Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
File: l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft (raw, json)
Hash identifier: w99cNK4hw3lFYqA6kM7WsoWLNC5lKOkDT7WKvQoEVsY=
Subject key identifier: CE:1F:CB:26:C8:48:A9:63:D6:13:E5:B9:19:75:3C:6D:2A:B6:1B:29
Authority key identifier: 97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF
Certificate issuer: /CN=97b6cb48841ce519b28359caf1bce340e33681ef
Certificate serial: 0199FCC61791D1ED4D8436E02C6F661A0228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
Manifest number: 088D
Signing time: Sun 19 Oct 2025 14:01:04 +0000
Manifest this update: Sun 19 Oct 2025 14:01:04 +0000
Manifest next update: Mon 20 Oct 2025 14:01:04 +0000
Files and hashes: 1: l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl (hash: EhK41T0odq05iraHmkKD+KQ7v+8uXsA//NyDfvlfWx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:17:91:d1:ed:4d:84:36:e0:2c:6f:66:1a:02:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97b6cb48841ce519b28359caf1bce340e33681ef
Validity
Not Before: Oct 19 14:01:04 2025 GMT
Not After : Oct 20 14:01:04 2025 GMT
Subject: CN=ce1fcb26c848a963d613e5b919753c6d2ab61b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:4d:c1:1d:69:33:e9:25:b8:48:bc:e4:51:
61:6a:e7:12:11:9c:ef:25:b0:3b:db:89:77:01:57:
b0:d2:c4:93:65:b5:4d:33:32:dd:79:d5:74:dc:97:
e0:b3:bb:20:f0:1b:9b:46:ce:79:9a:31:c2:8e:48:
f5:3f:35:6f:01:e4:69:56:49:98:f2:3a:66:bd:af:
9d:de:1c:84:ae:7a:14:11:fc:f5:f5:26:f5:48:0a:
ed:fa:f9:ee:c3:a7:76:8b:05:45:3e:55:4c:d3:39:
d2:55:bc:33:eb:ef:7f:08:5a:2d:f7:f6:27:fa:2b:
4a:88:c3:4e:18:8a:71:f3:73:13:90:2c:ac:4d:4e:
c5:e2:b8:dd:83:ca:53:e1:d8:97:51:0e:c7:ce:90:
41:8f:d7:19:49:e9:2e:86:a8:bf:42:0a:54:67:44:
ee:37:db:56:db:a9:a3:26:c6:31:92:d5:76:3d:17:
91:61:d5:2e:a4:5f:9a:80:98:4e:bb:2f:da:81:db:
b4:64:a1:20:5b:00:7c:fe:ce:85:39:d9:ed:30:d5:
27:1d:8b:5c:de:a2:ae:ce:ea:4e:dc:49:20:70:66:
aa:34:61:5b:ee:bc:e0:fb:75:78:31:03:38:31:4b:
0b:f0:d5:4a:a2:fc:43:fc:da:45:54:6e:f1:f1:68:
8a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1F:CB:26:C8:48:A9:63:D6:13:E5:B9:19:75:3C:6D:2A:B6:1B:29
X509v3 Authority Key Identifier:
keyid:97:B6:CB:48:84:1C:E5:19:B2:83:59:CA:F1:BC:E3:40:E3:36:81:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bdd92e-3b11-416f-ae93-46ea656bf389/1/l7bLSIQc5Rmyg1nK8bzjQOM2ge8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6a:5c:32:63:a2:4c:60:bd:b8:f3:d8:be:1b:73:9f:94:32:
b8:35:61:cf:d3:c3:5f:b4:19:55:09:32:1c:8f:c0:21:e6:8c:
cb:41:c9:f3:b8:9b:7e:b0:b0:1a:fb:20:ce:f1:20:4d:63:21:
ff:cb:8a:dd:47:ce:07:54:ba:9d:29:af:36:ab:09:fd:45:8d:
1f:bb:33:ea:c8:05:01:be:a4:24:86:d1:28:06:65:87:1a:45:
fc:2c:2c:45:d0:8e:27:af:ca:f3:8e:e7:ea:9b:a7:51:21:b7:
e1:62:ca:c6:03:96:86:84:f7:80:c4:1c:6a:f8:9b:87:fd:26:
cb:74:7f:88:ae:46:ad:36:e6:36:8c:81:c5:f2:f4:21:6c:81:
7d:11:0c:ab:c0:d4:e8:c0:25:78:7d:ed:23:03:ed:04:a1:e6:
26:82:fb:f8:5a:59:00:c0:ac:24:8a:be:d0:25:36:2a:bb:24:
d9:ed:03:c6:36:aa:b8:f6:d1:64:81:c4:0c:b3:3f:d0:c8:3f:
cc:80:55:01:7e:f5:61:aa:f8:92:ac:d8:4b:b6:a4:93:9a:3f:
9f:fc:6b:c3:21:8e:bb:15:d6:35:5d:a7:c4:b4:3d:c4:fa:3c:
f8:0f:bd:3c:69:61:26:66:c6:5c:c0:0a:b1:53:02:35:75:1e:
09:e2:95:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:18 2025 by rpki-client