Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
File: L_vZ3o2JUmxaSadmwfSF8J9akWY.mft (raw, json)
Hash identifier: vhQ0wjf12LsD2gZfqeSbTC5gdMsW0AFhHBaIQu2YNcU=
Subject key identifier: DD:6E:3B:34:A4:F9:EE:C0:05:36:7F:90:58:AA:F3:B6:A4:CB:F0:40
Authority key identifier: 2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66
Certificate issuer: /CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166
Certificate serial: 019A73015BF41C3456558B130FD9D11CDAF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
Manifest number: 09D9
Signing time: Tue 11 Nov 2025 13:01:00 +0000
Manifest this update: Tue 11 Nov 2025 13:01:00 +0000
Manifest next update: Wed 12 Nov 2025 13:01:00 +0000
Files and hashes: 1: L_vZ3o2JUmxaSadmwfSF8J9akWY.crl (hash: xZp30hJtDswbdUOdNIfl77fl/fV0w90UpWjYoKVBftE=)
2: mXwM3P_PQQyVSERAjNUZUTUhWjg.roa (hash: 4+JoMMio3r7vvH6PXd1vvlGKdXZmMUa4KFkXT7FGKzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:5b:f4:1c:34:56:55:8b:13:0f:d9:d1:1c:da:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166
Validity
Not Before: Nov 11 13:01:00 2025 GMT
Not After : Nov 12 13:01:00 2025 GMT
Subject: CN=dd6e3b34a4f9eec005367f9058aaf3b6a4cbf040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:ad:5c:08:35:e8:29:f3:73:27:cd:52:71:
be:a0:d7:2f:0d:b5:29:d3:87:d5:8d:13:13:45:23:
53:53:0e:28:c2:55:7f:ba:d8:67:d6:7e:bf:2d:27:
6e:4a:73:21:2c:8f:33:00:30:98:de:d3:c5:f5:13:
1e:7e:e2:30:cc:51:48:0f:50:9c:2f:04:f5:f6:82:
a4:b6:a7:f0:36:31:10:b0:ef:69:4d:20:7d:96:8c:
fd:03:14:55:ca:cf:a8:92:4b:46:fa:2d:09:d6:c0:
31:fa:ea:8f:57:0a:1d:ce:85:d8:e2:28:e2:da:cb:
d1:ae:c8:6c:5d:7e:f1:7e:ec:f3:c4:87:e6:f8:b9:
4b:44:78:d1:49:99:46:0d:de:c6:17:28:77:40:4e:
77:ae:33:4d:89:3b:77:8f:39:49:30:bb:93:47:8d:
d7:e7:2a:a5:01:17:ee:8a:85:d6:9b:2d:bd:57:ce:
7a:b2:97:b2:ed:b0:a9:92:74:c5:4c:6d:07:54:c4:
c4:8a:86:8b:c5:d0:e7:0f:2c:b6:fc:16:fa:54:e6:
fc:89:7f:f7:80:fd:98:fd:9f:b4:aa:d9:e3:70:e1:
40:57:d0:2d:86:bd:64:f7:e2:bb:16:2b:97:5e:56:
c3:df:69:5e:dd:49:78:03:6d:d0:58:4e:82:b3:76:
92:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6E:3B:34:A4:F9:EE:C0:05:36:7F:90:58:AA:F3:B6:A4:CB:F0:40
X509v3 Authority Key Identifier:
keyid:2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:94:4f:be:40:37:93:5c:c7:0e:15:bd:e4:26:1e:18:83:ea:
b8:f8:3c:f6:25:50:e5:cb:55:4a:54:e5:18:b2:bf:bf:24:e2:
94:aa:b4:37:a0:f4:c1:d0:bc:f7:e3:60:60:1a:2f:88:51:7c:
05:5c:1f:74:3a:43:05:4c:e6:4e:01:2d:9f:06:dd:b9:fb:ca:
74:7d:8b:7c:0f:43:b5:06:ae:34:47:74:76:5d:7d:81:f3:ea:
ee:5e:1c:56:4a:c9:d3:46:ca:c5:94:4d:bc:6e:6e:9c:52:e4:
c9:6d:7b:ee:4f:48:aa:5b:24:0e:dd:76:cf:cc:7c:15:84:ec:
e1:18:d0:b5:48:9c:f4:75:d5:62:11:a0:0f:20:69:9f:e7:14:
3f:20:1b:89:e2:c8:e9:b4:39:8c:87:f0:6c:6c:7d:1a:37:f3:
4b:c4:f2:0b:29:4f:fd:fe:7b:e7:66:1f:38:18:a3:16:10:30:
5e:4e:0e:3e:0c:be:79:00:06:e3:62:0c:42:b1:b6:4d:1a:af:
f5:31:c7:65:5b:e5:eb:54:84:2e:65:f4:3f:73:4c:72:d2:06:
d9:b4:8b:2a:cf:98:41:a3:78:d2:3f:b3:b1:c5:0f:43:ca:3b:
76:e9:2a:9e:37:d5:01:84:f2:0b:68:03:ab:d1:8b:0d:48:97:
11:1d:05:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:16 2025 by rpki-client