Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json)
Hash identifier: VB4lp41DWLfAIT70PybH2oYJ8Dl2bbZ0Zvbqf5q/UU0=
Subject key identifier: 4D:2F:34:00:0C:04:20:8B:24:0B:98:45:D8:96:6E:74:E1:FE:89:3A
Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Certificate serial: 0198D73B584D4812844859951C3B89921FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
Manifest number: 065C
Signing time: Sat 23 Aug 2025 14:00:47 +0000
Manifest this update: Sat 23 Aug 2025 14:00:47 +0000
Manifest next update: Sun 24 Aug 2025 14:00:47 +0000
Files and hashes: 1: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: RBKtPj7Covz0UsxjC7thjsPJRJzeN9EsEWJKFGYeMsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:58:4d:48:12:84:48:59:95:1c:3b:89:92:1f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Validity
Not Before: Aug 23 14:00:47 2025 GMT
Not After : Aug 24 14:00:47 2025 GMT
Subject: CN=4d2f34000c04208b240b9845d8966e74e1fe893a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:66:20:45:73:7d:f1:a6:23:ce:51:7f:f9:
22:9a:8a:b2:c7:4c:94:6b:d3:f6:b0:e9:cc:0a:cb:
b7:36:c1:6e:ab:29:a5:10:e7:94:d0:fc:ca:fc:77:
e7:57:d4:7d:7b:dd:6a:a4:93:b8:e6:ed:0d:7b:ef:
b5:86:d7:55:d2:ec:28:d0:5c:68:60:f7:09:f2:a1:
0d:a8:1a:14:ad:7e:45:1b:4b:4f:84:99:b3:3e:e4:
f0:a4:a3:d1:d7:c2:71:f9:f8:44:21:30:58:68:36:
11:12:a3:3a:ed:23:21:3a:de:ad:d9:ab:c5:4c:81:
b8:89:d7:d2:c1:cc:07:67:e1:3a:e7:e1:7c:0f:04:
bf:9b:81:cf:47:b0:e0:37:33:61:a8:f8:7b:ce:b1:
d4:16:4f:23:13:1d:8b:33:26:91:08:01:e2:e7:b5:
4c:d3:e2:5b:9c:8f:7a:6a:14:a2:64:02:a2:a7:f4:
f5:23:3a:8d:0e:e1:47:12:0a:c6:64:29:a3:1c:81:
a3:47:da:5b:21:d8:40:44:67:6e:bd:3c:d8:67:8e:
5d:26:6c:51:7c:94:0d:99:2d:32:8a:42:24:58:43:
39:36:7b:e7:89:d6:6b:16:34:f1:a1:1c:b8:fe:97:
34:74:52:1c:1f:61:a2:b3:8f:73:1e:51:20:62:21:
d3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2F:34:00:0C:04:20:8B:24:0B:98:45:D8:96:6E:74:E1:FE:89:3A
X509v3 Authority Key Identifier:
keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:96:30:0d:78:e2:d9:d7:d9:9e:3d:3f:bc:49:ed:da:38:5f:
86:2a:0d:b4:25:91:1d:c2:b3:9e:6f:79:bf:bd:63:da:4a:e2:
07:33:06:6f:e1:1b:e4:0f:40:ad:9b:e9:63:62:a2:c0:55:ce:
15:14:a8:af:64:25:9d:d4:f7:58:0a:3b:1f:b2:7b:17:a4:32:
28:5a:b3:a4:e2:83:ed:21:f4:b2:c7:46:64:06:32:50:c9:97:
83:6e:5b:e3:14:b0:e2:b6:fd:38:46:8d:cf:05:c2:10:f1:83:
33:ea:14:80:46:9e:a2:03:a0:21:98:1e:ed:de:7e:cd:f0:9e:
92:39:6e:92:6d:2c:d8:a7:a8:7e:55:bc:25:62:da:57:09:77:
21:7f:5a:06:b3:3e:d7:d6:15:e7:ae:d0:96:dd:eb:03:92:75:
fb:8f:0f:ea:7e:5c:07:a6:c6:02:d7:d4:47:91:a0:24:4e:60:
67:d9:d9:0b:89:8d:95:47:8a:b7:cf:ea:5f:5e:a2:12:51:5c:
1e:c8:66:a6:3a:61:a5:0c:3d:58:17:9a:6b:bb:29:9f:b0:7c:
cf:7f:46:1c:a8:31:02:07:27:a4:65:6c:6d:7d:46:1e:40:ee:
4f:1c:ec:7d:03:e6:57:d5:62:b4:4f:70:3f:e9:31:b8:86:c2:
68:38:48:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:21:26 2025 by rpki-client