Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
File: L2VDasUDgzLnA6277_WBTbgqtD8.mft (raw, json)
Hash identifier: qSTMbXUynqXgy81n2aPPWhG/ZASwovitUhWeQBc0QHI=
Subject key identifier: 47:41:EA:3A:D8:54:27:3B:3D:37:E8:42:8D:7D:61:92:67:5B:89:CA
Authority key identifier: 2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F
Certificate issuer: /CN=2f65436ac5038332e703adbbeff5814db82ab43f
Certificate serial: 019A014814D418D637B8806EE534F1608321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
Manifest number: 1000
Signing time: Mon 20 Oct 2025 11:01:32 +0000
Manifest this update: Mon 20 Oct 2025 11:01:32 +0000
Manifest next update: Tue 21 Oct 2025 11:01:32 +0000
Files and hashes: 1: JwV0QfsSNHG29kGRpDADqSiaDck.roa (hash: KjOMvzGc/F+OfPiH0IzVXvG5nX5kdmCNZ+EIJh+pYl4=)
2: L2VDasUDgzLnA6277_WBTbgqtD8.crl (hash: 5VmE7DYwV/c/netF0OhJpbPdcdJLeqOK0cR9U7qD77c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:48:14:d4:18:d6:37:b8:80:6e:e5:34:f1:60:83:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f65436ac5038332e703adbbeff5814db82ab43f
Validity
Not Before: Oct 20 11:01:32 2025 GMT
Not After : Oct 21 11:01:32 2025 GMT
Subject: CN=4741ea3ad854273b3d37e8428d7d6192675b89ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:69:39:a6:90:b8:1e:2e:2e:11:2d:90:5c:4d:
34:e8:18:8f:bb:44:c9:34:aa:28:ca:f2:50:f4:a4:
8b:d2:6c:ca:43:f5:31:0b:8a:ea:81:ef:89:cd:ba:
2a:d2:37:c6:22:33:bc:dd:25:c2:78:4c:49:ef:08:
26:91:02:17:a8:56:ad:de:ff:64:35:11:35:06:0d:
8c:5f:ea:6d:5c:bb:6e:9f:26:ee:e2:e5:7b:19:ed:
42:90:4a:52:71:35:c7:7d:6f:b3:56:61:84:94:3b:
ac:2b:c3:b7:68:e4:fe:53:31:9a:b7:74:e3:c1:e1:
ac:d1:c1:6a:aa:03:a3:e9:88:3e:fd:fc:46:74:4d:
f8:db:ad:87:37:97:28:c8:1b:6a:4f:26:dd:e7:bf:
55:de:f6:86:7d:11:33:fb:c4:81:ea:a2:c6:31:9d:
fe:19:43:a5:c3:bd:69:ee:a6:62:c3:26:ee:ef:19:
a6:65:bc:f7:15:6a:6b:3a:70:4f:e8:33:39:25:bd:
cd:3e:84:0d:7b:a3:17:70:d4:08:b9:23:a6:ad:c1:
0c:0f:aa:e4:e1:33:cf:84:c4:b1:f0:bf:a9:51:65:
c5:47:eb:1e:37:f9:60:06:00:bb:90:e3:ff:79:18:
14:93:f0:65:6f:a4:e0:76:50:7d:a8:05:ef:cb:d2:
16:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:41:EA:3A:D8:54:27:3B:3D:37:E8:42:8D:7D:61:92:67:5B:89:CA
X509v3 Authority Key Identifier:
keyid:2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:39:57:1e:40:59:00:7a:8b:c0:3c:5c:26:81:1a:67:83:c4:
af:a1:f4:bf:79:ef:7c:6e:7c:54:ff:e0:72:20:2e:7d:e4:6c:
0f:f9:63:8f:e7:f2:72:ca:28:38:65:d8:f8:62:37:1e:af:84:
07:2b:ee:06:01:ae:a5:41:c8:f5:09:a4:cb:62:96:7b:19:75:
48:e5:13:aa:ec:d6:76:5a:3c:14:8e:d4:32:df:98:65:f1:4b:
9a:73:2e:0b:f9:43:e9:43:40:99:05:86:1d:c6:60:4d:7c:61:
23:9d:de:69:54:2c:c8:f1:f7:d1:b6:74:67:a5:c2:b5:56:d6:
06:3d:b2:35:01:64:3c:86:89:dc:1a:d6:36:40:5b:59:69:33:
71:b2:f8:c9:75:6b:92:e7:89:8f:c1:dd:28:ed:71:2a:c6:b9:
ed:b6:f6:73:7b:e7:1c:e6:c2:b2:83:9a:0b:a5:2b:f9:f5:74:
e0:a6:56:d9:30:d8:85:5c:10:1e:35:46:9a:6f:0b:16:e3:65:
98:6d:cf:ee:52:73:5d:ba:e6:67:aa:ff:1e:55:46:91:a2:b9:
fd:fe:75:7e:8c:6a:fe:9c:d4:04:90:4d:6c:78:c6:31:d2:73:
4d:1c:62:21:e2:8d:2e:46:bd:d8:17:8c:ec:cc:07:28:f7:42:
3f:eb:63:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:27:15 2025 by rpki-client