
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
File: L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft (raw, json)
Hash identifier: 0ZFQFS6SbfUk7rYPlyct3mZCJDXegFb0vWn4TOL07z0=
Subject key identifier: 9D:A6:01:F0:EF:61:4E:06:E7:B7:A2:1C:BC:9D:2E:7D:B5:74:EA:92
Authority key identifier: 2F:9C:C6:A3:F4:C2:38:19:30:BA:8D:1A:F0:D9:5A:BE:C0:96:81:E4
Certificate issuer: /CN=2f9cc6a3f4c2381930ba8d1af0d95abec09681e4
Certificate serial: 0198838CB70A55A76B98B1C1A245A67997F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
Manifest number: 161E
Signing time: Thu 07 Aug 2025 08:01:33 +0000
Manifest this update: Thu 07 Aug 2025 08:01:33 +0000
Manifest next update: Fri 08 Aug 2025 08:01:33 +0000
Files and hashes: 1: L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl (hash: fAUe4G+/zUUH5TRT2JK3QrNRkOcrt/O4OX1zsjm9BRs=)
2: TYDdD2uxFpvnn7BeeyNRIhrYOWU.roa (hash: aAKeZOkxG98jWI5WqK0AaKLmvqEXTtJ8l1136XOUFDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:b7:0a:55:a7:6b:98:b1:c1:a2:45:a6:79:97:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f9cc6a3f4c2381930ba8d1af0d95abec09681e4
Validity
Not Before: Aug 7 08:01:33 2025 GMT
Not After : Aug 8 08:01:33 2025 GMT
Subject: CN=9da601f0ef614e06e7b7a21cbc9d2e7db574ea92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ab:16:a4:01:b4:26:3e:f1:68:42:77:4e:b7:
b4:2c:f1:9d:fc:87:10:19:04:b3:f0:62:3d:fe:36:
f1:6b:b6:b2:a8:81:c5:52:2d:5b:fa:15:f7:09:67:
88:03:25:15:a1:ad:1a:f8:bf:80:ca:69:42:72:60:
5f:b4:2b:8d:49:bb:74:93:af:4a:5a:f6:8c:20:54:
2a:02:61:9d:cd:c8:a8:61:df:3a:8f:15:c2:d8:37:
ae:7b:47:29:f2:ec:8c:d1:dd:08:09:06:4b:02:43:
1a:a4:87:e3:fa:1a:f6:87:9d:2d:a1:87:07:0e:db:
6a:72:58:8d:3b:12:8a:86:70:e7:9e:5b:ea:c3:52:
95:86:f2:ba:8c:e2:6d:a4:67:9f:e5:01:da:96:72:
82:46:c6:12:02:40:8e:36:02:84:b4:b1:56:55:82:
09:42:37:54:bf:85:a7:cb:13:54:c8:67:de:f6:69:
f3:ef:a0:a8:ab:6e:40:18:e2:f0:fd:33:22:64:4f:
f3:86:89:02:7c:40:35:59:4b:d1:96:da:cc:11:4b:
b4:68:b4:99:4d:a1:77:9d:2f:ee:5c:d7:ce:4e:fb:
3f:0d:dc:b9:16:bf:fb:86:85:7f:9b:ac:ae:91:e6:
ae:47:a9:0f:96:2d:c3:f6:96:7c:af:55:f8:da:72:
59:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A6:01:F0:EF:61:4E:06:E7:B7:A2:1C:BC:9D:2E:7D:B5:74:EA:92
X509v3 Authority Key Identifier:
keyid:2F:9C:C6:A3:F4:C2:38:19:30:BA:8D:1A:F0:D9:5A:BE:C0:96:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:98:df:bd:60:63:cb:06:c3:b3:05:66:46:e4:ff:24:8e:1d:
0e:dc:10:9f:ec:9f:17:9e:b7:0d:2c:87:00:09:57:68:74:92:
54:a5:6b:32:8f:ae:b7:c1:5e:a1:c6:b1:c3:2d:8b:9a:77:ec:
f8:01:df:62:57:b0:e2:f8:9e:32:e0:24:a2:e6:ed:77:d7:6a:
90:d4:13:02:5e:40:dd:e3:95:1f:a4:49:41:f5:c7:48:66:88:
8a:b3:e0:fd:95:e3:48:db:55:dc:b9:2e:a7:17:8e:68:64:69:
3a:b1:5f:72:84:43:7f:56:6f:52:41:b8:10:1a:d6:3d:5c:91:
eb:42:af:ee:6b:e3:43:e6:d1:8c:b9:5a:5a:98:bf:f4:9c:41:
bf:ef:71:45:9c:af:4d:b0:3a:de:ac:22:5e:fb:12:1d:8d:fc:
ca:49:7e:7c:d1:1b:9a:b5:8a:ba:00:a0:c2:0b:b4:62:b9:a2:
98:6a:bc:a0:5c:4f:c6:32:d3:37:0c:15:9a:9a:4b:7b:ec:c9:
50:9e:86:cb:c2:ca:3f:7e:56:d9:69:a0:63:89:55:43:1d:a7:
ff:4b:41:2d:6e:5e:0f:8c:0b:80:66:32:00:b6:2c:ff:c5:0d:
2f:e8:b2:42:ec:37:b6:cf:90:49:7e:21:72:ec:32:67:04:cd:
3c:38:ec:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:33:41 2025 by rpki-client