Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
File: L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json)
Hash identifier: ZA8OjxdXt16+WKMAXhAiFxRX6da19SCSYe9Y4mphk7k=
Subject key identifier: 13:04:A6:B7:8C:C9:02:AC:C0:7B:47:DC:E3:B2:EE:1F:15:98:8F:E2
Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
Certificate issuer: /CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Certificate serial: 0199FFFE4192DC519CAC9F921EA7C51F8F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
Manifest number: 0EF0
Signing time: Mon 20 Oct 2025 05:01:16 +0000
Manifest this update: Mon 20 Oct 2025 05:01:16 +0000
Manifest next update: Tue 21 Oct 2025 05:01:16 +0000
Files and hashes: 1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: lzqkYvqvelHmwvZAdd0/Rrpbr92dIu/K15c0pNLKYnY=)
2: vQoI-4y6Tfml573DLn2pCriBNl4.roa (hash: 3W+CArLvUD2GX28NdlGoBAxxfe8EMtX22dfil51a9Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:41:92:dc:51:9c:ac:9f:92:1e:a7:c5:1f:8f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Validity
Not Before: Oct 20 05:01:16 2025 GMT
Not After : Oct 21 05:01:16 2025 GMT
Subject: CN=1304a6b78cc902acc07b47dce3b2ee1f15988fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:aa:83:35:03:7d:cc:4b:c6:d3:3b:0e:27:75:
cb:b0:80:22:df:b5:7f:60:67:c6:82:86:ba:c3:97:
e0:8f:43:ec:41:1a:c4:0e:54:6e:15:8d:64:d4:0b:
c6:15:57:8d:65:d8:dd:7d:85:d4:1e:c3:7c:94:c4:
45:88:d5:d2:71:95:75:e9:18:ae:e5:79:14:d9:6d:
b7:4f:cc:36:92:5c:06:c5:9e:01:19:c2:92:f6:ff:
99:32:38:e4:0c:12:b0:e8:87:c5:50:86:a7:bb:f7:
03:3b:2a:22:69:b1:62:09:6a:44:89:0a:74:4e:ec:
f8:23:7a:28:86:b9:e8:b6:9d:69:14:5c:8b:d2:79:
a0:4c:58:20:73:84:99:c0:0d:aa:29:2b:d7:ea:36:
41:4b:dc:95:69:f0:a5:95:fb:7a:5b:69:35:90:4f:
5b:a7:b0:12:56:bb:bb:f8:f9:84:6d:72:28:ac:b6:
13:ef:ae:ed:dd:31:be:19:27:09:14:17:ef:2c:dd:
48:9b:85:a9:e2:18:57:b2:bc:35:8b:3b:c8:90:32:
2e:49:98:0f:4c:59:8b:eb:63:16:03:45:ee:60:d7:
ef:b4:cb:04:96:2a:e6:40:cf:db:de:56:26:9c:f1:
3a:ab:23:20:0c:05:67:7f:e5:73:b3:ee:d2:b2:8f:
d4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:04:A6:B7:8C:C9:02:AC:C0:7B:47:DC:E3:B2:EE:1F:15:98:8F:E2
X509v3 Authority Key Identifier:
keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3c:a8:76:f1:35:e4:ce:25:98:0c:b0:58:f5:3e:f7:cf:88:
3b:1e:8b:75:32:40:f9:81:fc:0f:29:d3:f9:57:e9:ee:ec:a6:
71:b2:c1:6e:78:66:c3:41:7b:cc:0b:50:62:d2:9c:6d:fd:08:
10:43:34:21:4b:7d:cb:8e:50:70:47:55:99:e2:79:c2:3a:fd:
e0:d3:c8:95:19:3b:d4:1c:4c:17:af:69:40:a1:c0:53:d0:b0:
bc:2f:ba:67:96:b0:38:1d:d9:a8:75:1d:df:b2:2a:5f:16:0f:
fd:48:05:5f:be:4e:41:48:b9:0f:f2:2d:54:0a:bb:6a:50:a4:
a4:f2:86:be:f3:3f:ee:b9:ea:ae:fc:05:73:9a:9b:2c:1a:40:
2a:49:7d:99:10:37:f4:49:35:6f:c8:26:51:59:d4:e7:b4:95:
b8:f6:e0:d8:73:6c:e0:88:36:0f:6f:b7:1d:54:c9:ae:be:b3:
1f:2c:13:de:ae:93:d3:78:5b:9e:17:c4:df:e1:ef:be:28:39:
10:66:4f:73:08:b4:92:94:83:83:a2:5e:11:c1:30:c7:76:2a:
31:8a:f1:6e:1f:08:70:64:40:10:51:9d:88:d2:51:59:06:ff:
04:64:4f:05:ca:e2:52:82:2f:1f:f0:6a:14:31:a0:21:f7:1b:
bd:9c:6d:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//kGS3FGcrJ+SHqfFH48sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmY2RiNTA1ZDFkYTEzNmQwMDllMjBlZjFiMzYzYjAyZTMz
MjUxOWYwHhcNMjUxMDIwMDUwMTE2WhcNMjUxMDIxMDUwMTE2WjAzMTEwLwYDVQQD
EygxMzA0YTZiNzhjYzkwMmFjYzA3YjQ3ZGNlM2IyZWUxZjE1OTg4ZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6qDNQN9zEvG0zsOJ3XLsIAi37V/
YGfGgoa6w5fgj0PsQRrEDlRuFY1k1AvGFVeNZdjdfYXUHsN8lMRFiNXScZV16Riu
5XkU2W23T8w2klwGxZ4BGcKS9v+ZMjjkDBKw6IfFUIanu/cDOyoiabFiCWpEiQp0
Tuz4I3oohrnotp1pFFyL0nmgTFggc4SZwA2qKSvX6jZBS9yVafCllft6W2k1kE9b
p7ASVru7+PmEbXIorLYT767t3TG+GScJFBfvLN1Im4Wp4hhXsrw1izvIkDIuSZgP
TFmL62MWA0XuYNfvtMsElirmQM/b3lYmnPE6qyMgDAVnf+Vzs+7Sso/UKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMEpreMyQKswHtH3OOy7h8VmI/iMB8GA1UdIwQY
MBaAFC/NtQXR2hNtAJ4g7xs2OwLjMlGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yYTRiZmUtNzY4OC00NmExLTlhZmYt
Y2ViMDcxMGEwNzUxLzEvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yYTRiZmUtNzY4OC00NmExLTlhZmYtY2ViMDcxMGEwNzUx
LzEvTDgyMUJkSGFFMjBBbmlEdkd6WTdBdU15VVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzyodvE1
5M4lmAywWPU+98+IOx6LdTJA+YH8DynT+Vfp7uymcbLBbnhmw0F7zAtQYtKcbf0I
EEM0IUt9y45QcEdVmeJ5wjr94NPIlRk71BxMF69pQKHAU9CwvC+6Z5awOB3ZqHUd
37IqXxYP/UgFX75OQUi5D/ItVAq7alCkpPKGvvM/7rnqrvwFc5qbLBpAKkl9mRA3
9Ek1b8gmUVnU57SVuPbg2HNs4Ig2D2+3HVTJrr6zHywT3q6T03hbnhfE3+Hvvig5
EGZPcwi0kpSDg6JeEcEwx3YqMYrxbh8IcGRAEFGdiNJRWQb/BGRPBcriUoIvH/Bq
FDGgIfcbvZxtiQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:55 2025 by rpki-client