Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
File: L4g71OpOPesouJSxkPjgi68G8cw.mft (raw, json)
Hash identifier: 9IzAfHKDljL37Gqf7NibiyGbHJ6EzKbpHuG1ldSfWPQ=
Subject key identifier: FF:F5:CB:90:05:5C:EE:45:9C:FB:A2:5F:83:48:2D:4B:27:4B:39:7F
Authority key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
Certificate issuer: /CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Certificate serial: 01976885550F6A9610ACB4A3B5D5ED8DD6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
Manifest number: 0538
Signing time: Fri 13 Jun 2025 09:00:57 +0000
Manifest this update: Fri 13 Jun 2025 09:00:57 +0000
Manifest next update: Sat 14 Jun 2025 09:00:57 +0000
Files and hashes: 1: 72212ELi_xTfEeuyR3CUIU7otcg.roa (hash: 05TY+/FULQvb5YOeymsTjWCBkX5gY/8/tCWpzbv8PI0=)
2: L4g71OpOPesouJSxkPjgi68G8cw.crl (hash: KZBZTvKgoM3Lxnyor8KpBudIs30OJvF81HeqCcm7b1c=)
3: rKcLia0y-4QlTSWH-I5frDT77pU.roa (hash: dvn3H9WJWj8AZKwySDQ1F4qo4Fa0dQjkVokla1Xiyhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:55:0f:6a:96:10:ac:b4:a3:b5:d5:ed:8d:d6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Validity
Not Before: Jun 13 09:00:57 2025 GMT
Not After : Jun 14 09:00:57 2025 GMT
Subject: CN=fff5cb90055cee459cfba25f83482d4b274b397f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fe:2c:c3:37:08:ef:8f:13:4f:2b:0e:a8:76:
c5:8f:7a:18:f6:5e:ef:30:7a:46:d0:68:06:17:92:
69:52:bb:de:98:44:6d:0b:99:c2:ab:aa:c1:66:fe:
34:15:b3:e9:9a:00:ef:33:39:4c:3b:30:01:3c:96:
04:fe:2a:4b:d2:33:c0:aa:98:f4:90:85:69:5c:39:
e8:db:e1:df:a1:13:e5:2a:28:74:69:cc:c0:96:90:
63:f0:5e:0c:37:38:32:63:4e:7e:04:37:65:9b:44:
20:65:ac:df:02:41:42:8f:12:78:0b:94:0b:24:b2:
c6:a5:f3:c8:8e:ef:76:c1:c6:eb:8a:80:77:2e:22:
b9:97:39:f1:67:e2:7a:9e:57:fd:9c:27:45:4d:e6:
12:5f:b8:a3:8b:68:15:55:37:85:a8:27:a8:ee:c3:
70:4b:ea:0f:aa:07:d6:14:fc:55:bb:bb:3a:e2:39:
2e:dc:f6:e9:d4:49:46:a0:b7:1c:d4:80:13:33:78:
06:96:d6:36:31:64:e3:7d:54:b1:a2:d3:8f:0e:69:
4b:34:2b:c4:97:05:e4:72:f1:f6:cb:72:3a:58:4a:
a2:ef:8e:ac:d4:2c:c4:8f:86:d1:a1:2b:94:bc:ca:
0b:c3:b5:65:5b:c2:2f:2d:f1:b2:f0:84:80:36:7c:
84:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F5:CB:90:05:5C:EE:45:9C:FB:A2:5F:83:48:2D:4B:27:4B:39:7F
X509v3 Authority Key Identifier:
keyid:2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3e:48:56:a5:71:eb:61:7a:2b:f0:db:09:30:2b:51:7d:8b:
25:86:f2:29:73:a6:32:bd:fa:d4:d5:fa:1a:d6:08:f4:7c:77:
3e:fa:34:65:86:02:a6:24:87:90:fb:22:30:cc:40:39:3f:d6:
9e:b3:50:73:c0:43:3e:46:0e:3d:0b:62:79:81:ec:2f:b1:27:
7d:f6:71:3c:f7:f0:2b:83:61:69:e2:ef:bc:d5:82:e4:46:31:
9d:22:44:4a:63:27:7b:72:e7:88:7d:86:96:28:01:ef:16:7c:
5c:e9:dd:44:3a:c4:16:9c:ec:83:59:1b:71:6f:28:0c:2a:f4:
4a:ca:db:f5:75:71:be:a6:e3:c0:2b:5e:a6:3a:05:29:c5:db:
3c:62:ac:ea:b4:4f:cb:67:6d:16:8c:60:6b:7e:7b:4a:fe:de:
3f:ed:a1:6c:10:68:5b:86:8c:2f:ec:90:68:d2:59:ee:04:c0:
cb:62:b7:9c:4b:cf:77:be:f6:9c:aa:d9:44:60:3d:6e:42:d6:
00:06:b8:a4:29:f3:94:25:cc:d7:56:47:0a:56:29:0a:12:20:
0f:7a:7f:72:47:26:cd:56:9a:6e:c9:05:b5:b7:88:20:4e:be:
e8:4a:60:47:39:41:76:ea:66:84:d9:72:e4:6a:d6:7d:20:78:
8a:74:ef:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:48 2025 by rpki-client