Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
File: L5FDTuFsYTNOwnDfVox3oLXeBSo.mft (raw, json)
Hash identifier: WC8IWIJd7tdQGnIKxIrFIzLxFRU14bdWSnRj6Eex3Mc=
Subject key identifier: E0:FE:7A:CA:55:FE:25:17:D3:A3:3E:8C:38:7C:34:90:38:9A:62:C3
Authority key identifier: 2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A
Certificate issuer: /CN=2f91434ee16c61334ec270df568c77a0b5de052a
Certificate serial: 01977B30B784A0A848AF8FD67A91A2BF3237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
Manifest number: 0C7B
Signing time: Tue 17 Jun 2025 00:01:19 +0000
Manifest this update: Tue 17 Jun 2025 00:01:19 +0000
Manifest next update: Wed 18 Jun 2025 00:01:19 +0000
Files and hashes: 1: L5FDTuFsYTNOwnDfVox3oLXeBSo.crl (hash: OBBklFfZH8gRXMtZvvN3e2ooWaPX7UyepiLHyLOyzZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:b7:84:a0:a8:48:af:8f:d6:7a:91:a2:bf:32:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f91434ee16c61334ec270df568c77a0b5de052a
Validity
Not Before: Jun 17 00:01:19 2025 GMT
Not After : Jun 18 00:01:19 2025 GMT
Subject: CN=e0fe7aca55fe2517d3a33e8c387c3490389a62c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:86:a3:f2:4c:da:3f:de:a7:65:d6:9c:2a:6e:
2f:f9:17:ba:13:c5:94:95:75:46:d6:65:6b:3c:42:
16:c0:55:00:73:cb:27:98:19:7d:73:94:a3:d3:3c:
d8:0d:10:a1:7d:a8:61:ac:33:8d:1d:5f:bb:6d:01:
cf:e0:9b:c9:56:ad:7e:1d:0c:e7:25:0c:37:ac:3e:
87:5f:63:b9:b7:66:32:91:69:e5:cb:fe:a3:25:3b:
82:ac:eb:03:29:3a:9b:5f:93:7c:47:64:89:ee:f7:
dd:56:2b:a1:a0:3e:ec:8b:9c:62:f3:5a:b8:d6:d7:
50:19:28:aa:bf:35:8c:48:a9:14:f9:02:6a:83:3a:
05:ad:b8:c7:24:c6:4b:d5:b2:27:ae:98:97:37:a3:
8e:58:dd:c7:7f:37:8f:a2:7e:6a:48:be:7e:eb:23:
15:7e:f5:69:da:d5:0a:f3:69:cc:0a:d8:11:a1:fe:
cb:e1:d2:cd:c3:45:be:96:de:2e:06:29:f1:0e:86:
06:24:2c:54:02:d9:f9:5f:ce:c2:b5:69:26:18:49:
cd:1f:7b:a8:db:05:99:2a:5c:c8:e5:9d:0c:d7:46:
1e:d2:0b:d7:8a:ce:60:91:ce:07:2e:b8:96:3d:3c:
98:f1:b7:0d:d1:97:78:fb:b1:de:b3:4d:5d:b8:a5:
fc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FE:7A:CA:55:FE:25:17:D3:A3:3E:8C:38:7C:34:90:38:9A:62:C3
X509v3 Authority Key Identifier:
keyid:2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:20:8f:2a:2e:f7:19:29:82:42:8a:58:60:eb:a0:0a:aa:3c:
1a:00:d9:d4:0a:fb:1f:dc:41:c2:17:e3:47:a0:76:8c:b9:db:
51:54:63:cc:77:c0:7d:2c:64:58:6c:0f:24:1e:8f:de:53:29:
