Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
File: L6TocLw3rJcx_m_PloLrZX5QvKM.mft (raw, json)
Hash identifier: cAVrLfLgp6BW929rsKtum9ziHSb+szyuIoOOT14jhDk=
Subject key identifier: 2A:51:7D:DA:0C:41:04:4D:CE:42:E3:46:DE:7F:A3:91:48:E8:74:56
Authority key identifier: 2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
Certificate issuer: /CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Certificate serial: 019A0C6F6A9C60BD86F3F6A24F5806BE7D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
Manifest number: 1208
Signing time: Wed 22 Oct 2025 15:00:19 +0000
Manifest this update: Wed 22 Oct 2025 15:00:19 +0000
Manifest next update: Thu 23 Oct 2025 15:00:19 +0000
Files and hashes: 1: L6TocLw3rJcx_m_PloLrZX5QvKM.crl (hash: FIoxER26GeY98sDDWb2hSzOE+GutqTgapDZjiHp6gLo=)
2: m7j41yWDEfLAx4I6fuINswAyiXA.roa (hash: dDqFpGebxjdBoXgviJqZBlxaNfM8q5rLJMGVfhQeHKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:6f:6a:9c:60:bd:86:f3:f6:a2:4f:58:06:be:7d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Validity
Not Before: Oct 22 15:00:19 2025 GMT
Not After : Oct 23 15:00:19 2025 GMT
Subject: CN=2a517dda0c41044dce42e346de7fa39148e87456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:f7:f9:42:75:68:64:ac:ca:56:2f:9f:56:
dc:b9:88:84:4f:de:08:43:7d:ef:d5:2d:3e:ae:00:
58:2c:85:92:4f:0a:4a:37:81:38:09:44:96:b3:24:
e4:81:09:63:53:65:ca:be:83:b6:be:32:ca:6d:2c:
fc:06:54:70:69:c6:a8:9f:c7:c8:56:de:37:52:bb:
96:bd:5d:4b:9e:86:65:bb:56:9d:3d:a4:14:29:85:
6b:cc:6a:8d:ba:2d:f1:08:43:9c:03:be:1e:02:f0:
89:54:fc:96:8c:1c:ff:e5:1f:8e:0b:8a:6c:4f:0c:
e4:6d:91:b5:e2:c4:f4:9d:15:60:b3:45:a8:cd:45:
65:f1:a4:98:d0:87:f6:51:c2:9f:b3:68:02:6f:e7:
90:18:29:32:b0:d1:61:e5:68:30:fe:a5:34:01:42:
79:c8:a0:4e:63:87:9b:c6:c7:13:25:83:97:cb:46:
3a:d3:d1:38:4d:90:13:57:1a:9f:63:cf:5d:71:5a:
93:00:fe:eb:0c:c9:08:4a:24:20:a0:94:29:67:38:
2d:45:f6:65:2e:04:b8:61:f3:c2:10:6f:be:86:17:
b9:70:07:4c:c1:91:1b:fd:2f:10:d5:b9:b6:a4:07:
7f:40:11:b7:d9:ac:3d:7f:ff:e3:a8:c4:86:f9:74:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:51:7D:DA:0C:41:04:4D:CE:42:E3:46:DE:7F:A3:91:48:E8:74:56
X509v3 Authority Key Identifier:
keyid:2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4b:58:5d:e3:1e:1b:22:b5:0d:67:d2:55:de:93:87:a6:46:
03:f2:b2:c4:04:fa:be:46:aa:e4:08:dd:25:46:0d:b6:3d:1d:
04:63:4c:22:d7:5f:f7:93:4d:3b:53:f6:85:b7:c3:03:3b:2c:
d9:d0:3f:1d:16:18:42:90:5f:8d:e4:06:12:17:39:b2:73:b4:
60:13:97:42:d0:ea:0c:04:8b:94:d4:a9:e9:35:b1:da:07:49:
63:50:56:aa:70:e7:07:a1:cf:66:bd:77:8c:bf:47:cf:d9:4a:
f0:47:87:5a:e7:55:ea:d0:67:13:d5:0f:ef:7c:5c:d6:10:ba:
98:d4:e3:84:a6:8b:fa:3a:74:2f:e4:ea:c3:65:42:44:a9:25:
fe:17:bb:67:60:4e:30:5c:b2:d6:bc:e4:50:fc:66:29:1c:72:
9c:01:e7:0d:5f:64:30:26:eb:fb:37:15:e0:bc:f2:c1:8e:a1:
0d:29:44:f7:15:81:46:3f:29:00:a3:af:76:e6:9d:4e:fe:de:
6b:96:ed:51:0d:c2:05:4b:d1:c1:4b:8a:80:63:44:73:9f:03:
8b:1f:af:27:10:0a:db:d5:59:63:81:b6:0e:d7:cb:33:97:3c:
16:2e:31:7f:7a:83:bd:c9:70:5d:10:f6:dc:e7:f6:b5:5b:12:
e6:bc:de:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 18:58:36 2025 by rpki-client