Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: YqOMO+bks2xpNeZu6LFoJ0ZDaQ3oFKl2jZBS09l04R0=
Subject key identifier: C8:01:B0:85:94:69:75:98:5E:E6:D5:4C:F9:C8:5C:14:9E:B2:76:11
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 019769CEB2B81BF744261B74B820DBA38209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 03D4
Signing time: Fri 13 Jun 2025 15:00:43 +0000
Manifest this update: Fri 13 Jun 2025 15:00:43 +0000
Manifest next update: Sat 14 Jun 2025 15:00:43 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: QX+qTe08EQbkJmjN3yZMcTJH0Joxl9js6hEGKxsj+Zs=)
2: WxBvM9AzXvcGUxLQO7mjVfKZ8SI.roa (hash: MlBmuxBYdT/UhZRE0mpsF297g9H8Aa5t6UDiR3XGbFU=)
3: hGYvey0NL7kedoZnW8NGK9NdHUE.roa (hash: j/gjt7b1AkCBiDU1S/YvmfcXT2lTvik+0pgkIhPCV+w=)
4: zhUAq4pe-9N-dxfCl2d78EjPTb0.roa (hash: uyxGbVsUozb8CGUZeB9rmoW8CVbBZTPJHf+JK7e+rn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:b2:b8:1b:f7:44:26:1b:74:b8:20:db:a3:82:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Jun 13 15:00:43 2025 GMT
Not After : Jun 14 15:00:43 2025 GMT
Subject: CN=c801b085946975985ee6d54cf9c85c149eb27611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:97:84:f5:ce:e5:20:7a:94:3d:41:2e:4a:
0f:da:96:9b:77:96:8b:45:12:6f:80:79:8b:66:ea:
9b:87:78:c4:ff:ad:1b:da:cd:ed:ac:79:19:f9:0e:
8b:c4:21:07:a3:8b:8d:65:89:cd:f1:00:1b:5b:97:
d3:1e:f1:b8:ee:49:aa:52:0d:21:72:34:d2:46:e2:
99:ab:d7:db:04:62:15:0f:73:1d:58:e8:7a:c4:57:
75:84:13:35:6a:9b:37:a0:97:35:53:0e:05:5d:5e:
2a:8e:7f:78:68:30:b3:f8:4e:03:a6:86:14:da:b8:
85:81:6f:37:c9:bd:82:6b:1d:99:f1:39:0f:7a:30:
d8:e0:ef:13:ac:e8:ee:ed:6e:89:ce:fc:16:32:60:
cc:dc:07:52:d7:a9:57:e6:47:7b:bc:e8:60:5e:d2:
cc:e8:75:b9:69:52:b0:bb:c1:ea:30:b1:10:0a:35:
23:15:f3:ce:da:40:b9:e7:25:1e:14:64:b6:c2:3d:
71:cb:80:bb:06:00:b7:72:80:82:e1:00:12:38:73:
d3:2a:80:4c:93:f1:a2:a6:86:a9:61:2f:28:b5:dd:
84:17:85:a1:df:fc:08:6b:e3:f4:db:06:91:1d:7b:
19:70:15:c8:2f:ce:d5:e8:35:23:76:07:c6:5c:47:
82:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:01:B0:85:94:69:75:98:5E:E6:D5:4C:F9:C8:5C:14:9E:B2:76:11
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a1:54:ab:a0:e0:6d:a6:7a:a3:49:9f:60:85:51:fe:1f:b1:
7d:0b:d3:7a:09:fa:b4:5b:d1:4c:8c:5c:52:95:3a:da:77:8e:
c0:b1:fa:fa:2c:a4:ec:90:90:7b:b4:7f:d4:9c:fa:85:f0:7c:
0b:97:41:3d:71:f0:52:2e:9f:be:19:e3:ef:40:da:8e:5a:69:
0d:d8:74:c6:3c:91:41:87:f2:9c:ff:78:b6:48:7a:ee:66:4f:
42:d2:ab:64:c3:07:0c:8a:33:eb:44:15:b4:59:8e:18:55:f3:
22:61:85:1b:b5:b5:95:1f:f6:6c:cd:60:8a:0a:40:95:ab:11:
e3:33:06:34:70:18:70:ed:f3:79:17:c9:8f:5b:8d:7e:31:44:
ec:ea:f4:0c:81:0c:0f:0e:d5:5c:ec:ff:92:d6:21:69:bb:7c:
0b:88:8c:24:e7:0f:bc:2a:6c:cd:20:9e:5f:2d:ea:db:ac:84:
ae:0c:4c:d5:b2:bb:62:14:f3:b6:0d:d2:f6:bc:04:09:96:08:
f4:24:37:0b:b4:47:15:4a:52:18:17:ea:d7:2e:07:46:c3:26:
e6:85:c6:fe:c3:2e:b6:97:50:86:57:05:ce:bd:30:36:5f:c9:
c4:03:3a:b4:34:2d:fb:a6:2d:5c:b6:7d:0f:59:81:cb:38:c6:
23:2c:3f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:53 2025 by rpki-client