Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
File: L708fpx3-aiJSQVlDX9aQ5oHJl0.mft (raw, json)
Hash identifier: Ak9blZuxrCa2T+bVljgi1AD6Uu9lAEdbaHFA+3e/BNI=
Subject key identifier: 85:E8:BC:AB:62:35:B5:20:3B:8C:7F:0C:10:84:F2:7B:7F:24:0D:B7
Authority key identifier: 2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
Certificate issuer: /CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Certificate serial: 019A72264E3E2A3B9D49003291236269BFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
Manifest number: 0D7A
Signing time: Tue 11 Nov 2025 09:01:44 +0000
Manifest this update: Tue 11 Nov 2025 09:01:44 +0000
Manifest next update: Wed 12 Nov 2025 09:01:44 +0000
Files and hashes: 1: L708fpx3-aiJSQVlDX9aQ5oHJl0.crl (hash: v+BNACRpPEWDNs8oXK+wA5wZP4BBlwcggqCVaSORZ/k=)
2: poxmGDjmFhEykYFtUrK86QVNSBE.roa (hash: LiFoIRCZoOCJ6MEjwTK5FSST0U+wUgy2+UPXqJfWuqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4e:3e:2a:3b:9d:49:00:32:91:23:62:69:bf:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Validity
Not Before: Nov 11 09:01:44 2025 GMT
Not After : Nov 12 09:01:44 2025 GMT
Subject: CN=85e8bcab6235b5203b8c7f0c1084f27b7f240db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:5d:e3:6b:c6:74:77:4e:51:8a:be:0c:1b:
5f:21:39:2a:0a:37:e7:54:51:20:47:96:37:6c:49:
53:7c:d7:54:53:e7:62:32:52:b4:cb:ef:7f:86:04:
f1:2e:d2:28:6b:66:10:18:93:87:b2:a7:b0:b7:8c:
55:b0:1f:4d:b8:9b:f3:c0:ba:93:2b:c3:51:5e:ee:
a7:b4:28:d3:64:8d:06:02:05:4f:b5:0f:ee:e4:26:
ce:33:97:9f:af:65:d8:f3:d6:6c:79:d1:a2:c8:87:
ab:e8:e5:bd:93:b7:f8:53:a0:c9:68:04:6a:e4:5b:
d5:61:05:b1:7f:c5:f1:d1:75:0a:93:72:ef:75:be:
09:ec:fe:83:2f:85:5b:71:86:aa:c5:82:ff:f0:72:
13:58:cf:a1:3b:2a:16:cb:05:9c:f9:ed:37:c6:cb:
ea:42:ff:ad:fb:cc:3e:b7:14:c1:0f:4b:5a:40:9c:
34:d8:ca:1a:43:ae:8d:6e:67:e1:9b:be:16:df:b7:
ba:5f:a0:ab:f0:02:2f:ac:3a:f7:34:aa:65:cb:4a:
e2:04:30:8c:79:95:19:5f:8c:31:c5:85:6d:c9:60:
f8:bc:d2:b4:4e:23:50:b7:33:41:1f:cb:e6:83:00:
40:61:41:8c:84:c7:8b:c0:27:39:01:70:26:32:c7:
79:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E8:BC:AB:62:35:B5:20:3B:8C:7F:0C:10:84:F2:7B:7F:24:0D:B7
X509v3 Authority Key Identifier:
keyid:2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e0:bd:a9:d8:09:0a:7c:45:4b:d2:f0:7e:d9:63:a0:d1:8b:
98:94:bc:2e:f7:4c:34:6c:34:ef:6e:18:00:6f:8d:7e:06:83:
2b:0b:3c:50:33:05:5c:4a:8e:43:94:77:5d:ec:fb:48:3c:7e:
47:7b:7b:b7:0f:da:1c:fe:61:80:a9:b7:6d:db:3a:5a:09:ed:
28:ab:13:19:03:e6:1c:8f:0c:38:07:ce:1c:23:3b:13:8b:69:
6a:26:9d:d8:cf:2a:bf:25:e0:07:0e:50:0f:86:c1:23:9a:30:
6d:35:a6:2e:b6:ca:90:78:1c:07:ad:e6:d4:f1:03:36:b2:eb:
f7:07:b6:7b:9a:11:0d:e5:cb:f9:94:b0:e7:f4:da:61:85:b9:
7f:d9:07:27:69:eb:c1:12:07:ec:52:61:61:fa:1f:72:44:67:
de:04:07:15:fe:a3:17:9e:ab:a1:ad:d8:a5:fe:42:69:52:3d:
e4:7b:7b:ae:53:91:ef:43:a4:c2:d9:aa:7e:cf:c6:a0:6f:2a:
64:e5:14:91:bd:a2:0b:88:bb:bc:21:c6:a9:b0:f2:7f:f3:66:
a3:7f:6a:2f:74:fd:4e:0b:c0:a4:c2:8d:4f:b4:7b:e4:67:24:
a7:79:db:c3:6d:45:29:30:03:17:39:55:fd:3a:8e:c9:02:4f:
b1:88:a0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:47 2025 by rpki-client