Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
File: l0kuzDe64rn4HaApOFgX1DPFBGc.mft (raw, json)
Hash identifier: 5Cv4IrxnheQGpnWFKgUXnm9QDc5fdaw+TS4CSaPfd2w=
Subject key identifier: 20:7F:21:86:C4:52:C4:43:2A:23:D6:AA:B7:8F:64:01:C1:B9:15:BD
Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
Certificate issuer: /CN=97492ecc37bae2b9f81da029385817d433c50467
Certificate serial: 019A2778DBF52CDA4C4AC9DDC7C89E764963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
Manifest number: 0BF4
Signing time: Mon 27 Oct 2025 21:00:23 +0000
Manifest this update: Mon 27 Oct 2025 21:00:23 +0000
Manifest next update: Tue 28 Oct 2025 21:00:23 +0000
Files and hashes: 1: GIv286-shw2KQ9cHbSFZoILsF4Y.roa (hash: n0V2P6i8c6cHkiGOtEBdR3HlibGvUywK0wCobqEXaiI=)
2: l0kuzDe64rn4HaApOFgX1DPFBGc.crl (hash: FW3wdLfZOeMU+OC2eQRJiadlQq3kbRhpstsbFt9mk2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:78:db:f5:2c:da:4c:4a:c9:dd:c7:c8:9e:76:49:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467
Validity
Not Before: Oct 27 21:00:23 2025 GMT
Not After : Oct 28 21:00:23 2025 GMT
Subject: CN=207f2186c452c4432a23d6aab78f6401c1b915bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f2:45:d7:53:37:5a:dc:bd:85:b6:e6:54:f0:
54:11:b5:54:72:3a:44:f6:1c:c2:d3:c5:44:e2:c6:
78:53:a7:2f:c3:7e:94:2f:14:ef:50:f2:ab:53:c6:
92:b7:5f:35:9d:71:59:55:a2:bb:46:f7:0b:5f:c2:
e9:bd:25:86:5c:b7:59:eb:b6:f3:93:9a:be:ea:47:
87:23:64:86:37:77:69:e7:2c:a2:44:16:e4:7b:07:
5e:ec:20:e7:fa:26:77:49:66:f9:3d:37:cb:8e:3f:
30:f0:96:7f:61:d3:35:34:3f:d2:8b:80:19:2c:fa:
6f:a4:c2:d1:03:6a:3d:b6:36:5c:13:42:65:38:a5:
3a:c9:4f:0d:01:93:cf:dd:90:1d:36:b4:10:19:3e:
7a:f6:c0:21:1d:6d:48:13:df:eb:86:70:e8:3a:0f:
92:67:51:03:1a:0a:d4:c6:4e:b8:7a:cb:98:fa:eb:
2f:80:28:e0:55:ff:f3:eb:3a:89:8f:77:00:10:1c:
ff:e7:82:b4:4f:c5:fa:75:d1:87:af:7b:f3:4d:08:
b6:88:3c:5c:c3:61:58:9a:c0:7e:cf:1a:a4:4d:e9:
43:94:2a:f0:f9:06:8e:3e:f7:f5:aa:7c:69:e8:32:
ba:40:3b:da:f3:cd:87:48:dc:ed:23:39:6b:7a:6f:
b4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7F:21:86:C4:52:C4:43:2A:23:D6:AA:B7:8F:64:01:C1:B9:15:BD
X509v3 Authority Key Identifier:
keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:26:e2:c5:72:68:00:c8:55:ce:c1:f0:7c:f0:05:5f:01:af:
8c:3d:39:15:ba:5f:ff:36:84:71:75:7b:10:e5:72:aa:05:ba:
ba:14:06:54:26:c9:0e:98:e1:b8:77:7c:64:6f:01:97:0c:86:
50:f5:dd:99:82:55:3a:63:5e:ee:aa:40:09:b9:02:e0:22:bb:
eb:6d:c3:0f:73:5c:18:d5:e0:a3:1f:63:68:cb:74:5b:d7:89:
ec:aa:77:70:53:eb:18:7b:ce:6d:d6:52:27:11:47:1e:b5:09:
94:73:20:46:9c:c4:5f:98:3a:80:5e:88:d4:c9:a1:d7:42:c4:
89:49:94:0a:7c:63:83:78:70:ee:11:4f:da:72:33:3e:20:36:
65:b8:4d:c4:bb:40:37:cf:db:01:c1:a1:0a:27:b1:ec:3a:84:
73:ca:13:2c:76:e5:df:74:1a:46:9b:62:a5:19:91:4e:00:40:
8c:8f:77:7e:de:b8:8f:b2:d0:06:87:ef:ca:54:62:f8:c0:12:
40:01:54:56:80:c6:90:0e:93:9d:3a:6f:4e:ca:35:c2:62:d9:
41:d0:12:04:9f:94:a1:26:0c:ae:5f:22:a8:7a:23:30:4e:54:
01:85:de:fa:0e:58:1b:5d:3f:ad:5a:f8:bc:bc:b3:22:e4:3c:
bf:4b:d4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 23:06:56 2025 by rpki-client