Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
File: L5INmRKzpyi5SBgYjvPj5X-NP5w.mft (raw, json)
Hash identifier: ohAW54U7MszpytL2wlm23xubB+IqOGnd26D43sRWC94=
Subject key identifier: A6:90:C8:05:BE:7A:A2:1D:FA:D8:43:AF:AA:41:34:3E:56:5A:92:03
Authority key identifier: 2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
Certificate issuer: /CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Certificate serial: 0199FAD7CB380690491FE3CE725C22995F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
Manifest number: 141D
Signing time: Sun 19 Oct 2025 05:01:10 +0000
Manifest this update: Sun 19 Oct 2025 05:01:10 +0000
Manifest next update: Mon 20 Oct 2025 05:01:10 +0000
Files and hashes: 1: L5INmRKzpyi5SBgYjvPj5X-NP5w.crl (hash: o1Vpb2rEhyXq+qvClPkCbu5hRW4LOQhomgyYeRFWy64=)
2: UHmcnjZPkdlcmPvf9kU9gEvRzu8.roa (hash: o/ZBiu0sM0QxdL8NohBvSpb6XFjAawutUac+NbV8PeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:cb:38:06:90:49:1f:e3:ce:72:5c:22:99:5f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Validity
Not Before: Oct 19 05:01:10 2025 GMT
Not After : Oct 20 05:01:10 2025 GMT
Subject: CN=a690c805be7aa21dfad843afaa41343e565a9203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:7e:5a:53:e5:33:97:0d:69:6e:55:6c:3b:
c6:4d:cb:0b:05:d2:5a:53:e5:27:66:0a:4e:44:a0:
8b:d7:e3:48:fa:f2:60:7d:de:35:34:82:36:05:a5:
7e:ab:9e:c1:64:a8:75:b4:d9:b0:16:99:ac:e1:ce:
28:d8:44:e2:86:8f:d5:91:88:ba:17:89:a2:40:02:
76:90:26:16:15:1e:aa:ec:ea:db:1e:2e:2c:c0:18:
cc:43:00:82:4f:41:8e:69:46:e9:f7:12:37:dd:12:
0e:ee:93:64:e4:70:f1:ca:e9:26:72:d9:90:89:b5:
f6:cd:2a:91:ec:9b:28:05:7e:f5:95:7e:b1:e8:51:
7d:fa:15:18:34:03:4d:1b:14:f1:60:cb:bf:06:75:
3c:20:6f:1d:34:b8:a4:fb:5b:8f:27:53:e4:55:07:
65:e0:62:e5:87:b9:ae:fc:80:29:37:99:2e:da:60:
86:5f:10:e9:d8:b9:8a:e8:bf:b0:b3:14:44:fe:1d:
98:24:18:98:bf:e7:df:52:74:c6:19:88:44:d7:fa:
50:7d:f6:ca:d2:14:28:5d:1d:44:a9:7b:69:4a:7b:
a1:0a:83:47:4c:06:f1:39:c5:32:b8:95:9d:7d:d9:
ab:76:73:fa:bc:9e:b8:d9:cd:1e:c0:7c:d5:ab:60:
04:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:90:C8:05:BE:7A:A2:1D:FA:D8:43:AF:AA:41:34:3E:56:5A:92:03
X509v3 Authority Key Identifier:
keyid:2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:81:96:ee:5b:73:4a:2a:69:9e:c1:d9:6d:69:92:53:ea:92:
89:ab:cc:71:a7:ee:0d:9f:ca:63:32:1d:21:6e:fd:b1:21:c0:
57:4d:f7:56:34:0d:74:ed:cf:d4:a8:42:7f:55:a3:53:e2:1e:
12:be:d0:b0:e1:05:9a:af:e1:d7:94:37:8a:c1:e5:03:cb:9d:
8e:3b:89:f4:80:9d:54:40:6e:16:79:5d:8c:c8:39:84:61:5e:
aa:cc:86:c2:86:e2:b8:b3:8c:a6:25:ea:f3:44:93:6c:47:66:
e0:8d:53:0b:32:ac:57:ce:54:07:63:ef:6d:c9:2f:88:92:e9:
7d:d5:06:4c:61:c2:3c:a8:b8:7d:13:3f:e7:99:39:5f:82:43:
61:6b:08:95:c6:d9:30:f3:16:e5:68:e6:6b:f5:ac:35:d6:97:
aa:b8:b4:87:4b:e3:07:2d:1b:0d:80:60:2f:c2:43:db:a5:6a:
4d:4b:46:18:78:d6:65:04:23:84:8d:1d:87:aa:4c:85:14:a2:
32:ad:93:19:f4:cd:b3:97:0f:4a:84:db:fb:a9:a3:b2:50:37:
99:a5:d6:25:20:1d:5d:3e:d8:a6:42:09:73:ac:bb:69:2c:a7:
67:a1:d2:5c:b4:06:0f:30:cd:61:71:a2:98:67:7d:46:7e:9c:
62:02:98:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:14 2025 by rpki-client