Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft
File: L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft (raw, json)
Hash identifier: Msi1Kvunub1niW9pNyRCDxP+wfdT2jxijSSllECLbi4=
Subject key identifier: 0F:68:ED:FD:15:08:BF:1C:E3:C6:5D:61:33:59:CA:48:68:2B:2B:2C
Authority key identifier: 2F:70:53:26:64:34:3C:B3:D2:89:70:23:A1:27:F6:0B:A9:17:A5:DD
Certificate issuer: /CN=2f70532664343cb3d2897023a127f60ba917a5dd
Certificate serial: 019A725C404409205A7F75B3EDF23899FE1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft
Manifest number: 0D12
Signing time: Tue 11 Nov 2025 10:00:39 +0000
Manifest this update: Tue 11 Nov 2025 10:00:39 +0000
Manifest next update: Wed 12 Nov 2025 10:00:39 +0000
Files and hashes: 1: L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl (hash: qbwQe+4bWR9Mjg3Fswl9fCN0mOI1mvB+EQMwCF0/gbA=)
2: oXOzqFKOXP3W4QFBtQoblsrTovg.roa (hash: kz8J5VBJEC5JGo2WZcJjdy6PbbTAbAu9KBrjeHE5F9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:40:44:09:20:5a:7f:75:b3:ed:f2:38:99:fe:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f70532664343cb3d2897023a127f60ba917a5dd
Validity
Not Before: Nov 11 10:00:39 2025 GMT
Not After : Nov 12 10:00:39 2025 GMT
Subject: CN=0f68edfd1508bf1ce3c65d613359ca48682b2b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d6:dc:8f:ed:ae:53:74:bc:24:43:20:1b:ac:
10:2c:4a:7d:36:cc:f1:32:d2:3c:47:e2:02:92:50:
c7:9e:3b:d9:be:9f:af:71:7e:7a:9e:b8:41:ac:d7:
76:61:40:a8:93:52:2f:aa:9e:03:03:43:3e:da:e6:
68:cd:bb:aa:a8:03:30:84:bd:24:77:15:0e:aa:7a:
f8:ba:4f:50:01:a5:83:d4:5c:8e:a7:36:80:e9:f5:
29:d3:9f:85:72:4b:60:09:0c:76:17:23:1a:84:6c:
1e:5b:ed:86:ce:96:04:74:dd:a9:95:62:46:22:71:
53:9c:e5:5f:5d:b1:c4:03:11:b5:c9:2f:94:bb:24:
71:d4:35:f0:19:9b:1b:e7:3f:84:1f:92:64:bd:7f:
d6:78:d6:b4:9a:be:aa:3a:91:9c:d4:76:93:c3:f7:
d5:a5:71:eb:6f:d4:61:d8:f3:69:bf:d0:53:49:f7:
8e:43:21:fa:8f:a8:a4:22:10:d4:74:77:16:d6:8e:
a6:5c:e2:b7:97:75:e2:42:dc:8b:d2:5f:66:96:62:
d4:91:a1:8b:2f:1c:17:6f:0a:8e:ba:d0:ad:46:fb:
5b:79:cd:24:ac:62:3a:88:6f:9f:d8:72:86:8a:55:
b4:cb:79:41:78:c9:65:a6:ff:fd:4d:d3:70:41:3e:
54:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:68:ED:FD:15:08:BF:1C:E3:C6:5D:61:33:59:CA:48:68:2B:2B:2C
X509v3 Authority Key Identifier:
keyid:2F:70:53:26:64:34:3C:B3:D2:89:70:23:A1:27:F6:0B:A9:17:A5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:74:ee:c7:64:fb:24:12:bf:e2:8d:74:91:54:34:f5:90:9f:
21:04:66:5b:a3:d5:13:a5:50:83:ca:f3:86:7f:ae:a0:a2:3e:
a0:49:ee:65:6f:3b:4c:6b:f8:c9:2d:0d:2d:db:e6:31:14:39:
98:03:11:1d:76:df:e1:bc:69:38:3d:7f:85:ac:91:09:88:bd:
52:8a:e9:86:db:69:7c:71:d0:09:dd:3a:e4:3e:ee:06:5e:38:
58:30:80:f6:d3:d8:aa:d0:1f:2c:a9:a9:ef:28:0e:c8:30:0d:
c1:1e:a1:5c:f6:17:6e:c7:3b:de:c2:35:78:37:c8:6f:76:db:
9e:3a:a5:6b:93:15:61:bf:ae:d9:8b:71:16:e7:1b:87:88:ac:
d9:67:3a:e5:6d:7f:84:c7:c8:e5:18:03:51:c6:6f:91:c0:ad:
0d:53:7c:65:29:3a:67:7e:a3:f9:13:07:8f:6a:4c:90:00:ef:
29:08:b0:25:79:fc:f8:1d:e6:b8:24:09:70:c3:c5:fc:37:e4:
fd:89:75:32:bd:9c:33:ce:68:be:af:8c:4c:0d:63:ac:31:3b:
7e:c9:da:76:2e:6e:c6:48:a3:dd:e1:04:37:84:5e:4b:82:ec:
c0:e6:a9:8f:d2:47:36:2d:9d:2a:1a:95:8e:f6:b1:68:d7:75:
5d:37:68:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:31 2025 by rpki-client