Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: m9LJImNSzec6a6b5aJM+X7jyIeVAKkxjGJ6DoLLaEec=
Subject key identifier: 18:ED:19:D8:B9:44:8A:E1:11:08:8B:E7:91:D2:D5:F2:FD:2B:4F:65
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 0196827E28E37ABA66F47811ECB75A59FCD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 0AE8
Signing time: Tue 29 Apr 2025 17:00:28 +0000
Manifest this update: Tue 29 Apr 2025 17:00:28 +0000
Manifest next update: Wed 30 Apr 2025 17:00:28 +0000
Files and hashes: 1: E5z0sS7nvixPBFyRI_RWT9Plr0w.roa (hash: SNlFw+9uypuF2ztoEgq8hVfftlXP+FQlnrdAhrNkFGE=)
2: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: EWCy/eozG+XW/6mjuvKABYYQPrT5XHjJKqdozQXrgT4=)
3: OqOCQtZBHzCV5Z0xJrS8FJFSEWY.roa (hash: xZeH8Q+yxnCI5oid4Rq8ssEGEdCZgg6NEVRbko+oKkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:28:e3:7a:ba:66:f4:78:11:ec:b7:5a:59:fc:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Apr 29 17:00:28 2025 GMT
Not After : Apr 30 17:00:28 2025 GMT
Subject: CN=18ed19d8b9448ae111088be791d2d5f2fd2b4f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dd:14:31:9e:ce:91:5e:7a:78:89:24:63:fc:
d9:d4:27:c6:0c:90:91:6a:bf:26:e4:34:fa:3d:32:
e7:f7:88:43:b6:3e:30:bd:79:34:6c:db:de:89:4e:
d9:2a:83:a5:c0:fe:0e:f6:26:dd:10:3a:de:33:d8:
70:d8:6b:1a:f7:e3:e3:c9:18:12:cf:8b:90:c9:c1:
a1:e6:35:0c:16:28:ae:75:e9:8f:ff:71:9d:3c:8e:
90:55:4a:d3:a9:25:33:6e:18:1f:5b:dd:62:98:73:
d9:2d:8e:19:74:a4:44:9a:5e:73:5e:f3:96:b7:ce:
a2:c8:62:52:50:7f:65:88:1c:54:60:32:fd:eb:6c:
ca:32:9e:49:6a:4c:af:b4:a5:ba:af:ef:00:be:91:
d8:8d:47:a3:00:9e:93:e2:3b:3b:38:85:ba:a9:65:
62:47:76:48:23:39:49:f5:9e:e3:e1:89:0e:31:18:
f9:8c:24:87:32:02:05:f0:ce:dd:dd:58:a7:91:0b:
eb:0f:27:ae:82:b9:03:84:3c:5a:3a:c7:8e:70:65:
48:9b:7c:89:9c:db:9e:17:d1:c8:16:6d:66:45:3d:
fc:4e:f9:8f:13:cc:62:20:47:1e:6c:94:11:9d:01:
e7:e5:50:e8:c9:a4:6a:f5:ad:5f:d2:a6:45:ce:16:
92:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:ED:19:D8:B9:44:8A:E1:11:08:8B:E7:91:D2:D5:F2:FD:2B:4F:65
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d2:0d:eb:ff:66:34:13:e7:54:f4:38:d8:c6:75:dd:c8:21:
1c:43:4c:de:7f:f1:c2:a1:98:70:2b:99:70:1d:73:cf:3c:6b:
c9:f0:f9:05:35:62:4e:86:23:7f:07:a0:72:5c:a3:85:d9:a1:
9f:7f:d8:cc:a4:82:02:de:1b:a9:fd:bc:2e:db:43:37:21:7b:
50:98:95:fe:01:e2:f7:d6:17:44:0a:d2:92:bb:f8:b1:d8:d0:
81:f3:82:04:70:9f:34:36:ed:02:1b:d3:29:3b:47:b7:39:48:
ab:e6:dc:95:f7:13:ba:1f:09:ce:f5:f9:27:a9:02:2c:e8:a1:
96:89:9f:88:b4:21:7e:98:fc:5a:84:94:82:e1:8f:af:48:63:
c2:df:b9:db:07:d6:5d:b9:5a:7c:b5:ff:eb:87:f4:c5:ca:34:
79:dc:1d:78:f9:7c:9c:86:e2:10:96:6b:35:f6:a5:4b:85:8d:
cb:c3:86:a1:f8:01:e8:28:da:b1:88:51:f4:8c:71:3e:7f:7c:
5b:d2:ee:da:97:7f:e0:2e:b1:04:33:a8:27:15:b1:a3:1f:c1:
d8:71:e7:78:aa:d9:d3:5b:98:e0:39:3a:c5:00:9e:e5:92:34:
c8:05:ee:61:87:51:6c:d8:d5:68:70:ca:0a:cc:9e:24:2e:a2:
6d:2e:a1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:19:13 2025 by rpki-client