Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
File: L8VFWRk_6APSh01pjzQpKPdjKgU.mft (raw, json)
Hash identifier: tcioQpSF5vLUDysD4rZjw2M1fjFGezhguAiypfMA2lI=
Subject key identifier: A3:39:5B:52:4E:C2:4D:80:5F:74:5A:21:72:BE:4E:47:A0:58:52:28
Authority key identifier: 2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05
Certificate issuer: /CN=2fc54559193fe803d2874d698f342928f7632a05
Certificate serial: 01976BF49286899207CCE830E5DA503E43C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
Manifest number: 158A
Signing time: Sat 14 Jun 2025 01:01:19 +0000
Manifest this update: Sat 14 Jun 2025 01:01:19 +0000
Manifest next update: Sun 15 Jun 2025 01:01:19 +0000
Files and hashes: 1: L8VFWRk_6APSh01pjzQpKPdjKgU.crl (hash: plRA8h38B0bbsJbGiAvFNvkJmrL1ecJ15/URxnrIASw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:92:86:89:92:07:cc:e8:30:e5:da:50:3e:43:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc54559193fe803d2874d698f342928f7632a05
Validity
Not Before: Jun 14 01:01:19 2025 GMT
Not After : Jun 15 01:01:19 2025 GMT
Subject: CN=a3395b524ec24d805f745a2172be4e47a0585228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f5:c6:b7:72:a0:8c:96:e8:e2:5e:bf:b1:ea:
27:18:62:4a:51:03:9d:d5:82:af:9e:21:eb:c1:10:
20:ba:7c:e0:aa:71:70:15:ac:35:2e:ee:ab:fb:8f:
82:59:4b:75:40:8e:1f:ca:13:91:99:70:79:28:68:
2d:c9:40:fd:10:89:5e:fe:81:cb:f5:85:12:56:ef:
26:53:1e:84:cc:9b:a6:97:75:0f:72:e1:69:7e:14:
bd:4d:1d:42:50:54:45:ad:28:bb:66:b7:b0:52:73:
06:57:e2:e5:ab:9d:48:13:e5:76:31:e2:3d:91:1c:
f7:44:84:75:e6:53:27:0e:8b:61:ce:71:e8:d1:b1:
dc:80:81:80:04:89:15:7a:50:05:b6:5f:33:d7:be:
b3:b3:2d:08:c9:d0:44:bb:34:25:ca:17:a5:fa:3a:
05:46:e3:71:dd:c0:db:9d:2b:6f:13:39:a0:4c:81:
13:06:8a:59:49:0d:3e:11:7d:54:f3:a6:44:f4:24:
c3:b6:84:4a:f8:88:83:cd:1d:1a:eb:10:38:31:74:
95:c6:c8:3c:9a:f4:c1:16:ac:0a:05:e2:80:ad:b9:
2d:43:6f:1e:8b:f3:0a:39:e5:77:f2:5e:b6:73:8a:
d0:2e:95:f9:bc:8e:0b:bf:eb:4d:2d:84:98:3f:0c:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:39:5B:52:4E:C2:4D:80:5F:74:5A:21:72:BE:4E:47:A0:58:52:28
X509v3 Authority Key Identifier:
keyid:2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:03:1c:53:f3:f0:76:da:76:75:49:4a:3c:99:7f:fe:84:91:
cd:3b:c0:e0:88:d2:38:37:24:aa:ba:f3:75:4e:b0:1c:17:01:
e1:25:8e:a7:ef:43:e3:5a:fe:c6:0f:32:c4:7f:f6:75:66:86:
e2:41:0b:30:3d:c4:29:92:21:4b:9a:cd:15:5f:36:38:8a:b5:
ef:d5:53:2e:3a:5a:e3:01:93:d5:e9:da:e4:1e:6c:ab:1c:4f:
fd:d3:b1:28:49:3f:08:ad:dd:8c:e3:55:82:bb:39:ed:41:0b:
25:0b:d7:cb:c3:ab:fd:f9:13:60:94:e7:fd:11:44:b5:1c:ad:
07:13:bc:05:b6:6c:84:53:f7:b6:9c:c2:c2:aa:5e:db:46:c4:
27:57:c7:f5:67:c6:93:6d:09:9b:60:8a:65:ad:b0:d5:f9:a5:
7a:02:8e:a0:a3:87:f3:84:13:5d:af:a0:5d:5f:cf:02:9d:6b:
7b:29:e0:75:32:06:38:c7:4a:59:61:47:d6:c1:c1:0b:82:4b:
7f:01:e4:29:23:cc:a1:90:b5:ec:e6:7d:e2:70:bf:e1:fb:99:
6c:f0:20:21:a3:0b:45:b9:26:5c:4a:f2:a5:e0:e8:11:7d:e9:
ee:eb:1f:85:b4:f1:a4:7f:91:5f:e5:06:00:06:dc:e0:31:b9:
d2:db:5f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:31:39 2025 by rpki-client