Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json)
Hash identifier: khapZ9aSGnnCJT5h7vdr60aREkUPps6fLLj9o1NJBw4=
Subject key identifier: 7F:BB:95:E3:8D:1D:4E:31:16:AC:1B:1F:37:13:AE:5F:72:1A:E2:A0
Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Certificate serial: 019A72932BE7A639C78D03D0EA1672D1B457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
Manifest number: 0731
Signing time: Tue 11 Nov 2025 11:00:38 +0000
Manifest this update: Tue 11 Nov 2025 11:00:38 +0000
Manifest next update: Wed 12 Nov 2025 11:00:38 +0000
Files and hashes: 1: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: l25Wk8crVROGED9W4GcROM7Mf6T1sS/zRGd11abx2is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:2b:e7:a6:39:c7:8d:03:d0:ea:16:72:d1:b4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Validity
Not Before: Nov 11 11:00:38 2025 GMT
Not After : Nov 12 11:00:38 2025 GMT
Subject: CN=7fbb95e38d1d4e3116ac1b1f3713ae5f721ae2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e0:36:9a:d3:ac:41:81:27:45:8d:8d:40:66:
06:e6:c2:2b:f7:05:da:41:d9:97:fb:ee:8c:db:10:
05:60:82:9c:89:3e:0e:7b:d5:0e:c2:2b:19:57:2b:
8d:c0:b6:f4:85:9c:0a:6d:b8:bb:14:1f:2b:86:55:
29:3f:5c:86:b2:fc:f6:df:f5:1e:2a:1f:12:59:24:
f9:ef:6b:0f:24:25:13:56:24:cd:09:48:88:13:dd:
32:b7:ef:c7:6e:ae:9f:3a:25:20:e8:64:fc:4f:77:
82:56:8b:c0:e6:cb:1b:27:22:ce:74:e5:ca:0e:d5:
b6:3a:73:46:51:75:ab:7c:8d:da:32:d9:21:93:64:
c4:1f:43:42:7d:fe:b6:64:3f:1b:02:3e:0f:e3:d0:
05:c3:81:6c:35:dc:8c:32:44:4b:24:97:82:00:5f:
e4:be:91:d5:cd:92:ce:c8:90:00:63:bd:79:44:44:
84:92:48:98:82:86:42:7b:39:3d:43:bb:e4:47:66:
b5:93:4f:a4:24:69:40:66:e3:31:0d:32:38:23:9b:
96:79:b5:58:42:2d:48:4c:7d:0f:7b:d4:78:31:30:
b6:c1:a0:ea:2a:46:a0:8b:b9:84:ae:7e:b8:a7:a4:
e5:82:65:bc:90:d1:6b:ea:58:ee:a2:df:b8:26:d3:
e2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BB:95:E3:8D:1D:4E:31:16:AC:1B:1F:37:13:AE:5F:72:1A:E2:A0
X509v3 Authority Key Identifier:
keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:bc:6b:82:54:75:1a:02:dc:71:8e:fd:e4:d2:1d:ae:28:c8:
ae:58:d7:91:79:6f:1f:17:9d:a7:8e:da:03:3f:52:f0:3b:9a:
13:5e:40:38:84:4c:72:59:fb:74:31:02:3c:31:c7:81:50:0c:
d3:a5:6c:3e:f9:5c:f2:e8:e6:d9:96:3b:ad:bd:52:77:9c:60:
90:0d:ec:d2:89:5a:09:5f:cf:ac:b6:74:73:72:ea:52:5f:78:
56:86:d3:a0:cb:af:79:78:f0:c9:21:29:65:c3:ed:af:48:61:
67:a6:14:fb:6a:79:50:af:3a:79:8f:14:44:de:86:a7:5b:98:
00:b8:c9:57:71:1c:42:c1:50:ff:e6:f9:7f:5e:b8:11:d4:dd:
b4:9e:d3:14:90:7b:71:79:07:5d:ff:b2:85:f4:c2:24:71:13:
af:0f:b1:aa:bb:fb:b0:c6:18:46:17:87:bb:4b:38:58:39:dd:
df:55:19:5d:f8:cf:96:ee:e3:d1:78:80:46:c2:26:f2:c6:c6:
7d:79:57:8e:8f:da:27:de:25:e1:9d:8a:f4:43:bd:50:9c:c6:
f7:b1:9e:44:46:56:eb:74:d0:7c:14:6e:5e:62:c6:28:20:cb:
2d:46:9d:f0:de:69:b3:94:e5:24:d5:db:05:2c:10:ad:84:35:
d7:b5:11:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:33 2025 by rpki-client