Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
File: L45RIlad5SzVCux5NJS_HOfCX8g.mft (raw, json)
Hash identifier: Uy3QRxarbGyxwjMjVTY+aKTcXXbnOIbYYHRvzUiElt0=
Subject key identifier: BF:4C:69:93:D6:3D:34:A4:29:F1:47:FC:FE:E1:2B:8F:D6:95:B6:8D
Authority key identifier: 2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8
Certificate issuer: /CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8
Certificate serial: 01976C2B637C9024AE6D179C285D8DF7BE05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
Manifest number: 0C42
Signing time: Sat 14 Jun 2025 02:01:12 +0000
Manifest this update: Sat 14 Jun 2025 02:01:12 +0000
Manifest next update: Sun 15 Jun 2025 02:01:12 +0000
Files and hashes: 1: 4inp3rmc8abBZrSpYG-9NzczLIs.roa (hash: qFrZA2CrZBITypnTYdQbhEuRjClc/T+Pn0jtn1pc/ok=)
2: L45RIlad5SzVCux5NJS_HOfCX8g.crl (hash: WS0DJKw52p0fSIY+psFseaEcA+WD6zwe42YV5oc9AD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:63:7c:90:24:ae:6d:17:9c:28:5d:8d:f7:be:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8e5122569de52cd50aec793494bf1ce7c25fc8
Validity
Not Before: Jun 14 02:01:12 2025 GMT
Not After : Jun 15 02:01:12 2025 GMT
Subject: CN=bf4c6993d63d34a429f147fcfee12b8fd695b68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ff:60:06:79:a9:ca:23:91:0b:a4:1a:cb:1d:
cc:40:e5:3d:a1:3a:47:de:c4:df:ba:37:2f:e2:ce:
c9:d5:9a:2c:1b:fc:4b:de:af:8b:ab:cb:e6:5e:bc:
a9:f5:38:78:e3:eb:17:16:58:dc:2e:e7:87:5c:66:
fd:e3:81:f2:a9:65:70:64:81:ec:3f:27:cd:89:bf:
cf:fe:24:d5:19:74:47:eb:da:0c:6d:ec:d6:c8:8b:
38:89:be:bf:5a:8a:83:f2:65:d4:9c:d7:32:8e:23:
05:4e:74:46:55:92:bf:03:94:93:d5:45:04:9e:e3:
f5:b6:ca:4c:3d:eb:50:ec:28:a9:0e:a3:8a:bd:68:
9b:98:e2:a2:12:f7:83:7b:4a:21:2f:de:bf:16:1e:
d1:e6:3e:b6:de:49:69:08:96:c7:ca:ae:67:ef:eb:
b2:f1:a1:b9:1f:97:bb:35:77:c4:4d:95:7e:d2:4f:
f6:68:93:00:aa:30:32:97:67:0e:90:fd:bd:28:b9:
d6:5a:d1:fd:a5:cf:92:e2:90:2f:9c:e9:3c:38:6a:
3d:1e:23:29:9b:24:1a:2b:52:29:2b:90:85:5b:b4:
d6:9e:ba:24:32:b2:a7:cd:d0:64:4d:cd:8c:84:22:
1e:a8:0e:d5:a8:dc:42:0b:6f:d7:84:c6:a3:dd:52:
59:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4C:69:93:D6:3D:34:A4:29:F1:47:FC:FE:E1:2B:8F:D6:95:B6:8D
X509v3 Authority Key Identifier:
keyid:2F:8E:51:22:56:9D:E5:2C:D5:0A:EC:79:34:94:BF:1C:E7:C2:5F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L45RIlad5SzVCux5NJS_HOfCX8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/356e78-dcf8-4625-87ca-8688b1e53571/1/L45RIlad5SzVCux5NJS_HOfCX8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0f:2a:e4:ed:61:8e:7f:77:e2:ed:1b:31:39:f6:4c:6a:53:
