
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
File: L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft (raw, json)
Hash identifier: jQFW0SS99sNa76+u5/9pyS3VQr68QiULMTmtJJnY8jY=
Subject key identifier: 21:04:32:C0:B2:0C:D1:A6:19:10:69:CC:69:A4:CE:9C:38:F1:23:D6
Authority key identifier: 2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46
Certificate issuer: /CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046
Certificate serial: 0199FFC78A7BDEE5B2671A3962AB3BB72546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
Manifest number: 1350
Signing time: Mon 20 Oct 2025 04:01:31 +0000
Manifest this update: Mon 20 Oct 2025 04:01:31 +0000
Manifest next update: Tue 21 Oct 2025 04:01:31 +0000
Files and hashes: 1: L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl (hash: aU/9caIoBNUl28rE5T3XHZRHsOguMkqyLomIzj0lByo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:8a:7b:de:e5:b2:67:1a:39:62:ab:3b:b7:25:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046
Validity
Not Before: Oct 20 04:01:31 2025 GMT
Not After : Oct 21 04:01:31 2025 GMT
Subject: CN=210432c0b20cd1a6191069cc69a4ce9c38f123d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:1d:71:6e:32:e7:c3:96:e2:b2:fd:09:bf:
85:58:97:eb:f9:a1:08:65:ef:ef:a6:76:6e:b0:ea:
55:18:1c:48:26:55:03:c3:ba:ff:b6:65:93:c1:c8:
a1:21:28:f1:09:3f:0e:e1:75:41:47:16:69:fe:02:
1b:e7:b9:02:cc:a7:48:5f:f9:4e:3f:8e:b3:7c:74:
19:be:97:85:d4:18:31:f5:cf:30:4a:04:a5:95:fb:
e0:d8:78:0f:12:f0:3c:10:e5:f4:b0:eb:c5:c8:37:
ea:53:9c:f7:4f:72:88:e6:b4:ee:24:30:7c:2d:d1:
62:59:09:ca:43:81:e7:23:35:82:4b:40:27:65:cb:
e7:00:eb:1f:29:d4:d1:eb:45:f1:77:5e:9e:ed:ac:
b4:27:2a:c0:45:7f:48:9d:53:9c:44:1f:ca:6f:8e:
1a:04:64:9d:0b:52:b9:2b:db:3e:03:ad:a9:18:b8:
4d:fe:f5:64:25:e5:f6:63:81:12:7e:12:8d:bd:0c:
5f:44:c3:41:89:a0:1c:96:b5:9c:42:cb:09:86:0f:
c2:71:be:95:ac:23:43:14:37:71:01:5a:1d:3b:16:
5e:d3:0f:28:97:00:ed:41:ee:b5:3b:7c:f2:ea:a9:
21:0f:40:33:57:e5:7c:19:1c:7d:81:2d:18:0e:24:
bf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:04:32:C0:B2:0C:D1:A6:19:10:69:CC:69:A4:CE:9C:38:F1:23:D6
X509v3 Authority Key Identifier:
keyid:2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d4:ec:5e:60:ce:54:c7:0e:05:4b:ed:43:84:fb:19:71:99:
d6:b0:77:49:dd:ec:ed:0b:bb:14:2b:41:05:34:e2:17:7a:1f:
95:1f:08:7d:13:4d:bd:11:ec:32:0b:a4:dc:5f:b5:4a:73:57:
48:de:d0:c0:a3:e9:58:8d:0b:25:8c:30:ab:a0:ec:e1:2d:4e:
f7:25:02:e0:24:c2:a4:ea:7d:0c:73:59:f3:ef:11:12:cb:8c:
7c:6f:66:90:e7:97:a0:cf:e8:e3:61:c6:33:31:f5:e4:df:67:
4c:2b:ed:36:18:f7:0d:24:92:5b:28:22:b4:62:27:85:1b:3b:
3d:84:af:b3:ae:bc:66:e9:68:98:6e:7b:04:77:bb:43:df:31:
09:65:be:10:59:13:43:31:42:7e:6c:6b:42:b9:57:3c:74:36:
3a:17:f7:c8:8a:e7:fb:19:88:ff:c6:bd:91:63:9a:30:8b:5e:
2f:43:7d:3e:04:18:95:aa:df:03:37:9b:88:51:11:ec:71:1d:
53:68:52:e6:9f:9a:43:3d:a1:5f:2c:74:64:ea:5d:23:80:c3:
6e:90:56:21:f0:41:4f:3a:79:3d:38:54:9f:45:f0:4b:82:3d:
be:e4:2d:10:8b:01:46:bd:ca:b5:1a:5c:d6:b3:7d:99:32:53:
81:8c:73:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x4p73uWyZxo5Yqs7tyVGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZWMxMGQwMDg4YjJkZGI4YTRkMTUxNWJmMDZiNGMwMDEy
YWUwNDYwHhcNMjUxMDIwMDQwMTMxWhcNMjUxMDIxMDQwMTMxWjAzMTEwLwYDVQQD
EygyMTA0MzJjMGIyMGNkMWE2MTkxMDY5Y2M2OWE0Y2U5YzM4ZjEyM2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7IdcW4y58OW4rL9Cb+FWJfr+aEI
Ze/vpnZusOpVGBxIJlUDw7r/tmWTwcihISjxCT8O4XVBRxZp/gIb57kCzKdIX/lO
P46zfHQZvpeF1Bgx9c8wSgSllfvg2HgPEvA8EOX0sOvFyDfqU5z3T3KI5rTuJDB8
LdFiWQnKQ4HnIzWCS0AnZcvnAOsfKdTR60Xxd16e7ay0JyrARX9InVOcRB/Kb44a
BGSdC1K5K9s+A62pGLhN/vVkJeX2Y4ESfhKNvQxfRMNBiaAclrWcQssJhg/Ccb6V
rCNDFDdxAVodOxZe0w8olwDtQe61O3zy6qkhD0AzV+V8GRx9gS0YDiS/QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEEMsCyDNGmGRBpzGmkzpw48SPWMB8GA1UdIwQY
MBaAFC/sENAIiy3bik0VFb8GtMABKuBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTC13UTBBaUxMZHVLVFJVVnZ3YTB3QUVxNEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC81MWE0NzUtNmQ2YS00NjQwLTkyYTUt
NTczY2NmNTllNjg4LzEvTC13UTBBaUxMZHVLVFJVVnZ3YTB3QUVxNEVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC81MWE0NzUtNmQ2YS00NjQwLTkyYTUtNTczY2NmNTllNjg4
LzEvTC13UTBBaUxMZHVLVFJVVnZ3YTB3QUVxNEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNTsXmDO
VMcOBUvtQ4T7GXGZ1rB3Sd3s7Qu7FCtBBTTiF3oflR8IfRNNvRHsMguk3F+1SnNX
SN7QwKPpWI0LJYwwq6Ds4S1O9yUC4CTCpOp9DHNZ8+8REsuMfG9mkOeXoM/o42HG
MzH15N9nTCvtNhj3DSSSWygitGInhRs7PYSvs668ZulomG57BHe7Q98xCWW+EFkT
QzFCfmxrQrlXPHQ2Ohf3yIrn+xmI/8a9kWOaMIteL0N9PgQYlarfAzebiFER7HEd
U2hS5p+aQz2hXyx0ZOpdI4DDbpBWIfBBTzp5PThUn0XwS4I9vuQtEIsBRr3KtRpc
1rN9mTJTgYxzog==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:29:57 2025 by rpki-client