMl-kIcrOxmuCro.roa (hash: GkKxdagAYy+CINxI1Dp6ck9rxu8bkF9hmUyqgByM5jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:6c:6a:77:54:3e:b9:35:ee:1a:3e:fc:ff:c9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Validity
Not Before: Oct 19 10:02:13 2025 GMT
Not After : Oct 20 10:02:13 2025 GMT
Subject: CN=fbe59ace90ded143bf77198c452bbda29a7f183c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:48:f6:8b:b4:a6:80:a8:74:d8:ca:7a:09:cd:
53:a8:8e:b3:1f:d8:98:aa:d7:34:d8:09:d7:5b:25:
82:d9:0b:bd:4a:a3:54:1c:b9:39:bb:19:76:1f:ba:
6b:33:f0:b6:9c:77:f4:10:fa:8f:3a:28:90:51:33:
07:b8:9c:87:14:06:51:5d:f6:b4:d6:b2:3d:8a:13:
7b:f0:d5:12:1a:67:3f:76:49:8a:2b:0a:3d:36:86:
79:74:a6:c1:15:c2:a9:f6:06:05:d6:3c:e4:81:1e:
3b:83:2c:3e:62:d7:c4:0e:49:3f:7b:ca:61:07:b8:
9c:04:7e:e6:a1:f0:a6:4d:23:9e:9c:6f:39:35:7f:
67:99:05:a3:f7:05:72:6d:9c:5c:2c:37:e1:fc:e1:
d0:1a:09:d9:b5:91:be:b0:58:34:79:56:bb:c8:c8:
ec:45:61:37:c0:03:93:14:2f:35:ed:31:7e:1c:ce:
f9:44:5d:16:b4:60:70:a4:bb:d0:2a:a1:29:c8:0a:
af:c2:b3:e2:af:e8:f8:d8:22:cb:f3:bd:e2:c1:eb:
2e:53:f1:dc:41:fc:72:95:d2:1a:08:27:70:29:b9:
44:40:19:5d:51:68:53:97:f5:a3:d2:61:13:4a:51:
7d:0b:6e:25:42:ec:03:ad:8f:f2:5d:66:d9:c4:1a:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E5:9A:CE:90:DE:D1:43:BF:77:19:8C:45:2B:BD:A2:9A:7F:18:3C
X509v3 Authority Key Identifier:
keyid:2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:02:1e:6d:6b:b4:75:30:38:97:54:81:f6:61:9f:43:40:50:
c6:3c:8b:8e:fb:9c:db:20:fa:eb:01:2a:2d:ad:8a:f5:16:ac:
ec:f6:3f:d8:59:b0:85:c9:52:51:62:36:31:9f:6d:7e:22:3c:
dc:86:b6:a9:f6:80:98:87:1e:da:86:21:c3:a9:fe:eb:b5:83:
9d:3a:d4:76:38:c9:0f:db:39:48:cf:19:b3:e9:c0:b3:01:33:
39:56:91:cd:da:dc:93:7f:c4:0e:41:a2:af:5b:ed:ec:48:ef:
ff:a4:03:b7:35:6b:83:e0:62:b9:85:2a:c8:66:66:29:80:19:
aa:2a:fc:da:96:73:42:46:99:fd:87:f4:bd:c9:15:95:e6:04:
63:d3:ef:fe:08:bb:47:c7:79:86:b3:7b:48:fe:ac:f1:16:96:
04:18:2b:5a:0b:a9:d5:fd:2b:f4:c0:2e:fd:3c:51:f2:6c:32:
09:e3:aa:df:59:89:3b:fc:23:88:e6:e1:31:e5:78:94:38:6f:
61:83:aa:32:a3:0f:97:8c:b6:15:5d:d4:40:c8:7c:b8:86:41:
56:14:33:64:6f:f3:91:99:23:a3:d9:db:7e:7e:e4:67:4a:b4:
4e:ea:0b:f3:16:0f:6c:8a:f5:12:18:29:ac:05:8e:26:7e:4d:
e5:bc:ff:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:08 2025 by rpki-client