Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
File: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft (raw, json)
Hash identifier: y8aG2fu4ol4C579xuDsTr52iAkHsx9bN/xpDCo8R+J0=
Subject key identifier: 1C:B9:66:CC:68:90:F6:59:1F:1A:25:15:F3:27:07:24:3E:A7:59:67
Authority key identifier: 2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
Certificate issuer: /CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Certificate serial: 019A72935243CDF335BB00CB762A37B0C8F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
Manifest number: 0E59
Signing time: Tue 11 Nov 2025 11:00:48 +0000
Manifest this update: Tue 11 Nov 2025 11:00:48 +0000
Manifest next update: Wed 12 Nov 2025 11:00:48 +0000
Files and hashes: 1: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl (hash: NSDtI984BWdwucyvssP6HyI/5d11jSveU+jLFdjcjtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:52:43:cd:f3:35:bb:00:cb:76:2a:37:b0:c8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Validity
Not Before: Nov 11 11:00:48 2025 GMT
Not After : Nov 12 11:00:48 2025 GMT
Subject: CN=1cb966cc6890f6591f1a2515f32707243ea75967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:e9:76:11:91:ce:b4:4b:57:5b:fa:a7:26:
4f:c3:9f:2e:4b:7f:d4:32:0a:d1:48:c6:60:fe:de:
1b:13:78:54:bd:69:a5:db:e6:2e:d3:e9:ca:c8:ea:
e9:29:98:40:cb:b1:65:31:c4:49:3e:c9:55:ca:c3:
87:30:34:4f:0a:ba:69:23:3b:86:41:39:0c:bb:69:
21:07:bf:ec:21:08:fe:97:99:9d:a2:0d:51:0d:c6:
3c:67:b2:d4:e6:22:2e:3d:fe:d5:c2:4c:24:57:c2:
ba:6a:1a:33:12:88:7b:ae:19:1b:70:f2:ac:18:fc:
0f:18:c1:d4:9c:84:b6:ed:f8:ad:99:e5:51:ef:42:
c9:be:ce:00:4c:32:46:68:7a:d2:3c:43:e4:35:a8:
a9:74:aa:f4:59:40:aa:32:82:90:ec:c9:e2:46:3f:
a9:d5:6b:7a:36:e3:fc:df:dc:b7:c3:75:d4:17:e7:
04:40:00:6b:33:09:54:87:73:ee:a3:03:19:e3:c3:
b0:c6:75:dc:b3:6d:b0:36:11:bc:45:10:7c:6e:e0:
00:48:9c:16:72:24:2e:65:14:43:10:6f:4d:9e:c0:
46:dc:af:38:86:0e:07:51:05:3b:39:5b:c9:fe:e0:
9f:11:b5:d3:e6:d8:5a:65:80:3d:6b:64:16:09:b6:
a7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B9:66:CC:68:90:F6:59:1F:1A:25:15:F3:27:07:24:3E:A7:59:67
X509v3 Authority Key Identifier:
keyid:2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:82:4d:40:48:5a:2f:d7:b7:ee:a9:b4:37:46:ec:94:ad:60:
a7:c3:9e:be:da:a8:e8:bb:09:07:25:b9:8c:68:90:1a:33:f9:
cc:f1:4e:bd:b2:9b:b9:b7:00:82:56:25:27:79:49:d3:11:1e:
c3:8d:9d:b4:be:ee:27:d5:0b:05:09:5b:10:be:78:3b:1e:56:
b8:b9:13:bf:b5:9d:6f:fa:f3:c8:57:c5:41:7f:5a:93:07:de:
7d:3d:50:ad:c6:bf:22:fb:72:f6:e0:d7:0a:93:a4:2a:d3:21:
85:79:4a:95:21:69:0c:87:f8:5c:d2:79:e9:e7:eb:54:5e:d4:
fc:cc:17:0d:58:6e:4c:d5:23:50:4d:c7:26:34:51:49:ba:7f:
3a:9e:3d:82:95:5b:c1:d0:dc:46:5a:d5:eb:6d:a1:db:ec:70:
48:cc:df:ed:8d:11:ad:3f:b6:eb:f6:04:07:27:4d:61:2e:c2:
58:67:fa:d1:71:a8:5c:8b:56:42:a3:e1:fd:72:1e:8b:73:11:
6b:0b:80:d6:0c:5e:0e:c2:86:ad:a8:ac:09:41:ac:ed:a9:2c:
27:1c:2d:0f:26:a5:57:3b:3b:7a:a5:b9:24:64:d5:00:ab:c5:
10:25:b6:25:05:31:53:5e:0f:31:40:04:e2:63:52:1c:8e:9e:
f9:d3:ce:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:30 2025 by rpki-client