
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
File: L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft (raw, json)
Hash identifier: 4UC0KPRdnHV1uJq1gVoobN1mMd7wV4RKKzTxJ6vTEgM=
Subject key identifier: DE:36:87:40:F5:4B:F5:61:80:EA:F9:F9:2C:E6:06:D9:74:9F:B7:3D
Authority key identifier: 2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A
Certificate issuer: /CN=2f64716b186be1145822e1c70764fab61fb13c6a
Certificate serial: 019873E2DB031636051F020BB7D7FBFFEE04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
Manifest number: 0860
Signing time: Mon 04 Aug 2025 07:01:43 +0000
Manifest this update: Mon 04 Aug 2025 07:01:43 +0000
Manifest next update: Tue 05 Aug 2025 07:01:43 +0000
Files and hashes: 1: L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl (hash: MKfDQkBlseIhmrxJstnE2gl0iqnpTWAv9JTDXyB0FUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:db:03:16:36:05:1f:02:0b:b7:d7:fb:ff:ee:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f64716b186be1145822e1c70764fab61fb13c6a
Validity
Not Before: Aug 4 07:01:43 2025 GMT
Not After : Aug 5 07:01:43 2025 GMT
Subject: CN=de368740f54bf56180eaf9f92ce606d9749fb73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:19:64:21:91:4d:bb:70:67:15:f0:0e:fe:
f1:90:9e:47:63:17:ca:91:37:e2:f6:6a:96:2b:a1:
13:e6:46:02:73:c5:79:39:14:33:73:4f:85:36:e3:
d1:b1:26:59:e9:e3:3b:98:c0:7a:de:1e:4d:09:01:
a0:a2:72:c1:61:c5:3a:fa:62:76:01:2d:c1:b6:05:
35:06:35:73:65:e6:e6:18:61:ff:10:89:66:59:78:
12:79:c3:3e:8b:26:2d:7a:13:f1:b7:ce:7d:7f:4b:
0a:9f:4b:84:62:95:d3:05:8e:4f:94:ff:79:41:94:
aa:6f:3d:f8:3c:46:19:66:b6:11:c1:e8:6b:bd:45:
6a:c8:be:7e:f0:0a:47:a9:de:f1:4a:d9:3d:eb:c8:
ec:69:40:f6:9d:25:c7:88:03:db:fe:4b:66:c6:b8:
86:e4:3c:d9:53:4e:06:ed:f9:18:d8:72:66:85:c7:
c9:1c:3f:3d:77:60:03:c1:43:bd:ce:57:94:eb:11:
5c:50:66:94:07:83:d1:95:31:38:6c:d3:f2:bd:c4:
c0:1b:61:18:23:93:d9:78:34:31:60:69:83:2f:e7:
23:de:39:6d:25:48:7b:07:fc:82:a6:c8:98:d1:9b:
61:67:a5:1c:c6:86:d0:1e:48:4c:99:0e:7b:13:e4:
d0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:36:87:40:F5:4B:F5:61:80:EA:F9:F9:2C:E6:06:D9:74:9F:B7:3D
X509v3 Authority Key Identifier:
keyid:2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fc:a8:4d:cf:54:8d:1f:38:3a:02:18:33:ad:3c:82:2d:fe:
c6:95:39:32:04:ac:cb:28:03:47:64:0c:b5:ff:24:c4:70:99:
0d:24:03:5a:32:5c:15:6d:55:cb:1c:bd:ad:12:4a:98:f8:84:
c9:d3:9d:69:37:aa:56:35:3d:66:55:a0:74:42:d1:fc:4d:46:
2a:ca:85:9a:aa:41:8e:53:f5:26:4b:9e:2f:05:97:a1:f8:35:
3c:6e:b5:6d:ad:94:1a:45:ac:5d:7c:e9:fc:71:52:7b:f8:80:
67:7d:6c:2f:18:9e:61:e2:7e:85:fb:d6:6c:6a:ed:74:9b:01:
95:a5:32:5f:06:17:dc:1d:ed:d2:f3:51:d5:29:2e:fe:63:9a:
2b:c3:eb:16:60:be:2a:6f:6a:a4:b9:1a:63:cd:28:ad:93:81:
92:c0:a7:79:d1:51:ad:4f:41:37:26:e8:41:16:cc:cc:31:21:
b5:ab:12:03:da:6f:1c:cb:5e:b6:2d:17:dd:3f:71:2e:cb:0f:
ba:06:d8:7a:67:c2:0b:4a:61:24:a5:7c:0b:86:01:cc:8f:59:
2f:65:01:e7:d3:d5:4c:59:87:f3:04:0a:5e:d2:8b:d8:26:a3:
86:7a:49:4b:f7:8d:2e:b5:88:4b:0f:73:4e:df:fa:d7:ed:dd:
65:e5:01:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:34 2025 by rpki-client