Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json)
Hash identifier: yOiqy9we1o2NsymiS36QkkQ3CepKKw7H/Pru4M5q75E=
Subject key identifier: AD:D4:E7:7F:0D:3A:F2:D5:02:DE:15:8B:74:9F:E9:46:EE:5E:56:64
Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Certificate serial: 019771F653F7E15F28265F651FDB1404F72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
Manifest number: 05A3
Signing time: Sun 15 Jun 2025 05:00:57 +0000
Manifest this update: Sun 15 Jun 2025 05:00:57 +0000
Manifest next update: Mon 16 Jun 2025 05:00:57 +0000
Files and hashes: 1: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: cnjAAf7qoFDXpm6vomktVMldriMncxru7o/xg3xYpmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:53:f7:e1:5f:28:26:5f:65:1f:db:14:04:f7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Validity
Not Before: Jun 15 05:00:57 2025 GMT
Not After : Jun 16 05:00:57 2025 GMT
Subject: CN=add4e77f0d3af2d502de158b749fe946ee5e5664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:ce:52:95:58:2a:e9:bf:be:2c:1d:22:3a:
6f:95:fa:0f:ed:5e:e3:f8:aa:6f:8c:b6:20:15:1a:
ee:5b:35:da:99:b0:d1:23:a6:2f:69:9a:77:a2:25:
1c:67:67:cd:c9:8c:b4:7b:e3:c3:47:91:39:da:c2:
02:5c:00:d5:5a:78:c3:6f:1f:c0:ad:a8:41:47:7e:
b2:f5:17:47:8b:24:b5:c2:ee:f8:8f:20:96:c3:0e:
37:1c:44:fa:82:ee:31:5e:53:47:c3:b6:36:84:99:
46:ce:34:3f:39:72:75:57:1a:84:92:a3:d9:5a:0d:
ab:73:db:10:33:f1:19:f8:d2:e6:94:33:a7:9f:88:
a3:f9:7c:55:e4:2d:72:9b:22:f4:7b:7a:01:8b:94:
dc:89:3e:fd:7a:e1:ef:3a:f7:c1:31:f5:13:e6:fa:
3b:e4:ef:34:81:cf:b2:f6:9b:18:98:3e:7d:a3:03:
d4:e2:b8:7d:ff:6d:fe:fa:99:64:b3:e9:d0:31:67:
16:2f:ad:d1:2a:7f:9e:ae:10:9d:71:87:3d:6a:71:
42:39:10:1d:ee:20:e8:f4:c8:a6:03:56:3a:47:cf:
8b:31:02:98:6b:9d:5d:a7:15:24:68:36:ba:8b:1d:
50:4d:8b:89:bd:a9:fa:6b:4b:90:8e:10:2c:d0:7f:
d3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D4:E7:7F:0D:3A:F2:D5:02:DE:15:8B:74:9F:E9:46:EE:5E:56:64
X509v3 Authority Key Identifier:
keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b8:28:9b:3c:0c:48:ae:ac:ba:54:d8:1a:be:c2:d4:23:a6:
a6:a9:96:20:f8:bf:17:90:17:8c:ad:e8:e9:d3:0b:e6:ec:6c:
a0:a0:45:f8:ba:d9:2a:25:3f:43:72:0a:69:7b:94:98:55:77:
39:f2:5c:70:76:18:94:77:d6:d0:4b:64:93:28:d4:d4:2b:26:
ab:f2:b5:d2:f9:8e:1e:99:43:f8:ec:45:ef:04:d1:6d:e0:7d:
43:6a:d5:0a:4e:00:4d:3b:b7:b9:9b:42:80:c2:02:28:54:95:
00:62:50:4a:a9:db:78:dd:0e:ee:a9:de:32:14:d1:87:97:fe:
0d:33:2b:22:4a:ac:7d:55:1d:ef:42:f8:1c:7b:30:6b:e5:56:
3d:23:31:5e:63:39:15:01:f4:72:7f:5d:67:c4:d4:77:2d:7a:
66:5f:7e:0a:bf:60:8f:5e:b0:41:8f:3a:eb:79:4a:93:16:4a:
c6:28:8d:bd:72:ae:18:49:cb:3c:0a:4c:c5:32:03:5b:cc:08:
3f:58:55:22:6d:bd:e4:4e:9f:1a:55:e8:4f:d2:6c:78:b1:0d:
01:79:0e:8e:56:22:5f:7c:9b:81:6f:1c:58:05:24:47:39:97:
f8:00:5b:88:3a:d5:04:14:34:28:ec:e4:74:98:40:e2:85:99:
3f:21:04:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:31:12 2025 by rpki-client