Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
File: L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft (raw, json)
Hash identifier: idu8/MRywjjWj6SLNIsYcNXieRiu++YwBlb1L9SmOOU=
Subject key identifier: 82:9E:4F:12:9D:79:8D:3A:EC:A0:BB:C3:EB:8C:E9:4A:9E:B5:05:62
Authority key identifier: 2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
Certificate issuer: /CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Certificate serial: 01984853080F5037107CC879E8C98868052E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
Manifest number: 15E9
Signing time: Sat 26 Jul 2025 20:00:57 +0000
Manifest this update: Sat 26 Jul 2025 20:00:57 +0000
Manifest next update: Sun 27 Jul 2025 20:00:57 +0000
Files and hashes: 1: L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl (hash: Y4j3shh6Xd+fmX4AcrTvIbkRWnZDwz7L0oIPZIuVYiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:08:0f:50:37:10:7c:c8:79:e8:c9:88:68:05:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Validity
Not Before: Jul 26 20:00:57 2025 GMT
Not After : Jul 27 20:00:57 2025 GMT
Subject: CN=829e4f129d798d3aeca0bbc3eb8ce94a9eb50562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:b8:13:0b:ea:50:02:37:7e:be:90:79:61:
0d:a8:c4:5c:59:5c:9c:4a:f0:00:50:a3:6f:da:e6:
21:74:3f:1a:3a:e4:e0:29:5d:8e:ee:48:2f:e8:09:
56:19:64:c4:ea:5b:1f:dc:b4:40:45:0a:8d:0b:b6:
01:6a:65:68:b9:71:b0:9a:55:96:a7:cb:fd:8e:3a:
f7:bc:c4:9d:f2:0d:71:61:7f:3b:fc:60:76:4e:10:
92:1d:60:23:e5:4f:db:8a:1e:29:cf:d2:2f:0d:b1:
eb:9b:f1:dc:fb:9d:eb:33:7a:8c:d0:10:c6:d4:a2:
a4:6d:6c:a0:2e:7a:89:4d:5d:a6:c0:b3:0d:f6:80:
c5:26:a9:3f:b9:03:1e:9c:b2:fc:d0:c2:1e:43:47:
bb:70:91:6e:ea:ae:70:6f:9d:da:1f:cb:b7:a0:44:
e4:1c:a6:f3:bc:a0:d3:a0:ff:91:8b:f2:f0:76:e6:
0b:5e:7d:ab:5e:9b:3a:61:92:3a:5f:b6:94:ef:69:
36:d1:5e:28:37:05:34:70:cc:19:6b:4a:95:57:79:
73:5c:7d:27:d3:a5:0d:58:94:c0:19:b2:9e:78:99:
1b:5f:2f:de:7c:0f:65:3a:fb:06:c2:cf:5f:28:ed:
16:2b:4a:ca:55:04:e1:d4:1b:ca:6f:cf:3b:f6:12:
15:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9E:4F:12:9D:79:8D:3A:EC:A0:BB:C3:EB:8C:E9:4A:9E:B5:05:62
X509v3 Authority Key Identifier:
keyid:2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4b:87:9c:7b:fe:49:7d:6f:4c:f9:6d:3c:e4:3d:5f:dd:89:
6e:74:df:9a:10:a4:1e:83:2f:6f:d6:5b:e8:e8:59:94:09:37:
b5:ac:2c:3d:6d:34:3e:10:d0:a7:1b:19:f2:5a:42:9e:36:0c:
b2:44:02:8d:7d:ae:8a:c4:3e:9c:a4:fa:0a:67:b6:fb:fc:50:
1b:c2:b7:51:60:8a:10:61:78:f1:44:2b:0c:d0:c7:e2:f2:75:
37:37:9d:12:37:02:ce:92:aa:6e:a5:74:a1:b8:cb:8c:16:70:
91:b7:31:70:b9:2f:2c:48:47:11:55:09:17:cf:bd:1f:3d:a1:
67:dd:87:51:31:f6:c2:79:b5:67:77:9b:7a:e4:b8:dd:8e:b3:
5d:f2:83:36:5f:02:d1:a0:18:27:e7:ee:06:8e:ea:26:2c:24:
5c:82:0d:b8:e6:4d:55:86:28:f1:cf:94:a3:0f:3f:84:e3:2c:
70:34:79:e0:90:16:04:54:69:51:11:30:54:3a:2b:2b:83:e9:
df:a6:1c:c6:30:5a:12:a7:25:9f:30:31:cd:6e:c6:1a:25:60:
ee:8d:5a:db:a2:66:31:ab:fe:bc:c5:b7:d0:21:a0:36:d4:fc:
fa:f3:25:59:7e:26:da:ae:52:66:b9:42:58:b9:61:2d:7b:6a:
1b:e6:7b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:40:26 2025 by rpki-client