Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json)
Hash identifier: nWxhe87deu13prB5jnBUpy9TSp78Blp/mk1iGtcrdd0=
Subject key identifier: 53:EE:2D:56:BD:43:9F:18:D2:22:C5:13:61:9D:9C:98:C3:2B:2D:52
Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Certificate serial: 019754FEBD10ABC8C7A1DD313B40137432DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
Manifest number: 0594
Signing time: Mon 09 Jun 2025 14:01:09 +0000
Manifest this update: Mon 09 Jun 2025 14:01:09 +0000
Manifest next update: Tue 10 Jun 2025 14:01:09 +0000
Files and hashes: 1: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: 41c0mr20k6/zgRDOj94s4x9OcJq+TxsVAepDkcu2r38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fe:bd:10:ab:c8:c7:a1:dd:31:3b:40:13:74:32:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Validity
Not Before: Jun 9 14:01:09 2025 GMT
Not After : Jun 10 14:01:09 2025 GMT
Subject: CN=53ee2d56bd439f18d222c513619d9c98c32b2d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:74:52:2f:2a:5a:e6:c2:01:b4:7a:34:3c:
c2:27:0e:82:cc:b2:d4:b1:8d:4e:f0:ab:18:cf:c1:
d0:2a:ba:47:8c:75:d6:7b:a5:1a:61:86:66:f0:22:
ec:44:07:0f:a1:f1:92:d0:2c:f0:d7:e2:85:ef:f8:
ff:f9:ed:59:be:3d:74:44:fa:a1:0f:75:35:96:13:
a5:d4:7c:bd:2a:91:0b:f6:cb:c2:6e:44:52:a2:b5:
27:af:1d:a6:97:91:06:95:03:22:76:c7:9a:58:7b:
6b:bc:de:66:5c:b3:9f:bc:4d:3d:8e:70:2e:f2:f0:
5d:68:b4:70:7e:eb:9b:1f:6f:f8:7f:f7:55:b5:58:
99:3f:bb:f2:51:1e:f2:c3:af:82:64:51:02:dd:34:
55:2b:82:ba:6e:b6:62:a9:5e:fd:7f:34:f5:ae:60:
bc:ef:ae:39:b8:03:84:ee:03:6a:16:19:a5:80:4e:
7e:3b:27:8e:12:b9:e4:c2:4c:81:ee:ca:8d:80:63:
c3:30:95:9e:46:53:ad:5a:c0:ae:9e:b4:ef:80:d9:
2f:5d:dd:45:d2:3d:ad:b9:93:3b:15:3a:fe:28:2a:
5d:c0:d0:95:64:96:15:8f:b8:ee:d5:2e:c4:39:a3:
41:22:4c:74:7c:bf:60:82:28:fc:cb:5d:79:a3:c3:
51:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EE:2D:56:BD:43:9F:18:D2:22:C5:13:61:9D:9C:98:C3:2B:2D:52
X509v3 Authority Key Identifier:
keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b8:ca:9b:df:50:a1:43:5d:51:4f:9f:18:72:9c:15:5d:ac:
e7:77:55:b8:f1:7e:db:c6:61:f6:54:e7:e7:9e:95:61:22:89:
09:87:f6:1d:59:74:2d:fc:58:23:ee:75:ac:82:aa:59:ad:1d:
e0:74:e7:4d:55:af:27:43:91:56:bf:c6:87:0f:e2:9e:ac:ac:
3b:5f:57:ed:2a:99:e3:32:1a:ed:b7:ce:7c:53:41:df:0c:25:
fe:57:df:6b:1e:25:e8:49:0e:0c:f4:56:60:5e:3d:62:3e:52:
89:50:fb:a0:fe:ab:49:41:8b:74:b4:33:df:7b:6d:2e:fd:a3:
a0:c2:72:91:93:ea:fd:0e:2d:bb:29:1b:8d:88:e4:e3:b6:91:
1e:3f:c5:f3:6f:ed:a0:44:76:9a:22:86:11:64:14:6d:59:2b:
5c:9b:7d:4c:c0:6e:b4:5e:d7:a4:45:9a:91:b2:80:3c:79:40:
34:a6:cb:9a:e5:36:76:36:27:25:cd:04:d9:5f:0b:de:7e:d5:
85:1a:41:fc:9b:ca:8d:24:0b:23:47:99:66:4e:e4:7f:f8:3d:
38:ef:13:1c:f4:7b:2d:f7:4e:cc:c5:f6:4a:f6:65:f3:78:05:
22:22:db:01:73:63:79:8e:97:03:4a:6f:42:5c:fa:f6:50:c9:
a8:1a:6f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:21:05 2025 by rpki-client