Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
File: L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft (raw, json)
Hash identifier: +0r38cN8PkeoaI8sUhXlOXq13v+09gisghzi53p5un8=
Subject key identifier: A4:71:55:7C:4F:54:CF:64:E0:78:00:CF:1B:30:DD:6B:BA:20:68:35
Authority key identifier: 2F:9C:C6:A3:F4:C2:38:19:30:BA:8D:1A:F0:D9:5A:BE:C0:96:81:E4
Certificate issuer: /CN=2f9cc6a3f4c2381930ba8d1af0d95abec09681e4
Certificate serial: 01976F63280A4CE9B52C14E1BAD2F0E18D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 17:00:58 +0000
Manifest this update: Sat 14 Jun 2025 17:00:58 +0000
Manifest next update: Sun 15 Jun 2025 17:00:58 +0000
Files and hashes: 1: L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl (hash: eTiGnZ7vBTqjZj1QZ9Z6w4+m1AQg1sx1pvoFxD4UstU=)
2: TYDdD2uxFpvnn7BeeyNRIhrYOWU.roa (hash: aAKeZOkxG98jWI5WqK0AaKLmvqEXTtJ8l1136XOUFDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:28:0a:4c:e9:b5:2c:14:e1:ba:d2:f0:e1:8d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f9cc6a3f4c2381930ba8d1af0d95abec09681e4
Validity
Not Before: Jun 14 17:00:58 2025 GMT
Not After : Jun 15 17:00:58 2025 GMT
Subject: CN=a471557c4f54cf64e07800cf1b30dd6bba206835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:28:27:80:9a:63:d4:2f:61:67:c0:0a:f0:
50:03:61:42:f4:c1:c3:f0:ce:f5:62:41:e3:51:09:
6a:a4:47:82:fa:d2:11:85:f0:2a:8a:f8:aa:27:f3:
52:e1:b7:5f:ba:5a:e1:02:bd:a3:e7:49:11:e3:5e:
ec:e0:d3:0a:01:41:11:a5:d7:0c:de:4b:86:75:37:
9b:13:e7:dc:13:7c:0a:1e:fa:39:fa:a2:0d:55:b4:
4e:3d:32:34:ad:b2:1a:15:e3:e7:29:15:2b:28:28:
d1:d2:e5:c5:42:1a:19:fe:f5:c7:77:38:5c:18:77:
8e:d6:bf:37:42:0a:d5:26:e4:91:7e:b7:78:a0:3e:
97:aa:7a:37:50:88:8f:7a:11:c7:04:a3:e6:c5:ed:
31:17:c5:2d:56:81:69:c2:28:6d:80:52:37:d1:e9:
02:67:bb:3b:27:bc:f7:2e:be:21:32:63:48:ee:db:
34:34:6b:9f:35:7b:a5:22:4a:6e:9e:36:26:22:0f:
1a:96:70:d1:c8:01:6d:d0:d3:b6:90:fd:2c:01:fd:
d5:77:aa:ad:94:fa:fe:de:f2:92:d1:f1:10:67:1d:
4c:b9:8e:f5:dc:fb:d1:21:06:9f:2a:62:bc:f8:34:
93:68:04:f9:43:ba:c5:20:a5:9a:55:87:a1:a6:4b:
37:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:71:55:7C:4F:54:CF:64:E0:78:00:CF:1B:30:DD:6B:BA:20:68:35
X509v3 Authority Key Identifier:
keyid:2F:9C:C6:A3:F4:C2:38:19:30:BA:8D:1A:F0:D9:5A:BE:C0:96:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:82:93:72:49:f0:c8:e6:0e:85:c1:ce:f7:17:6f:0f:9e:e2:
73:3f:f5:28:f1:1a:7e:8e:60:a3:34:25:83:f3:5d:6f:98:a2:
e0:3b:79:a5:7d:95:32:a6:42:b5:94:9c:1f:37:42:aa:9a:cf:
a3:8c:69:a3:f1:fa:69:0f:5d:0c:80:be:28:7e:ec:0e:dc:82:
83:16:52:4d:5b:bc:75:0e:7e:1f:d3:77:a3:bc:5a:dd:ff:0e:
db:5e:c3:ef:80:03:68:6f:1a:33:c2:0d:d2:5c:68:13:c4:e8:
1e:0d:67:c9:23:b2:51:26:36:7c:fe:63:ff:2d:31:e6:a1:b6:
48:d5:00:a6:54:1f:c4:5a:74:1d:d0:8b:f0:97:78:e8:85:8a:
f6:0b:d9:d5:58:68:cb:3a:a4:af:48:07:a5:d3:b9:b4:31:50:
59:db:6c:1f:c2:b8:1c:52:d7:0c:2b:6a:83:b8:3e:5f:58:c1:
a5:09:9e:4a:55:14:72:e6:bb:51:d4:ba:b1:3b:ca:3b:2b:4e:
f9:31:41:f3:a9:48:f5:b8:06:be:5c:0d:19:fc:87:8c:58:46:
60:93:49:15:81:a4:3f:90:f1:32:48:98:cc:84:87:9b:43:94:
1c:7a:32:dc:87:b2:62:7a:a9:3b:ad:c0:48:f8:a4:7b:49:2a:
7a:fa:db:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:46:08 2025 by rpki-client