fa:a9:23:e1:3f:b2:bb:f8:46:1d:88:16:af:66:23:37:12:2f:
fb:eb:a8:82:2c:c8:df:c4:1a:11:42:f0:63:a7:59:e2:a5:12:
9b:be:23:db:ee:1e:96:fe:88:88:9b:40:5d:d7:43:02:f3:b1:
6a:55:bb:2b:e7:cb:54:f2:ff:7a:eb:60:47:c5:be:b7:21:8c:
70:b1:c1:5d:2a:57:1c:12:52:0c:d4:fb:50:fd:fa:70:29:8a:
e4:5e:2a:9f:4a:75:53:d5:4e:55:e4:a2:62:09:1a:e5:33:48:
02:ad:1c:00:28:82:9f:67:d2:b3:4f:a4:7d:aa:35:f3:ad:d1:
d4:e6:f9:11:ed:d7:f9:ce:fe:bd:3a:4f:fa:f5:ea:38:fa:81:
e2:f4:61:d2:54:03:c7:57:bd:38:2f:04:73:26:93:36:e3:a1:
44:e4:41:60:e0:b7:82:04:94:f5:86:64:c7:7b:da:15:c7:ae:
c6:0e:4d:e7:e9:13:1c:59:d5:2a:9a:a2:76:45:10:55:b1:f3:
a6:af:80:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd7MLeEoKhIr4/WepGivzI3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTE0MzRlZTE2YzYxMzM0ZWMyNzBkZjU2OGM3N2EwYjVk
ZTA1MmEwHhcNMjUwNjE3MDAwMTE5WhcNMjUwNjE4MDAwMTE5WjAzMTEwLwYDVQQD
EyhlMGZlN2FjYTU1ZmUyNTE3ZDNhMzNlOGMzODdjMzQ5MDM4OWE2MmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYaj8kzaP96nZdacKm4v+Re6E8WU
lXVG1mVrPEIWwFUAc8snmBl9c5Sj0zzYDRChfahhrDONHV+7bQHP4JvJVq1+HQzn
JQw3rD6HX2O5t2YykWnly/6jJTuCrOsDKTqbX5N8R2SJ7vfdViuhoD7si5xi81q4
1tdQGSiqvzWMSKkU+QJqgzoFrbjHJMZL1bInrpiXN6OOWN3HfzePon5qSL5+6yMV
fvVp2tUK82nMCtgRof7L4dLNw0W+lt4uBinxDoYGJCxUAtn5X87CtWkmGEnNH3uo
2wWZKlzI5Z0M10Ye0gvXis5gkc4HLriWPTyY8bcN0Zd4+7Hes01duKX8hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOD+espV/iUX06M+jDh8NJA4mmLDMB8GA1UdIwQY
MBaAFC+RQ07hbGEzTsJw31aMd6C13gUqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVGRFR1RnNZVE5Pd25EZlZveDNvTFhlQlNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9jZDQxYmEtMmVhNy00NzRmLTg5NDEt
NWZkYjMyMjhmZTFmLzEvTDVGRFR1RnNZVE5Pd25EZlZveDNvTFhlQlNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9jZDQxYmEtMmVhNy00NzRmLTg5NDEtNWZkYjMyMjhmZTFm
LzEvTDVGRFR1RnNZVE5Pd25EZlZveDNvTFhlQlNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCCPKi73
GSmCQopYYOugCqo8GgDZ1Ar7H9xBwhfjR6B2jLnbUVRjzHfAfSxkWGwPJB6P3lMp
+qkj4T+yu/hGHYgWr2YjNxIv++uogizI38QaEULwY6dZ4qUSm74j2+4elv6IiJtA
XddDAvOxalW7K+fLVPL/eutgR8W+tyGMcLHBXSpXHBJSDNT7UP36cCmK5F4qn0p1
U9VOVeSiYgka5TNIAq0cACiCn2fSs0+kfao1863R1Ob5Ee3X+c7+vTpP+vXqOPqB
4vRh0lQDx1e9OC8EcyaTNuOhRORBYOC3ggSU9YZkx3vaFceuxg5N5+kTHFnVKpqi
dkUQVbHzpq+AHw==
-----END CERTIFICATE-----
Generated at Tue Jun 17 03:01:53 2025 by rpki-client