Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: llKeJRpg9NBavT1kw2lIAkS/nioo4c8KgKC+f4mcLN0=
Subject key identifier: 2F:14:E8:15:BB:83:8B:CA:D2:0F:FF:15:5D:EE:02:3C:45:FD:15:14
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 0199FCC626537BA43D0D8E5D1523A07866E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 0CB5
Signing time: Sun 19 Oct 2025 14:01:08 +0000
Manifest this update: Sun 19 Oct 2025 14:01:08 +0000
Manifest next update: Mon 20 Oct 2025 14:01:08 +0000
Files and hashes: 1: E5z0sS7nvixPBFyRI_RWT9Plr0w.roa (hash: SNlFw+9uypuF2ztoEgq8hVfftlXP+FQlnrdAhrNkFGE=)
2: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: JBc8z4hxx/Vd+d8J5Nnm6LmNH0ySHzBPgqhG28P2OIk=)
3: OqOCQtZBHzCV5Z0xJrS8FJFSEWY.roa (hash: xZeH8Q+yxnCI5oid4Rq8ssEGEdCZgg6NEVRbko+oKkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:26:53:7b:a4:3d:0d:8e:5d:15:23:a0:78:66:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Oct 19 14:01:08 2025 GMT
Not After : Oct 20 14:01:08 2025 GMT
Subject: CN=2f14e815bb838bcad20fff155dee023c45fd1514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:b7:4e:19:61:5d:03:a1:1c:dd:25:44:e1:
c9:65:9b:1c:85:3b:73:52:63:95:49:6c:71:98:c7:
14:ee:34:f3:02:13:1f:c4:78:d0:13:02:e6:18:9d:
1e:2e:a0:35:50:7f:e1:11:52:a3:cd:00:b3:bc:6e:
9e:4a:e0:f2:36:21:2b:01:3f:ac:2b:f4:f8:54:35:
aa:72:3f:22:db:68:be:18:b0:8b:2a:65:22:ad:20:
7a:06:54:3f:37:af:16:ef:33:fe:a5:4f:25:92:8f:
7d:14:8c:d5:c9:4e:3d:1c:61:c3:62:15:f4:af:c9:
73:cd:1a:0c:c0:4f:c0:60:f0:b1:6c:df:9f:79:48:
9d:56:f0:86:df:fb:21:43:cf:7f:95:a1:fc:b5:89:
b0:3a:a6:e4:b8:f1:d4:77:c5:e3:6f:ec:53:3c:58:
39:ad:a1:af:29:c4:1d:6a:2b:1c:c9:b9:e6:f7:42:
11:e7:88:b8:dd:c2:19:66:43:9c:e4:3b:a9:2d:2a:
1a:6d:3f:17:21:ac:7f:9f:ee:b1:e1:86:7e:5a:62:
67:2d:c5:94:eb:7f:ba:99:6c:9a:d9:a4:dd:bf:e9:
91:71:f3:c2:39:11:6f:60:4d:64:79:6b:77:40:ca:
39:de:26:cb:23:6f:f3:39:2b:ae:ba:3f:7d:88:6d:
67:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:14:E8:15:BB:83:8B:CA:D2:0F:FF:15:5D:EE:02:3C:45:FD:15:14
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:10:70:d2:1c:27:65:ff:9e:31:2c:ad:94:b5:b8:49:37:e2:
07:2a:b0:93:15:3b:7a:c1:d0:bc:1f:fa:2f:f2:df:a8:c0:dc:
0c:e1:eb:cc:17:e2:66:06:cc:54:86:91:fd:06:5b:64:9c:87:
5b:e5:34:ad:90:dc:0a:c2:d4:c5:02:70:b9:36:c3:d3:ae:8c:
6c:74:93:5e:bc:07:7f:a6:b9:3b:c2:d9:d5:5b:70:16:a1:f3:
2d:aa:92:8b:3d:59:33:b6:d8:f3:00:bf:82:ea:58:27:e2:97:
37:cb:d9:01:eb:db:38:dc:0e:55:8a:e7:7c:13:ee:76:e5:fb:
18:87:a1:0a:b0:90:c6:59:91:1c:48:49:45:e1:b6:f7:3d:2c:
15:b9:ed:61:d8:00:31:1e:e7:82:3c:0a:17:02:a9:e3:ba:53:
71:a6:08:97:c0:b3:82:52:2e:ed:2c:38:ea:8d:2e:6d:62:f3:
f2:f0:37:40:d1:31:b4:12:fb:a5:e6:ba:e8:7d:83:36:88:53:
81:09:82:ae:60:9e:cb:f3:ef:7d:77:60:31:c5:1f:ee:5a:54:
68:1b:c9:55:e3:3d:df:71:6a:25:c1:0b:95:21:71:43:cf:95:
d4:55:a5:ea:c7:cc:2e:44:87:65:9f:ef:42:b4:6f:69:11:06:
16:15:6a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:37 2025 by rpki-client