Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
File: L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft (raw, json)
Hash identifier: 9bQT4Mwrk8hOmh8PGe4gHIUxgSsGNeYMJW4EGaIQn4A=
Subject key identifier: 47:EA:97:2B:13:75:E4:F1:32:93:1F:0E:CC:E5:43:85:78:0B:32:CF
Authority key identifier: 2F:9C:C6:A3:F4:C2:38:19:30:BA:8D:1A:F0:D9:5A:BE:C0:96:81:E4
Certificate issuer: /CN=2f9cc6a3f4c2381930ba8d1af0d95abec09681e4
Certificate serial: 019A209BE1807FB92DDA1151E9C74CADE4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
Manifest number: 16F4
Signing time: Sun 26 Oct 2025 13:01:17 +0000
Manifest this update: Sun 26 Oct 2025 13:01:17 +0000
Manifest next update: Mon 27 Oct 2025 13:01:17 +0000
Files and hashes: 1: L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl (hash: iVoFtE5kWV/imd6AX5zGto9QxJVAkDPlCQRpUu4i5I0=)
2: TYDdD2uxFpvnn7BeeyNRIhrYOWU.roa (hash: aAKeZOkxG98jWI5WqK0AaKLmvqEXTtJ8l1136XOUFDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:e1:80:7f:b9:2d:da:11:51:e9:c7:4c:ad:e4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f9cc6a3f4c2381930ba8d1af0d95abec09681e4
Validity
Not Before: Oct 26 13:01:17 2025 GMT
Not After : Oct 27 13:01:17 2025 GMT
Subject: CN=47ea972b1375e4f132931f0ecce54385780b32cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:0e:0f:01:52:fe:12:6c:53:0f:cd:25:b9:
a4:73:37:ed:4c:e6:87:48:18:bd:23:5f:5e:d5:5a:
3b:c6:e8:f4:d4:8a:1c:5a:0e:b7:bc:cd:a9:be:80:
58:57:86:13:94:26:6a:38:1e:67:33:85:e2:f8:a6:
a1:5c:27:99:9f:0f:0f:33:02:6e:02:4c:90:ef:0d:
2e:22:bd:46:f6:94:0f:ae:9d:36:b2:c4:a1:d1:76:
d7:e2:e6:fc:0a:03:a7:48:0e:57:34:ee:9a:66:96:
08:e7:c1:5f:5c:1d:a2:8b:13:9d:37:45:6b:47:23:
99:4d:9b:a2:9f:d2:ac:8f:a3:1a:76:35:16:b1:a8:
5c:e4:6c:1a:ba:16:8c:a5:c6:98:f6:00:5c:cf:0c:
b7:ae:e1:0c:dc:d5:f8:a7:50:a4:79:3a:c1:95:08:
db:78:1e:73:8a:15:4f:00:5c:62:40:53:bc:67:ef:
c2:ee:3f:57:1a:df:e3:6c:d7:8a:de:74:5d:d0:51:
e8:2e:fb:3f:ca:c3:73:c4:63:ab:7f:4e:89:c7:89:
89:ab:9e:d1:a9:ea:7b:dd:5b:f4:67:2f:48:6c:54:
9f:2d:b4:13:e9:15:7d:2c:ea:d4:1d:4d:c6:aa:b3:
de:da:64:9d:0c:ed:b2:53:d4:ec:fe:55:7a:3a:a7:
a7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EA:97:2B:13:75:E4:F1:32:93:1F:0E:CC:E5:43:85:78:0B:32:CF
X509v3 Authority Key Identifier:
keyid:2F:9C:C6:A3:F4:C2:38:19:30:BA:8D:1A:F0:D9:5A:BE:C0:96:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4c:41:4c:04:b9:42:03:a0:c2:57:f3:47:b2:71:15:81:c0:
6d:d2:be:a4:f8:45:b4:43:00:af:b5:c2:04:e9:40:bc:b7:c2:
52:8a:f9:b9:17:c6:cd:79:48:24:d7:d7:40:ab:fa:95:75:f3:
aa:20:59:f3:57:f8:5f:e4:12:46:b4:6c:c8:f6:65:64:0c:02:
b1:cf:5a:48:1d:a2:b5:4e:26:28:06:53:38:65:8e:d2:7a:87:
ca:d7:fd:c0:32:94:8f:bc:c4:b1:84:22:56:6a:2e:0e:e2:06:
e8:1a:44:54:68:cc:6b:13:e5:07:e7:10:8f:4a:9d:4a:fc:3d:
59:b0:08:b1:6b:bc:6e:e7:b5:32:78:07:8e:39:a4:6e:b6:22:
be:26:c8:85:a6:ce:5c:42:34:60:8e:89:ce:fe:31:6d:e5:69:
f6:78:a4:cf:75:be:53:17:73:09:87:69:c8:26:2d:77:44:14:
37:08:a4:f4:79:49:0a:b8:5d:b3:84:2f:fc:f0:d2:b8:a5:09:
d4:9b:a1:25:74:26:2b:38:df:d5:08:a3:81:21:eb:f8:19:51:
79:51:6d:6c:2c:5b:60:49:ee:3e:85:ca:d0:b2:21:4b:0a:05:
a8:8f:07:05:49:d5:29:21:fd:6a:84:4f:e4:0e:8c:cb:b6:07:
d3:e9:e6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:37:50 2025 by rpki-client