Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
File: L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json)
Hash identifier: afCH4wGTNly8WLrXhsQLULPI/i54rSd1fKP9W+KaUgo=
Subject key identifier: 2F:59:7D:ED:13:27:00:AB:81:E2:27:BF:69:27:49:77:D5:B9:FD:D0
Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
Certificate issuer: /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Certificate serial: 0199FBEB8240531AB45AA1164F9E512800A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
Manifest number: 063F
Signing time: Sun 19 Oct 2025 10:02:19 +0000
Manifest this update: Sun 19 Oct 2025 10:02:19 +0000
Manifest next update: Mon 20 Oct 2025 10:02:19 +0000
Files and hashes: 1: JnNHu3mBlI4S34lBG5gMe1SKldU.roa (hash: kmsxUGCHTVtHjCmc68XKFbTUU312Q88Sy/CYV55BiQs=)
2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: 016WljWwJK5EJ6aY0yA97OaJEvUEX5TjECAs7suz978=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:82:40:53:1a:b4:5a:a1:16:4f:9e:51:28:00:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Validity
Not Before: Oct 19 10:02:19 2025 GMT
Not After : Oct 20 10:02:19 2025 GMT
Subject: CN=2f597ded132700ab81e227bf69274977d5b9fdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:47:af:cc:09:7f:2c:2e:b2:2c:a6:6b:d7:
80:4c:78:a6:6c:41:2d:6a:c5:79:6a:41:fe:1b:99:
c2:a5:3d:05:f9:d9:d3:b0:53:3e:d2:e7:69:11:d6:
be:6f:c2:9f:b0:a9:da:0a:21:3c:71:64:39:c6:ab:
88:bf:04:60:60:f5:d5:de:4f:92:bd:b6:5d:ae:36:
fe:d9:20:82:81:19:33:0f:3a:b8:fc:fc:6f:24:75:
72:02:02:84:c6:62:2b:c0:cb:f1:d7:eb:8f:40:fc:
51:41:17:7a:b0:47:e6:84:42:3c:55:c7:2e:51:8d:
2d:df:9a:a4:9e:61:00:a9:33:7d:ad:45:b8:6a:7c:
c7:79:cb:75:23:c9:c5:00:95:7e:f0:41:1e:f8:ac:
3c:7a:00:52:2d:ce:0c:a0:50:8d:53:78:16:22:37:
4f:52:6c:58:bb:2e:52:22:27:02:ab:93:d2:60:91:
ae:4a:4a:ba:f0:b4:78:58:06:85:df:6a:3e:eb:28:
36:25:85:98:8d:e6:e0:cf:6b:95:00:1f:60:7d:40:
87:16:94:b1:5c:f8:f9:66:c9:f6:63:cc:30:0b:6f:
21:72:99:a9:7d:ce:99:97:f4:a9:2a:ef:7c:1e:69:
44:a3:98:08:0d:f7:f4:8d:ed:7c:b6:3b:df:ad:24:
93:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:59:7D:ED:13:27:00:AB:81:E2:27:BF:69:27:49:77:D5:B9:FD:D0
X509v3 Authority Key Identifier:
keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b2:56:10:ff:9d:b2:f0:a3:89:e3:61:54:75:09:b5:95:35:
6b:5e:c7:e0:38:20:b6:d1:88:89:1a:2a:f1:28:08:49:3c:81:
c1:0b:ae:3b:1a:df:95:7b:ee:a4:25:83:8c:37:18:4d:6c:27:
7b:c2:8c:01:6b:ec:e4:23:fc:35:b2:ae:48:6d:d7:59:da:12:
9f:d0:89:36:3b:85:8f:a0:01:6a:47:e1:a3:c9:47:bd:a3:5f:
bc:74:1f:27:25:e3:b1:c8:f2:b3:21:79:ad:00:e8:d5:0f:41:
ea:22:30:f8:7c:7b:c9:7d:f9:e8:d1:43:29:0a:ae:88:03:8d:
b3:3f:f2:b9:50:89:3f:63:98:92:fe:fd:08:ff:7b:33:10:9a:
8e:19:e5:f1:85:f0:8f:37:57:1d:4a:0d:26:03:99:72:a5:fe:
fc:f5:46:41:f0:9c:b0:bf:4b:c7:64:66:7a:f9:ce:5a:78:77:
31:d1:fa:79:af:70:14:36:12:64:ee:2b:63:67:a6:95:7c:8d:
0a:1d:11:76:0c:8b:4f:00:c7:e7:8a:1b:5f:04:e2:c8:de:01:
73:88:98:19:9c:99:c6:17:83:df:31:60:95:ab:59:07:9b:fd:
ca:b1:38:8f:4d:e5:46:54:26:9d:8d:21:a9:bd:51:04:04:7f:
11:92:ea:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:58 2025 by rpki-client