Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
File: L4FK3B1SCeCY8HitvIVrrYO3ScI.mft (raw, json)
Hash identifier: dMlxXidOTcHiyfEC+97L0BSQ/3VC99F5vZp1SKRo1KE=
Subject key identifier: DA:F0:C2:E0:ED:4B:56:1A:D9:CC:95:C2:57:30:AD:42:E4:52:22:64
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 019A21E5120EA46C023EE8B6B8DEC0D5F4D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
Manifest number: 1734
Signing time: Sun 26 Oct 2025 19:00:51 +0000
Manifest this update: Sun 26 Oct 2025 19:00:51 +0000
Manifest next update: Mon 27 Oct 2025 19:00:51 +0000
Files and hashes: 1: BrO3qC9sElz84kZt0TlGLTPrFfo.roa (hash: Xac1gSwp3PaG99+Svk2b1wiRsCto7zOmCczTzvRnd5o=)
2: HV6okiZ_Mm9pgAnQyp-neXvD9Ys.roa (hash: Z8kbWAqPsQVcPrsGh46E3DnYGpnTYUasQHe7qcWJi5s=)
3: KChU0Ss7IUSMmcrbp9hvvsOcKSI.roa (hash: tqUwPcZIIPi8c5hbtPgv87qi30gm6VRMDquHIJzvPTE=)
4: L4FK3B1SCeCY8HitvIVrrYO3ScI.crl (hash: HXrULGuN0FWnGPHqV9SiyDNO6AGNGD8/92tM4zvyo4U=)
5: mb8LY7nbnDJCruGLljcH6XmZLok.roa (hash: HXr3dJ/DTsUePOKMb4j7QqYwB0wBIRDSnQ0yqP6D61g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e5:12:0e:a4:6c:02:3e:e8:b6:b8:de:c0:d5:f4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Oct 26 19:00:51 2025 GMT
Not After : Oct 27 19:00:51 2025 GMT
Subject: CN=daf0c2e0ed4b561ad9cc95c25730ad42e4522264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:52:6b:f3:66:64:cd:5f:36:f3:73:12:e4:
28:19:84:d1:62:ff:35:aa:4e:34:a0:ba:61:14:2e:
e0:43:ee:8c:78:75:35:c9:2b:c2:7d:7e:c8:27:6e:
13:9f:9e:c0:61:ca:72:94:f4:3e:83:9f:a9:91:57:
66:27:f7:32:03:42:38:23:c2:4e:6b:23:c6:ea:ae:
72:9b:cd:6c:00:ed:ca:94:0e:d3:00:8a:b5:f7:f7:
ca:67:4e:92:59:a8:12:f4:2d:0e:f5:e9:5b:3d:c8:
d7:42:54:3f:04:cd:72:af:7d:0a:25:64:c0:11:ff:
d3:db:6a:35:1b:27:92:aa:32:57:be:71:e7:ad:34:
13:81:f2:b3:a3:9f:c6:ff:09:12:af:5e:97:f2:10:
ef:ca:cf:b9:5a:0c:11:d2:3e:6a:28:b1:10:fe:d4:
07:ab:16:d2:4c:1c:c3:d4:2b:88:ae:fb:0d:fd:23:
c9:b1:e3:98:35:0c:dc:7d:d0:2e:33:07:d5:03:a4:
49:03:3b:a0:18:f1:74:30:f8:ab:06:71:f1:0b:6b:
7b:99:82:15:b5:c5:e5:d4:5a:05:98:d0:18:26:59:
d6:41:ae:30:4f:36:9b:8f:65:c2:4d:13:20:ae:9d:
95:10:29:39:d4:a5:7e:90:1b:f8:78:6b:a5:64:22:
d1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F0:C2:E0:ED:4B:56:1A:D9:CC:95:C2:57:30:AD:42:E4:52:22:64
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:cb:e4:4f:21:5c:5d:d4:e7:13:e9:48:d9:41:73:6c:cc:e0:
02:76:45:40:ad:0a:de:5f:13:17:49:f6:cc:07:fc:a1:97:d9:
2b:78:80:51:10:63:e0:11:22:ff:e4:b6:16:60:9b:58:37:48:
69:22:51:a5:e5:09:52:a2:0a:22:b4:f0:71:55:5b:ff:06:28:
07:db:c7:e8:fd:ba:83:15:55:e8:bd:1a:2a:e3:f1:7a:48:f9:
3e:b8:fb:00:f5:96:c4:56:95:7f:fd:f0:d4:0b:48:57:12:6e:
47:6d:12:48:c1:a3:ec:df:fa:2b:59:4b:96:3c:6f:e0:6c:71:
83:ad:f6:7d:12:86:43:cd:ce:4b:81:a8:cc:b4:e1:63:cf:69:
99:11:99:f1:34:24:0b:93:96:c6:b0:c3:56:ec:96:01:2c:8a:
b9:86:1f:53:bb:7d:9f:fc:ec:89:ae:d5:23:f3:9d:a3:f8:41:
16:e0:05:7f:48:33:79:8e:27:fa:1f:19:5b:9f:d2:c3:d9:47:
39:aa:53:73:79:65:56:68:80:d0:bf:b3:27:44:7b:81:24:e9:
8a:f7:0f:19:fd:95:2a:f8:a7:af:57:5c:cf:51:23:25:e4:e4:
2a:47:bc:5f:b8:d2:07:a0:c3:4b:4e:75:9d:91:fa:21:6a:85:
a7:98:c6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:54:46 2025 by rpki-client