Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
File: L97GcLeAw7-UAe8cEVodh_6PfHo.mft (raw, json)
Hash identifier: 28IPtUQNmTxCwdkocxNICXznuhf7PfcatQ5/bG3X90o=
Subject key identifier: C2:54:56:BE:C0:78:83:6E:B9:DC:65:20:36:CB:23:BB:1D:0A:FA:CC
Authority key identifier: 2F:DE:C6:70:B7:80:C3:BF:94:01:EF:1C:11:5A:1D:87:FE:8F:7C:7A
Certificate issuer: /CN=2fdec670b780c3bf9401ef1c115a1d87fe8f7c7a
Certificate serial: 019A26D43E4041D322F619F23972318C7B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
Manifest number: 0DD8
Signing time: Mon 27 Oct 2025 18:00:34 +0000
Manifest this update: Mon 27 Oct 2025 18:00:34 +0000
Manifest next update: Tue 28 Oct 2025 18:00:34 +0000
Files and hashes: 1: L97GcLeAw7-UAe8cEVodh_6PfHo.crl (hash: zaiTjlGHmITn8QIQG2jUOpUIJv/y0bAOvq6nhuOmwd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:3e:40:41:d3:22:f6:19:f2:39:72:31:8c:7b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fdec670b780c3bf9401ef1c115a1d87fe8f7c7a
Validity
Not Before: Oct 27 18:00:34 2025 GMT
Not After : Oct 28 18:00:34 2025 GMT
Subject: CN=c25456bec078836eb9dc652036cb23bb1d0afacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1e:e0:5b:02:29:69:2c:58:50:7b:0d:01:62:
28:c5:bf:df:99:5f:76:9d:f1:60:9c:b5:9b:74:2a:
0e:5c:ad:45:8f:65:bb:de:40:d0:5e:d5:f3:07:1a:
53:e4:a9:8f:62:e2:ef:b8:c2:8c:f6:ef:40:c6:e6:
e8:15:d7:d1:29:4c:56:60:49:da:0b:c0:99:49:3e:
dc:06:e6:33:43:b3:c3:1b:d9:c4:3a:6a:90:3e:55:
32:b0:8a:e4:00:48:e1:72:23:50:23:64:df:83:9f:
d6:3d:62:ec:c7:b2:dc:b2:d1:71:17:7a:cc:19:4b:
97:06:a7:44:d4:86:46:72:d0:ca:d9:48:b9:e2:b0:
14:95:30:0a:46:c4:8c:30:50:f5:33:4c:23:48:c9:
89:c1:58:d9:df:ab:e9:d5:0c:79:8a:f2:4c:97:d5:
d1:3c:2b:8a:57:5e:d0:b0:3a:0c:08:89:ae:a7:77:
18:75:ec:06:55:bb:79:60:c7:f5:3f:4b:68:74:05:
ea:48:aa:d3:31:86:84:9c:c3:9e:47:86:6a:44:32:
f0:bd:2a:4c:94:dd:e5:cc:ef:c1:62:fc:57:84:12:
36:2b:a8:0e:64:9c:0c:fd:85:36:93:81:b0:e6:8a:
8f:33:af:d2:a6:61:9d:ba:21:67:a6:46:2e:e9:e0:
f1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:54:56:BE:C0:78:83:6E:B9:DC:65:20:36:CB:23:BB:1D:0A:FA:CC
X509v3 Authority Key Identifier:
keyid:2F:DE:C6:70:B7:80:C3:BF:94:01:EF:1C:11:5A:1D:87:FE:8F:7C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:82:4c:a2:a4:92:9a:49:b2:86:c6:40:66:09:01:49:f2:d8:
8b:e8:30:88:bf:25:02:e6:65:cd:49:65:ce:37:d1:a1:7e:ee:
f8:0a:db:b4:ef:49:bd:78:29:15:1c:9f:9e:db:f9:4a:5c:ee:
01:07:f3:8b:9d:c1:55:3a:61:fe:3a:18:d9:0b:d6:03:cd:57:
d6:de:d2:1d:90:e8:10:ac:06:fa:35:b3:b2:45:68:23:07:c7:
49:82:6b:b9:ab:e1:1a:3b:70:fb:81:e6:2b:9f:bb:eb:d0:ed:
1a:0c:9c:85:60:85:d9:33:16:13:b5:8c:f7:82:82:89:99:57:
0b:07:50:ab:3b:07:ea:4e:fd:5b:25:8f:a3:9b:1a:33:95:8d:
2d:01:e9:ac:e6:1b:14:4c:2e:5f:b0:0b:47:43:53:22:d0:22:
7c:32:22:5e:c0:76:e5:97:ab:db:55:8e:38:60:73:b6:b0:95:
71:9d:03:1d:b0:fc:4c:c2:0f:ff:9b:04:58:21:69:28:24:37:
c7:8f:5f:84:5e:29:ba:f2:f3:63:30:c0:e2:0c:77:4f:26:15:
30:7a:3a:0e:9f:34:01:24:cc:e0:4c:83:0d:fd:ae:3e:89:29:
ee:af:b7:b7:a1:f5:58:7d:c9:86:79:d3:13:40:10:92:58:0d:
07:5b:fc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 03:09:31 2025 by rpki-client