Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
File: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft (raw, json)
Hash identifier: 1VO0e9bBgHHPwMvfZthThVbcNm/N1qLVYoBemoqcU/o=
Subject key identifier: 7B:AB:FD:71:73:26:8F:5F:41:04:A2:15:C8:13:0E:E2:F8:A9:11:FF
Authority key identifier: 2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20
Certificate issuer: /CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
Certificate serial: 0199FBEB14FAEAB2E5BD50890D1227F0AD8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 10:01:51 +0000
Manifest this update: Sun 19 Oct 2025 10:01:51 +0000
Manifest next update: Mon 20 Oct 2025 10:01:51 +0000
Files and hashes: 1: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl (hash: BWFyPDa+XKi/w4UhGf7eqLUci7Di4rC9Ax2zp5rwxNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:14:fa:ea:b2:e5:bd:50:89:0d:12:27:f0:ad:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
Validity
Not Before: Oct 19 10:01:51 2025 GMT
Not After : Oct 20 10:01:51 2025 GMT
Subject: CN=7babfd7173268f5f4104a215c8130ee2f8a911ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:07:ae:d0:0d:0e:c4:01:57:c7:49:9b:7c:87:
c8:8b:03:7f:0c:23:1a:2e:1e:65:49:41:7e:db:69:
0c:a6:38:33:d0:14:4d:88:22:42:c5:b5:21:39:c8:
a0:81:01:cb:fd:c6:aa:55:39:0c:6a:77:7a:c5:fe:
75:98:98:46:df:40:00:16:ed:13:7c:30:15:a5:50:
c4:5b:ed:00:38:9c:52:74:e2:25:55:5c:14:97:58:
8a:e2:a5:d9:f0:ae:76:81:73:56:c6:09:5a:27:89:
a5:b4:47:5f:e6:9b:80:f8:ce:99:41:ac:c4:62:e9:
fe:bb:df:e0:86:2b:62:c7:5e:8e:95:c3:cc:e9:ba:
b9:21:04:de:4a:ec:50:e5:c0:91:ff:d8:af:d9:94:
9a:33:12:36:e8:ad:a2:18:d8:74:59:1e:eb:1c:5b:
7e:82:9d:49:fa:64:24:16:01:87:5b:ec:73:88:81:
50:db:7a:ea:39:59:bf:41:9d:64:53:6f:39:1e:5f:
76:7f:ef:84:8d:ec:b2:22:f4:71:74:24:37:36:a6:
a2:f5:fa:cb:0b:f1:fa:5d:b9:8b:5f:88:af:83:4f:
87:07:44:78:b2:54:1d:16:1a:2b:62:2a:65:24:25:
e7:27:b5:51:ba:57:84:9a:b2:78:70:08:d0:3b:9c:
0e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AB:FD:71:73:26:8F:5F:41:04:A2:15:C8:13:0E:E2:F8:A9:11:FF
X509v3 Authority Key Identifier:
keyid:2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:76:34:4d:03:dc:19:95:ce:1f:13:28:3a:1d:3d:67:d3:71:
91:59:ef:45:85:fd:57:cf:1f:f5:9e:26:50:68:a3:55:a4:c7:
cf:35:51:74:f4:d2:35:dd:f1:ce:55:97:4e:ce:04:c9:7a:e0:
9c:a2:f5:93:9a:a7:9f:10:6b:a0:b3:7d:2a:b4:6c:81:1b:e2:
35:42:af:9b:90:c0:64:57:58:03:4b:43:50:58:68:8d:42:61:
37:ee:7a:63:16:a1:8f:e3:f6:0f:7a:d7:f3:84:8e:e2:6e:da:
ad:e0:88:0c:c6:76:35:03:66:f8:a3:dc:e9:f2:23:27:fb:f2:
62:d8:fe:e8:3f:f9:e2:de:8f:c9:2e:0a:5f:56:fa:b4:a1:d9:
8e:73:ab:45:dd:aa:ae:52:da:4f:d1:fa:3b:ec:cd:cf:d1:9b:
7f:dd:e4:d7:25:4e:59:f3:da:8c:c8:7d:b1:29:ae:be:e9:f6:
13:fc:ca:aa:a6:2d:4c:6d:3f:2d:fd:54:73:93:2a:f6:bc:43:
c6:60:6a:12:b4:28:41:ba:a6:85:43:a5:7a:eb:4a:b9:fc:42:
30:29:47:79:18:c8:a2:76:54:ee:2f:d6:c0:49:56:60:3a:a2:
6b:5d:39:83:c8:59:27:9b:2f:83:f5:23:11:3c:af:6c:10:0e:
d7:5e:31:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:08 2025 by rpki-client