Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
File: L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json)
Hash identifier: 7BcO9+F8evyDsQ9MCAdvBnh+4yKqcLwpehNwWHn8mKA=
Subject key identifier: A9:88:49:BF:D2:C8:E9:22:34:DB:91:69:04:D6:1E:EB:DB:14:FD:9D
Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
Certificate issuer: /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Certificate serial: 019A228983A902B54B79BDEF6F7C7EC661E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
Manifest number: 0653
Signing time: Sun 26 Oct 2025 22:00:28 +0000
Manifest this update: Sun 26 Oct 2025 22:00:28 +0000
Manifest next update: Mon 27 Oct 2025 22:00:28 +0000
Files and hashes: 1: JnNHu3mBlI4S34lBG5gMe1SKldU.roa (hash: kmsxUGCHTVtHjCmc68XKFbTUU312Q88Sy/CYV55BiQs=)
2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: xBRQUouUv5s0jh5qzZKp0oROpE4XE+HNWx5TELshgys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:83:a9:02:b5:4b:79:bd:ef:6f:7c:7e:c6:61:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Validity
Not Before: Oct 26 22:00:28 2025 GMT
Not After : Oct 27 22:00:28 2025 GMT
Subject: CN=a98849bfd2c8e92234db916904d61eebdb14fd9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:a3:1f:45:89:b4:f8:77:78:e4:79:ec:c5:
e7:16:ad:86:78:8f:29:64:9f:43:34:d6:9e:0b:13:
30:95:67:e8:55:c8:bd:38:2a:2a:ac:e5:df:2e:ec:
c7:4e:e4:78:5e:1c:2f:d4:bb:ff:91:3e:9b:69:86:
c0:95:d2:c7:fd:c8:5e:23:5c:6a:6f:1a:08:80:7d:
6d:e0:e2:97:16:e4:de:4e:23:f5:02:4e:19:12:7b:
5e:a4:b5:25:c8:28:a4:da:0d:6f:99:43:a8:ab:d7:
9c:9d:f8:91:25:ba:33:2d:65:17:ff:d7:3b:f4:46:
66:ca:d4:87:ef:3c:17:29:4f:9d:b8:a9:45:2b:4d:
35:a5:3e:30:1d:ff:0c:81:3d:74:0b:26:6b:f2:61:
8e:de:b1:4e:8b:6f:b6:7e:88:70:33:29:4a:54:e3:
fe:77:54:6d:ae:22:20:e2:92:b0:74:d1:a1:c3:54:
26:8c:e6:6d:3c:f6:79:81:9e:32:c2:a8:34:18:c3:
dc:8f:c4:73:6b:3e:c1:cd:b9:fe:cd:45:20:a3:d3:
96:8c:ad:83:cb:e7:1b:ef:b0:f8:89:43:ce:6a:6a:
f8:ee:51:83:87:c9:5c:6b:e8:ba:1c:a0:fa:d1:d2:
37:d3:22:eb:e2:40:f5:bd:64:93:32:f2:43:e6:89:
d0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:88:49:BF:D2:C8:E9:22:34:DB:91:69:04:D6:1E:EB:DB:14:FD:9D
X509v3 Authority Key Identifier:
keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:f6:37:41:62:00:44:2a:d4:ea:79:c8:1d:70:12:1c:44:e6:
54:38:70:8a:a6:e4:78:e6:4c:e9:d2:c7:79:81:cf:ab:00:c8:
18:ea:36:24:7d:1b:f1:9f:d3:59:81:ef:0b:8f:96:35:c4:e1:
2f:dc:dd:1e:66:6c:11:c1:b3:29:b3:ea:0a:da:43:2d:0e:cd:
58:32:be:b8:5c:cb:a0:53:6d:93:6a:45:08:6e:b7:6c:b7:40:
cc:5f:d7:22:93:10:22:4d:d9:6c:3b:83:a8:99:e3:61:19:9b:
6b:60:6b:22:30:ca:a0:59:cd:fc:4c:11:8b:b5:84:e6:6a:cc:
db:32:6d:95:3e:7f:4d:f4:3f:5c:92:a1:aa:90:25:2d:10:f8:
15:3a:34:c1:3e:c5:5f:6f:86:9f:99:47:c5:71:bd:6c:a4:32:
81:eb:29:c2:4c:71:6d:93:3d:78:5b:27:dd:11:fd:a3:d0:1f:
8a:e7:bc:9f:8f:76:b6:94:ab:c6:a0:e3:ce:c5:ad:ec:1c:5c:
8c:4b:7c:a8:38:72:cb:aa:d2:66:92:18:b4:f5:c7:57:23:d0:
d0:49:41:b4:5b:55:03:56:41:04:4e:c6:1b:35:77:7d:ff:3d:
e8:9b:e6:40:26:91:38:98:80:b5:22:9f:10:bc:a0:1e:8c:a4:
be:30:fe:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:10 2025 by rpki-client