Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
File: L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft (raw, json)
Hash identifier: DovfZExlVWwG52SzNu44ordq9DMC/b2FZRfACR0595s=
Subject key identifier: FB:EF:A1:9D:ED:D0:B1:37:F0:9B:C1:E0:0C:92:67:1B:8D:CB:77:B5
Authority key identifier: 2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A
Certificate issuer: /CN=2f64716b186be1145822e1c70764fab61fb13c6a
Certificate serial: 019A4EF3FD8EA514ED6F5BFD28AF040402ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
Manifest number: 0956
Signing time: Tue 04 Nov 2025 13:00:04 +0000
Manifest this update: Tue 04 Nov 2025 13:00:04 +0000
Manifest next update: Wed 05 Nov 2025 13:00:04 +0000
Files and hashes: 1: L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl (hash: p+HbO1HGF1BBu0DVGb05Ml/W9r4RjGTah1M9ZmujQ1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f3:fd:8e:a5:14:ed:6f:5b:fd:28:af:04:04:02:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f64716b186be1145822e1c70764fab61fb13c6a
Validity
Not Before: Nov 4 13:00:04 2025 GMT
Not After : Nov 5 13:00:04 2025 GMT
Subject: CN=fbefa19dedd0b137f09bc1e00c92671b8dcb77b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:4d:ef:fd:63:9e:55:e0:97:90:8c:b9:ff:
33:22:45:21:ba:9d:92:f3:1e:c5:0c:38:60:e1:96:
68:69:d3:60:02:e8:f2:cc:79:89:c6:8c:af:3c:81:
ae:dc:b6:d1:a9:d4:8a:a1:3d:f7:d1:79:56:2e:f1:
36:2b:cf:01:16:36:11:36:2f:93:ea:e6:4f:78:29:
d7:87:9b:c3:cf:cb:0e:8c:44:a4:54:95:51:df:09:
73:50:74:cc:70:87:5e:40:ca:df:49:2c:13:c2:96:
90:5e:a4:fb:bb:cc:2e:94:bd:65:81:fb:61:fa:a6:
69:64:15:d2:37:2f:1f:8c:45:16:2d:f1:dc:55:1f:
f9:4b:70:e8:85:5e:ac:87:1b:34:18:f3:b6:33:ce:
70:8d:d3:70:cf:96:95:ea:86:5b:0c:ea:91:e1:27:
89:85:eb:2e:6c:32:1a:43:b5:11:f8:fb:2b:f5:e3:
fa:31:f8:c9:1f:92:25:4a:95:13:0a:6d:d5:c7:86:
0b:8a:74:51:12:8e:3a:8f:65:6d:b8:c5:fb:23:13:
26:0e:f1:88:66:30:e4:cf:08:13:26:20:68:1f:c7:
b6:38:e1:d8:36:d3:d8:61:ed:db:92:af:80:c5:31:
3b:e3:9d:bf:a1:ab:1f:c7:18:8c:fd:ac:ef:31:98:
58:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EF:A1:9D:ED:D0:B1:37:F0:9B:C1:E0:0C:92:67:1B:8D:CB:77:B5
X509v3 Authority Key Identifier:
keyid:2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a8:68:75:5b:47:02:47:84:7a:25:c7:75:da:0b:34:77:08:
6e:4c:60:e9:09:27:20:17:40:56:0c:72:c5:20:e7:75:8a:50:
0a:1e:39:94:cc:95:69:ff:9c:32:cb:d0:ef:77:32:07:94:f9:
44:a6:d4:92:59:08:67:4c:9b:64:8b:8a:be:69:9f:bb:89:56:
fe:de:06:1f:a0:a1:28:82:b0:73:7c:8c:18:7b:0a:42:b4:05:
d1:7b:88:5f:7f:bf:66:66:4f:58:bd:26:a5:21:5f:b9:18:42:
c0:08:5d:08:90:17:0b:05:29:da:5f:2d:62:cb:40:85:b1:5d:
9a:ad:ae:fa:46:d3:50:13:b1:47:5b:e5:8d:ac:de:f7:33:7f:
6f:0d:d6:d5:5e:6d:61:b2:2e:cc:87:f3:f0:8f:c7:de:a5:16:
a0:e6:fb:53:3d:09:e1:b1:e1:72:4d:6e:0c:41:25:eb:40:da:
46:68:38:73:32:4f:c8:15:04:82:69:59:18:97:b0:58:49:cc:
bc:2e:3d:a0:a8:77:2e:da:a9:97:a7:4d:76:03:59:06:03:89:
2e:bb:cf:a2:d9:8a:76:12:72:09:4d:c7:74:fb:2b:84:9c:5a:
70:ef:1a:9a:1a:d2:d1:e0:16:63:3f:f3:b2:2b:67:3d:ee:18:
d0:99:20:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:09 2025 by rpki-client