Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
File: l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft (raw, json)
Hash identifier: uKDEIew7NZP/L5drmCA52iyh11qDWf+yO9hyGTJXfIQ=
Subject key identifier: D1:44:2D:39:75:98:D6:65:C1:06:F0:68:68:6A:9A:5C:D1:42:B8:25
Authority key identifier: 97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
Certificate issuer: /CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Certificate serial: 0199FAD7DF54E211C04C2666E01F859A1D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
Manifest number: 0DC3
Signing time: Sun 19 Oct 2025 05:01:15 +0000
Manifest this update: Sun 19 Oct 2025 05:01:15 +0000
Manifest next update: Mon 20 Oct 2025 05:01:15 +0000
Files and hashes: 1: l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl (hash: Qkv7w9bPBjynmC+Tf0FJBfW69U5Apq1+V9IwrDOGKus=)
2: rAptMRvSUdwv73c1hrV9bfbr3Yk.roa (hash: M82hA2K7N0hc5dPJhXNevznbaSP5bAh4nu7+zgBVgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:df:54:e2:11:c0:4c:26:66:e0:1f:85:9a:1d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Validity
Not Before: Oct 19 05:01:15 2025 GMT
Not After : Oct 20 05:01:15 2025 GMT
Subject: CN=d1442d397598d665c106f068686a9a5cd142b825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9a:25:11:64:21:f2:cb:d3:72:35:fe:ac:13:
4a:e4:f7:37:29:71:19:28:da:e9:87:b2:18:74:a8:
ea:85:b5:b7:75:18:e7:cb:f5:27:f2:22:59:23:54:
ae:e8:8a:a0:c3:a4:ce:0a:8e:14:e8:04:52:76:1c:
e1:76:83:1e:7e:43:a3:82:20:bf:e3:53:74:14:f0:
cc:9f:12:de:7a:0d:c7:f1:9f:5b:c0:c8:8b:17:66:
cb:99:94:e1:7c:e4:51:91:2a:4e:90:22:53:b3:bd:
32:3e:c7:28:f7:06:74:72:f4:c3:11:31:c8:c7:9f:
dc:a9:19:a7:f9:3b:9f:76:2e:22:7d:36:1b:82:5a:
0e:d5:58:7e:cb:fd:ee:78:47:80:a3:99:df:7b:3e:
8a:cc:a7:ac:9b:42:f6:c9:e9:67:4e:92:51:b0:0a:
be:5a:27:fe:14:26:24:88:3d:24:63:98:f3:8d:e1:
a3:c7:1a:1d:2d:06:3e:e1:00:51:6f:e1:a9:7c:a7:
99:17:dc:c0:13:76:72:70:15:35:7b:9d:cf:fa:4e:
64:fe:2f:0a:4b:bc:38:16:66:cf:e8:78:7c:9c:0a:
8c:5c:fb:39:3f:b0:d4:18:f0:34:2f:1d:22:e5:75:
8b:57:1b:fa:b5:12:6c:76:b2:b1:30:e0:ee:df:e0:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:44:2D:39:75:98:D6:65:C1:06:F0:68:68:6A:9A:5C:D1:42:B8:25
X509v3 Authority Key Identifier:
keyid:97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3d:a7:d2:6b:a7:d1:e6:9a:f1:93:b8:3a:c8:2c:56:6a:14:
ae:6e:c3:3b:13:c5:e0:d7:95:64:8f:be:00:ca:d6:e7:94:ab:
5e:ff:1d:ae:6f:e1:f3:ce:18:7c:07:94:2e:78:16:ee:d4:a3:
aa:9d:52:7f:c0:cd:c6:7a:06:a1:17:47:6d:04:1f:f4:5b:07:
6a:14:45:1d:68:0e:ae:03:6f:a1:13:69:ee:fe:4e:07:a5:90:
1a:5f:01:bb:2a:fe:ba:3c:eb:b8:35:57:a3:44:51:43:e5:16:
b5:21:6e:bd:fb:ce:7f:8f:47:91:6e:e7:4c:30:8c:2c:ce:ca:
e5:43:84:1e:62:b4:92:02:37:4a:71:eb:47:89:6f:13:8f:10:
60:2a:96:db:52:d7:2a:77:54:e7:b5:bc:ef:20:11:7f:6a:fa:
c6:64:06:69:5c:10:d9:e8:8d:99:e8:93:2f:0a:78:0e:50:0c:
43:10:4f:f5:6f:39:6f:08:7a:ee:b2:83:3d:19:98:6b:18:a9:
8b:03:18:74:b5:6e:4c:34:f5:8e:4a:62:97:ca:e7:8e:e9:16:
b2:a1:42:d3:35:a3:ce:f4:10:80:75:83:f1:e0:fd:bf:34:3f:
ef:bc:32:e6:be:e6:d2:e0:d8:51:0f:ce:3a:8a:ec:ee:a6:de:
fc:79:4d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:49 2025 by rpki-client