Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: nU/cCmIT1r6WCU0FiuexZd+2EdzaMzTsbLq6yuC3vH0=
Subject key identifier: 49:56:D9:4E:F0:3D:06:91:D6:4C:28:DA:9B:AC:BC:B3:C5:78:2B:F8
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 019A288BC1618ECFFDB033C5DFEC8C8FB197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 0540
Signing time: Tue 28 Oct 2025 02:00:38 +0000
Manifest this update: Tue 28 Oct 2025 02:00:38 +0000
Manifest next update: Wed 29 Oct 2025 02:00:38 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: drcQQISHTi8xl9uamtefX8vGyJSlxFYwV69VO6be9Lk=)
2: WxBvM9AzXvcGUxLQO7mjVfKZ8SI.roa (hash: MlBmuxBYdT/UhZRE0mpsF297g9H8Aa5t6UDiR3XGbFU=)
3: hGYvey0NL7kedoZnW8NGK9NdHUE.roa (hash: j/gjt7b1AkCBiDU1S/YvmfcXT2lTvik+0pgkIhPCV+w=)
4: zhUAq4pe-9N-dxfCl2d78EjPTb0.roa (hash: uyxGbVsUozb8CGUZeB9rmoW8CVbBZTPJHf+JK7e+rn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:8b:c1:61:8e:cf:fd:b0:33:c5:df:ec:8c:8f:b1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Oct 28 02:00:38 2025 GMT
Not After : Oct 29 02:00:38 2025 GMT
Subject: CN=4956d94ef03d0691d64c28da9bacbcb3c5782bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:5c:f3:0f:6c:2e:f4:e0:69:96:de:f1:1e:
a0:4f:c6:a6:d3:69:0e:bf:68:e4:34:14:ac:82:9f:
4d:71:f4:45:50:76:49:ef:9e:62:17:71:0a:29:d5:
ac:49:59:dd:b9:27:11:e0:7b:dc:15:67:d7:26:70:
55:87:39:61:79:dc:05:36:0d:82:a9:4a:48:02:72:
c1:7b:39:5c:95:ce:13:81:2a:56:8f:96:44:3e:ee:
8f:1c:1b:f9:9a:16:e0:b0:ab:49:6a:21:0c:61:5b:
99:34:f3:6e:3c:3f:e3:f8:f8:cf:23:0b:bd:f9:ad:
44:e2:3b:47:d7:79:f0:31:36:cb:89:31:79:08:ca:
4e:a5:df:bf:3b:3b:bd:78:30:51:5a:c5:b3:51:c1:
0f:27:b8:33:02:63:29:71:ce:83:9f:2d:c0:7f:3b:
08:2b:41:4e:90:95:e4:2e:45:a4:03:43:1c:8d:f9:
df:45:12:5d:07:49:66:b3:be:18:cd:63:f9:8d:ef:
37:46:8b:36:1f:fe:17:c1:35:1a:11:0f:b1:3f:3b:
30:e7:86:64:5e:96:b7:db:52:c2:f5:ff:e9:09:f0:
0f:f1:97:3c:15:e4:e5:db:ec:87:5e:94:6a:98:43:
1c:67:77:f7:8c:48:08:e7:f7:26:71:0e:f3:3b:96:
bf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:56:D9:4E:F0:3D:06:91:D6:4C:28:DA:9B:AC:BC:B3:C5:78:2B:F8
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5b:cb:bd:99:6c:52:02:c4:2d:fb:3f:19:4f:6a:a9:d3:5a:
de:2f:43:ed:0a:d8:f2:ed:6d:c6:74:56:f2:0b:f1:e4:a0:6b:
0a:ce:b6:8b:c3:4b:42:13:91:dc:9d:db:de:ee:57:15:90:42:
11:0f:6b:fd:40:6c:72:5c:d4:65:b8:8e:b3:c6:78:d7:55:42:
91:a0:12:e4:ee:f5:ea:55:0b:60:42:d8:2b:de:98:9c:8c:1c:
54:b5:db:a8:d0:64:08:05:73:e2:83:80:16:cf:ca:ea:e9:86:
5d:37:fa:29:c0:51:42:a2:7e:2f:47:2d:2a:4a:98:86:44:90:
31:d5:82:21:74:84:85:68:a4:85:64:fc:09:dc:f1:c1:37:52:
16:4a:c8:94:d7:5d:d5:da:8e:b9:8d:95:27:0a:56:df:de:1c:
b3:57:0c:41:4d:54:62:da:fd:5a:f4:f8:59:2e:1b:7b:31:69:
9c:74:9f:b0:40:a2:3e:0d:b4:19:24:e7:c7:6f:67:6e:47:e2:
8e:a4:c4:52:b1:3d:e2:23:bf:0e:3a:a7:23:d5:2d:97:36:f3:
22:b7:9d:57:be:d1:f9:68:25:c7:49:1b:28:2c:2a:60:25:56:
32:e8:e5:aa:d0:71:1b:b3:42:36:11:18:fc:5f:fb:67:96:43:
29:97:b3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:40:56 2025 by rpki-client