Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
File: L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft (raw, json)
Hash identifier: kpSS6mRyH/qo4y27z8E3oKxej+fZVtBSdvUK7AtBwz0=
Subject key identifier: BB:88:CE:44:64:A7:D9:75:83:35:B2:F0:EC:61:A6:B4:98:73:34:01
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 01976F99A532A62A62C6C065C9F7286AEABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
Manifest number: 15A5
Signing time: Sat 14 Jun 2025 18:00:29 +0000
Manifest this update: Sat 14 Jun 2025 18:00:29 +0000
Manifest next update: Sun 15 Jun 2025 18:00:29 +0000
Files and hashes: 1: L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl (hash: 6vK+vtVMvS5LDEjtg5hEo7iiC8Xcen1FEb5k4U4bNUw=)
2: bRCOse-YwXmlb0_TSMXc_qYW3rA.roa (hash: WyPtlgmhHmNvXP6MvNpXQnH3k3dVLs2cy4XeQO/f/1I=)
3: kU21zPj_cDfQp59eNGbfgPnOKEw.roa (hash: KKCABhY5ZDh0u6CmKvmilt9DAebFs3J5DYDRFE17Ifo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:a5:32:a6:2a:62:c6:c0:65:c9:f7:28:6a:ea:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: Jun 14 18:00:29 2025 GMT
Not After : Jun 15 18:00:29 2025 GMT
Subject: CN=bb88ce4464a7d9758335b2f0ec61a6b498733401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:97:e3:9d:9a:ff:e2:79:ab:b0:80:c7:1b:a7:
7c:08:b9:c3:45:ee:16:c3:4c:f7:c4:8d:d7:4b:96:
2d:db:65:68:d6:4c:38:47:33:43:36:a0:58:be:8a:
00:3e:a0:b4:48:16:eb:3c:76:9f:ea:61:ff:e7:21:
4f:e1:c0:c1:f7:41:92:4e:81:0a:60:ad:27:63:db:
bd:06:8e:e3:f6:20:94:cc:4f:36:b0:ed:77:a8:4a:
84:23:08:58:ec:67:92:f2:88:be:78:db:3a:0b:9f:
64:30:e6:45:6b:db:5d:f8:e1:05:e2:15:f2:7a:00:
17:6a:15:16:e5:3d:30:44:a6:64:97:89:1d:ad:a5:
8e:bc:f5:f2:fb:3a:0b:e0:3f:f3:d2:18:52:1c:46:
6d:2e:49:38:bd:92:8d:bb:72:68:a8:47:b0:c5:fb:
82:38:b7:5c:2c:5c:7c:f0:7b:80:b2:a9:d3:e4:4f:
53:69:51:02:e4:ca:af:8e:45:8c:77:81:d6:fe:b1:
9a:bc:bf:18:4e:a4:cf:24:21:61:c5:08:80:a6:0f:
75:42:ca:8e:0f:1f:b3:c1:02:01:37:78:0f:44:ac:
6c:bb:d0:4e:af:cd:a9:87:99:9f:f9:e1:05:57:93:
90:66:da:c7:97:55:12:58:e5:9e:b4:89:bb:02:8e:
0e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:88:CE:44:64:A7:D9:75:83:35:B2:F0:EC:61:A6:B4:98:73:34:01
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b7:b0:8c:41:bd:36:e0:57:c2:de:5d:e2:f0:fa:ee:f9:f2:
af:29:34:f7:42:31:a3:c2:c3:9a:34:28:60:ae:cd:e9:31:2a:
da:8f:00:2c:ec:50:cb:db:e9:4d:26:b0:39:e8:80:c2:99:f3:
ef:52:a8:1f:78:30:b2:7c:68:90:f5:5e:c5:9c:07:51:6b:e6:
25:03:83:ba:a2:56:13:35:41:43:45:cb:82:5a:e0:84:98:c5:
6a:0d:85:4e:3b:73:ad:39:f9:01:5c:ba:77:bf:e0:80:f6:97:
1b:db:63:65:b4:93:4f:ef:98:8d:a9:3a:da:cc:57:45:0b:69:
53:43:b0:de:fe:d5:64:b7:5e:3d:a7:c6:ef:3c:00:67:ab:f8:
f7:27:8b:8e:79:d7:f0:83:53:90:b2:3e:c1:5f:b3:14:47:f5:
3e:64:09:24:04:31:68:6e:03:63:52:64:79:fe:a0:2e:c6:c7:
4a:4e:30:72:29:fe:cf:52:00:c1:04:37:e1:0f:21:fb:25:13:
d4:41:3c:81:54:44:1a:c3:d3:3c:3b:a1:60:dd:ee:e6:15:90:
7d:e2:24:c6:08:d1:be:40:92:55:a1:cb:5b:35:80:cc:da:e8:
33:a7:8a:ad:a2:6e:0c:60:59:92:7a:aa:27:bd:e0:db:e3:aa:
d9:04:f1:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmaUypipixsBlyfcoauq+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODY3NTQ1NzU5NGQ3ZTc0MGFhZWVmMmU3ZDdlZmQwMjIz
OWM2MTcwHhcNMjUwNjE0MTgwMDI5WhcNMjUwNjE1MTgwMDI5WjAzMTEwLwYDVQQD
EyhiYjg4Y2U0NDY0YTdkOTc1ODMzNWIyZjBlYzYxYTZiNDk4NzMzNDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpfjnZr/4nmrsIDHG6d8CLnDRe4W
w0z3xI3XS5Yt22Vo1kw4RzNDNqBYvooAPqC0SBbrPHaf6mH/5yFP4cDB90GSToEK
YK0nY9u9Bo7j9iCUzE82sO13qEqEIwhY7GeS8oi+eNs6C59kMOZFa9td+OEF4hXy
egAXahUW5T0wRKZkl4kdraWOvPXy+zoL4D/z0hhSHEZtLkk4vZKNu3JoqEewxfuC
OLdcLFx88HuAsqnT5E9TaVEC5MqvjkWMd4HW/rGavL8YTqTPJCFhxQiApg91QsqO
Dx+zwQIBN3gPRKxsu9BOr82ph5mf+eEFV5OQZtrHl1USWOWetIm7Ao4OeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuIzkRkp9l1gzWy8OxhprSYczQBMB8GA1UdIwQY
MBaAFC+GdUV1lNfnQKru8ufX79AiOcYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80Y2Q0Y2EtYzE5NS00YmM0LWJiOWYt
MTAzMWFlMWViMDMyLzEvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80Y2Q0Y2EtYzE5NS00YmM0LWJiOWYtMTAzMWFlMWViMDMy
LzEvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErewjEG9
NuBXwt5d4vD67vnyryk090Ixo8LDmjQoYK7N6TEq2o8ALOxQy9vpTSawOeiAwpnz
71KoH3gwsnxokPVexZwHUWvmJQODuqJWEzVBQ0XLglrghJjFag2FTjtzrTn5AVy6
d7/ggPaXG9tjZbSTT++Yjak62sxXRQtpU0Ow3v7VZLdePafG7zwAZ6v49yeLjnnX
8INTkLI+wV+zFEf1PmQJJAQxaG4DY1Jkef6gLsbHSk4wcin+z1IAwQQ34Q8h+yUT
1EE8gVREGsPTPDuhYN3u5hWQfeIkxgjRvkCSVaHLWzWAzNroM6eKraJuDGBZknqq
J73g2+Oq2QTxbw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:16:39 2025 by rpki-client