Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
File: L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft (raw, json)
Hash identifier: U4Ulpq3jrkMxQahT2Vqir3PGiOVA1OK3JWBU/M9n5iY=
Subject key identifier: 7B:5E:0D:D7:80:84:06:BF:D6:D2:C0:85:5E:87:EF:4D:01:A6:29:85
Authority key identifier: 2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
Certificate issuer: /CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Certificate serial: 019A72264A9BBE788C452C55FFCAC8FB3187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
Manifest number: 1708
Signing time: Tue 11 Nov 2025 09:01:43 +0000
Manifest this update: Tue 11 Nov 2025 09:01:43 +0000
Manifest next update: Wed 12 Nov 2025 09:01:43 +0000
Files and hashes: 1: L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl (hash: IRMdxpaRxJUwSvka3R1v4gXdpmgMdN3HQYQWIlOk/eU=)
2: ZoHlTSWf4EeqC9A5k-qHnjmwKF4.roa (hash: 7rMi4KUfYRyetPUm0wFZARhPbAH2Hhf04z4uA0idTbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4a:9b:be:78:8c:45:2c:55:ff:ca:c8:fb:31:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Validity
Not Before: Nov 11 09:01:43 2025 GMT
Not After : Nov 12 09:01:43 2025 GMT
Subject: CN=7b5e0dd7808406bfd6d2c0855e87ef4d01a62985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:46:61:28:66:c8:bd:82:9e:25:92:8b:0e:
0c:32:09:44:07:fe:6e:26:aa:bf:2f:d6:36:e3:25:
fc:4e:5e:0d:16:fd:74:dd:95:f8:98:e0:81:cf:d9:
02:97:e8:37:d8:90:9a:c2:da:fe:a2:cb:b4:df:8d:
4a:d7:5a:46:a0:e2:8c:99:a0:dc:35:ce:34:b6:99:
c7:f7:cb:09:47:d1:c4:52:6a:7f:05:46:36:19:7a:
45:a6:84:65:ca:9d:a3:5c:2d:41:8f:85:f1:10:94:
5a:f7:35:a5:05:c5:cf:ee:6c:3f:46:fc:be:79:da:
42:06:99:52:9b:25:86:3a:63:4c:bc:bd:77:6f:33:
51:30:54:93:10:dc:52:da:bc:ab:f3:33:f1:63:1d:
b7:26:18:4c:b0:1b:9b:4f:2e:97:ea:d4:1e:f2:12:
e4:ba:a3:d9:ef:65:d5:a3:5e:7a:6d:96:45:9e:51:
76:37:95:ab:b2:f9:d6:82:77:68:c9:0c:36:a9:cc:
1d:22:00:de:63:6c:0f:72:71:c1:13:97:ac:d8:95:
d5:60:53:46:c5:55:10:7c:66:89:af:08:9d:75:76:
e6:d2:8e:41:ac:c0:b3:0a:a2:89:de:a0:77:82:c9:
c2:07:90:b0:ac:03:cf:10:9a:a8:6d:2b:c8:09:30:
ca:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5E:0D:D7:80:84:06:BF:D6:D2:C0:85:5E:87:EF:4D:01:A6:29:85
X509v3 Authority Key Identifier:
keyid:2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ee:e8:88:67:4c:36:ca:03:f4:e8:d4:7d:99:42:01:66:5b:
e4:d3:1c:e7:bd:1f:44:c1:3f:f3:60:d2:93:ff:83:2c:68:e4:
c7:e5:0c:97:b4:e8:73:e2:1a:85:80:1a:00:2b:76:55:69:cd:
73:15:2b:af:59:ef:b4:93:a2:4f:da:bf:82:9c:a1:c3:48:d7:
44:62:4b:6c:a4:01:e4:a5:75:33:44:76:e3:0b:78:82:f0:58:
ea:40:20:91:e0:f8:6d:f6:7c:39:d0:16:af:cf:64:f5:0c:25:
3b:59:01:ec:c6:8e:fa:59:44:02:d2:dc:14:93:fa:31:9e:3c:
f7:30:96:74:42:d3:13:a8:e6:24:8a:55:16:7f:94:a7:78:d6:
96:9f:4d:c4:03:fb:9e:eb:a3:a2:e4:0b:15:71:2b:61:2c:b0:
60:15:d6:bd:46:d4:de:b5:b7:a8:92:04:81:d2:06:9a:48:0f:
54:a6:51:0f:5d:0b:b1:98:62:5c:9c:4e:3d:f0:71:db:d9:a4:
a5:6b:5f:fc:bc:e4:21:20:5d:aa:a8:18:a9:a8:c0:ac:56:c2:
fc:c0:4f:8f:f7:9d:b4:20:23:1c:ce:91:c4:be:d2:53:c9:11:
4a:f1:81:30:c1:37:bf:4a:f1:47:71:53:fc:d2:08:5d:d2:13:
ac:e1:2c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:04 2025 by rpki-client