Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json)
Hash identifier: BYnGufFVeYZS2cMd5u/ozR5ZzQhE9TQuL4dlv1bDlzE=
Subject key identifier: 5B:5B:11:FE:A6:4A:DF:F4:21:F3:4C:2B:B4:FE:6C:57:4B:7A:71:F7
Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Certificate serial: 0199228CA5842CF0BB0D99F926A7FDA41310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
Manifest number: 0683
Signing time: Sun 07 Sep 2025 05:01:06 +0000
Manifest this update: Sun 07 Sep 2025 05:01:06 +0000
Manifest next update: Mon 08 Sep 2025 05:01:06 +0000
Files and hashes: 1: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: P6Vdj3hTMbtFyWcZa43x/ORjQ3JemGaJDVmhzKVgRp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:a5:84:2c:f0:bb:0d:99:f9:26:a7:fd:a4:13:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Validity
Not Before: Sep 7 05:01:06 2025 GMT
Not After : Sep 8 05:01:06 2025 GMT
Subject: CN=5b5b11fea64adff421f34c2bb4fe6c574b7a71f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:a3:3c:30:05:41:b1:79:90:e9:90:6d:6a:
2f:63:d6:f1:19:c4:ac:1f:93:af:ac:52:26:2f:47:
54:1f:d8:cd:ae:21:98:29:98:93:70:ec:81:07:2d:
42:8a:d2:83:ff:1d:a9:a0:d7:7f:0d:be:ca:12:6b:
da:69:69:51:8b:2a:2a:0f:29:2c:e9:b5:fd:29:c3:
f4:1b:18:8b:40:bc:53:47:5e:80:1f:fa:9b:00:85:
95:d6:0c:f6:d0:f8:87:5e:35:a9:e7:60:a6:39:af:
84:57:da:4a:d5:e4:23:20:92:0e:97:e3:8d:ee:ab:
c1:45:65:21:b1:67:69:8b:fb:b1:51:10:e3:21:50:
b4:8b:0e:ff:24:86:fa:e9:73:b2:98:01:f3:71:e5:
2e:8e:84:ae:c5:25:35:86:f4:b0:fb:95:67:ed:f0:
e6:75:76:84:d5:05:be:3a:4b:e4:c8:79:5f:cc:54:
67:da:7a:7d:8b:e1:74:6e:80:f9:58:4b:a3:2c:bd:
16:b1:82:e1:1d:8c:2e:6d:c2:7f:ba:0f:a3:5a:c1:
7b:28:3d:be:53:06:dc:18:0f:61:b3:fd:b9:63:66:
d1:a2:6b:71:36:be:df:2e:51:fd:a0:8f:47:b8:1b:
d2:83:4c:f1:5e:b7:10:4b:d5:f5:01:07:82:cc:7d:
de:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5B:11:FE:A6:4A:DF:F4:21:F3:4C:2B:B4:FE:6C:57:4B:7A:71:F7
X509v3 Authority Key Identifier:
keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c7:20:1a:82:d7:f2:9f:24:0a:2d:c3:ba:b0:d6:b7:db:ca:
97:49:f9:24:0c:cb:57:9c:19:d2:19:a6:f2:ff:c4:fb:67:8c:
aa:7e:28:95:b9:4d:07:88:0e:42:11:b3:77:06:14:c3:92:b9:
73:eb:25:75:2c:03:18:ed:82:42:43:e5:5d:df:8f:6c:54:75:
a8:46:fa:c2:6e:58:9e:0b:5e:b4:4c:b1:b4:fc:07:18:3d:d0:
96:53:ed:20:f9:6d:34:34:ea:7f:4f:7d:aa:0c:d8:53:d9:d4:
03:1f:38:5c:ec:21:de:a9:04:16:0e:d1:cb:6f:97:d1:21:d2:
93:fa:86:7d:62:f4:2e:86:6f:e0:e6:4e:5e:9b:91:90:d5:20:
c3:3a:c7:24:b5:40:fb:70:f7:d0:0a:13:0e:88:da:ba:e5:0a:
80:67:af:42:b2:be:3f:bc:7e:f4:7f:42:96:b1:1d:69:b3:ac:
2b:4f:1c:a3:ce:1d:a2:95:67:cb:42:bb:df:2f:3a:35:f4:6a:
13:25:5f:8d:85:f7:d4:5d:3a:cd:31:ec:86:e7:1e:eb:76:c3:
65:85:11:0e:b1:72:1d:40:7e:98:3b:67:4d:0e:a9:58:57:dd:
92:28:52:2d:47:d5:12:b1:a2:16:ba:fc:3a:8f:c4:ff:1e:65:
37:47:33:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijKWELPC7DZn5Jqf9pBMQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZDVjNjFlOTMyMjY5NGI4NzJmNWQzMmNjMWZhNWMxYmJi
YWIxYjYwHhcNMjUwOTA3MDUwMTA2WhcNMjUwOTA4MDUwMTA2WjAzMTEwLwYDVQQD
Eyg1YjViMTFmZWE2NGFkZmY0MjFmMzRjMmJiNGZlNmM1NzRiN2E3MWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KyjPDAFQbF5kOmQbWovY9bxGcSs
H5OvrFImL0dUH9jNriGYKZiTcOyBBy1CitKD/x2poNd/Db7KEmvaaWlRiyoqDyks
6bX9KcP0GxiLQLxTR16AH/qbAIWV1gz20PiHXjWp52CmOa+EV9pK1eQjIJIOl+ON
7qvBRWUhsWdpi/uxURDjIVC0iw7/JIb66XOymAHzceUujoSuxSU1hvSw+5Vn7fDm
dXaE1QW+OkvkyHlfzFRn2np9i+F0boD5WEujLL0WsYLhHYwubcJ/ug+jWsF7KD2+
UwbcGA9hs/25Y2bRomtxNr7fLlH9oI9HuBvSg0zxXrcQS9X1AQeCzH3eRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtbEf6mSt/0IfNMK7T+bFdLenH3MB8GA1UdIwQY
MBaAFC/Vxh6TImlLhy9dMswfpcG7urG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yMzcwZGUtYjhlNy00ODkwLTk5OTkt
YWIzMDdjYjFlM2JiLzEvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8yMzcwZGUtYjhlNy00ODkwLTk5OTktYWIzMDdjYjFlM2Ji
LzEvTDlYR0hwTWlhVXVITDEweXpCLWx3YnU2c2JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMcgGoLX
8p8kCi3DurDWt9vKl0n5JAzLV5wZ0hmm8v/E+2eMqn4olblNB4gOQhGzdwYUw5K5
c+sldSwDGO2CQkPlXd+PbFR1qEb6wm5YngtetEyxtPwHGD3QllPtIPltNDTqf099
qgzYU9nUAx84XOwh3qkEFg7Ry2+X0SHSk/qGfWL0LoZv4OZOXpuRkNUgwzrHJLVA
+3D30AoTDojauuUKgGevQrK+P7x+9H9ClrEdabOsK08co84dopVny0K73y86NfRq
EyVfjYX31F06zTHshuce63bDZYURDrFyHUB+mDtnTQ6pWFfdkihSLUfVErGiFrr8
Oo/E/x5lN0czRw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:37 2025 by rpki-client