Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
File: L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft (raw, json)
Hash identifier: OzfE9YWLhyTYo4hI9+4Q06P9kHCYHKyqDEwe1JAgJZo=
Subject key identifier: 33:F0:AA:06:CF:29:0A:9D:1A:5A:0A:5C:44:70:A4:FE:0E:88:7D:22
Authority key identifier: 2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A
Certificate issuer: /CN=2f64716b186be1145822e1c70764fab61fb13c6a
Certificate serial: 019921B1F27B9E5B6C876BD5C427CFC9F8AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
Manifest number: 08BA
Signing time: Sun 07 Sep 2025 01:02:14 +0000
Manifest this update: Sun 07 Sep 2025 01:02:14 +0000
Manifest next update: Mon 08 Sep 2025 01:02:14 +0000
Files and hashes: 1: L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl (hash: sKWsp2gaF2uWJj3qmF04rmOyFDcEDDz6In5Nff3dt78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:f2:7b:9e:5b:6c:87:6b:d5:c4:27:cf:c9:f8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f64716b186be1145822e1c70764fab61fb13c6a
Validity
Not Before: Sep 7 01:02:14 2025 GMT
Not After : Sep 8 01:02:14 2025 GMT
Subject: CN=33f0aa06cf290a9d1a5a0a5c4470a4fe0e887d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:91:cc:3b:d9:94:4a:6f:cb:cb:22:4b:20:
81:32:fb:34:ef:29:b6:5c:10:03:c9:8d:a1:eb:30:
0f:ca:d0:8f:a2:01:cb:0c:66:a3:72:0f:4c:a8:93:
44:08:2b:1b:56:58:7c:27:6c:db:eb:a1:fe:13:64:
8d:7f:e1:83:22:a2:f2:76:1a:00:91:b2:33:bf:3e:
85:5d:66:be:9d:59:b9:7b:63:2f:ae:ec:f0:d0:2f:
e1:d4:fc:c6:94:46:e0:fb:4b:9e:fd:17:25:76:37:
65:2e:fd:c0:06:17:71:69:d1:06:28:de:22:ac:12:
62:e5:69:98:88:93:21:c1:19:60:0d:d1:0d:4e:02:
9a:84:e2:65:ec:12:0c:77:1f:d7:4b:9a:4c:d2:a3:
8a:aa:93:2d:ee:32:96:b4:d7:30:46:d7:16:68:8b:
6b:0e:ef:da:80:04:2c:64:77:d1:b6:07:fd:e8:3c:
d0:08:b4:41:51:ce:a5:d5:98:cb:cc:b0:81:ed:dd:
39:2a:f9:e9:7f:26:d2:4b:e5:d1:f4:8a:97:ea:32:
19:26:7e:a4:ee:51:b8:b3:92:70:19:fd:5f:cf:d0:
ce:25:b0:96:9c:0c:9f:67:27:a5:49:82:1c:6b:9c:
41:b2:7c:16:c5:b6:fe:5a:14:15:88:f7:8c:7d:c2:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F0:AA:06:CF:29:0A:9D:1A:5A:0A:5C:44:70:A4:FE:0E:88:7D:22
X509v3 Authority Key Identifier:
keyid:2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9a:4d:dc:5e:fa:1d:11:f9:d9:e7:ac:ea:89:89:a1:58:89:
e2:b5:ba:4a:b6:72:20:86:4a:0c:c1:91:c5:d0:09:a2:04:92:
d8:36:a9:5b:3b:74:15:8b:10:f2:82:58:3e:93:10:1b:01:b2:
b9:8c:03:8e:2d:fd:53:34:b3:a5:e1:c3:7f:f8:f9:70:06:b2:
a5:eb:37:d3:81:84:cf:bf:1c:48:04:38:ce:41:fa:8a:de:77:
69:70:be:ba:3f:47:ae:e5:fa:77:ad:93:de:9a:e3:4f:0f:12:
7c:71:04:04:37:d3:89:00:d4:5e:f0:78:7c:c1:40:d7:54:83:
aa:15:7f:ac:e1:46:07:5b:e4:9e:7b:2f:ac:8e:f6:8d:61:ce:
7e:16:22:b5:ce:08:e1:36:4e:1c:0e:3c:09:e0:b1:af:1d:13:
3d:86:51:fd:ba:26:00:ac:18:7f:2f:42:93:47:7d:7a:dc:41:
b3:30:cf:4c:62:8e:03:66:95:04:4f:19:41:15:76:d3:30:37:
47:73:1c:e4:ef:b3:ea:17:e7:ba:77:8c:69:f8:d2:7b:17:37:
77:c4:4a:9d:b4:50:b2:6a:65:c8:5f:32:b9:43:30:fe:36:a1:
46:5b:7a:df:d1:9e:5b:30:94:c1:7a:13:af:86:33:58:5c:91:
63:62:0b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:13 2025 by rpki-client