Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
File: L6TocLw3rJcx_m_PloLrZX5QvKM.mft (raw, json)
Hash identifier: BKvE0511ah46cnpgQrzlxO/luwtDOzV2QrvnEm2bGQA=
Subject key identifier: 2F:0D:98:CD:30:B3:62:7E:01:02:0F:50:98:40:06:E6:FB:AD:24:C8
Authority key identifier: 2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
Certificate issuer: /CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Certificate serial: 0199FCFD3008CA9B135C1B24659627F4BA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
Manifest number: 1200
Signing time: Sun 19 Oct 2025 15:01:15 +0000
Manifest this update: Sun 19 Oct 2025 15:01:15 +0000
Manifest next update: Mon 20 Oct 2025 15:01:15 +0000
Files and hashes: 1: L6TocLw3rJcx_m_PloLrZX5QvKM.crl (hash: l4OvM/MsL3Qspkr7tXb0FNgMDx5BJ76+gJJwQZAkY1k=)
2: m7j41yWDEfLAx4I6fuINswAyiXA.roa (hash: dDqFpGebxjdBoXgviJqZBlxaNfM8q5rLJMGVfhQeHKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:30:08:ca:9b:13:5c:1b:24:65:96:27:f4:ba:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Validity
Not Before: Oct 19 15:01:15 2025 GMT
Not After : Oct 20 15:01:15 2025 GMT
Subject: CN=2f0d98cd30b3627e01020f50984006e6fbad24c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:56:03:b9:f7:d7:58:bb:14:98:ba:12:1c:
2d:5c:53:a1:b2:88:fe:83:40:7c:41:f9:e8:4a:20:
bc:d9:05:7a:57:43:83:a3:5b:fe:42:1d:f6:79:4a:
41:fe:56:b3:81:23:21:c9:11:34:43:eb:bc:e0:f0:
a9:52:e7:b8:53:b4:72:62:9f:44:53:12:f5:a2:02:
33:fc:8c:2e:6b:7b:8d:80:6a:82:ce:86:5e:b9:fa:
31:30:7c:5d:d6:c4:6c:a6:b5:ae:f6:5f:bc:bd:a3:
f0:dd:33:59:a7:77:c5:ee:d0:b5:d6:84:e8:85:60:
e3:39:3a:d4:6d:57:e8:c2:60:eb:5e:37:39:91:ef:
52:88:75:eb:ef:8d:f0:5b:84:d0:98:cf:88:84:af:
63:e3:ba:e6:2b:d7:f4:e1:94:f6:19:70:78:66:7e:
11:95:79:4c:65:f3:5a:11:0e:55:57:3e:b2:b5:22:
a4:ed:64:c7:e8:23:0f:40:8b:32:c8:8f:f0:6a:47:
da:ce:90:05:6e:aa:20:20:43:84:fc:63:e0:dd:59:
19:5e:6f:53:21:f3:ac:dc:5d:fc:bd:8a:22:e7:03:
92:d1:d2:29:72:72:a2:b1:c1:3b:38:20:16:99:3e:
17:15:e5:a2:3e:94:c0:52:54:46:61:4c:7e:75:83:
da:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0D:98:CD:30:B3:62:7E:01:02:0F:50:98:40:06:E6:FB:AD:24:C8
X509v3 Authority Key Identifier:
keyid:2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:aa:2f:23:74:b0:01:17:cb:e0:19:f7:22:6c:04:54:86:1a:
08:bc:8f:a5:fb:a7:eb:b2:97:c0:e8:63:d9:18:35:2b:bf:b0:
b6:2f:fd:60:af:fc:30:dd:0a:09:be:4e:a4:d7:21:60:83:36:
9c:85:ae:91:bd:61:6e:52:7a:5e:a5:ac:24:1c:1e:3a:9c:3a:
de:3e:16:20:97:a9:cc:b2:6b:f6:b7:e0:df:a8:2d:c1:6e:59:
0f:47:06:9a:e6:c6:c6:de:65:90:14:de:b6:59:b3:b6:c3:bc:
da:44:46:20:81:33:c5:b8:8b:2b:20:ef:58:31:17:5d:ae:f8:
cd:8f:3a:a4:be:68:87:2f:e6:d6:95:b8:14:b1:5b:13:cd:e1:
b3:85:e4:49:e9:9a:95:68:98:5b:8e:73:a5:68:97:a5:ca:af:
b2:8c:81:77:72:59:18:0d:14:eb:a7:98:96:19:e2:76:63:c8:
df:14:4d:8a:53:43:dd:35:bf:01:db:05:6f:c6:45:61:c2:c9:
bf:f5:c6:7f:2e:99:df:cf:8a:2e:bf:3e:01:ed:e9:88:f3:6d:
17:16:ef:93:76:92:2a:be:73:03:08:58:e5:1b:0d:e4:0b:f4:
6b:11:d4:5b:ef:cd:34:4c:2c:c5:f5:0d:31:80:e4:72:dc:a9:
e3:64:d7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:00 2025 by rpki-client