Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
File: L28Hzq0GpPgRVHYAusAvrwzAhMk.mft (raw, json)
Hash identifier: Pac2qWPRMnql3rZfS9XticJMnwtCMj3iNYN6I9phvFg=
Subject key identifier: 9C:52:F7:FE:2A:EF:33:09:2F:EB:B5:3D:A6:E6:91:58:4C:E6:AE:7B
Authority key identifier: 2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
Certificate issuer: /CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Certificate serial: 0199FD341DBB13F5DB1CD34E6C1050E29B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:15 +0000
Manifest this update: Sun 19 Oct 2025 16:01:15 +0000
Manifest next update: Mon 20 Oct 2025 16:01:15 +0000
Files and hashes: 1: L28Hzq0GpPgRVHYAusAvrwzAhMk.crl (hash: q3KKjzD7RJGjGfLz3+ySBXn3x9d1af/rt+wN2SSsfAg=)
2: QqgdIg6hSu9l0qkAmT27rSaYEpI.roa (hash: Zj7N5jWJe1MnRgbFLlzVoeaeQcOnvfzk+fyv1HdeicI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:1d:bb:13:f5:db:1c:d3:4e:6c:10:50:e2:9b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Validity
Not Before: Oct 19 16:01:15 2025 GMT
Not After : Oct 20 16:01:15 2025 GMT
Subject: CN=9c52f7fe2aef33092febb53da6e691584ce6ae7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:d7:fd:95:38:ea:89:2c:67:5a:82:1b:d4:
b4:a0:03:b6:13:bc:b9:c0:fd:90:f1:f7:f1:54:58:
94:c8:f7:99:9e:6c:ef:69:98:85:a1:fe:49:e3:1b:
5e:6f:ec:74:d2:ad:3f:fd:a9:e7:40:fc:b9:97:12:
35:89:df:8f:6d:0c:c7:89:2b:9c:12:86:26:4a:22:
a6:a5:3b:cc:f4:0d:49:a8:36:90:08:a6:f1:78:5b:
23:54:d6:2d:d1:1f:0c:05:2d:4e:31:c9:93:f8:aa:
02:98:f4:68:69:14:3c:7c:d5:45:de:20:e1:c9:e2:
d0:39:d5:3c:d6:a7:32:71:cb:04:6f:e8:ea:40:a1:
b7:8d:4d:a3:d3:c4:ee:7b:7b:72:ee:bd:6a:ed:48:
b4:8b:25:e1:f0:d3:5d:ec:bb:ff:4b:65:05:94:a4:
41:00:66:0b:96:a9:4a:49:b0:6a:d3:26:41:1e:80:
d0:57:ff:cc:38:fe:ff:5e:22:b9:9e:03:95:e0:c8:
bf:c0:7c:73:af:a4:64:53:fe:de:48:97:e7:17:0c:
02:b3:5c:24:d5:8d:44:34:75:5b:9e:7e:a0:b6:26:
fe:fd:e7:14:b0:30:09:86:fb:b4:34:06:3a:93:6a:
14:27:d7:84:ac:e9:14:e5:15:67:1c:cf:b1:e8:42:
b2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:52:F7:FE:2A:EF:33:09:2F:EB:B5:3D:A6:E6:91:58:4C:E6:AE:7B
X509v3 Authority Key Identifier:
keyid:2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b8:71:18:99:5d:83:e1:8b:87:0b:45:67:73:46:54:2d:ca:
66:e9:7e:51:c0:5e:31:6a:1e:bd:4f:d8:ac:00:ea:9e:74:d3:
6c:f7:d2:91:0f:b8:c4:81:e1:51:cd:e7:5d:83:ff:cb:28:dc:
36:d9:e5:c9:c0:5e:50:64:21:7d:3b:9b:22:29:48:8a:a1:35:
4d:28:6b:69:27:17:23:60:4c:50:05:7e:b9:93:b9:f6:cd:5c:
ad:ad:22:14:3e:ea:01:22:ff:a4:0b:c5:46:e5:da:ea:43:67:
05:71:90:23:cb:51:77:4a:e8:16:b5:66:3d:42:bf:fe:88:e0:
2a:34:fc:82:ca:5e:69:8e:f4:55:cf:f0:07:db:10:53:0f:f9:
9e:34:ce:ee:7b:0f:8b:3b:cb:fa:43:3f:2a:bb:d5:4f:c3:ef:
3d:1b:ac:59:e5:00:2f:4d:39:bd:46:6f:e3:71:72:58:4d:0a:
90:d6:da:d7:82:3f:cd:96:ce:de:0c:5f:51:79:ac:5d:b6:4d:
bd:db:a8:4f:66:9e:7d:cd:69:59:60:34:49:80:6d:c2:49:79:
1b:6b:ad:d7:29:9a:0c:92:89:ac:2a:dc:2a:15:40:c9:fe:9d:
25:77:4e:a2:bc:da:47:35:ca:64:c7:b5:3c:29:7f:7b:04:3f:
f4:0b:26:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:02 2025 by rpki-client