b0:19:b1:9f:38:36:8a:96:24:3f:50:00:98:cf:a2:8e:80:a2:
0a:8e:6f:6b:de:97:33:4f:ae:6c:0b:84:81:3c:66:f3:36:78:
bf:36:75:bd:e9:9e:85:0f:01:1f:e2:30:2d:f5:97:cb:64:22:
0f:66:0a:31:bf:53:65:db:01:08:ee:82:9f:42:ee:af:03:d4:
47:c3:96:54:5d:22:6e:26:f0:aa:0f:7f:7d:9b:df:61:80:c0:
99:b9:6f:bb:7b:49:df:b4:2e:c2:84:1b:96:3b:d4:e4:6d:2a:
0a:67:38:de:81:21:e7:39:51:5b:3b:52:50:fa:5d:ec:26:0f:
11:48:75:62:ab:b4:09:67:13:0b:db:a9:09:90:a3:e6:6f:28:
50:49:7a:e1:ca:f4:fd:3a:55:b6:b6:15:29:1a:0e:9d:2b:a7:
d9:18:c2:a4:a1:eb:5c:53:86:6e:f6:e4:c6:3f:cb:1f:14:f4:
13:e1:0f:9e:62:db:16:02:06:d1:4f:e4:f8:62:76:6f:7d:50:
8b:85:3f:3c:ea:68:04:44:9b:8b:cf:73:fa:1e:18:07:7e:ac:
ba:be:52:ae:54:1e:92:cb:4d:fb:be:54:78:8c:09:80:34:37:
51:0f:ee:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsK2N8kCSubRecKF2N974FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOGU1MTIyNTY5ZGU1MmNkNTBhZWM3OTM0OTRiZjFjZTdj
MjVmYzgwHhcNMjUwNjE0MDIwMTEyWhcNMjUwNjE1MDIwMTEyWjAzMTEwLwYDVQQD
EyhiZjRjNjk5M2Q2M2QzNGE0MjlmMTQ3ZmNmZWUxMmI4ZmQ2OTViNjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/9gBnmpyiORC6Qayx3MQOU9oTpH
3sTfujcv4s7J1ZosG/xL3q+Lq8vmXryp9Th44+sXFljcLueHXGb944HyqWVwZIHs
PyfNib/P/iTVGXRH69oMbezWyIs4ib6/WoqD8mXUnNcyjiMFTnRGVZK/A5ST1UUE
nuP1tspMPetQ7CipDqOKvWibmOKiEveDe0ohL96/Fh7R5j623klpCJbHyq5n7+uy
8aG5H5e7NXfETZV+0k/2aJMAqjAyl2cOkP29KLnWWtH9pc+S4pAvnOk8OGo9HiMp
myQaK1IpK5CFW7TWnrokMrKnzdBkTc2MhCIeqA7VqNxCC2/XhMaj3VJZTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9MaZPWPTSkKfFH/P7hK4/WlbaNMB8GA1UdIwQY
MBaAFC+OUSJWneUs1QrseTSUvxznwl/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDQ1UklsYWQ1U3pWQ3V4NU5KU19IT2ZDWDhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zNTZlNzgtZGNmOC00NjI1LTg3Y2Et
ODY4OGIxZTUzNTcxLzEvTDQ1UklsYWQ1U3pWQ3V4NU5KU19IT2ZDWDhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zNTZlNzgtZGNmOC00NjI1LTg3Y2EtODY4OGIxZTUzNTcx
LzEvTDQ1UklsYWQ1U3pWQ3V4NU5KU19IT2ZDWDhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHw8q5O1h
jn934u0bMTn2TGpTsBmxnzg2ipYkP1AAmM+ijoCiCo5va96XM0+ubAuEgTxm8zZ4
vzZ1vemehQ8BH+IwLfWXy2QiD2YKMb9TZdsBCO6Cn0LurwPUR8OWVF0ibibwqg9/
fZvfYYDAmblvu3tJ37QuwoQbljvU5G0qCmc43oEh5zlRWztSUPpd7CYPEUh1Yqu0
CWcTC9upCZCj5m8oUEl64cr0/TpVtrYVKRoOnSun2RjCpKHrXFOGbvbkxj/LHxT0
E+EPnmLbFgIG0U/k+GJ2b31Qi4U/POpoBESbi89z+h4YB36sur5SrlQekstN+75U
eIwJgDQ3UQ/uVQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:30:09 2025 by rpki-client