Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
File: l2lJAzf2c8ZOORJK6JgbA05QEno.mft (raw, json)
Hash identifier: 0Y4K9OOZpcgRmwnRF7m+CzrlyZLOhevz86hYSl/DMQc=
Subject key identifier: 84:3C:1B:5D:A7:F6:CC:02:80:18:5D:50:2D:57:94:B3:C3:DA:94:AC
Authority key identifier: 97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
Certificate issuer: /CN=9769490337f673c64e39124ae8981b034e50127a
Certificate serial: 0199FCFD696E313B8C16AB2DF80D4E0A5EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 15:01:29 +0000
Manifest this update: Sun 19 Oct 2025 15:01:29 +0000
Manifest next update: Mon 20 Oct 2025 15:01:29 +0000
Files and hashes: 1: l2lJAzf2c8ZOORJK6JgbA05QEno.crl (hash: 9gcrJ/fl4QAUsJeeBjDUxy9zFDLtWEc+zzTd5dn0aqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:69:6e:31:3b:8c:16:ab:2d:f8:0d:4e:0a:5e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9769490337f673c64e39124ae8981b034e50127a
Validity
Not Before: Oct 19 15:01:29 2025 GMT
Not After : Oct 20 15:01:29 2025 GMT
Subject: CN=843c1b5da7f6cc0280185d502d5794b3c3da94ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e9:30:49:94:72:30:1a:9f:25:38:30:5d:d0:
c9:70:15:33:fa:30:61:b9:d0:ef:67:17:8e:b6:6e:
71:4c:cf:a6:63:bf:96:97:98:a8:9b:c9:3a:b5:a5:
3b:6e:9e:36:78:bd:4b:ff:b9:8b:4b:25:be:1a:c5:
5f:76:92:5e:f1:9d:25:ed:40:db:b6:d1:be:71:1e:
fd:9f:a1:16:8b:fe:86:8a:b9:87:0e:c4:75:89:74:
f5:8a:9c:09:1c:c9:b3:68:16:84:1e:36:4b:04:24:
11:a3:8d:d4:a5:db:bf:d0:40:c0:a8:b2:47:a0:7a:
a4:2b:ab:8b:0d:d1:76:f4:22:22:2a:03:6d:55:2a:
bd:39:ca:9d:11:b4:62:5e:2c:82:3f:ad:03:b9:ed:
40:e8:b4:f1:cd:d3:d6:09:ef:22:aa:87:ec:7f:8a:
31:64:38:c2:4c:57:d9:72:d7:c5:4e:02:48:68:ef:
df:d1:e3:af:d7:a5:55:ea:9b:9b:68:8c:1c:21:ee:
8a:85:8d:ad:ab:9d:3c:b3:4c:7c:70:c9:a0:5f:3c:
89:06:96:7b:e3:e0:8a:90:3a:56:6f:29:37:4c:f8:
b6:76:bd:3e:1c:21:06:23:ea:d6:be:3a:07:4f:ce:
9f:1f:59:3d:f0:c1:cb:e3:48:54:9f:f5:27:63:2e:
d8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3C:1B:5D:A7:F6:CC:02:80:18:5D:50:2D:57:94:B3:C3:DA:94:AC
X509v3 Authority Key Identifier:
keyid:97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e5:58:51:4f:1e:8e:2d:7e:60:42:a2:47:cd:05:30:96:a4:
9b:3e:0d:ec:42:fb:0d:87:ff:5f:80:7f:24:5b:da:94:ad:81:
8a:ab:17:2b:f7:a7:49:12:d4:dc:25:e4:b0:d1:e7:b3:39:81:
32:a7:bc:7d:b3:07:56:9d:1f:27:97:df:c7:22:35:5e:d4:4f:
7d:cf:f8:9b:f8:07:f2:52:63:3b:9d:86:26:ab:ab:f3:ff:a1:
dc:16:63:0e:a4:10:c4:5c:ff:f0:2e:ca:49:38:34:2d:1d:16:
67:81:9e:a2:70:4a:1f:d0:69:ce:c6:1c:18:38:db:cc:5a:75:
83:e3:b8:6d:d1:04:44:18:5b:43:9a:de:cf:cd:dc:a0:06:99:
a8:3a:8f:16:8a:b9:3f:40:bd:d6:7d:44:18:bb:97:7a:78:f7:
40:e3:a4:6e:44:c6:65:4b:7a:bf:3a:c9:2e:e7:89:c0:b3:d7:
33:25:14:3f:2c:b4:85:64:fa:48:16:90:74:3c:84:20:87:b0:
55:4e:c7:2a:de:dc:78:08:66:30:cf:b8:0c:70:ae:34:99:8e:
cb:3a:5c:5f:7b:81:81:94:ad:fd:e9:7b:fd:7d:6c:08:87:49:
63:9f:e9:ca:bd:fe:fa:a8:5b:b2:98:cd:9c:80:5c:04:dd:a1:
69:36:90:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:36:10 2025 by rpki-client