Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
File: L46D7v5_FLnkSQo27r2IHhY8zBs.mft (raw, json)
Hash identifier: 2WywLzx+PeIdtEiPqkKY+tndAds6YYX4z0N5aDPv6R4=
Subject key identifier: 3E:87:07:3E:F5:97:3E:27:8A:B1:40:80:3E:66:63:F5:CB:76:7A:7B
Authority key identifier: 2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B
Certificate issuer: /CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
Certificate serial: 019A1F1ADF836F61FC2512BBDD5465AC4D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
Manifest number: 143A
Signing time: Sun 26 Oct 2025 06:00:46 +0000
Manifest this update: Sun 26 Oct 2025 06:00:46 +0000
Manifest next update: Mon 27 Oct 2025 06:00:46 +0000
Files and hashes: 1: L46D7v5_FLnkSQo27r2IHhY8zBs.crl (hash: zbarf0nXEu561NrtES/8ksrsrj0q8iXNPGfXlqYZpEM=)
2: ou7kmfNJPTUTO_ZY5p4au0cZuog.roa (hash: 10vYhF0nx+k3pDi2pZX1tYjYlLEGelMx798hFv/wUiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1a:df:83:6f:61:fc:25:12:bb:dd:54:65:ac:4d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
Validity
Not Before: Oct 26 06:00:46 2025 GMT
Not After : Oct 27 06:00:46 2025 GMT
Subject: CN=3e87073ef5973e278ab140803e6663f5cb767a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fa:ea:b1:42:32:d5:d0:a2:92:df:48:98:c4:
be:cf:28:59:d2:73:f4:28:da:9f:0d:d4:d1:48:40:
f6:eb:3e:89:98:2d:60:60:44:c7:0c:dc:76:da:e8:
84:f5:c7:d9:5d:28:71:f8:97:1c:61:37:21:72:88:
43:63:64:2d:78:fa:d1:ef:66:8a:c0:eb:95:0c:96:
43:f8:96:28:1e:e9:b6:96:8e:f1:95:6d:c7:2d:a3:
8f:be:a1:92:87:c4:5c:9e:87:b8:e9:84:4c:a7:3d:
91:92:4a:64:79:31:b7:39:54:25:d9:d0:d3:ad:23:
7c:f2:71:fe:86:a9:13:ce:d3:0e:33:23:a4:a5:4f:
68:f8:e5:c5:8e:e2:34:da:2b:4e:72:0d:4f:97:8d:
26:7e:fd:03:ec:0b:9f:cd:65:bb:9c:f9:ba:4e:87:
ec:38:8d:0e:d0:db:25:df:ea:75:bf:ba:8b:ae:dc:
43:db:e4:ca:22:2d:08:b7:a6:3b:b0:be:cd:69:d1:
98:a3:da:90:09:44:8a:d8:0f:0a:ca:c7:95:d7:31:
4f:2d:fd:25:fd:a4:a6:be:60:1f:f2:30:dd:e8:c7:
fb:4b:a5:f0:02:1f:bb:5a:ad:1b:ba:09:95:9c:ea:
db:2e:fd:09:84:c2:94:95:6f:e3:d6:1c:ae:43:98:
f7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:87:07:3E:F5:97:3E:27:8A:B1:40:80:3E:66:63:F5:CB:76:7A:7B
X509v3 Authority Key Identifier:
keyid:2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f4:47:63:a8:49:32:ae:09:c0:0d:ab:7a:f8:76:2b:7c:ed:
01:53:3f:94:87:29:70:f7:30:59:25:6e:89:ba:05:b7:a5:1e:
b0:08:0b:95:35:60:66:76:16:7f:37:a9:fc:c8:f9:42:7b:39:
e6:b6:dd:9b:fc:02:bb:f5:70:0f:f2:c2:db:6c:95:81:2e:b3:
ac:47:aa:7b:75:9b:47:ac:6b:d6:13:53:1a:91:fd:f5:b9:1c:
59:05:ae:98:7c:a0:64:95:1f:29:a3:5d:25:a3:38:95:0d:e7:
10:ff:63:86:92:82:ce:79:14:62:df:5b:37:e4:d2:6b:ed:d0:
ec:c2:fd:ae:a9:d5:63:c8:a3:b5:c5:04:c9:63:a7:85:fe:cd:
5c:3f:13:6f:c4:1c:4a:2f:d1:31:9f:d9:25:20:db:f2:27:f3:
74:76:ec:23:70:55:f1:6c:14:83:34:a2:df:80:ff:8f:fb:a9:
8b:02:0c:cc:01:33:99:2f:7f:90:5e:c7:de:c6:13:dd:4d:6c:
61:09:72:7b:8b:47:f2:5b:cc:6a:74:86:fb:74:e9:08:a8:6e:
b5:70:45:f6:b1:1f:9b:61:ac:d7:9d:da:99:3c:0c:42:2c:f1:
b0:b9:8a:b0:4a:80:37:91:9d:c4:42:14:1a:55:67:1e:00:9c:
ab:13:45:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:05:42 2025 by rpki-client