Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: J3Zhy3uNTxLskd4OzBDmfmgMIQzNUZIdTK1ilycjuJM=
Subject key identifier: C4:33:D0:19:A0:D6:D3:52:E1:AB:E1:F8:C5:29:AE:6C:34:90:93:7A
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 01968058A3F0D41A776DCB07891E1D6B8004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 0C71
Signing time: Tue 29 Apr 2025 07:00:14 +0000
Manifest this update: Tue 29 Apr 2025 07:00:14 +0000
Manifest next update: Wed 30 Apr 2025 07:00:14 +0000
Files and hashes: 1: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: lU1vKsH24fLaFud547Adf54sDKXtuKTDxnpOIvhh6K8=)
2: afVgxjAetRHf-32SfxI2xSGcZNY.roa (hash: 5+vaYR6gRkTLd8FndMtKaBU448DVyxpRSJ1taqs3pZY=)
3: qxyxQlVHUvofNzmf_XqptKckrdE.roa (hash: cKnrJAob0FIV4Kpod3nX7eoqdSn57f3LQGAcTD4ltHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:a3:f0:d4:1a:77:6d:cb:07:89:1e:1d:6b:80:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Apr 29 07:00:14 2025 GMT
Not After : Apr 30 07:00:14 2025 GMT
Subject: CN=c433d019a0d6d352e1abe1f8c529ae6c3490937a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:35:08:8d:f3:38:25:06:d8:3d:8e:55:b7:44:
6c:89:db:ae:db:92:8a:61:61:6a:fa:ed:45:ba:2d:
82:bd:12:18:09:9a:97:ea:da:f4:7a:3d:11:7d:c4:
7b:18:8f:17:48:dc:be:ab:e6:fc:ef:da:b0:2e:93:
8a:3d:da:79:20:b6:e8:c4:7e:fb:e1:8c:67:9a:f4:
60:4d:8d:59:84:64:60:db:de:ab:1a:f0:b6:4f:fc:
48:8e:55:71:3e:40:43:e9:b2:ce:38:84:b3:92:c9:
14:11:ae:82:ed:09:29:ce:10:dd:fd:b7:a5:26:3a:
6d:8b:2e:ff:cb:64:af:d4:20:58:42:10:97:54:7c:
41:6a:b6:d4:f3:8b:9c:10:dc:e2:e1:73:07:6f:3e:
5a:46:8f:bf:57:bc:ab:35:da:94:30:60:d8:df:2d:
da:80:f0:00:8b:d3:19:0c:47:81:91:a4:34:3a:91:
21:d4:f5:98:58:d0:09:40:c3:35:ed:0a:71:0b:c7:
34:81:ed:34:0a:d7:d5:6e:3d:ee:2d:ec:32:f1:90:
c7:49:42:db:01:e9:88:0a:82:8f:d6:b5:67:4c:34:
8e:ae:12:02:e0:9e:db:01:02:27:2c:16:3e:ba:59:
76:b0:6c:e2:4e:69:b1:27:3e:27:31:07:cb:cc:cf:
a1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:33:D0:19:A0:D6:D3:52:E1:AB:E1:F8:C5:29:AE:6C:34:90:93:7A
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d4:0a:3d:e6:26:f2:9b:4c:de:6b:8e:9e:97:47:a1:47:a2:
d7:ab:3f:cf:e6:24:ea:ab:c2:bf:f9:e7:60:2f:b8:31:b5:06:
ea:ab:42:68:92:b9:73:c3:7b:94:be:f3:d1:be:50:77:a8:07:
38:88:48:8e:0c:a3:17:55:42:c9:67:3f:22:a7:f4:8b:28:7e:
61:e1:35:cc:14:92:40:64:b5:93:46:f5:63:60:bc:f9:59:53:
30:a0:31:d7:d4:b8:9c:05:81:96:4c:3f:34:c5:39:50:c1:d3:
52:81:b4:b5:c0:82:6c:60:a5:93:eb:38:02:b1:82:a4:ac:b6:
bb:57:8d:02:95:69:3e:14:42:be:31:40:09:cf:2c:c3:d2:7d:
6c:89:81:d3:2f:f9:c5:14:19:12:82:9b:5f:af:2b:94:b4:d9:
26:ed:39:c0:3a:14:c3:02:e2:32:74:dc:1f:8a:8b:13:e3:40:
09:0a:94:ed:27:51:09:70:44:96:72:f9:89:19:ae:d6:04:11:
d7:83:03:c8:e5:f3:62:d1:88:37:a3:22:c0:28:2a:8a:5d:f2:
cb:02:d8:42:e1:f1:b0:15:50:f0:10:02:ad:2a:b1:6f:15:95:
a3:f4:1c:25:8a:bf:91:fc:6f:dc:a4:df:12:dd:4e:fa:56:1a:
ac:56:ac:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:29:57 2025 by rpki-client