Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
File: L28OoBJ6bjkhlWljgL5bsEdLAd8.mft (raw, json)
Hash identifier: 9zPX3ixtwgYEdqjCzHVTJXCY2ZoFN5LWuOd34yLTsrM=
Subject key identifier: 5B:17:24:EB:30:FF:0D:37:DE:55:DB:36:8F:B6:33:D5:B6:6C:F3:9C
Authority key identifier: 2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
Certificate issuer: /CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Certificate serial: 0197778A2FD5CC67E00FAD26B7D4F851DACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
Manifest number: 1593
Signing time: Mon 16 Jun 2025 07:00:34 +0000
Manifest this update: Mon 16 Jun 2025 07:00:34 +0000
Manifest next update: Tue 17 Jun 2025 07:00:34 +0000
Files and hashes: 1: L28OoBJ6bjkhlWljgL5bsEdLAd8.crl (hash: O7r3X3fcBFV1N/YbgSV7065uIipOqXO3bQHwZzdbPgo=)
2: vqiF7KHwgC4hKANJve3WilTtCaA.roa (hash: ViWg/cb4ZOWXmU8DGPzhe6lMZyYPSAoJx2DnUl9cMUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:8a:2f:d5:cc:67:e0:0f:ad:26:b7:d4:f8:51:da:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Validity
Not Before: Jun 16 07:00:34 2025 GMT
Not After : Jun 17 07:00:34 2025 GMT
Subject: CN=5b1724eb30ff0d37de55db368fb633d5b66cf39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:d1:1b:a6:f9:4a:dd:3e:d4:08:a4:b8:0c:
7f:3a:39:ab:d6:8a:f2:cf:44:c8:7f:93:2a:65:bc:
3f:7b:12:3e:02:9c:f8:48:5d:15:a9:03:ff:95:6c:
37:ab:9c:a4:64:c9:1a:f5:15:bd:18:5e:23:fd:df:
8a:60:c9:27:49:91:27:d9:f0:f7:ac:da:61:ac:95:
4f:40:8a:16:8a:0f:d6:85:f3:ac:a3:68:61:19:3c:
d5:9e:71:c3:a6:ce:38:99:7f:49:a4:8b:a3:cc:48:
c7:c0:80:a2:08:e5:0d:1a:9d:6c:1e:ed:71:d5:ba:
47:3b:0b:11:fc:99:29:dc:f7:ad:79:6e:bb:7d:db:
d2:12:5d:78:84:fc:3e:cd:c9:59:0f:5c:ec:6f:26:
b2:a2:68:d0:0a:95:9d:2d:4b:e9:f8:42:b1:fb:fe:
4a:8d:be:7b:9c:4e:6a:c9:f8:3b:5e:83:cf:14:d6:
59:00:d0:01:ad:19:12:f5:4b:98:ad:3d:f3:1d:8e:
3e:75:1e:d6:b7:90:8f:82:e8:2f:3f:23:37:2e:86:
49:ad:7c:11:a1:c9:19:1c:df:e5:77:82:e8:80:54:
48:43:dc:c0:bd:9f:7f:5b:53:88:0c:bf:52:a8:ed:
11:ad:ba:96:71:34:5c:27:69:74:43:1b:5b:fb:19:
e9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:17:24:EB:30:FF:0D:37:DE:55:DB:36:8F:B6:33:D5:B6:6C:F3:9C
X509v3 Authority Key Identifier:
keyid:2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1f:ad:66:97:3b:50:a6:c4:4c:db:2b:7b:2e:69:66:c5:0d:
c2:f8:6d:c7:d5:e9:69:16:c7:4b:97:1d:2e:f0:dd:78:21:81:
9c:31:ce:08:17:02:71:b6:e4:87:df:c6:ff:2a:9a:f3:cb:f3:
fd:c0:1c:17:7b:ac:98:0f:8e:41:f9:49:0f:32:8c:26:35:ee:
47:45:e1:f2:3b:ce:16:50:8a:f9:df:ae:3d:07:a1:46:15:0e:
9f:47:e1:03:50:b4:eb:ef:2b:8c:bc:91:19:9a:d1:de:53:ea:
0d:96:c6:e4:2d:d7:45:45:3f:22:22:15:7d:f6:1b:f1:e3:b0:
5a:45:db:4e:66:16:37:ba:01:e3:4c:28:73:19:ee:60:74:e1:
0d:76:16:fb:99:12:c5:c1:77:2d:31:5b:58:b0:38:5b:7c:7a:
c9:0c:ea:cb:09:4f:16:08:b8:2c:b0:36:89:80:87:21:34:f6:
d2:5b:f6:18:53:71:c7:de:97:fd:c2:d0:03:59:88:df:36:00:
48:4f:f5:14:6a:1a:8d:bc:44:7b:85:1c:77:3d:8c:34:1c:07:
b7:c5:f2:a4:0b:ae:a1:14:8e:e3:25:8e:d1:6b:4e:73:46:b7:
11:50:88:38:b2:e6:90:77:84:56:91:6c:51:e8:2f:b2:8e:bb:
fd:4e:49:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:55:16 2025 by rpki-client