Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
File: l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft (raw, json)
Hash identifier: 0edU0DGhkyi00jgeiD24Kf0QojI2My1jfguLEf/SnCI=
Subject key identifier: 53:8A:C2:83:CE:4D:D4:1B:81:72:B9:74:EB:1A:A8:DA:11:43:0C:7E
Authority key identifier: 97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
Certificate issuer: /CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Certificate serial: 019A7293FEDC7351DC9E242066072CFCE3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
Manifest number: 0E01
Signing time: Tue 11 Nov 2025 11:01:32 +0000
Manifest this update: Tue 11 Nov 2025 11:01:32 +0000
Manifest next update: Wed 12 Nov 2025 11:01:32 +0000
Files and hashes: 1: l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl (hash: iKOrM1wPVn9Sbmj2Auk169nhIRDVI6Vv7DC/G5DJRfk=)
2: rAptMRvSUdwv73c1hrV9bfbr3Yk.roa (hash: M82hA2K7N0hc5dPJhXNevznbaSP5bAh4nu7+zgBVgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:fe:dc:73:51:dc:9e:24:20:66:07:2c:fc:e3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Validity
Not Before: Nov 11 11:01:32 2025 GMT
Not After : Nov 12 11:01:32 2025 GMT
Subject: CN=538ac283ce4dd41b8172b974eb1aa8da11430c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:17:6c:78:43:a0:88:84:75:67:3a:8c:2b:
35:53:5a:84:9e:9f:61:70:ee:b5:42:a3:17:15:f1:
8f:58:d9:46:c8:a5:4f:84:da:c0:7f:e5:6c:c2:31:
19:fa:c6:3c:d9:ac:ce:83:86:9d:af:a2:8f:c0:8f:
44:8f:1c:3a:e1:31:25:90:d8:16:e7:74:07:a1:1e:
66:bd:72:f1:b8:e2:5a:f5:55:61:5a:6e:bf:8a:2e:
81:2d:ca:a8:d8:73:2a:99:40:61:7f:6f:2c:f8:7d:
83:ed:bd:c8:8b:b0:57:d7:b1:d9:a2:c6:54:fa:00:
7a:7f:79:05:b1:c4:98:9b:d1:4a:07:ed:4d:a0:56:
1b:8d:56:f1:b1:6f:93:c4:46:38:d8:b9:2e:94:d5:
bb:65:37:2e:d7:f7:9c:33:1f:1e:ae:26:c5:a2:5c:
ec:76:14:80:89:4e:22:c5:1d:2a:23:6a:89:3e:f8:
19:ab:eb:8d:13:86:c0:eb:1a:be:ce:ee:48:e7:1f:
23:f8:1d:8f:ab:3e:d5:d3:e0:dc:e0:ec:6f:35:03:
01:8d:ec:17:87:7a:89:fc:c7:95:59:18:73:76:e7:
fd:0d:33:56:ab:5b:91:5e:b5:6b:c3:0a:84:b0:dd:
f9:2d:6a:70:c6:98:65:f3:f2:56:50:42:03:d2:35:
ae:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8A:C2:83:CE:4D:D4:1B:81:72:B9:74:EB:1A:A8:DA:11:43:0C:7E
X509v3 Authority Key Identifier:
keyid:97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1e:af:b3:6f:d5:7c:55:8c:34:f9:0e:00:8d:41:ac:ed:c2:
82:ed:e3:3c:f3:81:d4:6d:35:db:62:7b:49:67:a7:ca:6e:59:
86:bb:db:5c:2c:e1:61:22:2f:eb:06:d0:74:da:19:9f:3a:98:
7e:cb:05:4b:8f:6c:d3:e4:8f:86:06:92:aa:6d:c4:47:de:de:
11:e1:77:bc:8e:16:a2:b3:98:40:27:cc:91:56:18:55:1b:20:
8d:03:4f:76:d2:5e:80:bb:ec:67:cd:78:c9:d4:f9:ce:4a:b2:
51:57:74:ac:73:68:9c:85:24:a5:4a:52:c5:c8:c7:48:4a:0a:
49:95:f7:7e:9f:29:a3:3a:c7:c1:41:b6:d1:b8:53:40:b3:a7:
97:8a:c6:95:8f:b0:3d:f6:8f:bb:e4:2d:31:a1:6a:9d:33:70:
70:fe:9e:84:cd:4f:0e:7f:f3:46:5c:56:d5:82:1f:ec:3f:b8:
ea:46:4b:bf:f1:b0:b6:a7:3e:8d:fb:c0:52:d1:93:62:08:01:
0b:fe:14:b8:a6:91:38:f4:f0:15:8a:91:44:bc:3f:ea:27:e4:
90:c1:2c:d8:00:18:cb:1a:9c:69:f2:1d:b8:8c:01:d7:4e:3a:
c3:33:95:7a:c1:09:9c:90:8a:c6:11:14:4c:98:9d:78:22:53:
6c:ec:ce:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:49 2025 by rpki-client