Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
File: L5FDTuFsYTNOwnDfVox3oLXeBSo.mft (raw, json)
Hash identifier: /Zni3hiMDE5N1j9+CoPGseKpT1CNxBTi8H+eF7CzR5U=
Subject key identifier: 5E:29:B6:1C:C4:7D:6A:B9:62:28:0C:62:06:F0:32:AC:32:86:F2:EB
Authority key identifier: 2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A
Certificate issuer: /CN=2f91434ee16c61334ec270df568c77a0b5de052a
Certificate serial: 019A722652C0B50817E580EE0C8D99E3B942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
Manifest number: 0E04
Signing time: Tue 11 Nov 2025 09:01:45 +0000
Manifest this update: Tue 11 Nov 2025 09:01:45 +0000
Manifest next update: Wed 12 Nov 2025 09:01:45 +0000
Files and hashes: 1: L5FDTuFsYTNOwnDfVox3oLXeBSo.crl (hash: WRYozrxVuZ9RzFHf1NAQXMPZySRfQElE+v9KiZxFI8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:52:c0:b5:08:17:e5:80:ee:0c:8d:99:e3:b9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f91434ee16c61334ec270df568c77a0b5de052a
Validity
Not Before: Nov 11 09:01:45 2025 GMT
Not After : Nov 12 09:01:45 2025 GMT
Subject: CN=5e29b61cc47d6ab962280c6206f032ac3286f2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6d:dd:f6:ef:1a:6c:19:5c:38:df:8f:d4:27:
4d:f8:f2:f2:af:76:9e:97:99:a3:da:d2:76:17:f6:
47:0d:d4:f3:31:e9:50:6a:09:3f:14:41:04:8f:18:
ef:82:5f:96:c9:ad:71:59:21:0f:03:24:af:20:a9:
e7:36:28:cb:0d:0c:b6:20:cd:c1:3e:d5:ed:f4:dd:
5d:af:4c:5e:5d:6b:04:ef:ac:e2:47:11:15:ea:c7:
b1:3b:e1:ae:be:98:01:70:af:5e:94:ba:9c:50:1a:
93:31:ff:9a:ce:f3:e4:45:0c:0f:06:90:34:5d:ff:
5f:52:70:5d:d5:7c:0a:93:24:d5:a0:1b:56:11:13:
e1:0f:64:da:81:27:a0:3d:22:4d:32:67:0e:a0:21:
3f:4c:d2:fb:d3:00:3f:ef:d2:2c:60:d2:a2:e0:c0:
2b:b5:66:da:97:d0:8e:48:c2:6a:36:cd:9b:f6:2b:
7f:54:33:34:4f:ed:72:40:0a:15:da:72:ba:cc:ca:
cb:50:77:89:f1:c6:3d:a1:08:c6:77:a0:0c:3d:cf:
27:b0:ec:44:84:ab:c3:d7:a7:d7:08:92:35:9b:91:
97:af:eb:5c:0b:9c:12:36:83:90:ba:e9:e2:e7:0d:
ce:bf:b4:3c:ee:58:3c:be:65:42:85:6b:5b:05:95:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:29:B6:1C:C4:7D:6A:B9:62:28:0C:62:06:F0:32:AC:32:86:F2:EB
X509v3 Authority Key Identifier:
keyid:2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:31:7a:0f:24:96:0f:81:18:a6:5f:15:99:14:e0:21:1b:ca:
27:13:6b:b0:0f:6e:32:61:08:e4:e9:04:c6:ee:f4:7f:bf:3f:
13:20:aa:28:8a:1f:e4:3e:eb:48:5c:bb:ac:c4:3e:f5:af:da:
cc:04:51:ac:ae:9e:5e:c8:7d:59:e3:9f:3b:87:eb:db:e4:86:
3c:cf:cd:48:0c:b7:fc:c3:69:40:92:d3:a7:f2:23:6b:35:df:
6b:d1:16:9b:92:59:8a:1e:d7:61:48:3b:dd:87:f0:ee:55:65:
3e:95:78:b0:a8:69:81:27:e8:35:cc:b6:84:06:47:0c:7d:a4:
b8:32:89:2a:46:3e:24:a0:96:44:ab:23:6d:73:50:c5:f8:37:
72:76:1c:7f:17:2c:71:f5:ce:6b:d3:03:f7:d5:85:2b:be:65:
62:c8:82:56:c1:34:2a:3e:40:df:74:15:7d:47:43:ca:f7:2e:
b8:2d:a6:0f:e8:95:0a:67:3e:5f:e2:5e:09:3d:df:aa:3e:bc:
a9:58:2f:92:9f:99:d4:b9:47:c4:1c:06:9a:64:fb:31:8c:f7:
34:ac:3c:ee:29:24:d3:99:f0:db:06:eb:6e:08:4b:34:d5:d4:
f7:69:dd:27:e0:20:92:7a:28:24:27:e1:d7:22:e6:c6:28:ac:
0a:3c:dc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:02 2025 by rpki-client