Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
File: L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft (raw, json)
Hash identifier: xwrD9PHs5w8u7IkLCLEQi8zjwGTizQECD6Yo78PTdsA=
Subject key identifier: CD:03:7F:E1:95:75:18:9E:DF:3F:EF:90:1E:16:01:30:6A:C7:DD:3C
Authority key identifier: 2F:9C:C6:A3:F4:C2:38:19:30:BA:8D:1A:F0:D9:5A:BE:C0:96:81:E4
Certificate issuer: /CN=2f9cc6a3f4c2381930ba8d1af0d95abec09681e4
Certificate serial: 0199FDD97F28C312F1B6CA2F40AFC4A36CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:01:53 +0000
Manifest this update: Sun 19 Oct 2025 19:01:53 +0000
Manifest next update: Mon 20 Oct 2025 19:01:53 +0000
Files and hashes: 1: L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl (hash: a08J5/vcNDadYkI1quDNJ/4bzPVDIAa4VLphcQsr6Gs=)
2: TYDdD2uxFpvnn7BeeyNRIhrYOWU.roa (hash: aAKeZOkxG98jWI5WqK0AaKLmvqEXTtJ8l1136XOUFDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:7f:28:c3:12:f1:b6:ca:2f:40:af:c4:a3:6c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f9cc6a3f4c2381930ba8d1af0d95abec09681e4
Validity
Not Before: Oct 19 19:01:53 2025 GMT
Not After : Oct 20 19:01:53 2025 GMT
Subject: CN=cd037fe19575189edf3fef901e1601306ac7dd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e8:c0:70:60:59:0b:df:64:0d:be:30:62:b5:
3e:6f:70:7f:60:08:22:3f:e2:30:b3:26:60:3c:a9:
1b:24:8e:99:32:1e:ab:0f:5d:0f:90:6e:0e:f8:b1:
80:f7:7e:6b:da:de:a5:6a:d1:db:70:8d:72:12:8d:
62:ec:f8:ba:86:3f:af:0a:65:a9:10:37:5d:ba:1a:
e4:06:e3:40:d3:f7:17:44:9d:81:e1:5d:33:bb:75:
ac:44:b2:94:e1:99:a9:46:d9:15:a3:4f:0e:1c:ef:
b3:ee:cd:e6:87:20:7a:d4:c3:54:96:7b:bb:68:98:
96:46:ad:32:72:a0:60:94:2f:81:1c:4f:df:2d:d2:
8d:78:76:37:ef:6c:88:5b:e7:ee:cb:fd:a8:d6:8e:
3c:5c:b7:ca:96:f5:7f:e2:95:c1:a3:c8:7c:de:e9:
47:4b:1e:c7:bf:17:21:0d:d7:c8:2f:e7:01:ba:0c:
b1:f2:a3:0d:ef:ba:4d:a1:4e:3a:69:33:24:d6:d8:
7a:2f:d1:ca:64:1e:ae:c7:2f:76:c0:55:b4:49:69:
49:39:e8:50:89:c1:8a:a2:7b:e5:2b:4b:64:59:5d:
29:76:90:44:6c:df:39:0e:50:76:bd:8b:24:23:64:
5d:a2:f6:90:dc:b6:9c:81:a1:22:a4:b9:b5:f7:07:
b1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:03:7F:E1:95:75:18:9E:DF:3F:EF:90:1E:16:01:30:6A:C7:DD:3C
X509v3 Authority Key Identifier:
keyid:2F:9C:C6:A3:F4:C2:38:19:30:BA:8D:1A:F0:D9:5A:BE:C0:96:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:38:a1:49:31:8e:fa:ea:bc:e2:89:a7:84:97:d0:f8:a9:1b:
bf:4b:dd:a8:f7:fd:fb:0b:fe:9e:06:26:d6:24:fe:3b:51:45:
f9:34:56:d1:77:c7:28:69:e0:45:31:73:d4:53:a2:80:6f:12:
d3:56:54:01:17:a2:54:4b:e4:38:46:63:e1:4c:d9:48:5e:33:
d6:16:4f:6c:f4:1f:3c:74:39:96:c9:b9:15:c5:95:4e:ca:ac:
71:e9:61:35:39:eb:37:97:c2:3d:d2:e4:75:94:3d:5c:11:ea:
8c:12:bb:b1:38:a3:a8:2c:54:a8:19:51:59:91:5b:89:a9:bc:
e8:0e:25:ac:13:23:da:3c:6b:ef:d8:23:71:b3:de:0d:3c:67:
8b:b8:e3:27:a2:b3:ba:af:07:cb:67:cd:7e:e8:91:f2:5b:8b:
fc:f3:5b:d5:58:be:d3:c3:5f:7a:17:47:ca:9b:1a:39:5d:d2:
32:c7:ee:5c:28:15:a7:be:25:b7:c2:e6:30:eb:5d:f5:b5:05:
62:0e:96:45:9a:0a:21:a1:57:46:a9:95:3b:86:cc:b4:3b:ca:
53:c0:0c:24:a3:5e:4c:ed:e0:06:0c:a1:a5:f1:74:8c:44:27:
01:1b:bd:4e:ee:3b:92:f4:02:35:11:b4:7a:ef:b4:fc:f1:50:
53:15:3b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:05 2025 by rpki-client