Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
File: L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json)
Hash identifier: 24wTQko7KHvfjK/2ClPB/QZNVooWyvDJx4Xiwntikog=
Subject key identifier: A8:7B:C5:C1:AB:5A:5C:F4:C6:FA:B4:D5:A2:0C:6F:0A:56:52:F2:45
Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Certificate serial: 019A1F5186CB2F4B40B4F2310386B0FF19FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
Manifest number: 16DA
Signing time: Sun 26 Oct 2025 07:00:27 +0000
Manifest this update: Sun 26 Oct 2025 07:00:27 +0000
Manifest next update: Mon 27 Oct 2025 07:00:27 +0000
Files and hashes: 1: 2y9heUGpm4IABGcsawt9m5ijUw8.roa (hash: 3R+JVKPGvS+pF/oreszpE7P3zqEvUvswY+6b0jSRI3s=)
2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: TynhZlMBXTpTQ47g4NOvDt6YSOLnHZqwLbyXM/Zw9zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:51:86:cb:2f:4b:40:b4:f2:31:03:86:b0:ff:19:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Validity
Not Before: Oct 26 07:00:27 2025 GMT
Not After : Oct 27 07:00:27 2025 GMT
Subject: CN=a87bc5c1ab5a5cf4c6fab4d5a20c6f0a5652f245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:48:91:07:c2:33:fb:7f:89:e9:c6:0f:fe:
cd:9e:a8:1e:82:65:40:5f:88:49:c6:12:12:2b:6f:
b0:91:fc:6c:9d:7b:6d:ac:d3:00:4e:25:d2:a6:a0:
eb:ae:e3:ca:6f:f9:e0:60:3e:bc:3a:a9:cc:b5:4b:
ce:ed:8e:52:a0:49:38:6a:ff:af:9d:e7:61:6b:40:
51:a7:1c:01:ec:fb:79:5b:34:6b:59:cc:a6:62:c1:
e4:4f:a7:e3:9d:04:0b:37:af:80:a4:09:b4:08:f1:
b5:93:c7:f8:6e:63:d3:8a:e7:2b:31:88:3b:02:9e:
7b:16:87:08:e3:ed:70:d4:c8:74:66:eb:5e:12:d7:
0b:48:22:b1:bb:16:95:34:7e:00:15:82:a0:f2:4c:
96:13:96:2f:4d:be:70:6c:d1:29:4a:87:13:c7:ba:
6a:3f:ba:ee:c9:1b:3a:6c:58:ca:f9:c8:6f:a6:ad:
3d:c0:9a:81:73:45:15:1a:14:1a:24:de:df:af:81:
1a:93:87:ca:aa:fa:8c:0e:9c:09:3c:0b:59:a6:05:
65:21:19:cb:4a:7e:42:4e:6d:fa:f7:3c:6b:ef:5f:
67:d9:47:1a:f1:a1:56:f7:34:48:b9:44:7a:3a:4d:
a0:86:db:ef:bc:5d:0a:3f:3e:d0:44:91:dc:91:b4:
9a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7B:C5:C1:AB:5A:5C:F4:C6:FA:B4:D5:A2:0C:6F:0A:56:52:F2:45
X509v3 Authority Key Identifier:
keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9a:8b:f6:7c:6c:01:51:b3:a1:c9:e0:dc:31:e0:4a:fd:54:
13:8d:72:f5:2a:1c:e8:60:68:68:7e:6f:11:d2:90:fc:4a:5f:
50:d1:c7:e6:32:44:be:8f:4f:f5:5c:4b:d6:ea:fa:46:84:1f:
58:ee:98:d0:51:66:8a:c6:9c:7e:06:24:7e:93:59:39:48:17:
90:03:8b:b8:18:8b:41:5e:83:e3:fc:98:11:2a:33:5c:a6:27:
7d:02:ba:5d:76:d0:a5:71:af:30:bf:95:1d:5c:f8:6e:6c:c6:
84:cb:22:4e:4e:6b:c6:1e:38:f7:3d:19:3a:cb:b4:14:7d:b4:
24:0b:f8:9a:e4:47:f5:54:01:8c:42:88:d7:eb:3f:7b:46:55:
62:02:d5:f5:2d:0d:f6:bd:d8:ba:57:33:c4:73:a6:83:9f:b2:
c8:5f:65:98:e9:b6:1f:94:fc:c1:7a:89:28:a2:ac:fb:c2:9a:
04:e7:be:bc:c7:6b:4f:21:7b:dc:9b:8a:86:2c:ab:d7:66:de:
57:90:8b:11:cf:51:fb:b6:29:92:5b:7a:bf:48:d4:a0:cd:04:
3e:c8:6a:80:a7:f3:5f:ee:92:de:7e:2a:ba:0f:2e:2e:18:5d:
3e:cf:cd:a9:77:a9:b5:ad:c3:57:d2:be:21:74:cb:8f:81:5d:
09:94:23:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:06:29 2025 by rpki-client