Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
File: L228auC1ihFzHyGe2gIkcdHhHts.mft (raw, json)
Hash identifier: zvVg5Usu8XKQKVF8S0+3i65ofVF00EMwgwYY1eu1HZU=
Subject key identifier: 81:F9:FB:AE:85:2F:3B:8F:82:05:88:57:06:C1:5F:02:41:B5:A3:AD
Authority key identifier: 2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB
Certificate issuer: /CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
Certificate serial: 019A2D0DB189B6F66F970B92575BCE96DF8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
Manifest number: 0521
Signing time: Tue 28 Oct 2025 23:01:03 +0000
Manifest this update: Tue 28 Oct 2025 23:01:03 +0000
Manifest next update: Wed 29 Oct 2025 23:01:03 +0000
Files and hashes: 1: 8uoobD-uNsoIUa3wePqJLnyhcpo.roa (hash: O0gO7wKip3iHzyPxgcMRO0gg6URqBUsF4wabpY8lFzs=)
2: L228auC1ihFzHyGe2gIkcdHhHts.crl (hash: nU3NL5vmKwSUbiZws9cIYs+9vK5wk5Ypp4JY7T44l5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:0d:b1:89:b6:f6:6f:97:0b:92:57:5b:ce:96:df:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
Validity
Not Before: Oct 28 23:01:03 2025 GMT
Not After : Oct 29 23:01:03 2025 GMT
Subject: CN=81f9fbae852f3b8f8205885706c15f0241b5a3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:0d:f3:23:ad:6f:00:76:d3:89:86:6b:82:
c0:09:ca:1f:73:25:8e:47:21:8e:84:52:72:8f:90:
44:25:e4:8c:84:3d:85:ad:aa:b6:b8:29:99:dd:bf:
f4:4a:64:db:40:4f:8c:bf:80:6f:48:89:d4:1d:92:
04:37:af:54:73:b0:6b:98:9a:9e:f6:90:99:40:96:
b6:85:41:65:5e:5b:ff:51:45:d5:ac:8f:c1:90:24:
fc:de:8a:bf:f8:08:ea:30:97:7a:1b:c8:58:e1:1a:
a6:31:11:55:f5:de:59:ab:43:56:4d:22:66:5e:5e:
4c:eb:74:11:25:3d:c1:fd:dd:c2:6d:a1:d9:72:60:
00:45:3a:d8:15:f0:fa:86:0d:c0:74:7b:05:19:79:
0d:f7:50:f6:22:b6:9b:4b:4e:f1:bf:da:33:6f:03:
8b:cc:7e:17:e6:e0:1e:47:0e:d9:e3:fd:75:de:5c:
df:f2:83:31:35:ab:0c:e8:aa:73:0f:93:fe:1a:b0:
f2:ee:af:d9:46:44:74:2a:29:b0:f0:f3:0f:8c:57:
66:55:e8:44:b4:85:51:ed:4b:08:85:aa:50:c2:0c:
f3:f7:7a:02:c3:60:d2:c1:e3:d2:d6:51:8b:20:73:
a8:0e:c3:62:bf:6f:98:3b:a3:24:b3:ba:c4:9d:0f:
11:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F9:FB:AE:85:2F:3B:8F:82:05:88:57:06:C1:5F:02:41:B5:A3:AD
X509v3 Authority Key Identifier:
keyid:2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:66:c2:38:60:a6:b4:07:1c:eb:3a:1e:7d:0a:9f:7e:c1:d1:
f9:7c:a8:5a:97:dc:9a:0f:be:19:a3:6e:4a:1b:dc:d2:eb:23:
4e:59:69:96:ab:bd:2f:32:7b:48:e3:54:b0:6c:f7:d7:42:22:
cd:50:57:e0:c3:3a:55:3f:88:38:8d:8d:a3:fc:71:6a:34:5a:
e4:0f:d9:70:6d:c1:3a:68:dd:a5:dc:d9:dd:34:dd:f1:11:e5:
e8:dd:5f:e1:2e:29:d6:98:27:7f:e4:8e:c4:56:8b:53:36:31:
fa:d0:bb:54:0d:59:89:be:e4:19:c6:8e:bb:d7:ed:34:51:fa:
ce:13:cb:55:9d:45:45:59:4a:bf:c4:f0:59:87:91:e6:bd:d5:
69:f5:8e:5b:5e:ac:64:fa:5e:1d:4d:9d:ba:14:5d:13:d8:16:
91:2d:1a:71:1c:cb:be:ec:07:b7:a8:54:57:b2:cb:7b:fd:08:
ba:d8:90:48:f8:36:1c:13:9d:6a:9a:b3:d9:dd:f4:95:2f:01:
f6:e8:c7:df:82:8b:0f:0e:72:b9:41:2a:3e:ab:c5:8c:ed:19:
b9:fe:ad:3c:57:b8:e0:b9:62:14:94:85:1d:17:43:fb:9f:79:
ed:ed:4c:eb:fa:b6:83:41:4e:1a:3f:22:89:de:ef:21:ff:83:
a7:87:4c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 01:07:30 2025 by rpki-client