Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
File: L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft (raw, json)
Hash identifier: GFq9tXBV+aHJE5s7L7qDA2CYzbvbyff4RQeVAtUiycg=
Subject key identifier: 78:74:7F:88:AE:48:A8:47:11:5C:46:55:C6:55:5F:B4:28:21:1A:D6
Authority key identifier: 2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
Certificate issuer: /CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Certificate serial: 0199FC585838657DC2842FC0928D05EFD63B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
Manifest number: 06B0
Signing time: Sun 19 Oct 2025 12:01:12 +0000
Manifest this update: Sun 19 Oct 2025 12:01:12 +0000
Manifest next update: Mon 20 Oct 2025 12:01:12 +0000
Files and hashes: 1: L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl (hash: 3iBW6i6hwmHNS8uFUVNNW1U+jETU3sk+dCYBX+rOCHs=)
2: qznnQ-v33pCD5fJCMq_QfAFaVVY.roa (hash: 0VqZD7dxruPTKQ34pdbfgNvG+cfqa/rYpHKqqEaQD/s=)
3: sxWEI_lS1aXV-AY65QedUYFWKCk.roa (hash: ms1QHqqgoXo/meqTZa2TJKA2xu/idnTrM5+e1jr1amY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:58:38:65:7d:c2:84:2f:c0:92:8d:05:ef:d6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Validity
Not Before: Oct 19 12:01:12 2025 GMT
Not After : Oct 20 12:01:12 2025 GMT
Subject: CN=78747f88ae48a847115c4655c6555fb428211ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:33:4d:a3:8b:fa:ce:3c:b0:1e:e3:a1:aa:29:
c8:57:a4:f4:30:88:c9:89:47:99:b5:33:ae:a5:7c:
09:8c:68:51:1e:91:4c:72:9f:c4:cc:7c:9c:17:b9:
01:0a:46:79:be:67:2b:a7:10:af:a0:d4:62:ea:9a:
68:fb:b2:bb:28:9e:7e:22:3c:0a:85:2d:f3:44:ed:
00:f1:db:08:3f:91:f8:68:e1:4d:ff:00:67:cb:83:
bb:73:fc:89:28:6b:c8:ad:60:2e:b4:28:f1:2b:6a:
7f:6d:0f:c4:28:44:82:1a:c7:69:84:af:fe:24:bd:
5f:7a:77:d3:17:36:33:d9:09:09:0c:16:28:4a:d2:
16:76:84:98:96:39:88:6d:cc:96:e3:52:26:bb:af:
f3:42:ec:84:c2:05:01:67:5c:1f:2f:84:e6:96:99:
a6:53:7a:a5:c6:ed:2d:29:d8:84:3d:f5:b3:03:9e:
3b:31:dd:65:71:7b:f7:b4:5f:8e:d1:87:15:1d:25:
b6:24:7d:b5:08:7f:00:3e:b1:12:65:7c:a8:25:02:
f9:76:ee:d2:11:13:b7:20:aa:26:bf:4e:86:de:97:
ca:9f:4c:e2:a9:71:59:bf:f0:31:cf:60:8b:8a:e0:
1c:7d:50:5e:b3:3e:99:e7:f8:97:4f:7f:58:1a:6d:
74:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:74:7F:88:AE:48:A8:47:11:5C:46:55:C6:55:5F:B4:28:21:1A:D6
X509v3 Authority Key Identifier:
keyid:2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:97:7d:62:28:9b:fc:fc:d2:37:7a:f0:c5:59:66:80:6e:b2:
