Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
File: L7GbEAHBEHH7osw0FMxHW2wpCcc.mft (raw, json)
Hash identifier: O3zYT1Tkyun6zYgvCiNnrIc00+/g0jQZeAySkFeJJmU=
Subject key identifier: 06:20:51:05:E8:0B:80:D0:57:45:09:D6:DB:C4:63:3D:49:AA:0F:40
Authority key identifier: 2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
Certificate issuer: /CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Certificate serial: 019A72262200430301C0B06068E30D92CB52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 09:01:32 +0000
Manifest this update: Tue 11 Nov 2025 09:01:32 +0000
Manifest next update: Wed 12 Nov 2025 09:01:32 +0000
Files and hashes: 1: L7GbEAHBEHH7osw0FMxHW2wpCcc.crl (hash: Qzpr2AfJ8T2JNlLiNwYuSJSURmnDQ8Z/NR8GhOBFRNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:22:00:43:03:01:c0:b0:60:68:e3:0d:92:cb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Validity
Not Before: Nov 11 09:01:32 2025 GMT
Not After : Nov 12 09:01:32 2025 GMT
Subject: CN=06205105e80b80d0574509d6dbc4633d49aa0f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3b:a6:36:f4:8e:9f:e1:c5:7f:a4:1b:00:28:
d1:95:1f:aa:37:29:74:00:81:0b:7a:85:e3:ff:df:
05:75:93:d4:93:f8:a8:dc:5a:d0:8c:a3:ab:f9:c4:
c2:d0:e5:1a:07:88:4b:82:32:19:98:de:52:bd:38:
77:0c:cc:7e:06:b2:d9:d4:9c:86:5c:53:3e:83:ad:
31:db:b4:30:e6:fe:dc:eb:7f:a9:8e:73:8d:ed:2a:
f3:bd:d6:11:c9:00:07:2e:f4:0f:1f:3d:77:6e:78:
b0:ce:b1:17:18:94:9e:7c:89:03:b1:c9:53:63:df:
c8:10:c1:42:34:af:1c:85:ae:a8:27:91:d6:9e:ed:
b3:1a:0c:9b:92:59:44:f7:f6:a0:d3:06:b6:93:9e:
df:31:5a:32:85:f8:8b:d9:af:20:3c:ae:a6:26:e1:
45:99:82:2d:fc:b9:80:b8:d4:7b:d3:38:4c:87:ad:
41:8a:0c:6a:49:56:53:45:4f:a7:65:ef:f4:1a:8c:
7f:20:2b:59:8f:d2:e2:04:8e:5b:e0:62:cb:71:aa:
be:ad:31:76:15:6c:4b:fe:b0:2e:04:70:20:8b:9d:
29:5e:a2:94:bf:81:ca:74:f6:88:1c:b2:37:31:f5:
88:2a:5d:45:55:04:2c:b4:44:11:df:fa:d8:c3:3e:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:20:51:05:E8:0B:80:D0:57:45:09:D6:DB:C4:63:3D:49:AA:0F:40
X509v3 Authority Key Identifier:
keyid:2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:15:c2:50:c7:6f:3f:01:10:7b:e0:b1:85:c5:45:e8:a9:27:
d6:15:f3:7f:4d:ea:a7:ee:3e:2f:9e:e0:2b:35:f9:1b:b1:f2:
4e:1d:2c:a0:5e:52:bb:a0:86:2e:0a:0f:ed:c7:a4:94:70:4b:
32:ed:36:0b:84:ce:1c:98:08:73:cb:cb:ba:d7:e5:16:85:a1:
4f:7b:8f:bc:cc:b1:0b:01:4a:14:f3:97:4e:3a:aa:e6:c1:2e:
ac:c0:d4:e5:9c:05:e0:4a:96:fe:30:f9:92:c0:3e:33:9c:f6:
9f:5e:2f:c9:8e:2d:19:e8:b3:0e:26:28:20:4c:f3:ff:c1:44:
9c:70:4b:ae:7f:7b:2e:44:bf:f5:fc:4a:95:eb:2c:59:37:79:
d0:cd:2e:16:40:95:35:3c:76:a6:e4:23:0d:91:41:c8:c1:4c:
20:f1:6f:f4:2d:60:92:9f:f0:0e:b7:70:37:32:c4:1f:f3:25:
24:07:39:e2:5d:99:98:c8:1a:72:e9:38:b5:87:0f:a3:0b:48:
b6:89:2b:e8:b7:e6:55:f5:84:bc:1e:d8:3c:bf:9c:c8:80:66:
72:f0:8e:93:72:68:c0:76:2b:12:5a:98:8e:c5:50:53:91:bb:
7d:3d:3f:40:b2:3b:30:05:fb:b7:01:73:d3:09:95:7c:a4:93:
3c:c9:b4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:50 2025 by rpki-client