Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json)
Hash identifier: LSpQvAnLpPW45hVlwtQAxo/XIJ8F1VR3l0ZyBNPS3xY=
Subject key identifier: 3F:0B:60:0E:3F:0F:D3:20:E1:7A:4D:15:21:C5:5A:2F:0F:77:47:E9
Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Certificate serial: 0199FCC6546C7E48507C235120D25B4F338E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
Manifest number: 06F4
Signing time: Sun 19 Oct 2025 14:01:20 +0000
Manifest this update: Sun 19 Oct 2025 14:01:20 +0000
Manifest next update: Mon 20 Oct 2025 14:01:20 +0000
Files and hashes: 1: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: 45QZlcT5FvF0JuX9OUyBN+aGbfW4wfcvkKMS2tBaDPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:54:6c:7e:48:50:7c:23:51:20:d2:5b:4f:33:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Validity
Not Before: Oct 19 14:01:20 2025 GMT
Not After : Oct 20 14:01:20 2025 GMT
Subject: CN=3f0b600e3f0fd320e17a4d1521c55a2f0f7747e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c6:67:0b:37:52:2c:9c:ac:11:19:2b:01:78:
86:96:f8:09:2d:51:3e:d9:8f:ab:0c:77:70:0f:45:
7b:e1:a3:eb:8b:e3:81:6b:01:3a:48:61:ee:55:f0:
b5:88:0d:b6:df:88:eb:52:98:0e:d4:34:ba:cc:e9:
ec:c5:df:98:d3:61:6a:0d:f4:d1:df:6f:97:41:e0:
b0:ad:bf:98:29:03:60:5b:e5:91:fd:c0:f4:ef:58:
47:f7:a4:6c:97:6d:76:80:0c:e6:f2:c2:e0:43:32:
61:dd:3b:cf:61:c2:10:9b:4e:94:5c:48:e7:15:c7:
72:30:ef:b5:87:1e:83:de:e7:b1:7b:ec:8a:14:32:
1a:7e:14:43:ef:6e:8d:82:e3:b2:dd:9e:33:f1:82:
d1:a1:b0:83:ea:25:85:10:6d:7f:25:49:95:75:48:
8e:d4:e9:8b:0f:42:62:62:52:0a:4f:89:b3:46:ff:
07:3a:79:20:e8:85:c7:0f:6a:e9:c8:53:fb:e4:ab:
77:3d:32:81:6a:f3:e0:13:73:66:9a:c3:5d:69:d3:
69:e9:c7:17:95:ac:7c:ec:66:67:f0:c8:55:78:28:
6c:e0:f9:9f:cb:14:45:f5:44:fd:d5:6f:30:e1:f8:
cd:a6:17:6f:05:a1:8c:51:e6:da:b2:34:35:75:46:
d5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0B:60:0E:3F:0F:D3:20:E1:7A:4D:15:21:C5:5A:2F:0F:77:47:E9
X509v3 Authority Key Identifier:
keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3f:88:c0:ed:2b:3b:d0:7d:85:49:de:02:94:f0:4a:c2:11:
88:4e:3f:a1:90:63:69:2f:c6:d1:be:5b:ab:1d:f6:a6:70:b2:
6a:84:e1:0c:3d:f6:77:33:62:47:78:ff:7e:8f:ee:fe:96:f2:
98:bf:c2:c6:cb:92:ee:74:d1:d9:ee:f4:5e:c4:51:5c:76:05:
69:c6:97:d1:0d:fa:95:68:fc:24:4c:98:d7:14:57:d1:54:28:
32:b7:1b:e3:7a:e9:4b:52:1b:af:77:9c:15:cb:a0:86:b8:44:
2e:e2:24:7b:ab:6f:5a:6b:d9:2f:2a:57:50:cf:f6:98:da:09:
7e:a8:d3:d9:13:d7:71:82:21:27:70:a1:ad:45:11:a4:03:40:
24:9f:05:a3:cd:19:7a:de:4b:db:4e:6d:27:fd:d2:49:5e:65:
f6:a1:f5:25:b3:27:64:37:f4:ac:a4:2d:95:d9:9c:09:54:28:
d7:a9:19:f0:52:0a:a6:2c:d6:58:c8:3e:9a:70:dd:a2:e3:8f:
24:53:fc:5d:71:3a:a9:e3:a5:80:71:4a:b5:fd:b6:4e:48:a3:
6d:d8:06:db:e4:1c:b5:62:ff:62:c1:20:14:28:1b:c4:63:cf:
74:de:f5:af:20:f8:b6:f4:01:5a:be:97:ba:4c:97:4a:29:31:
39:75:f9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:44 2025 by rpki-client