67:e7:3b:49:dc:18:5c:e7:d7:00:88:c4:9e:22:d5:3b:92:a2:
9f:56:45:7a:81:7f:bb:a4:d7:db:70:6e:56:56:6a:0e:8b:b9:
33:3a:02:6d:9d:7c:ab:3e:9d:2c:f9:24:88:99:21:31:8e:dc:
58:ec:d4:9c:bc:1a:ce:7c:7b:de:69:d9:be:3a:aa:6f:3e:95:
da:ce:28:f3:e9:b5:e8:55:6c:d5:5c:1a:ef:55:d8:e6:8d:78:
3d:37:af:70:51:e0:1d:d8:7c:e9:24:86:6d:16:19:d1:8c:3c:
5f:41:3d:a2:05:c7:54:f5:2e:1a:54:c8:f8:a0:04:61:cc:f4:
f9:2d:d6:05:8b:04:32:ae:b9:9b:4a:fc:5a:54:2b:1f:6c:07:
31:7f:7e:b4:5e:dd:26:a3:34:85:8a:72:86:42:27:d1:01:08:
35:d9:ad:70:d3:19:7b:91:c5:1d:aa:b6:fc:5d:a4:3f:ee:2f:
1f:ce:5d:5a:9d:36:dd:d9:59:42:b1:e0:6b:a9:33:8f:ed:a0:
6a:16:24:8d:ab:ac:37:af:20:68:8a:b2:d5:ab:48:9e:c0:e6:
d0:49:73:bb:51:9e:32:4c:a7:9d:7e:3d:2b:2a:ab:5a:1a:65:
91:e6:30:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WFg4ZX3ChC/Ako0F79Y7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNzhlMDA2NmJiMjdjNWY1MmU3MDI1ZDYxMTkwZGFhOTBi
OTczNDgwHhcNMjUxMDE5MTIwMTEyWhcNMjUxMDIwMTIwMTEyWjAzMTEwLwYDVQQD
Eyg3ODc0N2Y4OGFlNDhhODQ3MTE1YzQ2NTVjNjU1NWZiNDI4MjExYWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjNNo4v6zjywHuOhqinIV6T0MIjJ
iUeZtTOupXwJjGhRHpFMcp/EzHycF7kBCkZ5vmcrpxCvoNRi6ppo+7K7KJ5+IjwK
hS3zRO0A8dsIP5H4aOFN/wBny4O7c/yJKGvIrWAutCjxK2p/bQ/EKESCGsdphK/+
JL1fenfTFzYz2QkJDBYoStIWdoSYljmIbcyW41Imu6/zQuyEwgUBZ1wfL4Tmlpmm
U3qlxu0tKdiEPfWzA547Md1lcXv3tF+O0YcVHSW2JH21CH8APrESZXyoJQL5du7S
ERO3IKomv06G3pfKn0ziqXFZv/Axz2CLiuAcfVBesz6Z5/iXT39YGm100wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHh0f4iuSKhHEVxGVcZVX7QoIRrWMB8GA1UdIwQY
MBaAFC944AZrsnxfUucCXWEZDaqQuXNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNqZ0JtdXlmRjlTNXdKZFlSa05xcEM1YzBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMzBhYzctZWMwYy00NGRlLTg1YTgt
YjJiNzk2MmMyZDgxLzEvTDNqZ0JtdXlmRjlTNXdKZFlSa05xcEM1YzBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yMzBhYzctZWMwYy00NGRlLTg1YTgtYjJiNzk2MmMyZDgx
LzEvTDNqZ0JtdXlmRjlTNXdKZFlSa05xcEM1YzBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpd9Yiib
/PzSN3rwxVlmgG6yZ+c7SdwYXOfXAIjEniLVO5Kin1ZFeoF/u6TX23BuVlZqDou5
MzoCbZ18qz6dLPkkiJkhMY7cWOzUnLwaznx73mnZvjqqbz6V2s4o8+m16FVs1Vwa
71XY5o14PTevcFHgHdh86SSGbRYZ0Yw8X0E9ogXHVPUuGlTI+KAEYcz0+S3WBYsE
Mq65m0r8WlQrH2wHMX9+tF7dJqM0hYpyhkIn0QEINdmtcNMZe5HFHaq2/F2kP+4v
H85dWp023dlZQrHga6kzj+2gahYkjausN68gaIqy1atInsDm0Elzu1GeMkynnX49
KyqrWhplkeYwbQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:57 2025 by rpki-client