Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
File: L72QjQxb06rPUoDdgeogOCzZeOo.mft (raw, json)
Hash identifier: KESj2TcnAZp2x9/vi0UMGMf1u74H3elv7IsGDxpIzGk=
Subject key identifier: 11:87:37:69:90:54:A5:E1:4D:13:F4:7A:57:CE:03:B5:22:40:93:BA
Authority key identifier: 2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA
Certificate issuer: /CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea
Certificate serial: 019A21E4D4409995C7852C629A6FD46E3626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
Manifest number: F1
Signing time: Sun 26 Oct 2025 19:00:35 +0000
Manifest this update: Sun 26 Oct 2025 19:00:35 +0000
Manifest next update: Mon 27 Oct 2025 19:00:35 +0000
Files and hashes: 1: 8DPJokshklZiZ-Wg3NyoXUsggCo.roa (hash: saLQlFoD5jr+b8OXd/uC1s8XxDV1hFFRgD40BfF/jSg=)
2: L72QjQxb06rPUoDdgeogOCzZeOo.crl (hash: sQUmRSUBjmnN3irZxbg9XEYLmDLbZKx0C0/15xs5drg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:d4:40:99:95:c7:85:2c:62:9a:6f:d4:6e:36:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd908d0c5bd3aacf5280dd81ea20382cd978ea
Validity
Not Before: Oct 26 19:00:35 2025 GMT
Not After : Oct 27 19:00:35 2025 GMT
Subject: CN=118737699054a5e14d13f47a57ce03b5224093ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:87:2c:e0:4d:cc:56:23:96:b7:d2:bd:b0:
30:ce:f9:c0:d0:4d:9d:b8:a2:6e:55:05:83:83:3d:
49:c5:2b:95:0a:d5:be:dc:3d:43:bb:60:74:45:98:
f1:62:34:4c:97:ac:ae:c7:23:5c:94:c4:cd:21:5d:
c5:28:64:f1:c9:39:5d:7b:97:36:72:69:97:10:8b:
85:61:a9:10:54:03:1c:31:2d:51:a3:2e:2b:d6:d8:
8d:31:a9:53:b7:4b:42:7a:0e:f3:50:85:f8:44:a9:
ef:7e:e2:45:7a:c6:b6:35:2c:23:2c:c2:a0:0c:15:
0f:1d:a1:9e:67:28:88:b0:07:66:38:bd:5f:b2:61:
1c:d9:b1:c2:50:12:ba:a0:b8:13:ca:9a:43:56:e2:
c8:15:03:d1:62:a1:09:de:ca:70:eb:b3:d9:aa:a9:
89:3d:55:01:c3:5a:9a:85:11:e4:96:f0:2f:31:84:
f2:32:e7:b3:78:e5:cb:36:3e:8f:43:4f:c4:0c:36:
e9:a2:46:35:ac:12:84:ca:1c:0c:13:cb:17:12:b3:
3b:3f:bd:52:eb:00:a2:df:13:38:60:91:d0:41:c6:
84:3f:70:78:21:ee:40:56:a8:79:6d:32:94:71:92:
91:55:49:37:14:67:03:4c:67:c4:7f:93:78:e8:c3:
1d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:87:37:69:90:54:A5:E1:4D:13:F4:7A:57:CE:03:B5:22:40:93:BA
X509v3 Authority Key Identifier:
keyid:2F:BD:90:8D:0C:5B:D3:AA:CF:52:80:DD:81:EA:20:38:2C:D9:78:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L72QjQxb06rPUoDdgeogOCzZeOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e7234c-887e-41e9-ad3c-7ecdd2f64d2d/1/L72QjQxb06rPUoDdgeogOCzZeOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:02:17:9a:f1:fa:8c:13:d0:b9:81:14:2c:eb:0e:7d:c3:71:
ca:5c:cd:cc:4e:96:b8:3a:4f:cb:7b:e2:95:43:50:67:8a:ab:
79:de:84:1d:77:c8:82:ae:0f:54:bd:3a:01:d2:e5:00:b0:12:
ed:59:cf:ff:99:01:6e:41:6d:85:b8:f6:2b:52:a8:c2:8b:8f:
23:11:ab:1e:e8:2c:ba:18:84:6c:c7:00:ea:41:04:be:d9:8f:
08:d4:0a:1b:03:5a:71:b4:cc:dc:c3:f5:88:27:d4:9d:72:56:
19:b9:08:8e:4f:3c:c4:27:0a:0f:db:88:79:22:55:a5:f9:e1:
ee:51:c8:ab:88:e0:f8:44:87:9a:cd:1c:89:5d:5f:5b:99:03:
3b:fe:43:3e:e8:37:ca:24:2b:ff:f5:4c:24:b2:41:f9:01:ef:
e7:d0:17:30:e1:19:54:28:e1:e8:eb:5b:cb:1f:3e:e6:a1:35:
b7:3a:9b:ad:df:db:ea:de:a1:36:0b:c8:c7:bf:73:99:ca:86:
62:75:5b:a6:e8:ba:24:c2:a0:53:96:c5:fe:b0:02:d9:82:1e:
b2:4d:1e:1f:a3:c3:bb:4e:7d:b2:51:df:a0:a1:82:5f:07:53:
0b:99:00:be:31:20:b2:56:98:0f:7b:13:22:7c:10:98:c8:cb:
3b:b8:9b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:23 2025 by rpki-client