Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
File: l2lJAzf2c8ZOORJK6JgbA05QEno.mft (raw, json)
Hash identifier: ifSjMisogDFmBi8p/JAzsDViAkEAnI2dzREtLe8IJ1U=
Subject key identifier: FA:A4:8C:F1:D4:0F:4B:6C:18:2D:49:2E:CE:5D:FD:61:D3:11:52:CA
Authority key identifier: 97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
Certificate issuer: /CN=9769490337f673c64e39124ae8981b034e50127a
Certificate serial: 019A4E18A40B377886AFBBA84F2D5D29013D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 09:00:28 +0000
Manifest this update: Tue 04 Nov 2025 09:00:28 +0000
Manifest next update: Wed 05 Nov 2025 09:00:28 +0000
Files and hashes: 1: l2lJAzf2c8ZOORJK6JgbA05QEno.crl (hash: 3ZWQxiz6Q+1kQSZVRn3ldm8BYlnzw0QDy47O3VBOmu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:a4:0b:37:78:86:af:bb:a8:4f:2d:5d:29:01:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9769490337f673c64e39124ae8981b034e50127a
Validity
Not Before: Nov 4 09:00:28 2025 GMT
Not After : Nov 5 09:00:28 2025 GMT
Subject: CN=faa48cf1d40f4b6c182d492ece5dfd61d31152ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ed:48:a1:a0:69:68:3a:cb:01:9d:02:13:12:
2b:e7:c7:f8:64:8f:20:90:5b:0d:dd:b3:d6:c9:d6:
32:f2:56:60:f3:ff:a0:c1:b2:ca:e2:31:ee:c3:21:
05:28:a0:bd:35:e6:80:da:5f:f8:87:a1:ad:29:18:
ee:d9:c4:ea:c3:7d:4f:14:c3:c6:2b:97:93:e2:d3:
a5:9e:d4:74:83:ee:ce:fe:06:23:7f:e9:db:ce:6f:
cf:3c:33:f9:ac:34:49:8b:9b:e2:66:86:7d:41:8f:
54:70:03:d7:ec:26:74:e0:1f:61:35:fd:5c:e5:89:
91:2b:77:c4:5a:bd:66:19:72:4e:2f:0c:2e:9b:0e:
f3:8e:e8:f1:c3:ef:2a:80:57:9b:07:f3:23:d8:af:
df:ae:86:b9:55:4e:d3:b5:d5:9b:d6:f8:1d:3d:aa:
81:a1:65:33:74:f2:18:05:d4:24:cd:14:de:c4:72:
54:30:9f:c2:f4:32:5f:f8:e0:63:31:d5:12:04:64:
e1:89:65:c3:04:28:0c:bb:0d:8e:36:a0:bf:18:11:
c3:1f:a2:b9:14:51:c5:6a:0d:02:c4:5e:28:5c:a3:
c5:74:2a:10:62:57:64:de:94:bf:69:cd:a6:1e:03:
51:d1:70:cc:62:41:f1:36:b4:a6:4a:fc:00:ad:c2:
5d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A4:8C:F1:D4:0F:4B:6C:18:2D:49:2E:CE:5D:FD:61:D3:11:52:CA
X509v3 Authority Key Identifier:
keyid:97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:08:71:ee:a8:c2:4c:01:dd:af:be:36:86:75:42:a8:ec:ad:
d8:eb:ee:7a:40:54:92:0d:05:08:66:63:10:d3:92:df:36:06:
a1:32:59:4e:6f:4c:c8:d5:15:ab:0b:a7:c8:1e:81:5b:6f:19:
76:71:c8:1e:a5:8e:b8:7c:a6:95:23:c0:96:01:23:31:38:b2:
4c:ab:80:80:04:5f:f9:f5:1c:7d:5a:c2:c9:4c:72:ea:19:63:
e5:7d:50:53:c4:75:73:8a:39:2a:98:2d:c1:a9:d7:51:cd:91:
89:bf:70:57:a0:d5:7c:46:7c:d6:30:1f:29:f1:17:24:a7:a7:
40:32:d4:76:3b:46:d0:d7:21:19:43:dc:53:f0:95:74:03:2d:
58:b9:b6:78:9a:34:72:94:c6:45:98:e7:6c:fc:36:92:ef:b1:
12:c3:b2:a3:4d:09:08:55:bf:fd:0e:55:b5:7a:56:11:9b:2e:
73:14:db:8c:03:3f:a7:66:58:9b:91:64:c2:55:d4:7e:c9:4b:
13:9f:00:6d:bb:e9:3b:c1:89:f8:38:a8:70:38:03:6e:46:b3:
82:d9:9a:20:21:fb:0b:c3:2c:50:48:4b:02:a0:dc:b6:0f:c9:
a5:c8:95:00:17:84:c6:16:7d:de:9b:97:94:8f:cb:8c:df:17:
8e:7e:e9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:30 2025 by rpki-client