Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
File: L42NDO68zXW2BrpJaPXHlG6NR8A.mft (raw, json)
Hash identifier: QNZUV0v4zIcfAbk4O4ggNHjxHWZSp/COLKZotePHHv8=
Subject key identifier: 03:B7:48:F9:D0:E3:E9:21:52:F6:15:68:EB:C3:A1:6F:AF:DC:0F:88
Authority key identifier: 2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
Certificate issuer: /CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Certificate serial: 01976CCFFCB5CCD7678E64DF391131C7A9EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
Manifest number: 0B7C
Signing time: Sat 14 Jun 2025 05:00:59 +0000
Manifest this update: Sat 14 Jun 2025 05:00:59 +0000
Manifest next update: Sun 15 Jun 2025 05:00:59 +0000
Files and hashes: 1: KvErQkIa-7bptS15YPSXyRA9CSc.roa (hash: oCFio8e2SnoXuYWAJDUSo/+OUQCG41H/KpmIERPwk3M=)
2: L42NDO68zXW2BrpJaPXHlG6NR8A.crl (hash: Ijq6+O/1s02/btaSPEojZOAPcgcIrNXjQMKwpBA6LrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:fc:b5:cc:d7:67:8e:64:df:39:11:31:c7:a9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Validity
Not Before: Jun 14 05:00:59 2025 GMT
Not After : Jun 15 05:00:59 2025 GMT
Subject: CN=03b748f9d0e3e92152f61568ebc3a16fafdc0f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:c0:87:4b:45:93:20:1f:fc:90:04:e6:9d:
1d:18:25:3b:06:3b:63:6e:71:c6:43:60:dc:77:63:
8b:1f:ce:45:d5:f2:e7:ad:26:78:d0:62:a8:3b:34:
8f:10:4f:65:cc:68:a6:3d:7a:b2:c5:db:4c:51:ae:
67:20:a5:2c:82:38:27:53:82:d9:7c:1e:26:2b:d4:
c4:f7:81:cd:50:7a:6f:3a:cb:d7:b2:f8:82:c6:5c:
40:09:bb:61:06:02:71:17:57:5c:6f:da:13:f1:78:
0f:0d:0e:8b:ed:5c:2b:49:b5:a7:de:4a:63:18:2e:
56:03:25:e6:2a:81:b4:04:d3:35:8a:c5:4c:d4:3c:
ea:ab:6f:72:5b:46:9c:0e:bd:fb:6d:be:e2:a9:ac:
78:1f:b6:bf:1f:03:6e:36:a7:56:ea:89:ff:da:7b:
a2:70:ad:75:ab:88:9d:4f:2c:09:6c:49:60:3e:0e:
08:a1:d0:83:78:2f:29:85:18:e1:02:ba:82:a1:0f:
77:2f:50:ab:7b:db:83:dc:f2:34:c9:d8:67:32:26:
15:a6:c8:67:7c:52:bb:85:36:54:a4:bb:af:d2:89:
77:66:b2:c9:c0:41:2d:02:c0:a4:ba:c4:ba:e9:bf:
bd:4f:33:32:2e:0d:b4:b6:fb:38:82:04:fa:e1:9e:
f9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B7:48:F9:D0:E3:E9:21:52:F6:15:68:EB:C3:A1:6F:AF:DC:0F:88
X509v3 Authority Key Identifier:
keyid:2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:72:17:00:89:6d:ae:c9:4f:f0:52:31:cc:2c:14:96:22:06:
4e:4a:61:57:78:1d:70:1b:21:23:95:85:c7:11:53:72:6f:1d:
35:7c:b8:18:5f:f0:80:83:e3:2e:5f:57:99:99:9a:8b:b0:cd:
2a:21:5a:94:f0:c1:51:21:6c:8f:12:06:21:b3:49:a3:fa:c7:
08:2e:7c:bc:b9:e0:7e:9b:06:db:b3:0f:39:6c:fb:3e:70:27:
1b:fc:3e:6f:55:3b:ad:b5:43:68:47:77:f7:41:78:46:b2:8b:
39:13:2f:7e:c7:2a:85:91:46:c9:c4:2e:43:8d:38:8b:4e:b1:
3c:a7:67:11:b9:68:b5:25:e0:3e:cc:d4:dc:ba:d7:ac:e1:f4:
5c:f1:a6:03:f8:0f:a5:6d:66:60:f7:39:f7:d2:0c:8f:5e:d9:
ad:6f:7b:9d:e8:9b:28:c7:93:de:1a:f8:a8:c0:0b:f6:44:3c:
70:ce:48:3c:cf:8f:67:ef:c2:d2:9a:26:b7:63:69:49:b0:6c:
14:60:32:56:e1:1e:30:7b:51:fc:05:f1:e0:20:72:23:de:2c:
d7:14:c5:2f:57:da:7e:50:a2:af:98:04:a1:61:99:52:61:90:
bd:7a:07:3f:82:ad:8d:6e:c7:41:14:13:3d:16:90:97:6f:0c:
38:22:14:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:34:51 2025 by rpki-client