Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
File: L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json)
Hash identifier: euUA4dATVJkkzbUnpMzUoh96YCKrlfJw7fYkVgGjCRA=
Subject key identifier: 3F:72:76:D0:25:02:BD:C3:0F:C1:AB:E1:AF:F0:0C:32:AC:FA:3A:1A
Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
Certificate issuer: /CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Certificate serial: 019A71EE7324CF5E0E47197E134DAE230ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
Manifest number: 0F2B
Signing time: Tue 11 Nov 2025 08:00:43 +0000
Manifest this update: Tue 11 Nov 2025 08:00:43 +0000
Manifest next update: Wed 12 Nov 2025 08:00:43 +0000
Files and hashes: 1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: UdO6QysQZ3UwSFZ3iY9Ti3WT1AqP+BcCxHzYPHpX0uA=)
2: vQoI-4y6Tfml573DLn2pCriBNl4.roa (hash: 3W+CArLvUD2GX28NdlGoBAxxfe8EMtX22dfil51a9Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:73:24:cf:5e:0e:47:19:7e:13:4d:ae:23:0e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Validity
Not Before: Nov 11 08:00:43 2025 GMT
Not After : Nov 12 08:00:43 2025 GMT
Subject: CN=3f7276d02502bdc30fc1abe1aff00c32acfa3a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:65:9f:da:79:e7:dd:32:75:1c:b8:d5:a8:
f9:6c:b5:64:a6:0e:c5:e8:ae:42:ab:7d:ea:cf:a9:
39:bf:0b:ff:e8:6f:8f:4c:7f:3f:7d:eb:67:e0:6c:
8f:ae:ec:f7:73:b2:a6:9f:17:d7:bb:b8:e7:e0:db:
0b:81:4b:a9:f5:e6:ee:4e:0b:38:8d:60:e9:f7:92:
da:62:cb:8e:45:bc:e3:65:fe:df:f5:9b:9a:ad:f3:
ff:6f:8f:e6:c2:a1:e9:8d:c5:7d:6d:fb:f4:7f:89:
04:4f:26:7b:28:88:21:a6:0f:c4:9e:7d:cd:5a:5f:
3d:4c:ec:ed:60:e3:aa:ff:77:89:a2:1a:82:3d:ba:
d0:f7:25:fb:d1:ae:24:6b:73:bd:3e:5a:11:8b:86:
83:ca:df:df:ad:a5:05:69:b6:a6:6a:7a:9d:7b:f3:
59:01:40:20:94:43:fc:67:19:e8:fb:05:cf:e5:d9:
a4:40:05:f5:50:48:e5:24:4f:9b:bb:5c:37:6b:c0:
1d:d2:48:f8:a1:23:2b:53:38:b5:66:2f:b8:0e:ed:
b9:2a:a9:6f:42:06:52:0d:c6:24:fe:b7:af:1b:e3:
fa:07:21:99:84:8b:da:0f:d5:60:6d:83:20:09:93:
1a:74:2a:4c:33:b5:8b:17:19:8c:8b:a9:e9:b3:f9:
33:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:72:76:D0:25:02:BD:C3:0F:C1:AB:E1:AF:F0:0C:32:AC:FA:3A:1A
X509v3 Authority Key Identifier:
keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e4:e0:7a:59:83:d2:67:c0:8a:86:c8:21:51:15:6a:36:c4:
e6:9f:52:00:bd:45:8b:9c:7d:4e:b8:8a:97:fb:d3:66:3b:f4:
81:9b:15:97:a1:89:95:9e:4e:3f:89:36:e4:b8:fa:c9:1d:23:
38:e3:78:ec:f3:a4:40:5b:df:1e:cc:0e:22:da:e6:24:d8:bf:
dd:66:30:09:9a:6c:6b:eb:f5:e3:75:4f:bf:e1:4b:82:77:c1:
2a:77:64:03:ff:10:c1:7b:b7:31:dc:80:67:31:ca:fd:9f:95:
4d:20:09:cb:b3:7d:e9:bc:ca:aa:8c:2d:9f:66:fb:e4:2a:c7:
92:f3:13:cb:db:f8:60:28:b6:f2:72:d6:7c:18:18:5a:8f:48:
6f:84:3b:70:c7:c2:d3:8b:e7:99:e3:54:05:4c:81:0d:5c:f4:
35:cd:a3:a3:1b:2c:d2:c1:e5:87:5e:7b:6c:54:17:ef:6e:24:
4b:27:a4:dd:47:59:39:f7:32:62:13:cd:e2:6c:71:5f:b6:c1:
68:3f:5e:78:7a:2a:93:e0:ba:fd:28:80:e9:68:2c:8e:37:99:
d5:a5:c8:66:01:2e:f4:fe:62:b5:cd:22:5a:83:44:de:b0:19:
90:10:d2:fc:e8:1f:97:35:ff:bb:84:41:b8:44:2a:4c:d9:13:
32:6a:aa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:44 2025 by rpki-client