Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
File: L7GbEAHBEHH7osw0FMxHW2wpCcc.mft (raw, json)
Hash identifier: gVME1/FNzp9MDD86dKrd8aKsOEOEGCVNj7+4hEvLAsU=
Subject key identifier: E9:BA:DA:0F:F7:FF:91:AA:67:F0:02:56:45:03:1E:2E:BC:B5:6C:83
Authority key identifier: 2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
Certificate issuer: /CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Certificate serial: 019A5151308E4C2739F7B28F3B4C60E36C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
Manifest number: 1709
Signing time: Wed 05 Nov 2025 00:01:06 +0000
Manifest this update: Wed 05 Nov 2025 00:01:06 +0000
Manifest next update: Thu 06 Nov 2025 00:01:06 +0000
Files and hashes: 1: L7GbEAHBEHH7osw0FMxHW2wpCcc.crl (hash: fIN/QQnxj/IeIqzNtEZ30T9K5kCniS1pf7lI/bpnmJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:30:8e:4c:27:39:f7:b2:8f:3b:4c:60:e3:6c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb19b1001c11071fba2cc3414cc475b6c2909c7
Validity
Not Before: Nov 5 00:01:06 2025 GMT
Not After : Nov 6 00:01:06 2025 GMT
Subject: CN=e9bada0ff7ff91aa67f0025645031e2ebcb56c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:41:f4:69:30:e8:ea:2b:ab:d2:c4:5b:dc:
a4:2a:51:49:0c:4a:c9:25:a4:9d:c3:1e:5c:45:6e:
45:06:e2:2f:50:de:6f:0d:00:0d:aa:8b:48:4d:e8:
40:c1:f6:2a:6c:47:4c:e8:8c:10:4a:55:36:28:53:
5e:eb:ea:51:1b:15:d8:47:9f:93:a2:b2:1d:0d:aa:
df:e3:a2:df:39:95:78:65:d0:d8:12:35:88:d5:a1:
ff:65:db:fa:9a:0d:73:6f:e3:01:b3:e9:e0:f4:17:
45:e0:73:13:6a:84:77:a1:1e:18:c2:30:ee:8f:07:
c0:31:c9:6e:a7:b8:a5:86:e1:8c:2f:63:e2:84:b2:
4b:a1:2d:ad:e1:c3:02:dc:91:7f:c9:be:d1:c0:a5:
19:f7:e9:ce:96:7b:16:39:9d:33:16:cd:9c:e8:4d:
1d:38:42:4e:63:26:ae:60:77:ca:7b:bc:b6:84:45:
fe:10:09:95:06:89:eb:a5:04:36:70:df:ec:e0:57:
be:73:d3:34:ab:3a:88:59:e4:ea:c5:df:4b:c5:f2:
d6:a6:f2:42:a9:d5:11:2e:72:bc:b6:9f:36:4b:8d:
ef:cf:72:71:32:66:65:3e:b4:6e:d4:a7:d6:2d:9a:
d3:7e:48:8c:b7:0e:2b:7d:01:72:ab:07:34:98:80:
35:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BA:DA:0F:F7:FF:91:AA:67:F0:02:56:45:03:1E:2E:BC:B5:6C:83
X509v3 Authority Key Identifier:
keyid:2F:B1:9B:10:01:C1:10:71:FB:A2:CC:34:14:CC:47:5B:6C:29:09:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7GbEAHBEHH7osw0FMxHW2wpCcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2047cf-ee67-4494-acd5-d5ba5c073a8e/1/L7GbEAHBEHH7osw0FMxHW2wpCcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:65:c6:2a:c5:78:c8:74:7e:9f:57:83:29:05:05:5c:2c:67:
0f:d1:d2:fa:36:25:81:dd:eb:fb:53:78:d3:6b:8c:32:83:28:
63:e0:ee:54:3f:5c:96:ce:f3:c7:72:de:bb:43:82:59:a4:11:
6b:b8:23:9c:7b:71:2e:08:87:34:0f:5a:e1:4d:bd:8f:1a:20:
c0:3c:14:cc:79:7b:33:77:c2:64:b9:2b:30:59:38:f8:41:a3:
56:a3:26:d5:1d:f0:4b:39:21:fe:46:40:94:45:83:f6:99:b9:
89:ae:21:ca:52:56:5f:86:37:8b:fa:c5:09:3f:2a:bd:58:ba:
b2:b5:32:9b:4c:27:cf:a6:f9:63:59:1a:7b:a7:4c:d5:30:3b:
a1:19:b2:34:54:bd:19:a3:2e:e4:19:b8:16:d7:da:4d:2a:f3:
f2:00:8a:03:f1:35:dd:56:2b:cd:54:ea:5c:be:5c:ab:0a:34:
00:b4:62:ef:a0:e8:4b:36:27:a7:71:23:7e:f7:1f:48:53:d7:
76:0d:f9:da:eb:fd:27:aa:a4:3a:0a:d2:da:31:f5:53:e8:11:
ae:cc:2d:b9:72:f4:ae:94:b8:94:22:d7:c8:bf:aa:2c:96:38:
90:1d:ce:c0:0b:93:4a:dd:e6:e3:96:aa:d5:16:8f:ab:10:0d:
06:b3:58:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:20 2025 by rpki-client