Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
File: L_jPdWH81tdmt6rTHb94XwKRSfA.mft (raw, json)
Hash identifier: 9KYQ+hLPfkvdmvwQBxNd/WAYNA0Mh9HdWSBf5Xe5gzo=
Subject key identifier: 35:BB:72:F0:FB:3D:EF:01:E9:EA:41:BF:45:DF:B9:81:57:8D:60:BD
Authority key identifier: 2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0
Certificate issuer: /CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
Certificate serial: 019A2D0D5C5DFB817A97CFDC835B4678D856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 23:00:41 +0000
Manifest this update: Tue 28 Oct 2025 23:00:41 +0000
Manifest next update: Wed 29 Oct 2025 23:00:41 +0000
Files and hashes: 1: L_jPdWH81tdmt6rTHb94XwKRSfA.crl (hash: chYCFFquL7b0fJLPrMSTKt6x44dVzo91WItvS4UoUfk=)
2: xluZlF8Y4lWty9UIZc07EvSCNPk.roa (hash: HE/HrixCaKLjFQb4O8UjaXRfk5ZIsq5yeFLDR8AlCNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:0d:5c:5d:fb:81:7a:97:cf:dc:83:5b:46:78:d8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff8cf7561fcd6d766b7aad31dbf785f029149f0
Validity
Not Before: Oct 28 23:00:41 2025 GMT
Not After : Oct 29 23:00:41 2025 GMT
Subject: CN=35bb72f0fb3def01e9ea41bf45dfb981578d60bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:51:84:96:1e:61:d1:0e:46:9b:6c:df:d2:
b8:d9:1e:22:d1:24:87:49:a3:10:f0:97:54:3f:d7:
46:a7:8b:e6:92:29:1d:d5:e4:ca:fd:b4:82:96:db:
fc:dd:4b:53:12:ce:5e:c9:ff:f2:d7:94:ad:8b:9a:
27:f8:c9:e0:1d:7f:f2:2c:cc:b5:36:ee:07:c9:90:
52:c0:a8:78:1b:8a:55:ae:0c:72:c1:b3:97:97:2e:
6b:ce:db:3a:81:97:f5:7e:19:1f:94:83:55:8b:97:
4b:2b:94:f3:2e:0a:93:b2:88:ed:84:35:79:07:4d:
9f:77:34:1f:53:80:ff:f2:6a:c7:2a:14:b3:02:42:
be:54:7d:59:07:c9:dd:95:45:7d:a9:5e:d4:dc:43:
bd:be:82:52:ec:fe:82:22:48:8f:58:f8:4c:0a:e3:
19:21:5a:5e:55:e3:15:be:ae:95:0f:17:ea:f2:b0:
29:db:96:4b:fc:83:e3:04:a6:67:fa:14:b8:e0:b8:
00:a3:c8:1e:71:28:f7:92:d6:ee:e2:af:40:a2:7b:
6b:12:eb:f2:88:27:e5:c1:39:15:13:f7:ef:3f:3d:
62:fb:d6:fb:e8:6b:4d:bf:9e:11:f2:3e:0e:30:69:
6a:a7:5f:3f:44:22:1f:0b:98:ec:02:bf:9c:42:29:
e0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BB:72:F0:FB:3D:EF:01:E9:EA:41:BF:45:DF:B9:81:57:8D:60:BD
X509v3 Authority Key Identifier:
keyid:2F:F8:CF:75:61:FC:D6:D7:66:B7:AA:D3:1D:BF:78:5F:02:91:49:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_jPdWH81tdmt6rTHb94XwKRSfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77aca-ad91-403f-b98d-de73a81e357d/1/L_jPdWH81tdmt6rTHb94XwKRSfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c2:8f:9f:c5:34:7b:c6:ea:da:e1:7d:5d:07:44:37:09:63:
1b:f4:3c:53:cd:f3:25:20:15:83:0e:98:ca:8a:99:c8:80:b3:
c2:7b:f0:c0:f1:a9:97:1f:39:60:c5:ed:d0:a1:bb:ea:d8:30:
cf:3b:75:ed:5c:dc:db:f8:f2:a3:db:3c:9b:a1:2b:06:00:7f:
9b:a3:2f:79:67:ed:41:d8:b5:6f:3e:d2:6a:66:4e:74:52:9a:
b0:ce:9b:38:96:85:62:44:4f:84:a5:02:c1:ca:e6:af:61:fe:
0b:c2:cc:b2:82:7d:2c:8e:3b:a3:49:91:fc:70:57:bc:ec:85:
23:b1:6b:0c:ef:1e:03:0b:88:9d:53:b7:b2:51:13:b2:4f:8c:
c5:31:8b:36:02:64:88:ce:8e:2b:9e:47:4a:f9:bd:36:d8:ff:
46:fc:a8:d6:d6:ff:0b:a3:4d:cf:21:d0:53:6e:93:e4:bb:8c:
fc:29:54:5a:a7:9f:f0:54:1c:c5:3a:c1:f6:76:1c:a5:89:70:
e8:e4:d3:f0:87:91:05:0b:e7:c9:95:d7:4b:c5:0e:85:dc:07:
b3:d7:cc:0e:a9:eb:12:49:99:34:09:35:ed:5f:08:54:a6:d7:
cf:0e:16:7d:d9:a8:ed:27:d9:a8:56:1a:2e:7b:a2:6b:80:e6:
79:2c:a3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 01:48:58 2025 by rpki-client