Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
File: L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft (raw, json)
Hash identifier: gucPFGhGtI2meuQC/fUc8SxOZZ+ABaGtaMg623m+SWg=
Subject key identifier: 48:A2:E8:54:7B:D5:2A:30:76:7C:3A:B4:43:04:73:A7:04:68:0A:08
Authority key identifier: 2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4
Certificate issuer: /CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4
Certificate serial: 019A01B5031FB1B24DC4B7F8AE81C5A0F30E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 13:00:31 +0000
Manifest this update: Mon 20 Oct 2025 13:00:31 +0000
Manifest next update: Tue 21 Oct 2025 13:00:31 +0000
Files and hashes: 1: L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl (hash: q5FWMjDCL71EyKnni5glJ0D5+lYUE24t7hwYYqCzu5I=)
2: X4PWvygxBdxI2bPS7qTomVF09pI.roa (hash: 2E6tFW6VfoZTEjVF3J8CP/Q2ZVMLRzmKJIsn7Czdp0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:03:1f:b1:b2:4d:c4:b7:f8:ae:81:c5:a0:f3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe17bf80ee1e2e70db3ea05dc16f304e7090cf4
Validity
Not Before: Oct 20 13:00:31 2025 GMT
Not After : Oct 21 13:00:31 2025 GMT
Subject: CN=48a2e8547bd52a30767c3ab4430473a704680a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1a:33:09:3d:8b:ee:c0:49:1c:e5:bb:9e:4b:
2b:c6:f0:1f:06:56:cc:9a:4f:63:e5:0f:4a:9f:29:
6e:3d:d9:3d:30:07:89:34:38:e4:c8:bd:c2:2e:c9:
58:46:46:7f:63:1a:16:ad:73:64:82:fb:a2:14:40:
73:f9:fd:98:dd:87:11:ab:b1:5e:56:fb:7c:a4:f1:
b9:38:19:0d:32:bb:e5:0f:37:cf:ac:11:00:87:ed:
4c:5f:90:71:db:94:b9:5a:8d:c1:a3:07:3b:99:09:
f2:a7:af:09:30:fd:8f:94:d3:8a:4b:50:e4:25:dc:
b1:84:83:e7:7c:c4:ee:c0:a5:68:b7:43:e3:50:c2:
00:1f:0b:9e:24:53:38:90:05:bb:9c:70:c7:8b:e3:
d8:c3:0e:a5:21:85:d4:a4:4f:6e:75:d9:db:9c:77:
a5:ae:f7:de:aa:70:55:e4:42:cb:ab:39:78:19:05:
4e:f1:83:ae:a4:98:3d:78:38:8c:cd:8e:af:8e:c5:
7f:5d:cb:36:5a:2c:e2:79:51:b8:57:c9:96:48:53:
a1:45:c4:21:79:b3:d6:0d:e9:96:9b:22:a7:33:c0:
10:89:72:c7:95:d0:87:ce:ea:90:fe:af:bc:8d:59:
e7:12:2b:fa:c9:c3:15:d1:8d:91:98:15:f8:5b:a3:
41:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A2:E8:54:7B:D5:2A:30:76:7C:3A:B4:43:04:73:A7:04:68:0A:08
X509v3 Authority Key Identifier:
keyid:2F:E1:7B:F8:0E:E1:E2:E7:0D:B3:EA:05:DC:16:F3:04:E7:09:0C:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5c4a71-b38a-4eb4-8633-24b3572a83bb/1/L-F7-A7h4ucNs-oF3BbzBOcJDPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e4:53:7d:ac:df:94:79:06:2d:da:5e:12:e8:18:5c:f3:db:
5f:cc:a5:b9:7f:dc:2e:be:2c:4f:8b:5e:67:d1:25:60:a7:54:
8b:27:c8:85:44:4f:4a:d2:a9:b9:9b:96:b7:7a:41:1e:3a:04:
e0:15:fd:27:71:35:9c:f2:d3:18:ef:5d:9d:92:9d:c6:70:a0:
fb:0f:1c:a5:57:53:47:72:08:f0:46:e5:99:06:29:f5:ea:84:
e8:2f:b6:9e:1d:b1:d2:e9:61:68:2f:41:6d:68:bc:0b:99:1e:
91:00:81:ea:d1:8a:56:fa:25:48:e0:7b:bb:06:e0:e5:07:b3:
70:90:a4:56:cf:cf:af:88:88:eb:7b:47:2c:b6:01:48:79:ee:
66:93:d2:f8:41:cd:44:c6:27:de:e1:92:eb:16:2b:fd:5e:05:
49:4d:2c:48:0d:59:cf:a8:1e:b9:98:16:2b:9f:ac:f0:fb:10:
13:db:f6:13:4d:f4:dc:60:1e:55:b0:9c:cb:e9:6e:3b:bb:78:
90:e1:53:cf:24:62:fa:da:27:b1:6d:3f:c0:c6:cf:68:cf:ef:
81:5b:9e:55:45:de:4b:1d:dd:fc:21:8e:fb:0c:ba:16:35:dc:
66:bb:5e:be:82:3c:67:2a:2d:71:99:73:46:82:6b:5d:3c:3e:
9b:40:a6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:27:02 2025 by rpki-client