Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
File: L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft (raw, json)
Hash identifier: 2HeXbUPuT1hOFvQIiloT46muflXimbIm5OKkW8+S1UA=
Subject key identifier: 33:04:2A:F9:A9:C7:8C:A7:F0:14:B7:8E:7F:0D:DF:85:C8:6C:93:50
Authority key identifier: 2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46
Certificate issuer: /CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046
Certificate serial: 019923A06D59B5E8ABD46C183E8249E582AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
Manifest number: 12DE
Signing time: Sun 07 Sep 2025 10:02:20 +0000
Manifest this update: Sun 07 Sep 2025 10:02:20 +0000
Manifest next update: Mon 08 Sep 2025 10:02:20 +0000
Files and hashes: 1: L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl (hash: nzjSHOJGwX166/jpTHp1ycNSHKsSKiIYZSUAxnGE9uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:6d:59:b5:e8:ab:d4:6c:18:3e:82:49:e5:82:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046
Validity
Not Before: Sep 7 10:02:20 2025 GMT
Not After : Sep 8 10:02:20 2025 GMT
Subject: CN=33042af9a9c78ca7f014b78e7f0ddf85c86c9350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:53:be:27:c3:69:30:dc:5c:3a:81:28:1c:ac:
0a:be:25:11:1a:3c:3d:50:b1:57:fb:64:2c:63:d4:
73:8e:c8:46:84:59:8f:25:48:63:07:d2:a8:0a:b5:
ac:e6:40:69:4c:35:9d:b4:89:25:6f:1a:8c:d6:bb:
80:ea:c5:21:23:6a:43:90:43:98:66:28:f5:e3:af:
e1:95:06:1f:3f:19:34:35:58:0a:18:ba:20:a0:83:
75:d7:cb:e4:83:6e:c5:ee:97:4f:01:75:55:83:93:
a1:8f:f8:51:e6:70:9b:12:80:75:90:52:65:0a:0a:
23:0e:db:40:60:af:cd:a1:25:78:5c:48:fe:d2:71:
86:b2:c8:03:f6:78:94:75:4f:0c:0e:d7:5f:9a:cb:
d9:4c:ec:16:ab:bb:3d:1e:d6:75:d6:45:0d:24:c0:
2e:17:83:ef:83:78:d3:d1:a0:db:39:ef:f6:d2:d6:
1c:d0:5b:73:f4:12:29:1f:2d:9d:88:bb:4c:6b:52:
74:ac:2c:00:20:df:3b:fa:ef:f2:9a:50:c7:2c:67:
f2:a6:9b:4e:58:7d:98:df:1e:8e:62:e8:3f:36:0c:
00:a3:49:e0:c5:50:9b:82:5d:bd:ad:a1:ba:19:a4:
ad:bf:cf:ad:08:10:89:24:3f:a1:65:ac:89:24:4c:
5f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:04:2A:F9:A9:C7:8C:A7:F0:14:B7:8E:7F:0D:DF:85:C8:6C:93:50
X509v3 Authority Key Identifier:
keyid:2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:06:59:bc:f1:8c:9f:1a:ed:b9:16:b2:b8:ce:9a:43:26:99:
b1:e7:4b:be:e9:8a:b9:b8:08:cc:71:b6:2d:db:63:74:58:3b:
8b:d4:fe:1c:5b:fe:8b:7f:1d:fd:2d:2d:64:3a:f6:b5:56:43:
bb:81:e6:bd:7a:07:ce:67:8f:75:ad:7a:17:36:7e:d2:51:6f:
7b:b2:81:ca:35:29:28:76:4f:2d:dc:39:25:da:be:33:c0:96:
d6:ea:42:4b:d8:3d:8b:b8:39:aa:2e:e8:ba:7a:60:ec:b3:66:
d6:bb:5d:db:63:bb:8f:54:2e:6f:78:bb:1d:47:80:b7:16:c2:
60:aa:37:1e:4f:6d:4b:c1:ab:03:b8:fa:d9:78:cb:78:24:fe:
c5:1f:5e:e4:6c:bd:88:01:ea:b1:e0:f9:98:cc:b2:6b:17:a0:
ab:50:33:21:93:3b:86:ed:cd:db:3c:45:47:49:b3:5d:55:60:
dc:73:e0:95:38:2c:2f:30:5f:cc:ea:de:c1:97:87:50:e9:8c:
16:13:3b:1c:37:94:65:26:17:e7:e4:4d:fb:6e:14:49:9c:c8:
cc:07:e4:42:52:fc:98:2d:93:d2:de:20:36:91:e2:a0:b1:e5:
cb:99:39:d3:7f:77:16:5e:d8:d3:0b:76:b9:d2:6d:bd:32:c6:
09:a0:91:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:28 2025 by rpki-client