Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
File: l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft (raw, json)
Hash identifier: HPhPQzVrl7rWUdaZrztjzt9QKyvLirJEGpCAlCaCkBI=
Subject key identifier: 7B:20:02:C7:79:19:25:A9:09:90:4D:57:C2:B6:69:90:59:99:1F:91
Authority key identifier: 97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
Certificate issuer: /CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Certificate serial: 01984A41398D6FE0E5BE0DCE23A134845CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
Manifest number: 0CE3
Signing time: Sun 27 Jul 2025 05:00:45 +0000
Manifest this update: Sun 27 Jul 2025 05:00:45 +0000
Manifest next update: Mon 28 Jul 2025 05:00:45 +0000
Files and hashes: 1: l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl (hash: 5pnlYANMbwcSkFe4SgieU9DLxE73rsKJGM25lRTpGaM=)
2: rAptMRvSUdwv73c1hrV9bfbr3Yk.roa (hash: M82hA2K7N0hc5dPJhXNevznbaSP5bAh4nu7+zgBVgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:39:8d:6f:e0:e5:be:0d:ce:23:a1:34:84:5c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Validity
Not Before: Jul 27 05:00:45 2025 GMT
Not After : Jul 28 05:00:45 2025 GMT
Subject: CN=7b2002c7791925a909904d57c2b6699059991f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c5:12:63:d8:1c:79:25:51:29:5e:ad:12:ff:
13:ef:44:04:bb:e5:4c:01:ef:5a:c1:6b:e1:2d:f9:
3d:7b:fb:58:01:c7:84:ca:83:63:56:06:5a:af:49:
bb:41:63:f0:21:f4:52:64:bb:39:4f:ba:c3:2a:ed:
17:67:b7:5f:41:5c:0f:0c:6e:74:42:95:2e:18:3a:
36:73:c3:e7:f4:ef:6b:fc:a0:b4:17:b6:6d:b8:a4:
56:6b:a6:38:38:01:58:bb:ab:4b:f1:20:30:27:28:
9b:7d:6d:de:ad:e9:ac:f5:f9:e0:c7:9d:f4:63:5e:
58:42:d6:4d:23:01:2c:39:6f:47:12:34:57:96:a7:
c7:a7:c4:8a:a4:b9:24:31:d5:a2:57:a6:89:88:b2:
66:20:ea:80:98:e8:46:25:8b:e0:1e:49:03:2c:ca:
7b:76:c0:17:7a:e4:24:d9:f0:e6:25:f8:72:97:e6:
da:a9:26:d5:dc:a4:7e:b5:61:67:2b:51:fa:e7:e1:
9e:10:c4:81:78:51:52:c1:95:46:44:68:32:52:a3:
4e:e5:15:30:28:6b:45:2e:95:d3:95:eb:7c:bd:a4:
44:c4:c8:f5:e9:0f:d5:2a:ac:1b:9e:9a:d4:4b:4a:
63:fd:25:d6:61:e9:42:98:2b:a4:75:af:a5:72:4a:
ca:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:20:02:C7:79:19:25:A9:09:90:4D:57:C2:B6:69:90:59:99:1F:91
X509v3 Authority Key Identifier:
keyid:97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a8:48:c1:f0:b9:fd:06:85:89:a5:fd:75:f9:bf:92:09:41:
0d:66:06:0f:be:d4:fc:28:85:83:9b:e3:84:11:1a:e7:3d:6d:
f5:28:1b:9f:05:7c:0d:cb:23:ca:9b:51:16:b1:b2:4a:da:ea:
78:c2:58:36:23:0f:d3:2b:c5:3f:c1:6c:47:54:17:d4:de:68:
b9:87:6d:4f:b3:0f:3d:e9:8d:22:6b:3f:23:1a:6f:3e:a4:67:
b4:7b:e8:6f:6c:9b:44:60:82:5c:3e:f1:74:e3:ca:dd:af:d4:
05:cb:5c:42:7b:a2:99:33:2a:e7:3a:bb:bd:41:0b:96:b7:4d:
15:76:f5:14:98:a1:04:89:91:51:6c:ce:16:e1:6a:4d:77:ae:
4f:1d:0f:e9:38:18:7f:5a:3d:a4:b1:9d:0d:5e:5f:ba:2e:40:
fc:15:43:0b:97:d6:15:67:f8:41:ab:91:2f:58:02:ed:58:e5:
3a:f2:e1:ab:30:5c:ed:28:f9:88:f0:fa:e3:6b:2c:50:f0:9c:
6a:ff:7f:6a:13:40:c0:04:86:e2:39:1f:2e:73:22:34:d1:87:
81:72:ba:cd:a1:1a:13:e5:11:20:17:e1:db:bc:cf:4a:d0:b0:
2c:b4:7d:63:6c:b9:c8:3d:12:df:e9:6b:48:6a:c3:e4:74:94:
bd:88:11:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:42 2025 by rpki-client