Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
File: L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft (raw, json)
Hash identifier: nbk7TmJJDCrqNi5uo+J5V+AjOryVddPHSg/54xuP61c=
Subject key identifier: 7C:76:12:E5:59:4C:72:4B:C2:D9:EC:58:9A:AA:EE:11:93:C9:17:22
Authority key identifier: 2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
Certificate issuer: /CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Certificate serial: 01987E66259C547F6266D52B5AF660CC4E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
Manifest number: 1605
Signing time: Wed 06 Aug 2025 08:01:20 +0000
Manifest this update: Wed 06 Aug 2025 08:01:20 +0000
Manifest next update: Thu 07 Aug 2025 08:01:20 +0000
Files and hashes: 1: L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl (hash: 1NZ/daIhL5DWT2sQ4TT3nv7PtUTrFYMzcHTkn5YC4OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:25:9c:54:7f:62:66:d5:2b:5a:f6:60:cc:4e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Validity
Not Before: Aug 6 08:01:20 2025 GMT
Not After : Aug 7 08:01:20 2025 GMT
Subject: CN=7c7612e5594c724bc2d9ec589aaaee1193c91722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:14:f0:21:2d:95:ed:39:b0:29:37:2f:57:
4b:a7:c9:59:22:a1:58:3e:97:bd:ae:29:51:e9:29:
12:2b:35:2f:65:89:8f:19:9b:99:d2:f3:6a:79:c4:
8e:7c:cf:f0:fb:11:4a:8e:7f:c0:39:ae:4a:96:12:
de:27:4e:86:08:33:c4:f4:3f:06:83:92:5a:b4:f4:
47:90:23:18:a7:01:41:69:37:d9:a6:c9:6c:20:4b:
19:11:08:ff:f1:c6:43:14:84:94:72:0d:64:f6:ed:
41:b4:7c:8b:30:f2:56:2e:2a:49:9a:0e:86:40:ae:
98:f8:bb:63:36:01:d5:f6:55:c2:c4:ef:71:d1:5e:
27:12:c6:7d:42:0a:1d:b8:07:e7:03:1f:e1:94:78:
85:d0:0e:1e:c5:e5:75:9d:25:33:11:b2:fe:16:33:
ad:1e:4f:ed:37:63:5a:8a:ac:70:c1:3f:1b:02:12:
60:48:0c:6e:46:99:fb:d6:15:ca:b2:a6:50:44:50:
ef:22:fd:51:8f:4e:5c:a6:e9:f5:84:cc:cf:49:3c:
05:33:cc:b3:e7:a6:c5:4e:3d:4d:d0:2a:c8:6d:62:
f7:34:49:c8:96:9d:37:6f:fb:3b:41:2c:b6:a4:8d:
45:f8:3f:44:bf:9b:99:60:30:d3:f5:3a:ce:c0:8b:
dd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:76:12:E5:59:4C:72:4B:C2:D9:EC:58:9A:AA:EE:11:93:C9:17:22
X509v3 Authority Key Identifier:
keyid:2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:0b:ee:7a:31:17:39:67:57:0d:3e:77:8b:8d:39:f8:7f:65:
59:c6:bb:a3:79:e6:81:2c:65:c8:1f:98:7d:61:1d:a4:bc:39:
33:11:a9:0e:52:b8:0f:28:76:f8:7e:6d:e2:40:40:18:8d:4c:
18:62:14:f5:1c:e2:9f:b5:e8:f5:c6:b4:b5:00:d8:15:27:2a:
55:c6:cb:d1:a9:01:1e:e1:ef:44:2a:6a:e3:9f:22:5b:63:77:
e9:f4:3a:be:c7:00:f8:e5:3d:2d:57:14:5a:e3:7d:c1:4f:83:
07:fb:10:be:3a:e5:bc:2f:6d:c7:1c:b6:d1:39:21:9a:43:44:
80:27:9b:9e:93:5d:a5:55:07:e9:33:e1:54:4e:67:d9:4a:c0:
3b:83:6f:4e:7b:b9:bf:57:61:89:53:f7:ee:4f:60:9c:5a:5c:
8f:c0:a5:e9:60:77:1b:7d:35:49:72:10:ae:f6:87:98:7b:52:
31:fd:49:9d:e9:f7:f9:f2:3e:a4:66:cb:be:79:7e:bc:8d:94:
e2:25:49:33:f7:29:5e:87:ec:31:e7:c0:eb:14:1d:ac:2c:c1:
84:bd:37:90:44:e6:a4:50:97:17:4f:f5:36:4f:b0:dc:54:0a:
a6:69:d8:9e:76:b7:ee:5a:8c:17:00:f5:f0:21:aa:3e:7c:10:
fa:59:6c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:01:14 2025 by rpki-client