Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
File: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft (raw, json)
Hash identifier: aFwpeQsBcKaXZZKS99+QPaTJvhpdR3lRoLLoPHUMXeY=
Subject key identifier: E8:C3:EF:15:E1:C6:0B:48:FA:F3:1F:5A:95:31:F4:BA:9D:A3:06:B8
Authority key identifier: 2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
Certificate issuer: /CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Certificate serial: 0199228C4036C88485C1D9BBFA983EC61566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
Manifest number: 0DAB
Signing time: Sun 07 Sep 2025 05:00:40 +0000
Manifest this update: Sun 07 Sep 2025 05:00:40 +0000
Manifest next update: Mon 08 Sep 2025 05:00:40 +0000
Files and hashes: 1: L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl (hash: NEipIDZAJJsr07/8KTvrSwq/n1yyDOeagovdstrOhfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:40:36:c8:84:85:c1:d9:bb:fa:98:3e:c6:15:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8f99e88da046df31049d97dd912ae650d56d4e
Validity
Not Before: Sep 7 05:00:40 2025 GMT
Not After : Sep 8 05:00:40 2025 GMT
Subject: CN=e8c3ef15e1c60b48faf31f5a9531f4ba9da306b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:63:4b:84:6f:bd:52:65:60:30:33:7c:71:d2:
a2:64:a3:ce:2b:94:3b:33:b8:c2:79:80:c4:48:1b:
98:57:e5:59:4b:95:b3:a7:a3:2a:66:0c:a0:e8:89:
0e:45:27:c5:bd:76:bb:d4:bf:8e:3d:ed:2d:1a:d3:
4d:0c:95:43:08:bf:5b:3b:60:c5:8e:5b:82:3f:e9:
0e:d8:0f:a9:67:11:4c:83:74:66:a7:25:1d:e1:dc:
dc:60:97:9e:1d:80:8f:0a:ea:4a:1c:97:5c:88:f4:
39:f6:24:e2:d0:23:af:71:bd:39:29:0d:ea:9d:42:
8d:90:c5:d3:69:9d:40:7f:23:a0:b0:96:82:33:2c:
f2:af:fb:7a:5d:21:62:77:18:36:ef:49:0d:e5:c6:
8c:1a:b4:9b:d5:68:b4:aa:4a:d6:91:ed:ba:c9:72:
0e:04:11:e5:9d:eb:68:f9:c9:da:24:4e:30:d0:2a:
ce:21:56:26:22:ac:96:08:08:49:9d:0c:65:76:22:
77:d7:64:7a:4e:16:ed:a6:11:49:34:9a:43:8e:61:
99:f0:cf:89:e0:b7:8a:a9:f9:ec:f4:c0:2e:45:8d:
1a:88:1c:8e:e6:e9:b0:5a:ba:4e:54:b2:91:cf:ff:
1c:21:76:7d:72:ac:2a:5e:54:d9:01:d3:d7:e6:2d:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C3:EF:15:E1:C6:0B:48:FA:F3:1F:5A:95:31:F4:BA:9D:A3:06:B8
X509v3 Authority Key Identifier:
keyid:2F:8F:99:E8:8D:A0:46:DF:31:04:9D:97:DD:91:2A:E6:50:D5:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4467e8-9b95-4050-b639-12d52f1e54db/1/L4-Z6I2gRt8xBJ2X3ZEq5lDVbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8a:14:77:c6:e3:47:9a:f6:e3:9b:b6:fc:05:1e:d0:0b:6c:
f8:0f:69:43:54:ad:e7:d4:c2:26:9b:49:5e:15:73:c8:e2:89:
47:e7:1e:4d:a4:ba:e3:d1:7d:7f:01:7d:e0:dd:2e:b0:6d:e2:
bb:03:c7:0e:16:55:0d:40:b2:2d:07:68:a2:6c:33:ea:bf:cb:
a9:cc:8c:d7:1b:1d:72:a9:7d:79:ab:13:08:92:a0:52:60:31:
93:60:a7:21:75:98:15:00:26:f5:38:34:ed:12:ba:e3:7a:16:
b4:2e:ba:8c:7f:7c:65:25:64:a1:ba:21:fe:1a:b9:c3:0f:ff:
6f:4a:2e:a6:6d:ae:63:1a:af:41:1f:f4:f1:c1:21:54:24:2f:
f5:4c:1c:96:b8:e0:0d:de:45:f0:96:7a:cf:7a:65:3a:17:13:
48:b9:c8:a3:be:47:a8:2d:93:73:29:4d:5e:ab:f8:77:e2:57:
c6:58:b0:01:de:a1:e4:c8:e5:a0:1f:c2:bb:e9:61:34:a4:b5:
df:2c:42:01:53:36:7a:a5:d9:cb:e3:83:67:37:2c:80:ac:37:
2b:0f:58:33:12:aa:4f:b9:7a:5f:b1:4d:8f:d3:85:4d:3b:d3:
b7:01:61:85:72:15:ad:80:ef:b9:ae:e5:87:c8:5d:81:52:fe:
4c:50:56:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:42 2025 by rpki-client