Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
File: L2VDasUDgzLnA6277_WBTbgqtD8.mft (raw, json)
Hash identifier: DjLKl7BoWDAlFrxMOYGqnpxCZgKVuZgroyzCuPww4w4=
Subject key identifier: 89:54:2B:98:1E:0F:73:D4:E5:EE:94:27:81:92:AA:5B:67:CA:91:5B
Authority key identifier: 2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F
Certificate issuer: /CN=2f65436ac5038332e703adbbeff5814db82ab43f
Certificate serial: 0199233112333C08AC1319C0A4FA0CA95B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
Manifest number: 0F8D
Signing time: Sun 07 Sep 2025 08:00:42 +0000
Manifest this update: Sun 07 Sep 2025 08:00:42 +0000
Manifest next update: Mon 08 Sep 2025 08:00:42 +0000
Files and hashes: 1: JwV0QfsSNHG29kGRpDADqSiaDck.roa (hash: KjOMvzGc/F+OfPiH0IzVXvG5nX5kdmCNZ+EIJh+pYl4=)
2: L2VDasUDgzLnA6277_WBTbgqtD8.crl (hash: Hs/94EChV9b076Qu+K4WNRlnBsl7vLsd1/wt23KrYsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:12:33:3c:08:ac:13:19:c0:a4:fa:0c:a9:5b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f65436ac5038332e703adbbeff5814db82ab43f
Validity
Not Before: Sep 7 08:00:42 2025 GMT
Not After : Sep 8 08:00:42 2025 GMT
Subject: CN=89542b981e0f73d4e5ee94278192aa5b67ca915b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:f5:05:b8:e2:10:e2:25:d6:e0:36:7e:e8:
db:c0:65:37:bd:98:a7:17:bf:b1:f1:10:46:42:96:
1a:bb:3c:a5:74:09:55:80:e3:0c:d0:af:ad:bc:68:
f2:6d:88:32:62:0c:b1:fb:28:9b:61:ae:0c:b0:50:
fa:26:1d:09:23:da:bc:59:bd:90:55:a4:b0:f4:2c:
2d:10:98:46:f2:c7:c7:6f:8d:3e:19:39:a6:60:8c:
97:60:29:db:1e:60:50:dd:cb:f7:99:d3:f4:40:1f:
e4:f3:96:96:3d:3e:45:c8:50:ce:e7:cb:74:c3:58:
f8:bf:66:a4:17:7d:73:83:4e:71:15:20:79:fa:d5:
b3:52:7d:67:0e:c1:b2:86:c8:f9:86:b0:86:39:91:
f8:36:88:e8:d4:ed:5b:6b:db:12:cb:ec:a9:d2:8e:
3a:a2:71:2a:e3:97:36:97:63:6d:4c:e7:94:26:b0:
57:c3:55:14:19:dd:62:5d:c5:49:32:e2:36:24:f0:
5f:53:b1:60:db:03:9a:4f:91:c3:34:0d:57:77:8c:
71:1d:bd:8c:af:4d:8a:98:62:a1:8f:4e:95:5f:36:
c1:70:03:b1:59:85:28:c5:fa:54:95:44:fd:f4:0e:
92:1b:80:83:08:92:5b:b3:1b:ad:4c:6e:49:05:4c:
48:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:54:2B:98:1E:0F:73:D4:E5:EE:94:27:81:92:AA:5B:67:CA:91:5B
X509v3 Authority Key Identifier:
keyid:2F:65:43:6A:C5:03:83:32:E7:03:AD:BB:EF:F5:81:4D:B8:2A:B4:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2VDasUDgzLnA6277_WBTbgqtD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff3c79-d60f-4b12-8131-95d60b3e46cc/1/L2VDasUDgzLnA6277_WBTbgqtD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:54:a9:73:c6:df:41:cb:b1:ba:5e:0c:ad:b6:1f:17:5b:7d:
43:94:7d:1e:92:c2:f2:92:67:e2:f8:9a:50:f0:f4:e0:91:6f:
01:30:eb:f3:fe:79:df:d1:28:21:ed:4f:8d:a2:41:36:88:48:
dd:5f:c1:29:9d:24:b5:ad:c2:dc:dd:ee:a4:e6:e6:b4:b3:68:
67:0a:0a:ca:bb:c3:ab:f4:a3:ac:97:15:ab:19:74:1f:f2:75:
ed:7f:a6:8d:f6:a0:99:a5:27:11:75:77:af:ea:98:19:ea:5b:
2f:f8:df:e9:f1:ee:82:4d:63:35:17:85:f3:ba:aa:98:86:24:
0e:17:ca:95:b5:13:e8:ee:2d:c4:70:25:e6:59:60:11:d5:94:
1f:7e:62:5a:83:d9:8a:84:2a:53:7e:a4:2e:49:b4:e4:bf:58:
37:81:e6:33:c3:a9:fc:0f:71:e1:bf:94:6c:be:3c:83:a0:5d:
b5:aa:b1:ef:a7:9e:22:8c:2f:c8:84:f2:57:6f:31:62:62:3c:
39:d7:7c:aa:f8:05:df:f7:74:d2:e3:5b:f4:32:9d:f4:99:39:
ae:8b:e0:82:c7:f2:61:6d:24:6c:98:e4:c2:3c:9f:bb:4f:76:
e9:6c:4c:0d:8d:82:24:8c:95:c5:34:27:8c:df:38:fa:67:72:
f1:7d:4c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:40:02 2025 by rpki-client