Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
File: L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft (raw, json)
Hash identifier: MJi9IAodrykF+T8fXgfQWemcZQ9Ve/RbicrZ49wUQYc=
Subject key identifier: 03:E9:40:63:81:AE:D0:27:7A:79:60:2F:DF:6F:AC:8F:BA:D4:08:34
Authority key identifier: 2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
Certificate issuer: /CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Certificate serial: 019A71EEBD58DADA05323498C51402F66A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
Manifest number: 141F
Signing time: Tue 11 Nov 2025 08:01:02 +0000
Manifest this update: Tue 11 Nov 2025 08:01:02 +0000
Manifest next update: Wed 12 Nov 2025 08:01:02 +0000
Files and hashes: 1: EOklS1jQhodfalq3XsKaGavo1eQ.roa (hash: 6pvw71E3U09DjHAZOtzmEdbNxf9UgqaL8hPYZIda5pc=)
2: L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl (hash: Xk24n9ZL4t64Bfej7LSWXrsPyP42htKteCZlATuyfoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:bd:58:da:da:05:32:34:98:c5:14:02:f6:6a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Validity
Not Before: Nov 11 08:01:02 2025 GMT
Not After : Nov 12 08:01:02 2025 GMT
Subject: CN=03e9406381aed0277a79602fdf6fac8fbad40834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8d:32:1c:99:fd:51:d3:25:73:c2:00:5c:af:
23:63:e7:c3:e0:9a:4f:de:5a:ae:20:90:f1:05:c1:
98:39:2f:c4:dc:ec:14:4e:14:8b:02:8a:81:d5:26:
f9:51:90:e9:70:b8:08:aa:75:94:40:2d:25:35:5b:
8d:1f:f2:48:5e:89:3e:ab:cf:a1:31:95:23:a9:f7:
17:45:7b:2b:95:46:c3:eb:9c:4b:ec:6f:7d:02:47:
ab:96:fe:b0:8b:e4:c5:cb:7b:62:1d:62:b7:17:04:
72:5c:c0:59:6c:c1:a7:77:87:48:0f:41:24:5f:46:
ef:16:7d:39:d7:28:74:9b:10:f7:0a:d0:e4:f7:54:
80:12:69:1b:6c:67:09:c2:36:9c:72:6c:63:1b:1a:
27:14:a8:fb:01:1d:1a:3d:5b:b4:67:c4:d4:8d:d4:
03:59:f4:5d:55:f6:6b:c7:d9:14:07:24:d9:93:9e:
e2:77:2f:cc:cb:93:53:07:5e:f4:2b:d0:d1:b7:5b:
f4:0d:83:e4:dc:c6:a9:9c:0f:c2:f0:96:3e:21:19:
e1:17:eb:bc:7f:fd:d3:0e:e3:5c:0a:ec:78:de:28:
c4:94:4a:6d:0a:ac:68:0f:1f:6f:93:46:86:cf:ad:
24:11:49:24:59:58:d1:d8:be:8b:dd:4d:03:e1:d1:
ea:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E9:40:63:81:AE:D0:27:7A:79:60:2F:DF:6F:AC:8F:BA:D4:08:34
X509v3 Authority Key Identifier:
keyid:2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2e:68:c2:c4:ea:75:d9:61:1f:e6:cd:f9:11:29:82:09:06:
11:10:aa:87:04:3e:4b:c8:65:ab:e7:75:73:98:ba:87:80:2b:
db:92:c2:74:d3:0d:2a:f2:74:da:08:13:59:b9:b9:38:96:05:
1f:9b:d6:2f:cd:0a:ee:e3:bd:12:70:91:5f:b5:62:a5:a1:6d:
d3:7c:36:c2:d4:d0:85:d7:80:c8:0b:82:12:25:51:d8:6c:87:
2f:0f:39:b0:4f:31:9a:7b:cc:47:cf:10:e1:95:ee:db:c2:de:
69:3f:e3:a4:31:57:e3:b3:cb:c1:38:da:37:f8:02:84:c2:7c:
69:dc:47:56:4f:b5:66:60:cd:f7:71:72:3f:ed:0f:02:e0:04:
52:8a:68:a9:99:45:f0:4a:26:93:f9:df:50:32:86:ea:9a:81:
da:ee:4e:b0:2c:e9:db:c1:37:0d:f6:f1:03:0a:16:ae:a5:3e:
29:0f:5b:a5:7a:a8:44:6f:d9:a1:b8:62:e7:51:5d:d9:6c:34:
cf:43:49:e2:4a:6f:d8:39:8a:37:fd:44:4c:52:09:5a:be:63:
10:47:d2:85:23:96:8a:bf:7e:d9:f6:6a:9a:83:cf:03:4c:f3:
0f:64:10:2c:ef:91:22:72:c8:52:51:ed:f3:d0:df:31:da:a6:
c3:78:3f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:44 2025 by rpki-client