Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
File: L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft (raw, json)
Hash identifier: xcKKRNudQWaQMciiCHQjY02a5nuhHVKx19/7m1N1Azs=
Subject key identifier: 19:63:63:EE:A7:1F:19:64:76:D1:5F:48:EF:B2:9B:25:27:C4:3A:C8
Authority key identifier: 2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
Certificate issuer: /CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Certificate serial: 0199FE1012E074DBFD3C9AC4470A3391DC1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
Manifest number: 13E3
Signing time: Sun 19 Oct 2025 20:01:30 +0000
Manifest this update: Sun 19 Oct 2025 20:01:30 +0000
Manifest next update: Mon 20 Oct 2025 20:01:30 +0000
Files and hashes: 1: EOklS1jQhodfalq3XsKaGavo1eQ.roa (hash: 6pvw71E3U09DjHAZOtzmEdbNxf9UgqaL8hPYZIda5pc=)
2: L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl (hash: apSxifBeO+61VkgM2wvkObXCqT2CnuvTHznqtGGx6MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:12:e0:74:db:fd:3c:9a:c4:47:0a:33:91:dc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Validity
Not Before: Oct 19 20:01:30 2025 GMT
Not After : Oct 20 20:01:30 2025 GMT
Subject: CN=196363eea71f196476d15f48efb29b2527c43ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:91:f7:cd:89:82:8d:69:81:c1:23:69:b1:73:
67:9a:21:20:b0:c9:5d:5f:27:97:4d:bd:40:27:da:
ff:f0:25:ad:1b:cd:46:4b:70:75:cd:ea:b7:6f:a2:
da:b7:af:43:a0:a3:df:b1:91:cc:4c:7e:74:7f:4f:
80:85:85:15:01:96:96:06:70:2e:2d:e2:08:40:44:
47:d2:8c:33:bc:99:70:2f:c7:33:64:b3:97:51:07:
11:9c:1b:f5:bf:e5:a0:26:23:44:a7:ac:a0:b0:bf:
2c:52:60:d8:d8:b2:84:11:1a:64:fa:c3:c3:5a:e3:
20:2e:a5:01:af:a7:64:18:f6:b8:37:f5:28:4b:43:
2f:66:4e:e2:58:39:52:ca:3f:ce:56:31:70:29:9c:
c5:d3:d3:3e:ef:4e:a2:e5:d0:00:03:73:68:dd:e2:
92:eb:51:29:09:fc:64:bf:7d:5d:5f:77:a5:93:41:
25:55:da:71:53:45:1f:18:bd:6e:0b:b4:b3:af:85:
af:ee:b5:25:7b:c9:82:cb:d7:21:02:2b:fe:da:f6:
59:d0:4f:58:1a:ba:b9:78:7d:3b:7b:5d:83:59:f2:
4f:10:0f:db:40:c6:44:95:75:dd:70:7a:27:6b:5c:
e9:c0:d1:76:13:86:d7:68:de:dc:3d:c8:fa:fb:7f:
9a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:63:63:EE:A7:1F:19:64:76:D1:5F:48:EF:B2:9B:25:27:C4:3A:C8
X509v3 Authority Key Identifier:
keyid:2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:52:4d:3c:87:8a:8a:76:7e:36:c8:ee:0a:4b:f1:3c:a4:d1:
a6:c2:40:e0:27:80:b9:cf:bc:f1:29:39:bd:74:36:8a:f6:ab:
19:76:ae:97:35:93:41:68:b4:14:28:18:df:99:83:a1:e2:b9:
07:3b:33:af:72:95:c4:e0:13:c4:e4:37:a5:4d:a1:3a:09:4e:
12:d9:27:37:37:5e:05:c0:9c:db:10:9a:1b:bd:bf:8f:c5:67:
4f:8d:9c:6a:d8:76:17:76:7b:d2:b8:22:79:10:af:bd:02:83:
10:46:dd:d3:a2:38:ed:70:00:f5:bb:01:d0:0e:f5:a1:55:44:
86:4a:76:32:6f:48:2d:9a:1c:c9:c2:09:9e:6d:1f:6c:9a:74:
4f:46:0b:14:31:8e:3d:6b:ea:62:21:ff:01:18:f6:77:33:dd:
93:9f:4e:03:41:53:56:52:63:2b:16:43:37:c4:ce:2c:59:b3:
6b:a2:7a:40:5c:1a:ac:85:42:0e:8a:1a:56:d9:29:8d:e1:30:
ea:a6:a7:1e:5f:9f:f4:8e:e1:7e:9b:a0:18:78:42:f6:7d:63:
d5:ec:a1:ac:7d:66:f1:8f:1d:91:79:96:ae:1f:86:0e:81:56:
36:56:d3:86:59:72:4e:11:15:70:d5:c9:e7:e4:09:d0:6c:6a:
41:a8:5c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:30 2025 by rpki-client