Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
File: L9N5NT48lI39mNoKWel5I1Ok0OM.mft (raw, json)
Hash identifier: ZD+m4L2U7+LisFWDCcSVrivTUip5cRvlkXcyy0Dh2gk=
Subject key identifier: 72:67:E9:DF:59:EF:52:22:C0:15:08:CE:76:C8:78:95:07:A7:FA:2C
Authority key identifier: 2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
Certificate issuer: /CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Certificate serial: 0198880D428436CFC13F707C8978FD1A3E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
Manifest number: 0ED7
Signing time: Fri 08 Aug 2025 05:00:26 +0000
Manifest this update: Fri 08 Aug 2025 05:00:26 +0000
Manifest next update: Sat 09 Aug 2025 05:00:26 +0000
Files and hashes: 1: L9N5NT48lI39mNoKWel5I1Ok0OM.crl (hash: kr/TYJJW+7wHpMKEifpuz1y2kGttC/D/Rc/Flv2YMdY=)
2: aVM2JRPGoP421g9oSUNGjf9qD-0.roa (hash: 42F126y1V8CdYKNFngkqVCoN/zI9pVlEuybIcm6uoWA=)
3: vIU4Yywm4_gH0qTtuVvYBbqi0Vk.roa (hash: 7tRCC811YWihlT+yYcIFOXhADjHxLL/OK1DaYCuI4jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:0d:42:84:36:cf:c1:3f:70:7c:89:78:fd:1a:3e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd379353e3c948dfd98da0a59e9792353a4d0e3
Validity
Not Before: Aug 8 05:00:26 2025 GMT
Not After : Aug 9 05:00:26 2025 GMT
Subject: CN=7267e9df59ef5222c01508ce76c8789507a7fa2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:a9:23:ae:8e:90:11:e6:21:8a:92:ca:fa:
98:13:9b:94:e0:45:24:38:32:e8:d7:99:18:bb:8b:
61:14:cf:9f:65:40:1e:b1:2c:cc:ce:cd:8b:ab:9b:
a1:85:5b:22:41:61:3e:00:51:b4:a2:49:0c:1e:19:
5d:58:86:21:11:18:ee:5c:dd:b8:f7:d7:d5:36:58:
14:7f:27:eb:db:c3:b0:fa:13:22:5e:af:db:49:82:
c4:26:15:5f:14:ee:3e:f7:cd:e3:d2:d5:d6:04:bf:
69:a6:81:d3:7f:f9:d9:02:1c:71:38:ea:29:60:29:
eb:ab:8e:27:9a:42:e7:dd:46:18:d8:dc:b6:9d:8d:
13:ba:1a:47:04:38:85:cb:60:fa:2e:3f:85:e7:06:
88:1f:d9:d0:94:a9:42:5c:02:5e:a8:73:79:1f:b4:
ef:a0:c3:6c:84:3e:7a:86:36:73:9a:a6:b0:f3:a2:
81:91:f2:41:07:75:56:1f:a5:9b:32:d0:45:34:62:
d5:7d:23:f5:65:c1:b2:1a:75:3c:aa:6f:96:2f:4d:
e7:88:1b:a4:5c:53:27:75:1e:78:fb:9b:66:7b:81:
39:af:20:66:4b:fe:61:14:5a:8c:89:8c:3b:16:35:
27:4a:38:59:a0:ea:d2:27:0b:70:8a:8f:3e:a7:53:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:67:E9:DF:59:EF:52:22:C0:15:08:CE:76:C8:78:95:07:A7:FA:2C
X509v3 Authority Key Identifier:
keyid:2F:D3:79:35:3E:3C:94:8D:FD:98:DA:0A:59:E9:79:23:53:A4:D0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9N5NT48lI39mNoKWel5I1Ok0OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/13288a-d928-462b-94ba-9e22561bca88/1/L9N5NT48lI39mNoKWel5I1Ok0OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:89:31:24:69:a6:9f:c3:fe:c6:a0:a5:d2:97:bb:fb:1f:50:
0f:f3:fa:53:49:1a:6c:60:73:1b:5b:c6:c5:72:3d:46:01:cc:
c6:7d:36:c8:55:28:95:24:74:e7:67:37:f0:e0:5d:17:1b:e0:
c4:ea:57:05:59:42:25:e6:e9:f2:81:89:81:f2:c3:68:0f:8a:
d1:a3:b3:47:e4:23:e8:bf:b6:05:85:3e:da:df:a5:5c:13:c7:
9e:32:81:7f:3f:24:dc:c3:24:d8:ef:dd:75:ed:51:69:e9:9c:
da:4c:89:ca:5d:5c:be:0d:35:f3:0a:04:32:8c:34:a3:08:15:
6a:fb:b6:83:5a:ce:f5:45:05:b0:d1:f0:cd:70:bc:e1:3d:69:
8d:93:66:e1:45:f7:38:20:6d:4f:01:67:05:1a:2a:9d:fe:31:
69:28:6f:25:45:d7:78:02:0c:f3:fc:b7:29:27:f3:d6:aa:22:
55:32:c6:91:f3:75:cf:3d:92:d4:c1:71:1c:05:04:22:7f:5a:
68:3d:f9:94:3a:3b:15:00:db:74:bc:3c:7b:1c:39:e3:4f:ea:
e9:f4:d4:4d:3c:0c:26:11:f8:ec:2b:b9:9a:d2:14:04:4b:45:
d4:06:d7:c2:3a:8a:52:eb:bb:01:f9:6c:b2:7a:7c:ae:ed:9d:
99:60:13:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:11:08 2025 by rpki-client