Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
File: L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft (raw, json)
Hash identifier: wJS7+UG4R0k05y9FKUqXqFOoM31XFNy0pSrdHcKno4c=
Subject key identifier: 78:7D:E6:B5:58:18:9D:F1:24:46:7E:9D:4C:7D:55:23:3D:B7:0D:D8
Authority key identifier: 2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A
Certificate issuer: /CN=2f64716b186be1145822e1c70764fab61fb13c6a
Certificate serial: 0198D660386AF1D9CF6C85D6F5197A427084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
Manifest number: 0893
Signing time: Sat 23 Aug 2025 10:01:26 +0000
Manifest this update: Sat 23 Aug 2025 10:01:26 +0000
Manifest next update: Sun 24 Aug 2025 10:01:26 +0000
Files and hashes: 1: L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl (hash: kQZkhDZ8lu4ausELUxsW9BhaV9DSUyTnjiXNRM8H0Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:38:6a:f1:d9:cf:6c:85:d6:f5:19:7a:42:70:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f64716b186be1145822e1c70764fab61fb13c6a
Validity
Not Before: Aug 23 10:01:26 2025 GMT
Not After : Aug 24 10:01:26 2025 GMT
Subject: CN=787de6b558189df124467e9d4c7d55233db70dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:7b:e4:d3:d5:5a:f7:9d:cd:37:a0:aa:02:
f2:39:e7:50:af:35:40:e9:ed:1d:e2:8d:a0:fb:ad:
4c:2a:54:d2:b4:ea:f0:89:81:a0:54:de:31:f5:eb:
f5:7a:2e:c1:b9:cf:09:e6:5d:e4:40:69:c1:13:90:
85:8d:91:57:49:36:2a:e5:5b:22:f2:42:a4:31:4c:
c8:85:17:fb:59:f5:f6:a3:88:2e:d6:01:f2:fc:d0:
b1:94:95:05:44:7b:fe:43:c7:4b:df:5b:f1:9a:49:
23:67:5a:e0:51:8e:cc:be:54:46:5d:86:c7:3c:06:
35:47:fa:0a:9a:26:00:a3:fc:e7:53:00:ef:60:c9:
42:18:85:b9:7a:7e:5c:e9:5a:3c:f3:fe:63:3d:83:
65:d4:bf:13:76:cc:6d:4e:d5:61:83:30:f9:1c:86:
16:ac:0a:a8:d4:cd:b8:e9:32:6a:0b:dd:9e:f2:13:
12:2f:44:03:6b:d7:7a:fc:8b:5e:23:9a:76:9d:c7:
7e:e3:3e:e9:3c:69:9e:4d:87:24:a1:89:91:a4:e0:
b6:c8:80:27:92:50:2c:5b:95:ef:ec:01:96:79:b9:
79:f9:70:6d:33:a8:e3:4e:65:f2:86:bf:ce:45:e9:
b2:e0:5d:e5:ca:3d:14:44:a6:eb:53:27:78:43:89:
ca:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7D:E6:B5:58:18:9D:F1:24:46:7E:9D:4C:7D:55:23:3D:B7:0D:D8
X509v3 Authority Key Identifier:
keyid:2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:89:9c:83:ee:1d:92:9c:f1:17:df:a3:fb:d7:7f:32:5c:22:
44:46:c4:e7:85:4b:7b:e8:4a:52:ac:9f:9b:9a:38:e7:e3:ce:
d2:aa:fb:74:48:dc:ee:ac:a4:ce:fd:0c:cf:f1:83:ea:d4:e4:
a0:02:7f:d5:02:c0:e1:04:a7:d6:de:98:54:7a:46:82:9c:75:
19:1e:e7:fe:18:40:f0:1f:db:e2:e9:e9:6f:b9:b4:3c:c3:8b:
1a:43:59:a4:04:d7:fc:aa:e3:5d:17:33:a3:35:33:b8:16:94:
ef:58:54:eb:a3:aa:8f:75:6d:d0:38:f8:ef:19:14:21:51:91:
d9:b1:da:5e:40:ec:ac:69:fc:41:70:c2:8f:f6:09:70:3b:b1:
9b:99:d3:d7:8c:82:54:96:d6:0f:4b:ae:4d:5a:b6:78:2c:3a:
ca:19:ad:8e:42:5e:68:d2:44:37:64:06:bc:69:d4:f8:39:62:
c1:0d:c3:e0:55:a5:79:77:4f:ad:18:b8:ee:d6:d9:a0:c7:24:
5f:d6:2a:02:f4:3f:61:47:01:b9:bf:24:99:91:04:87:32:25:
e1:12:57:53:a5:ba:c6:da:b3:74:00:f0:46:cc:a7:de:2c:1a:
85:07:73:23:4a:55:af:69:1a:5e:81:da:0d:2c:86:cd:3d:6a:
18:9f:ff:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:51:53 2025 by rpki-client