Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
File: L7GbEAHBEHH7osw0FMxHW2wpCcc.mft (raw, json)
Hash identifier: 7B7HB4vX90Er/Hs6hO7JPzYcR1BCJAJGBAniYjUNfyQ=
Subject key identifier: F9:D3:DB:45:48:31:E0:28:EF:FE:FB:CD:BF:6C:FC:A9:05:37:82:DC
Authority key identifier: 2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
Certificate issuer: /CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Certificate serial: 0199221E6BCA99A3ACA0514711F2B7A73F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
Manifest number: 166C
Signing time: Sun 07 Sep 2025 03:00:42 +0000
Manifest this update: Sun 07 Sep 2025 03:00:42 +0000
Manifest next update: Mon 08 Sep 2025 03:00:42 +0000
Files and hashes: 1: L7GbEAHBEHH7osw0FMxHW2wpCcc.crl (hash: lL7EQv3SWbBhMk+XsQ0o3Xx0eVUsPBZ/mcP4DTeFnpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:6b:ca:99:a3:ac:a0:51:47:11:f2:b7:a7:3f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Validity
Not Before: Sep 7 03:00:42 2025 GMT
Not After : Sep 8 03:00:42 2025 GMT
Subject: CN=f9d3db454831e028effefbcdbf6cfca9053782dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:c4:24:bc:c0:57:da:f6:3f:1b:05:78:7f:
e4:7f:c4:5b:c5:7a:06:34:f1:20:97:b9:2a:c8:18:
2c:93:ee:1b:38:6e:6f:03:c4:ec:72:b0:b4:75:19:
ea:61:17:b6:e9:23:89:33:60:29:e5:c7:64:a8:9a:
9b:40:e0:63:2f:8f:5a:cf:f5:8e:7e:1f:cf:58:63:
b5:ea:66:79:57:43:4b:ab:81:62:f1:3d:55:36:2e:
52:45:f8:a4:91:ec:3f:33:eb:90:81:cc:1e:00:33:
b3:e4:c0:63:d5:c0:c3:9e:e2:03:42:ca:1b:ba:6c:
a8:85:91:e7:75:23:a3:5b:83:77:46:3d:94:38:ce:
69:18:4a:61:92:1e:98:d7:3e:1f:6b:1c:5c:3b:8d:
da:d3:4f:75:7f:ca:e0:2b:60:15:c7:fe:8f:6a:8c:
2a:ff:f8:1a:81:5f:02:9b:c9:14:39:17:fc:8e:75:
8a:35:3a:87:75:b8:6e:2a:cd:12:95:93:23:6d:a0:
2b:f9:e9:6f:1a:2a:70:c9:94:fa:0f:ae:c2:44:bc:
38:75:73:5f:c3:eb:d0:4c:54:b9:7a:5d:8e:2e:31:
90:99:86:76:a5:cb:ce:d6:c6:ee:bd:9c:a9:12:da:
76:44:2b:7f:43:5f:11:9d:77:38:73:a9:99:a7:f3:
45:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D3:DB:45:48:31:E0:28:EF:FE:FB:CD:BF:6C:FC:A9:05:37:82:DC
X509v3 Authority Key Identifier:
keyid:2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:bd:5c:20:c9:ce:83:80:a8:ea:33:1a:8f:d6:71:0f:bb:60:
af:06:d8:47:2b:06:44:10:5d:98:16:02:26:f4:2e:a3:c4:ac:
ce:14:51:21:cd:89:81:c4:a5:e6:9b:6d:7d:be:0b:fb:38:80:
8a:b5:60:33:bb:5e:32:d8:7c:cd:70:e9:c8:45:e8:d9:04:e2:
44:21:8a:0d:e3:aa:00:b8:92:e8:80:08:17:c9:5d:48:21:78:
2d:6b:83:3c:fa:a3:49:4f:c7:06:f5:98:fc:bc:64:41:f2:09:
9a:86:62:b0:ec:56:66:d8:0e:c5:c6:17:25:32:da:7e:4e:82:
47:52:1e:ad:64:24:9b:cd:01:02:3e:d5:9f:91:d6:a0:a0:d4:
53:fd:35:0a:b5:e5:6d:c3:fb:3e:53:1a:e1:0d:a6:ed:7f:47:
68:39:ca:b2:df:21:ab:a8:44:be:25:f4:54:76:46:17:f5:b0:
a2:a6:ea:f4:a9:81:d3:e7:2c:51:37:8e:0d:78:bd:a5:f1:cf:
24:66:af:c3:d8:9e:06:e2:8c:16:cd:25:ac:16:29:5e:fc:23:
be:b8:51:dc:d8:00:af:6c:00:d3:c2:68:cb:0f:53:17:86:0a:
3f:8d:98:47:37:56:46:c4:8c:55:e4:af:65:fe:26:27:8c:c4:
69:92:d9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:21 2025 by rpki-client