
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
File: L228auC1ihFzHyGe2gIkcdHhHts.mft (raw, json)
Hash identifier: MtdcW5BXzkMFh4wEfS/4Dok6FdnaQU7KfiGnUWL429Y=
Subject key identifier: 9C:9E:EE:78:D4:49:90:2B:EF:86:F0:1B:83:98:89:A2:E6:8E:4C:1E
Authority key identifier: 2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB
Certificate issuer: /CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
Certificate serial: 01993236753057552EE8E0180AF576456330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
Manifest number: 049D
Signing time: Wed 10 Sep 2025 06:00:53 +0000
Manifest this update: Wed 10 Sep 2025 06:00:53 +0000
Manifest next update: Thu 11 Sep 2025 06:00:53 +0000
Files and hashes: 1: L228auC1ihFzHyGe2gIkcdHhHts.crl (hash: b7SDyYwcnADW2qzlYpi2PmVyNXQ8eIOM2sVIo6+zAwI=)
2: V8k0n9rqEarIEgNITkDx8oQ4w44.roa (hash: BkPM7QHIpoN+47+MwN2OB6x0pADkUYwi5FlR1ZsHikQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:75:30:57:55:2e:e8:e0:18:0a:f5:76:45:63:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
Validity
Not Before: Sep 10 06:00:53 2025 GMT
Not After : Sep 11 06:00:53 2025 GMT
Subject: CN=9c9eee78d449902bef86f01b839889a2e68e4c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:3c:f8:68:3b:dc:9c:46:28:04:93:db:fb:
26:96:cf:4a:6f:5a:f3:b9:2d:b9:94:b1:48:9d:5a:
be:e0:13:b0:06:6b:10:ea:b3:b6:59:a5:74:16:84:
07:0d:42:d7:59:9c:f8:c2:7f:96:cc:60:87:a7:3b:
55:c5:a9:ce:a1:92:af:18:b5:1b:64:6f:e7:ba:51:
b0:27:50:3d:5a:eb:7b:97:69:a5:c8:99:5e:20:14:
82:aa:92:84:f1:80:a9:23:20:3f:c9:59:ec:54:b6:
5b:a2:89:32:57:b2:76:7d:96:e3:25:62:74:ec:d2:
5c:b7:d7:66:e9:a2:dd:ac:1f:26:e2:dd:a1:3b:d1:
85:6d:25:2e:7c:89:13:88:f6:07:05:a7:55:9b:81:
ae:ce:db:d6:8d:40:3b:57:e8:68:de:0b:c8:f6:44:
13:1b:15:ab:2a:54:1f:f5:17:5b:e7:fb:07:fe:2d:
5a:c4:e4:78:0d:ee:ce:0f:15:fa:30:1b:56:16:40:
cb:9c:7a:ee:9a:75:ea:35:ea:d7:4b:07:4c:95:70:
11:aa:43:55:9a:02:8d:14:cd:34:c3:f0:e6:cf:85:
38:6a:1a:5e:fd:12:e2:06:d1:b4:06:30:59:58:52:
04:f6:b7:de:e0:95:5f:e5:c3:9c:e1:60:a9:6e:9c:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9E:EE:78:D4:49:90:2B:EF:86:F0:1B:83:98:89:A2:E6:8E:4C:1E
X509v3 Authority Key Identifier:
keyid:2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:64:4e:2e:cc:55:06:f3:04:0e:25:92:23:74:23:bd:bb:05:
61:34:b7:52:81:ce:4a:89:81:3c:57:3f:eb:b9:23:76:68:89:
5d:80:75:ab:8f:7c:02:1d:7b:a3:ca:af:92:48:1f:fd:61:9c:
5b:3d:e0:02:20:7b:cf:97:9a:1f:b3:f3:48:5b:ea:44:be:bc:
50:96:54:e1:29:b2:0e:de:cf:4f:b6:9a:12:a1:04:99:89:04:
47:d2:b0:f4:b6:b3:ab:1f:1c:10:10:b0:26:07:76:ab:f7:22:
60:c1:a3:ad:48:77:cf:d2:fb:c4:9e:3b:2f:06:2d:d9:60:03:
ed:dd:ff:71:37:6b:ec:06:6a:e6:be:38:74:9c:aa:98:6a:df:
df:3e:e1:7d:59:aa:41:16:38:13:bf:7d:51:e7:e3:ab:d5:7a:
b9:11:80:83:ec:ef:42:8c:cd:ff:83:80:ad:bc:03:b6:cd:4e:
b6:4e:aa:bf:f8:b3:71:af:51:44:d3:43:e4:05:bb:8e:61:52:
79:aa:98:ac:d2:28:ae:31:98:4b:ad:12:3c:6d:16:20:c0:49:
fa:7f:ae:d2:77:7a:8c:0a:6a:47:4b:d1:61:b0:a3:8e:c2:a6:
71:c4:46:42:99:da:7b:bd:f7:70:e3:08:3d:b9:ef:15:57:bb:
e2:41:f7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:53:34 2025 by rpki-client