Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json)
Hash identifier: fdHH5yCFaSsxH7Jc4lRGPgGB/44cYPjIEwLgswYR3+c=
Subject key identifier: 7F:AA:6D:87:B5:D7:A3:62:6B:F0:0D:51:3F:2E:16:5D:98:69:4E:FE
Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Certificate serial: 01976E19965F742EAE94DD96DBEBDE065BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
Manifest number: 05A1
Signing time: Sat 14 Jun 2025 11:01:00 +0000
Manifest this update: Sat 14 Jun 2025 11:01:00 +0000
Manifest next update: Sun 15 Jun 2025 11:01:00 +0000
Files and hashes: 1: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: pfjDUz4nb+BbDNiRYkDreReZ2cLrmVREcbRC7bMhBMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:96:5f:74:2e:ae:94:dd:96:db:eb:de:06:5b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Validity
Not Before: Jun 14 11:01:00 2025 GMT
Not After : Jun 15 11:01:00 2025 GMT
Subject: CN=7faa6d87b5d7a3626bf00d513f2e165d98694efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:2f:d8:09:65:3c:89:6e:f7:7f:e2:17:17:
22:bc:e7:12:65:f3:06:7e:26:52:93:90:8b:b0:da:
d1:18:7d:b9:23:53:bb:f8:5c:60:e7:2b:d8:14:81:
f9:fb:a7:56:8a:da:3c:28:1c:71:af:16:00:38:57:
f4:a0:4c:ce:d1:b7:f2:20:88:52:8b:1c:24:fe:97:
f9:18:40:62:03:ca:62:26:a6:5a:3e:df:1b:14:a3:
24:58:25:3e:42:8e:a7:9e:9a:a0:7e:e0:d2:99:e8:
a5:82:ba:88:37:cc:c9:fb:34:de:f4:8f:a3:1d:5a:
3a:a3:ac:72:95:a4:a2:56:c3:e8:f7:e3:f7:6d:a4:
6e:d9:87:a2:eb:02:22:37:f2:b9:5a:1f:4d:43:12:
08:77:7a:58:8c:98:46:be:56:bd:b1:a8:24:90:f5:
60:50:87:92:1b:96:aa:a7:24:ab:d3:09:a0:d8:90:
5b:70:0c:e7:7e:d1:0c:c8:94:21:58:24:7b:a1:49:
4c:03:95:e6:2a:62:cf:43:cc:32:54:aa:f4:36:90:
f3:2a:25:a7:82:1a:85:a7:e8:89:3e:e2:35:41:c9:
8e:a2:50:6e:ff:46:4f:ac:19:b9:de:b8:3c:2a:05:
54:a5:07:fd:7d:d7:ed:54:32:b0:55:c0:18:91:da:
22:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AA:6D:87:B5:D7:A3:62:6B:F0:0D:51:3F:2E:16:5D:98:69:4E:FE
X509v3 Authority Key Identifier:
keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f7:98:99:ef:21:81:e3:6e:66:54:d7:ec:8c:9a:c6:15:69:
bf:29:9f:10:59:e8:8e:ab:be:cc:99:3d:c4:79:0f:fb:3f:3d:
63:37:ff:1c:eb:33:d9:13:51:17:85:69:c2:79:93:75:c4:d8:
16:7c:af:a9:65:6f:1a:d3:67:fd:97:24:10:6d:59:94:e6:fb:
39:c8:08:e7:f7:32:25:de:05:fc:ce:bf:92:9d:6b:f6:12:8d:
4e:ca:23:17:26:e0:19:da:b2:3d:94:a6:66:32:47:1f:ff:e7:
0b:fe:f9:44:23:c6:66:37:2e:80:46:8a:2c:b2:e9:66:3d:5b:
a7:4c:b1:42:57:71:39:dc:2e:3b:11:d2:e6:47:af:23:db:73:
0b:0d:71:02:25:ae:67:d4:1a:2a:41:28:35:e7:ed:d9:8f:ae:
7e:b4:52:88:ca:4d:dc:fe:03:77:ec:8b:f8:72:1c:b4:a8:4e:
ec:84:74:ed:bf:3a:eb:af:5c:8a:ae:31:8b:a5:3a:05:a7:7a:
14:f1:0c:61:7a:4d:5d:1f:c6:47:8d:ad:84:1b:fa:05:8a:23:
7c:b3:a4:cd:c5:2f:b5:5c:8c:15:15:6e:01:ef:69:19:23:fd:
81:3f:78:b9:88:0a:a5:c4:68:ff:43:61:83:d7:7b:6a:6e:76:
bd:e0:70:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:18:46 2025 by rpki-client