Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: Z3XNapNPUBElfpX4mWtYipngw6zHCOhrCcgpG25fozk=
Subject key identifier: 85:83:2B:1B:CA:43:6E:26:BD:4C:DD:49:A8:D4:66:D3:77:3E:C5:61
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 019A4BF39369C69AC16E8B28E9B8B2C262E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 0FC1
Signing time: Mon 03 Nov 2025 23:00:45 +0000
Manifest this update: Mon 03 Nov 2025 23:00:45 +0000
Manifest next update: Tue 04 Nov 2025 23:00:45 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: aAm6KiIVSBHKNUnmdZlqnZj8cb1yj0267DGsME0IIyw=)
2: aVM2JRPGoP421g9oSUNGjf9qD-0.roa (hash: 42F126y1V8CdYKNFngkqVCoN/zI9pVlEuybIcm6uoWA=)
3: vIU4Yywm4_gH0qTtuVvYBbqi0Vk.roa (hash: 7tRCC811YWihlT+yYcIFOXhADjHxLL/OK1DaYCuI4jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:f3:93:69:c6:9a:c1:6e:8b:28:e9:b8:b2:c2:62:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Nov 3 23:00:45 2025 GMT
Not After : Nov 4 23:00:45 2025 GMT
Subject: CN=85832b1bca436e26bd4cdd49a8d466d3773ec561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:df:22:1d:d3:25:65:57:96:e0:35:96:4e:
8f:e1:eb:e0:3f:fd:90:98:6f:42:1f:fc:55:17:f1:
a4:16:08:8d:0f:b0:99:a8:3d:be:fb:46:7a:d9:29:
c8:48:21:4e:4b:ab:0c:59:cd:96:6a:0e:85:66:55:
92:0b:cb:8c:c8:40:84:a2:61:49:c8:99:b4:f6:0a:
81:17:9d:ad:1b:e8:8b:ee:40:71:41:db:9f:89:5c:
1b:7b:27:77:ce:1e:08:97:cc:1e:da:cd:db:17:c5:
95:dc:66:61:4c:a1:6d:37:28:67:d7:03:04:37:21:
5c:39:62:a6:85:88:3d:e9:82:e7:7e:40:b8:73:6f:
cd:43:8e:6b:42:9f:75:dc:7c:9c:b2:e0:4a:13:35:
a3:d0:7f:8c:3e:db:6a:8f:28:4b:bb:10:83:96:4f:
cb:e2:5c:2d:c1:e5:16:52:3d:e9:c3:f4:71:1b:59:
86:cb:0c:1f:31:f5:1c:db:65:9a:a8:61:92:a8:de:
76:ae:13:04:e6:62:65:08:67:c2:ad:b1:f6:d6:c9:
62:b7:7c:f9:b5:c6:ca:22:e6:0c:2a:e6:57:84:bd:
43:4d:86:6d:87:8b:cd:19:37:d1:1a:e4:10:8d:35:
ee:3c:d4:61:fe:2e:3f:4a:d8:8d:e8:e9:6d:fb:17:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:83:2B:1B:CA:43:6E:26:BD:4C:DD:49:A8:D4:66:D3:77:3E:C5:61
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1f:ac:a8:e5:fb:26:be:7d:b1:33:2b:78:03:3a:a8:62:94:
5e:73:22:57:a7:07:a3:aa:16:ca:72:be:4a:92:aa:1e:12:4e:
c5:1c:8e:87:7a:d6:a1:16:09:15:67:67:fd:bb:45:e4:e4:af:
41:3b:4b:86:0e:30:12:b6:0a:31:d9:e6:0f:5c:6d:60:5e:0f:
67:4f:4c:98:0c:42:1d:4d:80:3f:6c:5f:85:79:2d:d5:07:35:
02:c9:af:76:84:8b:8e:32:ba:0b:73:d3:ef:ae:04:48:b8:ee:
7c:29:cf:d8:32:86:f5:38:9a:65:25:38:be:1c:2a:dd:6b:8b:
45:9c:ee:b7:9d:e6:7f:c7:05:3f:34:13:8d:a9:61:e8:df:b9:
dd:3a:6d:95:18:55:de:05:7c:45:b0:43:63:ef:64:54:32:54:
be:bb:08:a7:c1:7e:6b:74:a7:e6:7d:63:3a:80:f6:38:29:ca:
77:69:b9:34:fb:2a:5e:a0:2f:7c:a2:79:e9:54:e8:a1:d4:a4:
03:ca:c1:de:f4:65:ca:6b:d2:59:26:fc:cf:e0:39:5f:0b:db:
f7:07:50:6f:d1:10:99:f7:cb:ac:6a:09:e8:42:b1:c4:18:a6:
2e:de:7b:31:53:06:93:51:16:02:13:bc:aa:2a:e8:15:21:60:
c5:c1:f4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:01:12 2025 by rpki-client