Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
File: L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft (raw, json)
Hash identifier: ZHet/ubXxFzR4NatAn2QHOxYwciPxAwgMqmckwNjf5g=
Subject key identifier: 03:66:2D:C5:7B:E5:0C:CD:C3:06:62:8A:6D:E1:55:C5:7D:EE:DC:C8
Authority key identifier: 2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
Certificate issuer: /CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Certificate serial: 0199DEF3288031D8FE3537AAC64D015DC396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
Manifest number: 16D3
Signing time: Mon 13 Oct 2025 19:01:41 +0000
Manifest this update: Mon 13 Oct 2025 19:01:41 +0000
Manifest next update: Tue 14 Oct 2025 19:01:41 +0000
Files and hashes: 1: L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl (hash: SzAkQasWqjSxqw1wxgIYeg7GnaznxQ1zkfhvXHlu+tE=)
2: fVFqHVP_QiliJMl-kIcrOxmuCro.roa (hash: GkKxdagAYy+CINxI1Dp6ck9rxu8bkF9hmUyqgByM5jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Oct 2025 17:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:de:f3:28:80:31:d8:fe:35:37:aa:c6:4d:01:5d:c3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Validity
Not Before: Oct 13 19:01:41 2025 GMT
Not After : Oct 14 19:01:41 2025 GMT
Subject: CN=03662dc57be50ccdc306628a6de155c57deedcc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:36:5b:1e:a8:c6:0f:f2:e5:b7:74:7b:b4:a7:
28:47:f0:e7:df:f5:0d:5b:cf:d3:85:57:d4:94:c2:
31:19:e8:28:16:21:dd:46:83:62:a7:7b:9f:dc:9c:
4a:c0:c7:f2:ff:65:b8:e5:e9:d4:7c:42:ac:8a:63:
7b:d7:72:b2:05:de:d8:90:2c:8f:5e:4e:6d:82:f5:
90:09:af:4c:50:15:e3:8b:ab:ca:ee:a2:88:22:15:
d8:2d:11:1e:a8:1b:94:21:39:27:d1:b0:74:6d:00:
fa:59:b3:76:e9:81:c2:95:a1:2d:d5:77:c4:3b:6d:
5f:d1:8c:ce:4d:08:f1:85:37:14:3e:09:44:d3:44:
11:41:51:17:d2:03:a9:e2:80:e3:8c:92:52:e7:32:
4e:3b:72:fc:49:72:45:c9:db:2e:91:5d:d1:1f:00:
51:7c:6b:6a:5a:cc:d0:fe:ba:f7:df:6d:a5:58:fa:
9d:d5:07:da:7e:75:1b:ef:47:46:fd:bd:98:e4:10:
37:71:3a:d7:75:b0:ac:ff:9b:62:4f:9f:29:b7:2b:
7a:19:1a:4a:8f:a3:40:66:c2:50:13:ac:d2:42:67:
a8:3c:22:94:bd:cc:e4:65:ee:0e:25:ab:c6:e0:50:
cf:80:c5:d0:c4:9b:76:bc:51:74:3c:f5:cd:1b:dd:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:66:2D:C5:7B:E5:0C:CD:C3:06:62:8A:6D:E1:55:C5:7D:EE:DC:C8
X509v3 Authority Key Identifier:
keyid:2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:30:84:89:41:01:fe:27:f0:f7:4b:b2:76:9b:04:dc:29:2b:
91:d4:af:aa:d8:15:a6:84:cb:eb:61:1d:e4:58:c0:8b:c9:83:
36:d7:5b:a9:14:df:0f:e1:5a:9c:46:c2:a2:a3:93:f1:2f:d6:
43:c3:d4:aa:00:3f:3a:f2:8a:69:c3:02:e5:93:f0:f1:d7:d9:
0e:e9:ab:9a:6b:b8:fa:08:4a:99:52:1a:5c:4f:c2:7a:61:a0:
d2:a9:d7:be:e4:2c:62:e6:99:ce:2d:fe:36:cb:57:07:da:1a:
10:d2:1f:03:2c:68:96:3d:ec:28:73:20:9f:ac:20:d1:3e:7b:
9e:62:cd:0c:81:62:55:b9:64:08:62:78:f1:16:3a:28:b8:05:
32:4b:30:75:28:42:48:3b:cb:52:91:99:83:2d:3c:29:1f:6b:
32:ee:77:88:6c:93:29:55:f2:6f:13:4f:c4:a0:88:81:1a:87:
d5:1a:a8:d1:37:d2:a0:06:61:51:e7:42:76:4b:af:93:ff:89:
ac:e5:78:39:03:3c:a2:1e:a1:2e:d6:a8:de:e2:e6:c3:cb:1d:
c7:57:ae:61:ad:ac:0c:86:25:3d:52:b1:8c:84:74:69:3d:aa:
3d:68:8c:c3:5b:9b:a3:65:14:96:54:a0:87:bc:32:05:3e:68:
a5:0b:4a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 00:51:07 2025 by rpki-client