Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: paHTm0fuygfTLqVc3g1tC0R/w0EER6tdfriXO78Tfu0=
Subject key identifier: EA:5F:B3:73:42:91:8A:34:E5:C1:1C:3F:A4:75:A4:6A:0F:32:6E:23
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 019927E99699A59A640C60A3BCC69181F06A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 04BB
Signing time: Mon 08 Sep 2025 06:00:43 +0000
Manifest this update: Mon 08 Sep 2025 06:00:43 +0000
Manifest next update: Tue 09 Sep 2025 06:00:43 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: FiWLtxTezbzJBPbofx9NZ0OzFpuUe2gg8sst7ViFTZw=)
2: WxBvM9AzXvcGUxLQO7mjVfKZ8SI.roa (hash: MlBmuxBYdT/UhZRE0mpsF297g9H8Aa5t6UDiR3XGbFU=)
3: hGYvey0NL7kedoZnW8NGK9NdHUE.roa (hash: j/gjt7b1AkCBiDU1S/YvmfcXT2lTvik+0pgkIhPCV+w=)
4: zhUAq4pe-9N-dxfCl2d78EjPTb0.roa (hash: uyxGbVsUozb8CGUZeB9rmoW8CVbBZTPJHf+JK7e+rn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:e9:96:99:a5:9a:64:0c:60:a3:bc:c6:91:81:f0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Sep 8 06:00:43 2025 GMT
Not After : Sep 9 06:00:43 2025 GMT
Subject: CN=ea5fb37342918a34e5c11c3fa475a46a0f326e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4a:fe:4b:fa:f1:5e:2e:98:3b:ca:99:7e:10:
60:d3:99:29:38:06:e0:8d:26:0e:47:b6:01:ff:c3:
e7:71:38:3f:fd:0f:74:8a:10:1b:57:02:79:98:fa:
c8:8d:cd:16:b0:45:d2:ed:76:00:c0:27:1b:8d:6a:
3a:dd:49:e4:29:89:99:54:ae:4e:40:c7:cf:8c:05:
f0:4e:11:cb:ab:54:e0:e3:12:48:2c:84:e2:08:cd:
3a:47:24:31:88:6e:5d:2f:f6:26:81:91:e9:2f:63:
3b:17:5a:3c:58:ef:2d:15:77:a8:9f:32:a0:38:8c:
2d:ba:93:e5:88:b6:0e:98:d1:19:40:54:3d:7a:4e:
39:15:a0:54:13:e2:09:6c:e4:95:7b:4d:eb:27:09:
25:49:1d:9e:32:5e:91:7f:4e:5b:ed:16:68:a5:93:
0d:d5:26:99:a9:15:fc:83:52:16:84:ed:5e:fc:12:
30:ed:e7:b8:d4:46:83:42:63:2e:a3:bc:35:ae:ca:
ce:8a:a1:94:2d:9d:b2:27:b8:da:a0:0c:6a:86:a5:
e4:d3:7d:52:77:45:8a:23:d7:d7:e4:c1:6a:f0:16:
2f:7f:0b:bf:45:75:c3:9d:03:43:4f:8e:8c:e7:f9:
4f:09:90:d3:6d:82:69:52:c1:86:3d:33:3e:26:d5:
16:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5F:B3:73:42:91:8A:34:E5:C1:1C:3F:A4:75:A4:6A:0F:32:6E:23
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5d:4a:18:e1:3c:ec:4b:9e:e0:b4:34:69:97:34:dc:e7:69:
ff:4e:66:b5:d9:d6:8c:c7:ee:73:05:fa:43:ec:0f:45:48:cd:
28:45:92:5a:7c:84:45:36:2c:77:9b:45:52:f1:35:45:a8:63:
73:c4:92:89:d0:1a:4c:07:6f:37:65:23:fe:cd:66:98:a1:c2:
5e:4e:17:fb:c5:5d:e5:40:b1:c8:7b:68:20:b0:11:f0:0b:2d:
c3:a0:de:f3:d3:51:f2:a5:93:b1:70:e6:e0:94:00:4c:a4:e2:
cc:3f:b8:3c:cb:a9:8a:15:2e:2d:bd:32:11:d7:b4:e6:ce:df:
5a:9d:c0:b1:07:a3:51:d1:29:a4:78:b3:c9:32:af:81:b7:b9:
8f:21:bd:6a:cc:a7:3d:aa:e5:b5:b9:99:ab:b3:8a:cb:38:d1:
3b:26:22:12:8c:7e:a9:b9:e0:c6:75:7d:68:61:9c:af:9c:0e:
6f:3f:c0:da:d0:0d:86:a2:a7:d1:dc:a2:67:74:32:c0:a5:36:
eb:f1:dd:ea:f6:bc:32:93:8b:0c:27:a1:be:42:01:f1:0f:9e:
54:72:31:bc:99:b7:80:67:10:e7:d0:70:3b:ba:69:54:01:ab:
61:62:30:94:f7:a3:04:81:4d:58:5a:66:4e:29:1f:07:b7:bb:
02:3a:4d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:07:01 2025 by rpki-client