Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
File: l2lJAzf2c8ZOORJK6JgbA05QEno.mft (raw, json)
Hash identifier: AGbpvQeVKnEKeSEimrZtXEYuxab2XneCI33U+tuNsw0=
Subject key identifier: 18:D1:54:F4:C0:B1:AE:11:BD:1D:0F:2A:BD:9A:39:EF:EE:87:8E:18
Authority key identifier: 97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
Certificate issuer: /CN=9769490337f673c64e39124ae8981b034e50127a
Certificate serial: 019922C2F594F29494E565C3BAAEEBB3952E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 06:00:25 +0000
Manifest this update: Sun 07 Sep 2025 06:00:25 +0000
Manifest next update: Mon 08 Sep 2025 06:00:25 +0000
Files and hashes: 1: l2lJAzf2c8ZOORJK6JgbA05QEno.crl (hash: mPUDGfaO6FJ0ISI9ldRJ5GZnEq+R1TJ0ghaM2qvkYZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c2:f5:94:f2:94:94:e5:65:c3:ba:ae:eb:b3:95:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9769490337f673c64e39124ae8981b034e50127a
Validity
Not Before: Sep 7 06:00:25 2025 GMT
Not After : Sep 8 06:00:25 2025 GMT
Subject: CN=18d154f4c0b1ae11bd1d0f2abd9a39efee878e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:04:8d:25:1f:7d:6d:f3:6d:d1:4a:3f:eb:
81:ab:96:61:ca:8e:bb:79:ed:c5:01:70:86:15:38:
a3:a4:34:13:30:04:f7:63:40:22:cc:bc:60:c0:43:
e1:eb:58:15:33:55:af:fa:98:2b:57:dd:49:80:63:
04:62:61:0d:51:1a:2d:67:3b:83:44:22:65:fe:80:
75:a4:43:84:3e:59:4d:14:20:6c:f1:c6:aa:1c:0a:
c7:b4:61:81:e6:25:f4:59:c5:f4:40:15:83:8c:86:
96:9b:83:61:b5:54:0e:aa:f0:f0:78:7b:2d:68:1d:
21:e4:27:64:06:c0:2e:fd:14:2b:2d:fc:98:16:91:
ce:c9:e9:ff:13:f1:62:59:ee:ae:d8:83:9f:9e:71:
b0:e3:8d:bd:f9:5c:a3:cc:6e:56:20:a9:62:bc:9e:
4b:43:3b:ab:10:35:a8:37:f7:20:31:4e:a2:97:f0:
4c:7b:fc:e9:3c:ef:4c:2a:1a:c0:e0:d6:10:8c:d7:
b8:35:13:60:ab:fe:1f:e4:16:5b:91:09:8b:27:c1:
35:4a:81:12:e7:d6:33:22:d5:75:f2:60:60:51:48:
55:d9:20:57:d1:bc:9f:2d:09:a4:d9:67:05:fd:88:
b1:c7:41:0b:cc:88:9b:b7:18:d7:98:e3:0d:d9:9f:
f9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D1:54:F4:C0:B1:AE:11:BD:1D:0F:2A:BD:9A:39:EF:EE:87:8E:18
X509v3 Authority Key Identifier:
keyid:97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4f:e9:04:b5:0a:7d:98:b9:6a:d3:c9:07:9b:4a:fc:21:d7:
e5:e3:f0:b4:67:c4:9b:62:ec:51:d7:dd:1a:ac:db:53:a4:df:
a6:ef:ac:b0:0f:e7:75:42:32:24:eb:61:73:43:e2:2b:e2:25:
12:e8:a3:e2:e8:be:42:e7:71:fa:70:56:5b:b4:73:de:90:ce:
30:fd:05:9a:de:a4:d7:c3:d8:a1:7c:de:34:9e:01:8f:3e:5d:
a6:e1:d0:a5:67:88:a3:3b:4a:94:26:91:1c:ed:b1:d0:4c:49:
6f:cc:f4:2d:97:90:a1:fa:86:46:a4:51:b0:57:72:be:36:e3:
ec:e8:10:c2:b2:9a:41:03:1d:5c:91:77:6c:51:c4:f5:bc:ff:
ae:f1:25:61:37:94:ec:1f:c6:8b:b3:52:cc:dd:55:fb:72:5d:
27:c8:09:ad:93:be:45:1c:21:08:ad:2e:be:37:22:00:5d:77:
30:5e:3d:dc:61:75:85:a5:ee:94:11:71:a0:b0:a3:f5:00:7c:
01:85:a1:3a:77:cf:bb:a2:27:13:0f:40:49:cf:ad:b8:77:cc:
ca:35:05:67:45:a9:59:03:ec:9a:62:10:f4:6e:05:05:b4:ce:
a9:2d:57:38:6a:a3:d2:4a:b3:51:73:6f:2f:3c:fd:e4:b7:a3:
3c:fa:c9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:35:40 2025 by rpki-client