
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
File: l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft (raw, json)
Hash identifier: Eeu+YlQ381prMCzelcy9gSWqy+5UfzNb0ASdsqY4H/4=
Subject key identifier: 92:B3:77:D7:4D:82:28:58:D5:AD:95:69:3B:B4:4D:C1:89:4C:C7:B2
Authority key identifier: 97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
Certificate issuer: /CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Certificate serial: 019874BE5EAEBAA374ACEE2A3BCF886D1671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
Manifest number: 0CF9
Signing time: Mon 04 Aug 2025 11:01:29 +0000
Manifest this update: Mon 04 Aug 2025 11:01:29 +0000
Manifest next update: Tue 05 Aug 2025 11:01:29 +0000
Files and hashes: 1: l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl (hash: t6c71izzW0QhIVgN0lrTbFGG4h97SmGJc372RQkFhqQ=)
2: rAptMRvSUdwv73c1hrV9bfbr3Yk.roa (hash: M82hA2K7N0hc5dPJhXNevznbaSP5bAh4nu7+zgBVgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:5e:ae:ba:a3:74:ac:ee:2a:3b:cf:88:6d:16:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Validity
Not Before: Aug 4 11:01:29 2025 GMT
Not After : Aug 5 11:01:29 2025 GMT
Subject: CN=92b377d74d822858d5ad95693bb44dc1894cc7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:c4:55:49:0f:ef:1c:a4:1c:65:8a:85:04:
a1:f1:a6:9a:6a:87:bf:e0:5d:b4:84:37:a1:fe:6f:
51:4f:11:8a:25:5c:2e:74:df:81:54:18:39:da:21:
a7:98:cf:d1:27:68:0a:c5:8e:75:4c:5d:35:f8:1d:
a2:e2:9e:d2:ca:ba:61:3f:52:07:f9:e1:68:58:aa:
c1:fa:df:fc:32:97:61:1e:46:9c:46:98:98:b9:02:
1a:bb:11:a3:7a:0e:60:3b:20:10:4e:e4:f0:b7:d3:
a8:d3:da:af:33:15:69:37:fc:14:fc:49:56:50:46:
10:2d:e4:02:54:c8:47:23:ef:c9:af:5a:49:42:27:
19:a1:60:f6:46:a3:ae:50:b9:99:37:d1:f2:dd:c3:
d8:8b:bd:c6:c5:f8:c7:87:9e:a9:5d:9e:e8:e9:14:
79:b0:92:b9:2f:57:30:8d:8b:e9:67:3f:db:d3:1b:
5a:42:8f:9e:61:48:bb:68:22:ea:51:08:3f:53:b8:
84:cb:ac:bb:9f:ea:7a:d5:00:50:a0:f7:2f:06:0d:
bd:76:63:27:e2:61:36:9d:32:fc:9c:92:59:99:0a:
03:2e:92:13:07:a3:aa:2e:8f:5c:2e:f3:c4:10:07:
6b:1d:d7:22:40:50:fc:c0:61:37:ae:ae:ab:9c:bc:
7f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B3:77:D7:4D:82:28:58:D5:AD:95:69:3B:B4:4D:C1:89:4C:C7:B2
X509v3 Authority Key Identifier:
keyid:97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:fc:76:c2:d8:9e:46:b0:bf:a9:ce:64:82:99:20:0c:64:77:
cc:ac:99:fb:7f:3b:10:ea:e2:2c:ee:e0:83:b6:96:33:0b:ec:
4d:77:a7:43:b2:61:9b:dd:93:98:d7:52:6a:85:ad:97:8d:b6:
9e:0c:47:fb:34:4d:89:69:c0:9c:71:35:20:77:57:c6:ce:ed:
9a:32:81:1e:f1:2b:ff:7d:8d:c4:3f:cc:a8:82:06:e3:73:00:
62:83:0c:97:f8:9d:08:93:a1:12:6a:51:7b:d8:45:1d:35:4a:
2e:0f:ca:88:9a:ae:a7:ff:5b:f1:8a:e2:09:69:3e:34:7d:a5:
62:9b:e7:c8:07:e5:9b:b7:57:18:28:91:14:00:65:57:e0:2c:
84:3e:1d:a9:99:df:83:83:8a:43:c2:74:7a:a8:f4:01:5b:b6:
28:52:29:db:12:0b:af:24:c3:f2:af:b8:93:d6:e4:cd:ef:11:
bf:db:7f:e3:01:fe:28:bd:c3:45:9e:45:d8:1c:ff:96:b5:87:
56:58:b8:c5:2c:8a:5b:db:28:b1:bd:e0:51:30:9a:2d:b3:3d:
5d:8d:cc:b5:0d:18:9f:9e:f1:88:a2:5a:35:15:bf:65:00:f6:
a4:90:e3:87:36:65:4b:9c:4a:fc:67:cb:07:12:0e:23:62:8e:
2f:e6:da:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:57:24 2025 by rpki-client