Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
File: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft (raw, json)
Hash identifier: JZQ7iAB8G/7aJn35VP8uHtpM5N8mySAYebBCZTM0+SA=
Subject key identifier: FD:81:F6:6F:10:05:C1:47:AC:36:50:3D:A5:7D:1C:86:26:4A:B9:87
Authority key identifier: 2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
Certificate issuer: /CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Certificate serial: 0199FAD867DA616996EE2A6B96DD5F2FAB8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
Manifest number: 0E1B
Signing time: Sun 19 Oct 2025 05:01:50 +0000
Manifest this update: Sun 19 Oct 2025 05:01:50 +0000
Manifest next update: Mon 20 Oct 2025 05:01:50 +0000
Files and hashes: 1: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl (hash: GwGg/uMZsJ2N17hvU739SJszRGqmsYqFR5xroUObUqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:67:da:61:69:96:ee:2a:6b:96:dd:5f:2f:ab:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Validity
Not Before: Oct 19 05:01:50 2025 GMT
Not After : Oct 20 05:01:50 2025 GMT
Subject: CN=fd81f66f1005c147ac36503da57d1c86264ab987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:85:4d:4a:60:ca:d1:9c:8a:b6:43:51:96:0c:
dc:8a:6d:18:88:17:d0:82:06:b8:92:de:f7:89:3a:
c9:41:3c:83:04:00:04:13:db:d1:97:74:c8:05:b4:
b5:42:82:06:e6:87:7c:ed:b9:20:3a:a2:8e:0b:70:
d4:1d:50:cd:84:a0:29:17:c4:39:29:e8:73:87:39:
64:21:7f:3c:70:cc:07:1c:38:16:9a:f0:a1:de:14:
e5:f9:bc:5b:b9:48:30:26:07:c8:f2:54:74:36:ea:
33:6e:73:ef:c9:d8:04:21:80:a4:03:0d:99:29:88:
5a:9b:cd:5c:6b:43:49:b1:b3:b2:37:34:cd:6e:80:
bc:60:dc:de:0b:e9:41:ff:bc:d2:78:69:d3:aa:27:
38:b9:b8:4a:31:3a:e5:bc:6f:fb:16:13:3a:a7:f1:
e1:73:0c:89:c2:f3:43:b1:a1:5d:e9:38:94:30:12:
46:d7:d0:13:4e:f1:02:1e:2a:8c:0b:29:b0:0f:5b:
74:bb:99:47:10:54:b8:86:84:17:45:39:8c:52:2c:
b2:3c:1b:33:2f:00:7c:fb:a1:ed:41:d8:4c:b7:f4:
6a:df:6e:a3:3d:40:2e:30:42:e2:d7:31:27:c9:af:
79:9d:c8:74:6e:32:c6:fa:bd:9e:a1:06:af:2c:1d:
28:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:81:F6:6F:10:05:C1:47:AC:36:50:3D:A5:7D:1C:86:26:4A:B9:87
X509v3 Authority Key Identifier:
keyid:2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f0:66:61:f8:47:d0:93:ab:3e:de:93:c6:3f:98:c0:9c:de:
2a:af:d4:15:b5:82:4a:25:c8:d2:10:e3:9c:70:6f:64:e1:bd:
e4:45:39:86:8e:59:be:d8:0b:f7:91:fc:ae:7d:d0:43:85:a1:
f2:e9:82:98:51:a8:13:0d:7d:28:6c:92:ae:c9:3f:e2:a4:ad:
7c:5a:96:d7:35:b8:fb:f4:f0:8e:0b:ad:ab:1c:65:b5:7c:63:
64:ab:78:d5:5d:7d:ac:5f:f9:ae:c6:55:4a:d1:7f:bb:b6:33:
b3:7c:bc:32:d4:2e:64:30:a2:47:cd:7e:56:75:40:1e:2d:17:
a2:43:da:3f:3e:0e:ee:72:90:d5:8b:46:03:47:bd:0f:07:11:
bf:1a:da:75:3d:6b:ee:28:eb:19:42:0b:ba:eb:50:e6:57:51:
a3:9c:cb:c4:dd:85:13:e2:24:d8:e6:cb:c1:35:70:f7:5f:95:
e9:69:f5:32:e4:a1:47:02:9e:60:ed:35:19:5a:c9:46:eb:82:
6d:9f:52:1b:45:4d:04:96:b9:b4:40:df:11:49:06:33:cc:06:
10:72:6c:91:17:60:23:5e:3f:71:a8:02:28:b7:4b:a5:fa:59:
a3:37:61:47:b7:4b:2b:ce:c4:62:7c:fd:60:bb:3a:ec:21:59:
ce:6f:0b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:16 2025 by rpki-client