Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
File: L2ANKR1II4Na8QOq057eBb0SybY.mft (raw, json)
Hash identifier: 8Q2Z0KJTQRk66LXytnWi8Ul0Sg8Zk/kwhYF9fUqCb9A=
Subject key identifier: 9D:BE:8B:EF:C3:6B:83:0A:48:D5:69:89:31:88:F9:D7:9C:56:97:71
Authority key identifier: 2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
Certificate issuer: /CN=2f600d291d4823835af103aad39ede05bd12c9b6
Certificate serial: 019A711379DB4D41E646E1A47A2B87227ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 04:01:33 +0000
Manifest this update: Tue 11 Nov 2025 04:01:33 +0000
Manifest next update: Wed 12 Nov 2025 04:01:33 +0000
Files and hashes: 1: L2ANKR1II4Na8QOq057eBb0SybY.crl (hash: 6DwXkMud06GvDvxi7s+rDU9Cqaw8x9RBOIomf+gYdOM=)
2: pqKGvQcYODMxijEGtk7mPTU_Tr0.roa (hash: ZlDmL3k6HQGAT39givBrII+8Db8zx8Fa+aDyGXQWZzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:79:db:4d:41:e6:46:e1:a4:7a:2b:87:22:7a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f600d291d4823835af103aad39ede05bd12c9b6
Validity
Not Before: Nov 11 04:01:33 2025 GMT
Not After : Nov 12 04:01:33 2025 GMT
Subject: CN=9dbe8befc36b830a48d569893188f9d79c569771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:70:65:bc:c5:19:2c:3d:25:c1:d6:83:08:
b7:7b:26:28:1f:0f:a5:dc:4d:c2:be:a6:cd:a8:bf:
22:a5:76:d6:04:db:d9:ea:7a:3c:15:46:86:37:ae:
5a:76:4b:1b:6c:50:30:af:be:bb:5f:b8:56:5b:3a:
92:13:04:a2:ac:73:51:b1:14:0b:d9:80:d8:ce:71:
e2:cc:21:dd:d2:ca:e6:27:64:29:a3:0f:aa:e8:0b:
c3:38:a9:46:0c:8e:c1:94:f5:1d:9d:3b:d9:d5:02:
72:b7:b1:ff:5d:e7:55:e7:dc:f6:35:31:e6:9b:23:
37:c9:39:29:4c:80:39:e7:94:a4:ed:e4:46:ff:49:
03:ab:52:8f:a0:21:f8:ec:eb:a0:64:0b:7e:2b:b1:
32:48:26:d4:77:13:48:d4:46:86:30:1a:90:6b:9c:
94:ec:10:db:f1:7d:28:f1:40:40:65:d9:47:5c:8e:
5d:8f:8e:04:fa:65:c5:ad:2f:32:eb:d7:aa:e0:8d:
ec:92:cb:a1:6d:03:d5:75:9e:ec:63:f0:78:d2:79:
fd:45:49:c4:4f:a7:10:b4:55:7a:39:e8:f1:ff:55:
b5:76:f5:75:fd:17:62:1c:ea:32:79:3d:92:a3:c3:
fe:3b:11:9c:91:13:44:21:9e:fd:18:aa:0e:86:e8:
99:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BE:8B:EF:C3:6B:83:0A:48:D5:69:89:31:88:F9:D7:9C:56:97:71
X509v3 Authority Key Identifier:
keyid:2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e3:d7:fb:a2:6c:10:43:1b:e0:8e:b4:c5:cb:39:2d:11:57:
73:37:64:33:2c:08:08:37:50:20:27:d0:59:72:e5:e9:5d:f3:
e0:ed:f3:a6:dd:f8:92:7f:03:0d:91:30:b2:0e:bc:d4:11:de:
8b:d5:b8:a1:db:20:3a:61:5b:23:4e:0f:0c:f3:69:3b:0c:97:
a6:70:e8:2f:1c:11:20:c3:24:75:c0:50:4b:64:a7:93:ef:76:
bf:3e:66:15:1f:04:c5:96:e7:59:1d:5b:0f:f2:39:f6:fa:9a:
0d:66:c9:19:f1:d1:bf:a6:8c:22:2b:07:0e:89:9f:4f:df:0d:
1e:cb:12:6f:e2:6d:de:ca:fe:c9:71:2c:24:bf:38:02:8e:f6:
6f:66:f6:84:4f:c5:34:97:89:4a:1a:3f:ab:6a:63:38:8e:c4:
b3:93:87:75:8a:0d:18:7d:a8:85:7b:6b:eb:42:4b:fa:fd:45:
6d:85:af:ab:2f:c2:c6:09:84:e4:7f:2e:8c:23:5e:31:c3:31:
f4:62:85:55:51:ee:5b:61:de:62:be:3e:8d:5c:fa:13:22:dd:
f7:8b:9b:54:df:87:38:59:77:51:58:31:f0:d1:45:ea:21:1b:
92:9b:c3:a1:47:60:96:a6:6a:58:a8:27:e0:2b:76:a4:7f:b7:
1c:a0:7c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:26 2025 by rpki-client