Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
File: L7GbEAHBEHH7osw0FMxHW2wpCcc.mft (raw, json)
Hash identifier: X4HLPHbQHb242FnIlCvVyy5qlRGmWNF979KpgfS1iog=
Subject key identifier: 2E:B4:3A:64:4C:B3:3E:0B:DF:67:AA:89:8E:55:72:47:B5:D0:57:EF
Authority key identifier: 2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
Certificate issuer: /CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Certificate serial: 0198D6CD1901891E51FE7F5431B5735550C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 12:00:21 +0000
Manifest this update: Sat 23 Aug 2025 12:00:21 +0000
Manifest next update: Sun 24 Aug 2025 12:00:21 +0000
Files and hashes: 1: L7GbEAHBEHH7osw0FMxHW2wpCcc.crl (hash: orZoFwKeUHDkFgg9ECiD5t3DAI5CHK0YS7bZzylcdko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:19:01:89:1e:51:fe:7f:54:31:b5:73:55:50:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Validity
Not Before: Aug 23 12:00:21 2025 GMT
Not After : Aug 24 12:00:21 2025 GMT
Subject: CN=2eb43a644cb33e0bdf67aa898e557247b5d057ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:ab:fa:e5:2b:31:a3:a7:3e:23:21:e9:32:
c2:81:72:20:13:9e:6a:72:60:4d:90:f2:50:50:19:
9d:5e:2c:eb:7f:9c:33:96:89:75:9a:8a:ee:dd:2b:
23:43:cf:26:10:ca:9d:df:cf:d5:84:ee:79:fb:77:
5c:86:c9:64:cb:fe:e6:6d:cf:08:8e:0e:ce:a0:f1:
c3:79:7c:a6:fd:e0:b7:16:02:15:a4:a6:86:e7:e2:
a1:1b:b8:34:b1:1c:2b:76:79:73:bf:87:05:98:3d:
2e:c5:49:e0:86:f2:71:93:4a:8d:23:3c:9a:6d:5e:
8e:b7:f2:1a:cb:51:e7:cc:5a:1a:eb:cf:65:ee:b8:
ac:1d:4a:8f:c7:51:14:3e:ce:4b:16:f8:5b:ce:6e:
53:e9:e4:78:55:4f:48:2d:5c:36:3a:4b:bf:36:97:
34:5d:73:3c:4e:71:ff:8a:52:88:3d:c9:6b:8e:02:
4e:76:6b:00:7d:bb:18:83:2b:f8:47:71:13:04:02:
0b:31:d8:f5:38:d4:84:35:40:a7:72:b4:41:73:81:
dc:e0:cb:48:a9:67:c7:10:4c:56:b9:f7:28:41:fc:
68:ae:14:28:1c:6c:aa:10:5f:b7:22:7e:9c:3f:56:
a7:06:02:b9:85:87:4e:58:d5:e4:e5:d4:0c:ba:4e:
67:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B4:3A:64:4C:B3:3E:0B:DF:67:AA:89:8E:55:72:47:B5:D0:57:EF
X509v3 Authority Key Identifier:
keyid:2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:98:4d:83:34:15:08:8c:d8:90:30:9b:19:5f:d7:68:45:53:
e3:8e:f0:46:ae:ba:16:e4:0f:92:9e:c4:c5:4e:df:66:8d:b4:
eb:21:b6:ef:cb:da:0a:ee:d1:e9:84:2e:1a:75:fa:70:8e:59:
ae:22:8b:ed:56:f0:11:71:90:e2:3f:7b:47:45:31:e5:7d:a6:
d0:56:b8:ec:24:5b:b2:74:99:d2:71:f5:37:16:b4:cf:3d:7a:
b0:31:9d:c8:de:3d:97:e4:8d:6d:55:25:ae:f7:c1:c8:a0:6a:
35:76:0e:b8:6c:5b:27:22:bc:bf:47:17:ec:10:6d:37:ac:7f:
2f:08:84:ee:ad:4b:2b:6c:7f:5c:9e:f8:55:b3:5b:50:d6:05:
38:73:98:7f:57:57:cb:09:4c:6e:71:0b:3a:92:6b:08:d7:ae:
26:b6:3c:c6:77:fb:e5:6c:41:3c:65:a5:d5:37:4f:8b:32:fe:
d0:82:42:56:52:0d:a4:99:36:7b:f5:4f:cf:31:af:6a:ce:57:
76:bf:2a:1a:97:92:0b:f1:9f:bf:ce:c1:3e:27:04:01:54:97:
71:c6:31:db:e6:1c:65:d8:c9:54:40:1e:41:d1:ad:88:34:03:
1f:9f:f2:33:cb:8f:1a:53:36:e8:dc:d6:6e:54:ac:59:7b:13:
e4:23:df:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:33 2025 by rpki-client