Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.mft
File: L8tesBINBwkLEmJWxFo1KC1awKw.mft (raw, json)
Hash identifier: 0Dz2PRal06544QolCtxT89xJH3fyCA6Y/uqIOzu9fb4=
Subject key identifier: 3D:5F:6B:0D:3E:06:13:48:1F:65:48:C3:F3:B5:0F:E9:27:08:E8:74
Authority key identifier: 2F:CB:5E:B0:12:0D:07:09:0B:12:62:56:C4:5A:35:28:2D:5A:C0:AC
Certificate issuer: /CN=2fcb5eb0120d07090b126256c45a35282d5ac0ac
Certificate serial: 01984966C9653628EEC542BA675C05E822A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8tesBINBwkLEmJWxFo1KC1awKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.mft
Manifest number: B5
Signing time: Sun 27 Jul 2025 01:02:09 +0000
Manifest this update: Sun 27 Jul 2025 01:02:09 +0000
Manifest next update: Mon 28 Jul 2025 01:02:09 +0000
Files and hashes: 1: L8tesBINBwkLEmJWxFo1KC1awKw.crl (hash: QLXFx04gmnQiG5QyC0ifbi3GheVLfR5agiO5GJTXmnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8tesBINBwkLEmJWxFo1KC1awKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:c9:65:36:28:ee:c5:42:ba:67:5c:05:e8:22:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcb5eb0120d07090b126256c45a35282d5ac0ac
Validity
Not Before: Jul 27 01:02:09 2025 GMT
Not After : Jul 28 01:02:09 2025 GMT
Subject: CN=3d5f6b0d3e0613481f6548c3f3b50fe92708e874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:71:95:aa:2e:70:bd:67:e8:bc:98:1f:9c:
1c:dd:00:cd:f2:43:53:b7:8f:2f:74:fc:06:a5:26:
51:cd:a3:c1:d3:80:1b:fc:b6:1f:be:06:e7:13:07:
e6:20:1b:6f:f6:f8:16:45:3e:c0:7c:48:4c:4c:5d:
72:91:4a:0d:b5:99:e9:61:19:83:0f:71:7d:30:25:
de:2f:2c:5d:34:c9:99:95:17:3e:e6:da:ca:90:d4:
14:5e:c0:e7:7b:ac:12:9f:e7:73:9d:9d:2b:e7:d9:
e8:76:a2:c5:65:90:5b:fd:07:3b:d0:87:b5:dc:a8:
ea:79:95:85:eb:07:7f:b6:75:77:03:40:e2:9d:e1:
d9:f1:ff:e7:b6:93:b5:32:0c:1c:87:49:f3:c3:4a:
aa:52:a0:aa:68:c2:47:5a:d5:17:28:3b:b3:2a:92:
d7:d7:57:4a:05:aa:ba:b4:e6:aa:bd:94:70:5c:bb:
84:1a:d7:13:c2:1d:11:2c:b9:32:c8:fa:35:bc:f7:
f0:8c:ff:a1:51:ec:99:4a:71:83:bd:d1:93:34:ee:
fb:a5:53:2b:e5:4e:d4:b0:13:fb:c0:c9:00:da:cd:
12:a6:b1:46:b3:f4:5d:3d:94:49:4f:a8:c4:34:06:
a2:37:57:a1:1a:cc:da:d1:73:cc:61:ac:48:a4:0d:
76:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5F:6B:0D:3E:06:13:48:1F:65:48:C3:F3:B5:0F:E9:27:08:E8:74
X509v3 Authority Key Identifier:
keyid:2F:CB:5E:B0:12:0D:07:09:0B:12:62:56:C4:5A:35:28:2D:5A:C0:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8tesBINBwkLEmJWxFo1KC1awKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bb5912-17c7-4607-9472-e2152edf9f9c/1/L8tesBINBwkLEmJWxFo1KC1awKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:55:bc:6d:94:53:55:58:9c:39:76:f3:05:2c:11:e9:26:7d:
0b:ae:0a:f8:eb:7a:af:e2:e0:6b:c1:3f:b7:b8:f0:db:89:99:
f8:75:85:cd:10:95:b9:55:9a:c6:b5:93:53:58:fb:f9:8b:24:
25:14:77:3d:67:5b:a2:36:b6:87:2f:1d:a5:78:72:6b:e8:7a:
b8:9d:4b:63:f3:66:14:67:dd:fa:0a:78:d5:62:a3:ce:06:dd:
e2:ee:98:26:36:3a:ab:cc:29:92:0f:0c:1a:28:5c:ec:93:a4:
92:58:c7:b2:6b:a2:e7:43:1c:7b:98:94:68:e2:86:ec:f4:77:
3a:68:b2:46:89:11:9f:85:57:d8:93:a1:ec:83:27:f0:0c:99:
21:30:b8:95:64:d1:5c:31:e2:3b:3f:a2:81:7c:b8:8f:72:24:
93:ba:f5:d9:a7:d3:b9:e2:55:b6:b2:e3:82:c9:c4:5c:62:de:
90:a3:f2:d0:07:5b:89:41:6c:0a:3a:e2:34:b3:09:6b:02:81:
c1:a5:df:fc:53:81:e2:ca:48:82:dd:af:1c:29:a9:6b:4e:bd:
3f:d3:d3:63:24:ae:14:fc:1d:b6:1c:52:ac:c0:51:1f:90:7b:
f6:64:6e:9a:ae:f9:c4:a8:fc:85:a7:84:1f:b3:b6:85:b2:a6:
1c:23:1a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:50:43 2025 by rpki-client