Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
File: L28Hzq0GpPgRVHYAusAvrwzAhMk.mft (raw, json)
Hash identifier: d1UG+UzdDROXuAjx+VYvm9AgBNXFObchlo+/Vpc10r8=
Subject key identifier: AE:7F:E1:A6:28:1A:8F:C4:76:FD:A9:FB:08:5F:0E:AD:3D:09:39:AF
Authority key identifier: 2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
Certificate issuer: /CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Certificate serial: 019A1271DA0B663EC15BE6BF751CBEE1B2B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
Manifest number: 16EE
Signing time: Thu 23 Oct 2025 19:00:42 +0000
Manifest this update: Thu 23 Oct 2025 19:00:42 +0000
Manifest next update: Fri 24 Oct 2025 19:00:42 +0000
Files and hashes: 1: L28Hzq0GpPgRVHYAusAvrwzAhMk.crl (hash: LphBJ3iDdTFaQWGFJV8yaCxHn1RTN4B38+YtKQ0T5qc=)
2: QqgdIg6hSu9l0qkAmT27rSaYEpI.roa (hash: Zj7N5jWJe1MnRgbFLlzVoeaeQcOnvfzk+fyv1HdeicI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:71:da:0b:66:3e:c1:5b:e6:bf:75:1c:be:e1:b2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Validity
Not Before: Oct 23 19:00:42 2025 GMT
Not After : Oct 24 19:00:42 2025 GMT
Subject: CN=ae7fe1a6281a8fc476fda9fb085f0ead3d0939af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6c:ac:4e:f5:4a:fa:31:92:ba:36:59:3c:8e:
09:8d:1a:39:26:21:10:ce:3a:37:1d:a8:62:53:b8:
cb:9d:6c:77:2d:9f:99:6b:01:a3:a2:fc:87:62:54:
6c:2d:a1:83:25:76:5d:cb:2d:db:30:26:36:ac:df:
90:0a:db:6b:3b:e8:1b:8b:9e:2d:88:fa:26:54:b9:
b0:11:06:7b:4a:b9:55:cc:0d:7c:9f:85:95:ff:73:
80:a1:43:35:5c:47:05:be:c7:be:f7:e1:3b:80:6f:
11:08:5e:37:e6:7f:df:f4:25:7a:ca:39:c7:59:a7:
d7:d3:0e:42:82:8d:cc:96:24:4a:dc:37:12:41:6d:
3e:a1:cb:e9:37:b5:b8:b7:b7:33:62:45:6e:99:40:
dc:df:a2:c0:9a:79:9a:4a:73:a2:70:90:e8:7a:3b:
fc:62:fb:a4:0b:e4:24:18:5a:15:07:78:29:4b:f4:
8b:37:23:49:5e:53:c9:c6:92:0b:90:27:8b:e2:ff:
ba:10:dd:20:61:72:9d:c6:cd:84:46:a5:80:2b:ef:
8f:bc:f1:a7:8a:f8:cd:d7:4c:9c:3d:ae:32:68:b6:
10:40:0a:b2:62:7e:a8:35:c7:d6:a1:39:7c:19:a1:
fe:be:fa:fe:c2:e7:f5:b1:d8:c1:7d:b1:fa:56:12:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7F:E1:A6:28:1A:8F:C4:76:FD:A9:FB:08:5F:0E:AD:3D:09:39:AF
X509v3 Authority Key Identifier:
keyid:2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:15:07:17:85:da:d0:a0:49:5e:a7:11:d7:57:25:a2:eb:9d:
bf:59:f2:21:7e:e4:98:28:a6:5e:6b:8a:0f:52:89:25:de:e7:
09:c1:e8:a8:1d:64:6e:2f:49:af:cf:9e:bd:97:b7:8a:57:29:
56:95:d9:f6:86:da:9b:c3:c0:81:e5:3b:37:38:8f:31:73:a1:
6a:d5:e9:22:94:3f:fa:ad:e2:be:0f:3f:aa:7d:b9:2c:4c:20:
f5:73:d1:5d:4f:e4:e9:f7:67:14:7f:35:9b:73:8c:27:18:80:
02:01:9e:5d:b6:68:c4:cd:a7:8f:3b:1c:80:89:10:82:ca:ea:
93:be:57:15:c0:e3:64:10:13:bc:49:57:a4:7f:6f:c2:fa:a6:
8a:89:4c:33:c7:76:a6:c0:e2:56:ca:11:a9:79:4d:00:a0:6e:
5b:39:28:2b:0c:74:41:9b:54:a4:8c:2a:72:82:b8:fd:22:6b:
a0:ed:98:08:df:3b:98:fb:89:4e:38:14:a1:ae:51:f4:39:3e:
35:df:a2:e8:34:03:b1:76:e3:fc:75:4b:cc:9c:cd:8b:fb:b1:
c1:aa:66:6e:99:37:8f:ce:86:64:ca:19:17:34:38:f2:b1:b3:
0f:72:a1:a0:a6:89:d7:17:2c:60:1b:78:55:e6:0d:ac:0e:d9:
1c:6e:24:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 21:53:04 2025 by rpki-client