Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
File: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft (raw, json)
Hash identifier: 8K5pmXO0YwGKhMQFZLRYssXyh1el7UILt08KFmgJiz8=
Subject key identifier: 02:C4:DE:6D:54:A4:6E:5F:19:10:E8:FE:21:1E:F6:D0:BB:6D:6A:CD
Authority key identifier: 2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4
Certificate issuer: /CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
Certificate serial: 0198936D02FE37BCA7D6E08904575A8C7603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
Manifest number: 06D5
Signing time: Sun 10 Aug 2025 10:00:51 +0000
Manifest this update: Sun 10 Aug 2025 10:00:51 +0000
Manifest next update: Mon 11 Aug 2025 10:00:51 +0000
Files and hashes: 1: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl (hash: suB73XNNeoHJpLPyGZE1ubrHs/PCYTsmpFAB5R4ATDQ=)
2: upvfUH_YjoaPJNTn3nKwVUkJlqc.roa (hash: GMdb4SO6ufP1WGhwXYRzniR/Z7eY9kD3nmj07BQxDnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6d:02:fe:37:bc:a7:d6:e0:89:04:57:5a:8c:76:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
Validity
Not Before: Aug 10 10:00:51 2025 GMT
Not After : Aug 11 10:00:51 2025 GMT
Subject: CN=02c4de6d54a46e5f1910e8fe211ef6d0bb6d6acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e4:63:67:63:9a:cf:5d:b4:b4:d7:23:a2:70:
0a:43:58:1a:3d:8e:24:e6:f5:03:d4:26:93:8d:d3:
3e:7b:8c:d6:69:a8:d5:ea:ea:a2:1c:65:00:f3:4f:
65:2f:ad:cd:4f:b0:34:cf:8f:7c:af:a7:15:59:2b:
fc:d9:21:c8:c7:b5:5b:cb:f0:7a:9f:a9:72:99:e9:
32:9b:f0:3a:12:ce:90:2a:a9:25:a3:70:0d:8b:e5:
cd:46:11:8f:3a:3e:65:f9:17:c2:87:99:d5:76:3d:
ed:de:e8:fe:44:98:84:7e:67:2b:7f:9b:ef:25:6f:
cb:ba:5c:b2:17:4a:d5:cc:b8:5c:68:85:f6:3f:ff:
75:3b:2f:b4:cf:c0:f1:c0:03:bd:c1:a8:cf:ea:37:
f6:a0:2f:41:9a:5a:dc:9e:0d:96:20:ce:cf:3e:45:
24:c4:61:9e:22:3a:40:88:c1:39:e9:0a:7b:a4:f9:
a7:ea:55:66:b5:67:a5:9e:1e:57:99:92:d6:2c:0a:
3c:5c:9b:66:fa:3e:a3:c9:9c:48:68:1e:08:48:b5:
f6:d2:92:07:b5:23:a9:d1:e1:c2:c2:95:bb:8b:03:
81:a8:17:6c:88:6d:39:7a:8d:84:35:f2:14:35:75:
15:c0:6f:38:1a:bb:8b:e4:a2:77:51:fc:fd:67:59:
68:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C4:DE:6D:54:A4:6E:5F:19:10:E8:FE:21:1E:F6:D0:BB:6D:6A:CD
X509v3 Authority Key Identifier:
keyid:2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f1:c0:ca:b0:39:e3:45:e5:e7:be:01:ec:df:d1:8d:bf:60:
44:e6:94:d3:5f:01:c2:48:8e:1c:c8:65:d8:dc:3d:99:a6:37:
08:cb:9e:ad:9c:ac:66:ae:31:1a:7c:cc:45:26:e6:1f:d2:46:
34:42:d9:c0:75:b7:59:c8:53:7d:17:bd:1a:ff:ee:b1:57:a9:
20:2f:52:c6:ca:7d:97:9b:55:8c:b7:49:d2:80:7a:81:5b:5b:
bb:54:dc:4f:8b:51:36:7a:bd:4c:98:bf:e9:85:87:d6:38:1b:
a1:c9:ec:8e:c0:56:c6:a0:a1:af:a5:b0:29:c1:5c:ef:0c:67:
6e:f2:db:33:7f:35:88:54:0c:4b:dd:cc:dc:6f:81:6e:87:35:
51:5a:05:b6:30:0c:84:cc:29:38:0c:3c:53:ab:70:1d:de:e4:
f3:d1:a9:54:7a:11:3d:70:7b:d0:e8:c9:4c:92:89:7d:88:c8:
b1:ee:c3:5e:f9:8c:81:cb:ba:a5:c5:bd:6a:40:e1:55:a4:19:
e3:f3:9b:90:b4:7c:c0:a4:ea:22:b9:75:1b:c0:af:3e:45:5b:
80:70:ba:e7:fe:5c:87:01:69:a6:1f:f5:13:62:a5:dd:ec:89:
c5:d3:f5:88:7c:bb:9e:e6:b9:82:8e:44:d9:22:aa:72:08:fc:
4d:8a:ac:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:46:25 2025 by rpki-client