
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
File: L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json)
Hash identifier: ELkDz59ghUGQV4ZQkjCLhqQ8yOiwIqC1hzUepagCV4M=
Subject key identifier: 42:BD:14:A3:14:B6:28:97:9F:64:9A:BB:A9:DC:90:D4:30:51:F1:62
Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
Certificate issuer: /CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Certificate serial: 01988B456D27DF3F71C6A97C2BE12B6D1006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
Manifest number: 0E2F
Signing time: Fri 08 Aug 2025 20:00:39 +0000
Manifest this update: Fri 08 Aug 2025 20:00:39 +0000
Manifest next update: Sat 09 Aug 2025 20:00:39 +0000
Files and hashes: 1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: qSL2DfzYDNj/Nt6JXAk2DjkYx77DmjTMnvOagJzIgUo=)
2: vQoI-4y6Tfml573DLn2pCriBNl4.roa (hash: 3W+CArLvUD2GX28NdlGoBAxxfe8EMtX22dfil51a9Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:6d:27:df:3f:71:c6:a9:7c:2b:e1:2b:6d:10:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Validity
Not Before: Aug 8 20:00:39 2025 GMT
Not After : Aug 9 20:00:39 2025 GMT
Subject: CN=42bd14a314b628979f649abba9dc90d43051f162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:ae:41:09:72:6b:65:29:32:50:b6:86:5d:
3a:71:d0:6d:0e:d4:77:95:20:a0:95:9c:2b:82:67:
10:03:99:18:47:ae:4a:cd:b9:1c:22:bb:e9:45:26:
ce:5a:4d:3d:65:b9:50:52:4e:73:9d:37:cb:65:18:
8c:2b:83:89:36:fc:59:fe:7f:ec:d6:3e:93:e5:06:
6f:9b:d5:bd:8a:f6:9f:7f:bc:66:b0:c8:b7:1c:21:
f0:51:ab:a2:e9:1c:89:8e:93:55:93:3b:fb:3c:3d:
7a:d6:ae:15:cc:65:c7:ec:fd:bb:00:3c:32:a4:e0:
90:c9:32:95:b5:68:97:25:82:da:8b:ff:f0:09:4a:
3f:4b:97:71:bc:4d:e7:e3:f6:ba:7e:5c:8b:9e:23:
36:67:c3:82:7b:60:5f:22:e8:c7:d4:c9:9d:00:7d:
6b:cd:74:9f:a4:c4:c6:94:83:5e:fc:77:a6:c4:aa:
aa:da:af:8f:3d:27:87:46:9e:c2:b9:3e:d3:4a:09:
62:9c:92:14:86:f2:75:16:85:6c:fa:16:4d:c2:4e:
9f:6d:9f:33:11:ad:7b:fe:b5:c4:12:75:93:b5:13:
31:1d:91:2f:34:5d:e1:c9:9a:91:3e:a2:61:d9:b9:
8c:94:e4:a9:ff:bb:60:60:6a:cd:03:e9:e9:c2:51:
b7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BD:14:A3:14:B6:28:97:9F:64:9A:BB:A9:DC:90:D4:30:51:F1:62
X509v3 Authority Key Identifier:
keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:66:c5:24:9d:ff:00:c5:af:10:d0:e6:17:dd:28:98:07:2b:
4b:40:b3:df:ac:f7:be:b9:96:1c:6e:ca:1a:e3:c7:2e:10:c5:
de:80:18:a9:23:a5:01:a9:06:45:dd:39:31:98:44:50:3c:08:
d4:0c:fd:cc:b1:f1:e9:7e:7a:c8:91:c8:6b:47:54:93:ba:7e:
b6:0a:a9:57:83:ce:c1:ed:0d:a9:a4:e9:26:a2:2c:8c:58:44:
49:42:0d:08:4d:54:f2:57:c8:89:b4:42:4d:73:f2:fc:a8:38:
5b:69:14:24:ab:25:b8:55:70:da:49:76:cb:18:33:68:f0:b4:
fe:dc:38:b1:91:ff:f5:89:67:bd:a1:fa:e2:f4:a7:63:0d:6a:
8f:a9:e6:f4:0a:78:4a:db:7b:25:e9:1b:fa:8a:1e:7f:71:06:
7a:6f:14:bb:39:9f:3d:e7:08:d7:c0:bf:aa:64:15:83:69:9e:
d4:9c:08:e1:78:c7:23:87:d1:76:65:29:90:bc:db:d6:53:f2:
3d:32:c7:fb:54:b0:2d:a0:cb:55:51:af:4b:ee:8e:30:94:35:
2e:6f:60:2e:c0:47:03:6d:c1:e3:3f:6a:62:95:31:8a:89:32:
70:78:c8:a0:10:00:1e:7e:6a:1a:fb:cb:cd:4b:7d:a4:60:f6:
87:ae:a2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:52:10 2025 by rpki-client