Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
File: L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft (raw, json)
Hash identifier: pCIkblpJvjr3Vp1yFXtRW5VA7X+aUoDT6ev7hLf7ZC4=
Subject key identifier: F1:F3:B9:52:32:89:16:49:F3:34:4E:2D:94:9F:FA:30:B4:5C:17:6E
Authority key identifier: 2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC
Certificate issuer: /CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
Certificate serial: 019A71B92D5A6526671CCD9CA3BA8A571380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:32 +0000
Manifest this update: Tue 11 Nov 2025 07:02:32 +0000
Manifest next update: Wed 12 Nov 2025 07:02:32 +0000
Files and hashes: 1: L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl (hash: Vczc+tryj62UstFXemBvUgZ0hKwWXBCupV6mybCeqgs=)
2: Vec_C6RiaudIxR6DQyYXgE_U-TY.roa (hash: MAwYc1OA3xQJeom5DQYcF+PCN/vQZIWajJ/StbTU5Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:2d:5a:65:26:67:1c:cd:9c:a3:ba:8a:57:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f57a34b058aafa0a763124a7d5d4187f4faabac
Validity
Not Before: Nov 11 07:02:32 2025 GMT
Not After : Nov 12 07:02:32 2025 GMT
Subject: CN=f1f3b95232891649f3344e2d949ffa30b45c176e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:87:bc:f3:3e:9d:26:4a:69:4d:90:f2:0a:
07:fe:68:fd:3a:1f:58:a5:d1:2f:ab:cf:a2:ce:72:
48:f0:1c:16:68:41:a1:d5:a3:40:0b:4e:a9:ad:90:
75:ca:9e:b8:9f:c6:da:ca:8d:72:ec:a6:68:33:89:
9e:67:b9:82:ed:33:7f:80:10:ae:23:43:1b:d3:53:
ad:f6:e1:1a:81:ba:14:3b:ca:2a:8d:8c:e4:3f:84:
15:90:26:f1:92:33:8f:35:af:31:ae:3e:22:8f:d9:
00:3b:8b:ad:00:48:54:ad:42:b0:2f:08:c1:ff:a0:
51:ff:e2:87:3f:18:48:8c:fb:7c:5a:3e:00:6b:d2:
47:bc:54:ff:cb:17:55:f1:4c:23:b7:eb:8f:4f:88:
1f:98:47:bd:66:61:82:df:77:83:99:b2:2e:f2:92:
95:93:5e:65:e3:c8:37:c2:b0:f0:54:97:67:39:9c:
ef:6c:6b:2a:ce:53:e4:d4:c8:17:c6:63:d4:20:da:
33:70:51:a5:a8:97:d6:2e:26:c3:db:b8:2f:62:5d:
df:38:96:03:1c:f5:60:91:c3:bc:6d:71:3a:c3:d4:
1d:fc:8b:b0:dd:a9:65:4a:5a:d4:b5:ae:f2:0e:e2:
4c:ae:fa:b9:51:47:4b:98:d0:ca:5c:a9:73:ac:67:
5c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F3:B9:52:32:89:16:49:F3:34:4E:2D:94:9F:FA:30:B4:5C:17:6E
X509v3 Authority Key Identifier:
keyid:2F:57:A3:4B:05:8A:AF:A0:A7:63:12:4A:7D:5D:41:87:F4:FA:AB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f356a-a251-4b7a-9062-2dcd6a00ca12/1/L1ejSwWKr6CnYxJKfV1Bh_T6q6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b3:c2:9e:d2:6b:f9:28:14:a4:ee:b8:75:fd:1e:fb:db:7b:
0e:dd:f2:ed:31:20:09:7a:21:ea:b7:de:49:c9:b5:d3:33:db:
d4:77:0e:57:79:eb:e1:c3:cf:a1:d7:74:ad:39:65:c3:37:f7:
1a:bf:69:b4:2b:3d:85:5e:ba:c7:20:77:e5:75:6b:ea:30:30:
cf:35:74:2b:a9:10:33:55:23:5f:b5:2f:a3:84:42:48:0d:d1:
a2:5c:f9:9f:2e:7b:61:62:56:b0:cd:a8:ea:fa:b1:c1:f2:f8:
5a:ac:44:14:f8:a4:09:76:98:e0:82:09:bd:b1:57:ab:dc:05:
8b:79:4a:ff:55:a7:dc:27:f4:86:5e:9d:57:11:39:a3:47:fd:
3a:89:55:7c:40:ad:02:f1:db:0e:c3:c9:37:80:cb:74:ac:a3:
a4:73:73:d5:56:b0:9a:72:40:06:06:ef:9b:56:b3:15:94:d9:
cb:d8:ca:13:ec:e9:27:22:be:30:dd:9b:cb:01:c8:a6:03:0d:
e7:64:c3:69:1d:14:af:98:97:30:83:b3:ae:a2:6b:8b:b6:7d:
2c:9d:d7:34:f9:ee:a4:1c:67:57:17:b3:8d:7e:61:e3:e5:04:
56:d9:9c:d5:03:3c:70:86:cb:a7:a6:2d:60:24:b5:f0:a6:71:
9d:46:33:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:25 2025 by rpki-client