Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
File: L9XGHpMiaUuHL10yzB-lwbu6sbY.mft (raw, json)
Hash identifier: TYAL2QteDzN/vPZDoACxPLkjEfrPiCr4o86cpH1qNRs=
Subject key identifier: B3:B5:C9:72:58:2F:C4:81:20:97:E2:17:B9:63:90:8D:48:75:05:8A
Authority key identifier: 2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
Certificate issuer: /CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Certificate serial: 01989F3A5507013D3E34D63E3142E5682D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
Manifest number: 063F
Signing time: Tue 12 Aug 2025 17:00:56 +0000
Manifest this update: Tue 12 Aug 2025 17:00:56 +0000
Manifest next update: Wed 13 Aug 2025 17:00:56 +0000
Files and hashes: 1: L9XGHpMiaUuHL10yzB-lwbu6sbY.crl (hash: oRuANNeo30I21onGz6COmJ8diU6b12AeoDJymNinwkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:3a:55:07:01:3d:3e:34:d6:3e:31:42:e5:68:2d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd5c61e9322694b872f5d32cc1fa5c1bbbab1b6
Validity
Not Before: Aug 12 17:00:56 2025 GMT
Not After : Aug 13 17:00:56 2025 GMT
Subject: CN=b3b5c972582fc4812097e217b963908d4875058a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:40:46:9a:ca:18:80:e3:2f:c5:a4:b5:52:0b:
b1:af:5f:91:76:58:17:cc:33:89:c3:da:8a:d8:0f:
93:56:f9:91:ea:97:35:4a:d1:b9:d9:c9:4f:7d:bd:
ee:ad:b5:0b:50:fd:e8:0d:eb:f2:cc:6c:e9:a4:35:
aa:dd:85:bd:72:f6:be:cb:b0:63:35:17:24:0d:dd:
74:af:49:87:23:23:e0:55:d7:ad:18:ac:dc:c3:99:
f0:50:9d:b3:88:1e:86:99:35:69:9f:a2:00:4c:ee:
ed:76:df:78:02:52:07:5f:08:51:16:ed:72:26:f7:
45:49:66:fa:a6:5c:d4:56:bd:b2:8a:63:28:7f:18:
78:88:a2:45:4f:fc:eb:74:8d:57:b5:06:6f:c0:c4:
88:20:2a:ce:25:31:a3:44:2d:72:12:6e:65:3e:ec:
43:3f:c8:d4:70:4c:d3:a1:e2:5d:62:0f:17:b7:25:
4c:49:9e:78:de:31:e7:65:75:88:1e:00:fe:7a:92:
bc:b9:ad:39:a8:f4:3b:f2:c5:50:fd:fb:ae:4b:27:
65:21:04:26:d5:9a:1a:2b:8f:38:a0:36:30:91:26:
73:ee:17:3f:0c:ca:d4:0f:bb:b9:21:ed:57:cc:0b:
0d:d0:7e:8e:a4:eb:a9:63:a3:36:ca:df:07:8a:23:
b4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B5:C9:72:58:2F:C4:81:20:97:E2:17:B9:63:90:8D:48:75:05:8A
X509v3 Authority Key Identifier:
keyid:2F:D5:C6:1E:93:22:69:4B:87:2F:5D:32:CC:1F:A5:C1:BB:BA:B1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XGHpMiaUuHL10yzB-lwbu6sbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2370de-b8e7-4890-9999-ab307cb1e3bb/1/L9XGHpMiaUuHL10yzB-lwbu6sbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d8:ac:1b:db:43:dd:7d:cc:08:3a:ab:a7:89:25:44:a1:ee:
23:cd:ac:d9:59:8f:71:af:f0:9d:e5:22:9a:e4:91:f8:59:79:
7a:dd:bf:bf:0a:de:60:00:3a:29:ab:92:7b:cc:a3:e4:f3:1d:
5c:ac:a8:fc:08:bc:47:58:bc:a9:9a:7e:06:40:48:3b:f3:2d:
72:33:95:dd:68:32:4a:f7:57:95:2c:1b:a8:a4:f3:62:d8:1f:
93:b8:bf:fb:65:c8:f5:0a:01:90:e8:36:d6:98:37:14:b7:c1:
f1:19:1a:3f:d2:fc:70:16:ec:96:49:d6:41:3f:7c:aa:da:41:
34:aa:88:45:fd:6f:c6:dc:ea:81:7c:b0:97:77:9f:fa:39:b9:
b3:4f:86:a6:3a:cb:fe:01:31:0f:d6:bb:db:fc:4f:f9:28:a2:
4f:7a:71:fe:18:dc:96:34:0b:c2:fc:35:16:86:86:42:ee:c1:
46:5f:28:33:ae:26:ff:41:a7:22:ef:26:80:a3:6e:90:64:d4:
f5:b2:89:ea:cf:2a:9b:b7:99:7d:b8:ca:5c:ed:a1:6d:20:d1:
de:97:50:3b:46:01:a7:d8:41:92:89:a8:3d:23:1b:5f:41:9e:
aa:36:31:9a:cc:6e:5c:3d:79:66:f4:6c:66:51:15:2b:96:8f:
5b:89:75:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:46 2025 by rpki-client