Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
File: L72QjQxb06rPUoDdgeogOCzZeOo.mft (raw, json)
Hash identifier: T3rIznZtPNDh5r+Xd3pmaxzQ+V7ayXpONSS1StMriqo=
Subject key identifier: 66:1D:4C:24:B2:50:30:29:D3:AA:BE:56:92:F2:D5:FE:57:56:3E:6A
Authority key identifier: 2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA
Certificate issuer: /CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea
Certificate serial: 0199FD34351E3AA9224633F33E6CD929DD97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
Manifest number: DE
Signing time: Sun 19 Oct 2025 16:01:20 +0000
Manifest this update: Sun 19 Oct 2025 16:01:20 +0000
Manifest next update: Mon 20 Oct 2025 16:01:20 +0000
Files and hashes: 1: 8DPJokshklZiZ-Wg3NyoXUsggCo.roa (hash: saLQlFoD5jr+b8OXd/uC1s8XxDV1hFFRgD40BfF/jSg=)
2: L72QjQxb06rPUoDdgeogOCzZeOo.crl (hash: q0T+fSiu15kWoMaHEPd0q9IHU/BExY7N0S5A8lE4WBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:35:1e:3a:a9:22:46:33:f3:3e:6c:d9:29:dd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea
Validity
Not Before: Oct 19 16:01:20 2025 GMT
Not After : Oct 20 16:01:20 2025 GMT
Subject: CN=661d4c24b2503029d3aabe5692f2d5fe57563e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:09:99:0f:0e:20:94:b9:88:b5:78:8e:ad:
ef:06:b7:77:d6:f3:28:7e:fd:fb:f7:56:2c:07:be:
5e:87:cd:98:2d:b0:5f:97:6b:7d:6e:aa:da:c1:40:
df:2a:b6:44:1b:77:73:d0:cb:7b:ea:b2:f3:6d:7a:
95:70:98:cb:7b:56:74:8c:12:eb:e6:95:a4:e4:51:
99:ec:0d:e7:d2:de:3a:c5:2a:7a:cb:6f:65:35:58:
0c:04:1f:d0:52:d8:4c:83:73:4c:66:fd:99:7b:2e:
af:fa:8e:83:aa:d3:f3:89:ec:b1:15:39:33:ab:b0:
fe:e9:e5:80:92:b6:43:10:8f:02:8a:43:43:72:7d:
20:5b:d0:a1:6c:f8:85:9f:20:6d:7e:cb:94:d9:93:
95:57:9f:8a:f1:e1:c2:98:e1:f2:ae:74:ce:75:05:
7e:85:b3:28:ee:39:4f:17:63:07:1a:fe:94:cc:a1:
94:4b:e2:58:f0:a6:3f:03:59:c1:94:4d:58:38:58:
d3:3c:0f:00:ab:b7:78:1b:d5:d0:b5:3f:a1:82:53:
8d:fe:68:82:91:dd:d8:00:41:86:fe:fe:6c:04:38:
27:e1:87:85:f4:f9:6b:58:90:6a:d2:86:c2:98:b6:
54:9e:a1:41:b2:03:4c:c0:02:c7:37:4a:37:4e:05:
58:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1D:4C:24:B2:50:30:29:D3:AA:BE:56:92:F2:D5:FE:57:56:3E:6A
X509v3 Authority Key Identifier:
keyid:2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:93:a9:33:a7:e2:26:e4:d6:40:ee:1d:74:fb:c0:df:c2:f7:
f5:66:8e:af:f0:e0:7b:05:a2:14:f0:5c:ec:a0:12:28:03:a5:
a1:86:58:75:1b:ca:f3:4d:b6:0c:de:27:d4:d3:5f:60:c7:33:
b5:27:49:45:14:64:77:da:b2:ad:cd:dd:de:2f:42:b0:7b:fa:
eb:14:cf:cc:45:7a:ff:11:31:de:56:b7:66:d2:53:c0:0e:b9:
c9:c5:41:e5:a8:58:05:6d:82:c2:f3:e5:30:94:4d:15:54:f6:
09:d1:6e:c9:1e:49:76:3e:26:fd:b1:9c:dd:4f:f2:19:1b:5a:
ac:6a:9d:2d:70:33:28:5d:f2:01:6d:93:ec:50:d9:1e:47:1c:
b0:f4:0c:27:be:eb:36:72:f7:d1:77:e1:ca:b8:b7:ad:f1:f3:
ba:eb:84:3f:30:55:0c:3c:bc:b1:69:a6:e5:4c:10:15:4b:6a:
42:d8:54:32:f5:c3:72:82:82:84:8b:05:82:e0:6c:02:5f:69:
d0:55:ee:49:90:6b:6f:be:fa:78:d7:6b:e7:7a:c9:6f:32:3f:
fd:9f:58:89:22:3b:71:0b:4a:91:ca:b0:71:f5:0c:8e:55:fc:
65:8d:29:71:28:55:6d:57:0f:ab:a3:ab:11:a8:12:ed:b1:f3:
ce:35:17:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:00:50 2025 by rpki-client