Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/225f46-c456-4f65-a3db-4190b18460a7/1/L1OI95ZqevrAc2x57WA7K3iGVsQ.mft
File: L1OI95ZqevrAc2x57WA7K3iGVsQ.mft (raw, json)
Hash identifier: yA4iygamNU8qQMPJVMQ58SU8uPz+xhFLHIGMLCDXxiI=
Subject key identifier: C2:9D:D9:33:76:F5:B6:32:7A:A0:C8:84:21:EE:33:A7:22:DF:60:A7
Authority key identifier: 2F:53:88:F7:96:6A:7A:FA:C0:73:6C:79:ED:60:3B:2B:78:86:56:C4
Certificate issuer: /CN=2f5388f7966a7afac0736c79ed603b2b788656c4
Certificate serial: 01988BB34AD5D05E3F4202E1B4D7B496C5A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1OI95ZqevrAc2x57WA7K3iGVsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/225f46-c456-4f65-a3db-4190b18460a7/1/L1OI95ZqevrAc2x57WA7K3iGVsQ.mft
Manifest number: 9A
Signing time: Fri 08 Aug 2025 22:00:39 +0000
Manifest this update: Fri 08 Aug 2025 22:00:39 +0000
Manifest next update: Sat 09 Aug 2025 22:00:39 +0000
Files and hashes: 1: L1OI95ZqevrAc2x57WA7K3iGVsQ.crl (hash: cXGHBwn3zKcT+BvfHihONvvXa44Vh4P5IIbYGV1tDVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/225f46-c456-4f65-a3db-4190b18460a7/1/L1OI95ZqevrAc2x57WA7K3iGVsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/225f46-c456-4f65-a3db-4190b18460a7/1/L1OI95ZqevrAc2x57WA7K3iGVsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1OI95ZqevrAc2x57WA7K3iGVsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:4a:d5:d0:5e:3f:42:02:e1:b4:d7:b4:96:c5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5388f7966a7afac0736c79ed603b2b788656c4
Validity
Not Before: Aug 8 22:00:39 2025 GMT
Not After : Aug 9 22:00:39 2025 GMT
Subject: CN=c29dd93376f5b6327aa0c88421ee33a722df60a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:38:6d:c5:24:69:15:d8:2c:ef:f4:d6:bb:
a0:71:a2:2b:be:a8:b1:6a:05:f2:f4:bc:33:b0:64:
cc:c9:08:50:e8:96:d2:c6:35:cf:71:1c:e2:99:39:
53:fa:ee:1a:b1:c0:d6:2f:7b:2d:fd:7a:8b:b6:cd:
24:d1:a8:5b:5b:40:de:ef:5e:aa:a6:c0:90:45:31:
9b:d2:4d:84:7c:39:7e:6f:54:96:2c:2d:8e:d3:d5:
79:16:6a:42:43:f8:9b:22:06:0b:da:9c:b8:28:13:
87:af:88:92:04:d5:7d:44:ea:d9:bb:94:7d:57:ee:
61:68:c2:88:37:13:57:b9:e5:72:2d:1e:cc:73:38:
c6:1a:0a:33:98:8f:e9:8e:59:f6:be:f1:53:8e:ad:
a7:ea:76:54:64:03:9c:1c:5c:d7:76:a6:70:be:64:
ea:cc:96:15:38:60:0b:e8:8a:b8:ef:53:ec:a6:cb:
7f:cb:a4:c0:23:c2:d0:9a:43:72:ba:34:34:32:c2:
ec:59:5a:f2:ad:94:5a:48:27:9a:c5:21:68:5c:88:
3f:0b:6e:b8:4b:83:37:bc:25:87:22:b4:c0:0c:87:
76:70:25:78:fe:a5:e6:a7:25:f4:39:a6:20:30:70:
35:d0:0a:81:c7:ed:54:74:fa:15:a7:17:7c:b6:ac:
50:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9D:D9:33:76:F5:B6:32:7A:A0:C8:84:21:EE:33:A7:22:DF:60:A7
X509v3 Authority Key Identifier:
keyid:2F:53:88:F7:96:6A:7A:FA:C0:73:6C:79:ED:60:3B:2B:78:86:56:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1OI95ZqevrAc2x57WA7K3iGVsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/225f46-c456-4f65-a3db-4190b18460a7/1/L1OI95ZqevrAc2x57WA7K3iGVsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/225f46-c456-4f65-a3db-4190b18460a7/1/L1OI95ZqevrAc2x57WA7K3iGVsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:18:31:cf:3b:22:87:f1:ef:42:9d:84:4a:1d:68:ec:ea:c1:
6f:ec:88:68:49:30:cd:68:c1:0d:0c:68:d7:b3:c2:5f:29:a5:
63:c8:9a:41:4b:1e:da:b9:71:a6:ea:63:6a:84:63:d0:1b:3e:
7d:b7:1e:b4:b9:df:1f:cc:dc:35:15:33:7e:71:3b:58:01:4c:
fc:e1:29:91:53:60:34:9c:ad:36:e2:a5:d6:d8:21:40:b6:1e:
4e:f4:11:d2:89:bd:5e:64:d7:ff:14:08:91:98:1e:a1:1b:24:
49:66:4a:66:f7:52:42:5c:d6:d1:cd:6b:b2:d1:1a:ea:4a:af:
a4:1c:32:41:de:a1:46:92:56:4e:b2:30:eb:29:0e:1e:a6:74:
75:23:c7:92:83:b3:e1:8c:75:d8:64:92:37:0b:35:c6:e9:11:
83:fc:76:c8:a1:78:16:e7:76:fd:ac:30:45:7a:90:43:79:77:
a4:7f:bc:df:44:62:ce:1d:fe:0c:b6:cf:b1:ad:b5:9e:1e:73:
e1:41:1e:34:e6:1d:8a:24:37:b9:ee:c5:74:48:cd:84:39:1f:
94:4d:ef:e4:19:15:40:55:fe:8e:1f:82:11:ab:f8:d6:35:bc:
87:31:e5:ab:3c:8a:5b:89:43:34:c6:29:d1:16:62:1c:a3:50:
5e:45:9e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:56 2025 by rpki-client