Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
File: L97GcLeAw7-UAe8cEVodh_6PfHo.mft (raw, json)
Hash identifier: ZFgjOZ9tpl8qG63go+WMVkhyJHnolUL3mZN/VksN9PE=
Subject key identifier: 9D:13:1B:7D:E3:00:BD:4C:41:EF:19:8B:72:AA:12:A8:CE:1A:FA:83
Authority key identifier: 2F:DE:C6:70:B7:80:C3:BF:94:01:EF:1C:11:5A:1D:87:FE:8F:7C:7A
Certificate issuer: /CN=2fdec670b780c3bf9401ef1c115a1d87fe8f7c7a
Certificate serial: 019874503E8092DC4D8BC3B34DCECF446A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
Manifest number: 0CF7
Signing time: Mon 04 Aug 2025 09:01:12 +0000
Manifest this update: Mon 04 Aug 2025 09:01:12 +0000
Manifest next update: Tue 05 Aug 2025 09:01:12 +0000
Files and hashes: 1: L97GcLeAw7-UAe8cEVodh_6PfHo.crl (hash: mltCfjsvLCqrY5gzdASpHLUwPliRzEwWSgryHHnJI2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:3e:80:92:dc:4d:8b:c3:b3:4d:ce:cf:44:6a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fdec670b780c3bf9401ef1c115a1d87fe8f7c7a
Validity
Not Before: Aug 4 09:01:12 2025 GMT
Not After : Aug 5 09:01:12 2025 GMT
Subject: CN=9d131b7de300bd4c41ef198b72aa12a8ce1afa83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:24:b7:6a:a8:bd:fa:e1:44:e7:16:d1:e0:
22:b6:fe:6a:9c:d4:93:89:da:f4:85:2b:3b:ce:06:
c8:53:5b:0b:21:84:45:88:3d:fc:1a:8f:14:92:13:
75:1c:ef:47:12:27:18:25:7a:92:ef:e1:23:90:75:
95:39:d3:4a:76:d2:43:1f:5d:ab:8e:53:fd:11:cd:
04:ec:a7:76:0d:71:e8:d9:00:b8:4b:1f:1f:5e:52:
b0:27:fb:74:b1:27:9c:70:fc:05:87:d4:f9:21:ce:
ed:fe:f2:70:52:a1:07:5f:00:7b:50:97:08:d0:c9:
c9:19:35:41:ca:f3:75:54:e9:3e:bf:d4:1b:2f:fe:
c9:15:67:0c:b5:e9:23:df:4a:47:67:46:64:65:3e:
85:c0:15:90:06:ad:18:f7:2f:05:d6:8e:fd:f0:3f:
4e:89:05:d4:d5:95:08:f1:a3:14:a5:5f:59:22:a2:
6e:a7:1a:95:33:4f:5a:d7:0c:b4:5e:0c:6d:7b:65:
94:c2:b8:ed:8a:27:4a:9a:19:2d:34:2c:06:fd:50:
ce:80:76:64:bf:b1:88:f7:0f:da:ee:00:81:b4:b0:
8c:30:96:a2:09:01:04:ef:af:0a:fe:af:c6:81:14:
d7:46:18:66:7f:30:2a:f6:b5:68:09:8c:75:51:de:
82:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:13:1B:7D:E3:00:BD:4C:41:EF:19:8B:72:AA:12:A8:CE:1A:FA:83
X509v3 Authority Key Identifier:
keyid:2F:DE:C6:70:B7:80:C3:BF:94:01:EF:1C:11:5A:1D:87:FE:8F:7C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:00:63:34:0b:a3:7d:49:73:43:52:57:30:33:eb:8c:7e:10:
fd:ea:a8:03:51:a4:72:8c:3c:8f:25:50:91:b9:5e:5a:e0:6f:
32:a3:10:31:85:89:4a:47:3b:a4:9f:5e:c3:94:fc:ea:bc:25:
08:c0:75:aa:5e:d0:21:6a:be:68:59:cc:e4:98:23:c7:81:5b:
f7:4d:f7:20:8e:15:bd:ab:a5:04:b0:cf:fc:a8:e3:21:a0:f7:
f8:74:16:1a:3f:0b:50:56:1f:12:40:39:46:be:9b:42:79:57:
52:aa:90:c4:7d:3b:ce:f3:6f:2f:3d:2d:49:6f:56:1d:c1:25:
97:9f:ca:96:de:ec:a1:8b:6f:6d:bd:50:b5:84:c3:c1:59:07:
d7:97:d1:bc:a7:ec:87:de:67:f0:8a:43:4e:86:cf:67:cf:e7:
85:b2:eb:c9:3e:f2:4f:1d:f6:b0:c5:f2:46:1c:19:bf:e2:b4:
4a:23:34:1a:a6:0d:69:a0:64:e9:70:95:ad:e5:5a:61:dc:f0:
4b:d9:f5:91:a7:57:1b:b2:62:32:41:b5:4f:a2:67:25:43:44:
5b:ec:75:13:55:d1:ae:57:c7:4d:24:e3:cd:f8:9f:e1:b6:1c:
09:2e:5b:a8:94:52:23:eb:7d:fd:4a:9d:a1:d3:47:6e:ce:ef:
1c:b9:d4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:16 2025 by rpki-client