Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: 391IIjrkBe535FK6H453qXXn26g13Wp+e2CHvNqJp84=
Subject key identifier: 12:A3:5D:B5:5F:43:AA:A9:7E:94:43:62:5A:65:A2:24:BA:2E:28:34
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 019922555A107583AB13C48EB7EDC70AD199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 0DCE
Signing time: Sun 07 Sep 2025 04:00:42 +0000
Manifest this update: Sun 07 Sep 2025 04:00:42 +0000
Manifest next update: Mon 08 Sep 2025 04:00:42 +0000
Files and hashes: 1: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: aMtavcIC16JGeFadxKaqlPRla4lHOWOquBMw5wLuOmI=)
2: afVgxjAetRHf-32SfxI2xSGcZNY.roa (hash: 5+vaYR6gRkTLd8FndMtKaBU448DVyxpRSJ1taqs3pZY=)
3: qxyxQlVHUvofNzmf_XqptKckrdE.roa (hash: cKnrJAob0FIV4Kpod3nX7eoqdSn57f3LQGAcTD4ltHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:5a:10:75:83:ab:13:c4:8e:b7:ed:c7:0a:d1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Sep 7 04:00:42 2025 GMT
Not After : Sep 8 04:00:42 2025 GMT
Subject: CN=12a35db55f43aaa97e9443625a65a224ba2e2834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:8e:69:11:07:92:c9:21:52:a1:5f:c9:44:
f6:fe:4c:03:31:ff:45:2d:e7:86:b9:90:cc:23:9e:
3b:27:c7:2b:6f:b3:c2:aa:65:c1:53:9f:af:8f:b6:
0f:9c:31:05:8a:db:cc:95:cd:c2:11:0f:2e:be:84:
fb:8f:3f:9c:0a:a3:b4:da:a0:ad:5e:1a:50:43:13:
62:73:b3:c2:de:4d:93:c4:3a:ae:ff:04:cd:24:02:
85:67:5a:48:0d:86:61:b3:0c:1d:ac:22:ea:43:47:
91:92:3e:47:d9:3c:b3:03:69:77:38:96:c7:d6:3d:
e7:3b:e0:09:05:ea:aa:0c:c0:65:9c:fb:2f:b8:70:
d5:71:08:9b:f5:38:7c:3e:00:a9:1c:89:11:0f:9d:
2a:67:91:43:1b:e2:cd:59:c6:86:46:52:b6:73:62:
84:14:b4:7a:e7:41:f6:83:c8:1e:5f:29:4e:a7:38:
8b:56:39:ab:5e:79:ba:38:6f:d6:eb:2d:6d:66:39:
52:20:24:b6:6c:03:aa:d1:04:9d:10:ca:02:f2:5e:
f9:e7:5f:3a:4f:20:2d:42:51:7d:db:a6:80:6f:fc:
ef:89:b3:38:d8:2b:c3:82:65:4a:4d:46:d0:ae:74:
ea:e2:ad:2f:1c:01:dc:0a:86:d1:b3:87:16:21:8d:
d7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A3:5D:B5:5F:43:AA:A9:7E:94:43:62:5A:65:A2:24:BA:2E:28:34
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4e:bd:63:73:86:71:a3:a8:5b:c9:ac:b1:06:e0:33:75:7c:
c5:4f:5b:17:cf:95:41:d6:cd:f1:20:dc:e0:7f:ec:85:e2:14:
77:64:34:07:d4:5b:6c:39:62:00:31:5b:12:c7:de:ae:ae:66:
15:7e:df:aa:39:61:d9:6a:02:1f:c9:b6:a2:19:ce:98:d9:27:
89:02:98:c9:ea:b5:55:79:56:1d:2a:ab:24:ba:b7:12:d3:a0:
bd:0c:60:05:4d:67:be:58:b9:0d:08:0a:28:db:25:9b:f6:3b:
03:12:c4:63:17:02:f6:bc:d6:48:ad:11:29:f3:cc:be:88:f6:
1b:ff:b0:4e:bd:2c:a3:55:0d:7c:f7:4d:9c:98:55:79:5f:24:
ba:b9:5a:1b:44:c1:a1:ca:db:0d:62:44:df:43:a4:c4:48:e7:
6e:b5:18:d0:12:8a:0a:c1:b4:7b:19:2b:51:1b:c6:bf:63:03:
a6:f4:4c:ac:25:64:61:36:a8:9b:a7:0d:c3:f3:ac:1c:09:fc:
2c:c8:b9:ee:83:1f:85:10:eb:63:70:f6:88:b1:97:fc:fb:dd:
bb:ad:19:f0:11:15:48:f4:0b:0b:9b:ad:c6:5b:2b:34:e8:67:
64:50:79:c3:6c:95:67:fb:d9:5b:ce:b3:25:5b:39:39:c7:90:
b9:80:41:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:45 2025 by rpki-client