Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
File: L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json)
Hash identifier: z6tljlaH6E0IdYhaimEDKIGuWsn5FMGb1pUIG2l68o4=
Subject key identifier: 0D:A9:34:C5:B5:49:80:E8:64:68:FA:13:30:A2:BC:02:BA:91:F0:89
Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
Certificate issuer: /CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Certificate serial: 0198499BE14BB91483643C8589ED4ADEC1CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
Manifest number: 0E0D
Signing time: Sun 27 Jul 2025 02:00:09 +0000
Manifest this update: Sun 27 Jul 2025 02:00:09 +0000
Manifest next update: Mon 28 Jul 2025 02:00:09 +0000
Files and hashes: 1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: lvmGGIi+c2fSiioX1ntE6aNBdQ/pscvLmqE0u7BvDOI=)
2: vQoI-4y6Tfml573DLn2pCriBNl4.roa (hash: 3W+CArLvUD2GX28NdlGoBAxxfe8EMtX22dfil51a9Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:e1:4b:b9:14:83:64:3c:85:89:ed:4a:de:c1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Validity
Not Before: Jul 27 02:00:09 2025 GMT
Not After : Jul 28 02:00:09 2025 GMT
Subject: CN=0da934c5b54980e86468fa1330a2bc02ba91f089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:09:5e:84:c8:b3:6b:7f:d8:8f:4c:e0:c2:8b:
14:28:10:f8:75:2c:ce:86:58:a3:a7:f2:9c:b6:5d:
dc:2f:dc:e4:85:13:fb:b2:d6:af:06:b5:88:02:93:
0c:58:1f:d9:c8:cc:9f:2b:8e:19:aa:6a:19:e9:d6:
3e:2f:ac:c1:db:a4:e0:37:82:a3:d9:77:3c:72:5d:
89:9a:e3:f5:27:d1:67:00:2f:c9:fd:fc:8b:e5:a3:
73:5c:57:29:6f:4e:3f:91:31:8e:1c:04:f6:77:d7:
c2:56:a2:ab:93:ef:81:3d:92:f4:0a:ff:fa:6f:0a:
f0:67:28:a6:0a:df:b3:91:6e:eb:fc:cf:46:de:8f:
d3:70:8d:41:b9:82:f5:ac:d3:c7:e1:03:fa:b3:3c:
dc:a5:c8:5b:84:c8:49:0c:84:11:c1:da:de:82:02:
90:0c:8f:dd:17:26:f6:04:9e:bb:64:53:88:31:3d:
cf:66:51:5b:52:cb:4f:80:67:c3:e8:06:86:9c:19:
d7:6c:7b:2f:13:0f:4b:7c:38:14:74:df:10:a8:5c:
ef:bf:21:e3:8e:1f:2a:66:22:fc:43:37:ec:8c:4d:
f5:4f:ce:f4:cc:d5:90:0c:62:9a:75:9a:b2:96:d4:
0f:3c:6c:4a:96:02:5f:52:90:43:be:1d:a6:73:33:
95:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A9:34:C5:B5:49:80:E8:64:68:FA:13:30:A2:BC:02:BA:91:F0:89
X509v3 Authority Key Identifier:
keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:77:d8:e9:c0:b2:3c:8b:b3:da:da:79:1b:82:4f:01:bb:9d:
ac:aa:d6:29:81:bc:43:33:c8:18:07:a8:09:d5:4f:3e:c6:e9:
3a:35:4c:12:28:d9:43:40:af:5d:e3:18:f4:46:48:09:be:2a:
c3:67:23:0c:26:4a:30:27:35:0d:f0:93:7d:6c:39:bf:1f:24:
75:d2:05:75:4b:d7:64:11:e9:90:c7:21:2e:6c:30:a1:31:43:
28:73:29:31:5f:61:b8:e5:30:2f:3b:ec:87:ec:f1:c7:dc:25:
5f:cb:b4:9b:c2:c7:2d:21:92:90:58:25:fd:a2:a0:b0:3a:9f:
eb:ff:cf:0b:68:fc:d5:81:13:56:5d:b6:a9:38:57:36:e6:30:
d1:a4:a9:aa:06:de:0c:d1:1d:3c:ac:0d:ca:56:9b:fb:a1:d5:
3a:d3:39:51:35:16:73:52:89:c1:04:e2:a8:ac:31:3b:1a:9e:
bd:e4:ab:f1:66:60:84:d4:e3:d8:9f:f4:9e:b9:4e:db:8b:fb:
6e:1e:ac:29:55:16:e1:05:97:07:1d:ea:a9:da:dc:95:bd:5a:
cf:20:1a:d9:d8:ae:54:59:39:df:12:25:33:43:c1:af:47:65:
7e:e9:0f:66:b8:70:b0:39:e7:f5:3f:b7:0b:a5:e6:0e:45:d7:
9b:a6:cf:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:13:12 2025 by rpki-client