Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
File: L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft (raw, json)
Hash identifier: qjJ2969OMViJoHZ4AENVqF+qUOGKn905s3rS/MWwy1Q=
Subject key identifier: A6:86:11:A6:FF:67:81:BF:52:6C:CF:EF:E1:7B:DB:AF:CD:D5:15:88
Authority key identifier: 2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46
Certificate issuer: /CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046
Certificate serial: 019A73A6616A7FEFEF66310C43AD9600A28D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
Manifest number: 138C
Signing time: Tue 11 Nov 2025 16:01:14 +0000
Manifest this update: Tue 11 Nov 2025 16:01:14 +0000
Manifest next update: Wed 12 Nov 2025 16:01:14 +0000
Files and hashes: 1: L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl (hash: F9zsOw3xGJ8fJ4aQCAhqAB66YX8G9LwJd4I7QBUbWtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:61:6a:7f:ef:ef:66:31:0c:43:ad:96:00:a2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046
Validity
Not Before: Nov 11 16:01:14 2025 GMT
Not After : Nov 12 16:01:14 2025 GMT
Subject: CN=a68611a6ff6781bf526ccfefe17bdbafcdd51588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:bc:cc:6e:1a:ba:89:f2:14:c4:f7:ea:94:
45:fc:58:fa:85:26:cb:55:b0:84:da:86:1c:58:e2:
4b:ff:d2:4a:54:1f:f6:75:ac:76:b6:7f:45:da:10:
e1:e7:21:97:a7:6e:43:de:53:34:78:fc:db:6b:1e:
53:a1:84:79:6a:11:4b:66:4e:3a:a2:77:b1:0b:0c:
6b:69:33:c0:dc:56:17:f9:6e:c4:68:e2:80:5d:35:
e6:2f:e8:6c:e7:da:5a:4f:da:7c:4e:1e:58:f9:be:
70:85:57:08:68:39:12:5a:4b:89:14:85:29:4f:96:
15:29:d2:16:b6:35:d2:02:dd:d4:e3:e3:bd:ad:b1:
db:44:bb:a1:9b:fe:ee:d5:65:9a:98:eb:43:30:5a:
7b:a4:93:ca:58:fc:76:88:d1:e7:37:15:bd:f2:d0:
33:f4:87:19:b9:1c:a3:0d:95:5c:0d:b2:db:7a:60:
bd:0b:77:37:32:e3:94:d0:88:1d:4b:5e:57:30:7b:
66:a7:f7:07:ec:a9:69:8d:fb:fe:3d:52:d2:0e:3e:
4d:f7:55:4c:14:65:47:ce:db:83:cd:11:f0:33:6a:
f7:f2:31:e3:e1:5a:be:2d:d5:2b:bb:c9:d3:5f:5d:
1a:12:13:fb:7b:ca:3d:b3:aa:1d:87:2c:44:35:8a:
fc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:86:11:A6:FF:67:81:BF:52:6C:CF:EF:E1:7B:DB:AF:CD:D5:15:88
X509v3 Authority Key Identifier:
keyid:2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:47:d8:cc:f4:e8:91:7b:3f:11:48:1f:5e:da:7b:aa:43:1b:
d7:04:9e:64:4d:8c:8c:5f:32:a0:15:f8:37:71:b7:4a:e7:08:
d4:29:80:cc:65:72:06:fc:4f:13:86:6b:49:cc:cc:55:51:9d:
a2:a0:7e:b3:34:81:5c:24:0b:9b:2d:1e:11:5f:12:5d:31:54:
b3:20:73:8f:0d:72:36:52:a1:c8:67:0d:44:4b:65:2e:43:b1:
5f:ec:6a:9f:08:d2:b2:0a:0c:b8:66:67:13:6e:4b:a8:b6:e1:
55:fd:7d:e6:88:e2:cd:28:f4:43:99:a0:b7:17:a7:d8:36:27:
58:f7:64:0d:83:bf:d3:91:19:48:1c:b3:f7:2d:b3:68:20:e2:
0b:da:8e:af:43:e9:3b:c8:49:9f:44:57:33:99:8f:b0:46:8f:
b6:2f:eb:cc:4d:10:23:f7:02:bc:40:ea:2a:2d:7b:4c:58:5d:
5d:c4:8d:d2:37:af:53:0b:19:c6:95:52:f7:3b:cf:61:9a:45:
b0:16:e2:28:bb:a1:da:b4:ac:ae:59:e9:44:f7:ac:3e:ed:50:
09:fe:18:fc:e8:b2:a7:01:12:15:d8:15:7c:2d:da:2c:18:a2:
8d:88:21:58:80:8c:1d:95:ae:20:f2:22:89:0d:97:ee:c4:84:
a0:17:50:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:11 2025 by rpki-client