Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
File: l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft (raw, json)
Hash identifier: 1hQRlMr83XRZSD8lWFtHyfWB44Utw/jJHuZu2B+iJvY=
Subject key identifier: BB:BC:BD:53:5F:86:64:27:8E:06:8C:31:E6:1E:B3:53:16:2C:5F:54
Authority key identifier: 97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
Certificate issuer: /CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Certificate serial: 0198D54E73AE6C6EE76846F8249D765172A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
Manifest number: 0D2B
Signing time: Sat 23 Aug 2025 05:02:25 +0000
Manifest this update: Sat 23 Aug 2025 05:02:25 +0000
Manifest next update: Sun 24 Aug 2025 05:02:25 +0000
Files and hashes: 1: l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl (hash: cdob2oz6JEJqtcMDXvwXkxW+9QR1auL/NgLdx8yLs80=)
2: rAptMRvSUdwv73c1hrV9bfbr3Yk.roa (hash: M82hA2K7N0hc5dPJhXNevznbaSP5bAh4nu7+zgBVgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:73:ae:6c:6e:e7:68:46:f8:24:9d:76:51:72:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Validity
Not Before: Aug 23 05:02:25 2025 GMT
Not After : Aug 24 05:02:25 2025 GMT
Subject: CN=bbbcbd535f8664278e068c31e61eb353162c5f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:24:31:8f:9b:24:16:ba:7e:9e:e7:18:cc:ac:
5b:8b:c9:e3:23:04:77:a5:b7:09:74:27:d6:22:9f:
83:42:6a:27:55:e8:ac:ff:c0:82:e3:0e:e4:8b:49:
19:a7:18:c5:32:fe:97:6e:86:8b:fd:fc:3d:c4:1e:
68:72:5b:18:90:03:e3:0f:ce:c7:85:7f:14:da:d1:
e9:e6:4e:dc:2c:38:b7:e6:b1:96:0c:ab:b0:0b:66:
eb:b1:66:37:f8:7b:5c:e9:48:15:a3:f9:b5:a8:51:
b5:e3:72:65:1c:60:0c:18:dc:d9:86:15:fe:e6:98:
5d:d5:b2:3d:60:75:29:9b:91:33:8e:2f:ce:a0:00:
52:1f:75:54:19:ff:f9:86:f9:73:f0:2b:16:7e:39:
f4:26:6c:44:72:32:a9:6d:dc:4e:51:e2:c5:1c:64:
7c:18:e0:30:1e:21:8f:d8:72:af:90:07:eb:ab:be:
d0:e5:47:16:30:22:78:d3:35:f7:68:fa:54:1a:d3:
9e:dc:8f:6d:01:c0:cb:79:3e:3b:3b:d6:88:9b:7b:
9d:88:9a:9b:f3:6d:e6:14:82:a9:19:90:76:5b:07:
8e:a6:94:45:aa:7a:d9:c4:8d:d2:ab:d6:14:f8:1e:
d7:75:c7:82:42:e0:f5:76:86:26:0e:0c:e8:6d:06:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BC:BD:53:5F:86:64:27:8E:06:8C:31:E6:1E:B3:53:16:2C:5F:54
X509v3 Authority Key Identifier:
keyid:97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:da:d0:d8:16:cd:e6:8d:2e:1f:f4:f0:ae:5a:69:df:02:de:
12:85:9f:66:fc:15:8c:e9:a5:84:ba:3f:a1:00:c8:18:75:19:
8d:01:0b:48:9d:2a:a2:a9:96:21:66:5c:88:dc:ca:ed:83:c6:
6c:1e:fc:1b:15:8c:c0:8f:70:3b:70:4d:b3:a4:05:e3:1d:17:
68:2d:10:18:0f:3b:4b:a4:38:7a:e7:39:9d:b2:27:db:6e:0e:
dd:bf:c1:4e:8e:82:b4:b6:d8:46:a1:fa:cd:7f:c7:73:b5:b6:
45:c1:f9:0a:34:26:cf:e5:d1:ab:3f:cb:15:cb:a9:d1:e6:82:
ca:0c:3d:28:f8:38:7c:30:e3:44:df:0b:58:b1:01:aa:da:3a:
cc:f2:ea:ae:7a:5d:76:7e:8e:a1:e7:f9:73:23:32:43:44:c0:
51:27:3d:68:aa:fa:a5:27:ca:ff:df:77:e0:d9:f3:8f:d9:c9:
90:09:45:93:b8:1a:1f:1f:ad:fd:08:d3:e4:cd:b3:d5:fa:e7:
8b:17:b0:a4:c8:9f:e5:a3:65:25:f9:f8:c6:de:c5:15:2f:dc:
23:f7:13:e4:75:c5:b3:19:d7:1e:28:d8:f2:a0:33:89:cd:f1:
2e:5e:06:03:27:6d:51:8a:ea:b7:81:a5:ce:04:b2:b4:4d:19:
a8:ee:0e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:02 2025 by rpki-client