Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
File: L2ANKR1II4Na8QOq057eBb0SybY.mft (raw, json)
Hash identifier: Os30zGa/tl0dT6AGSKzGKpQqbWc0COlYbM0huQHNGkA=
Subject key identifier: EA:51:35:A6:E3:0F:67:C4:D3:66:6F:17:37:76:8F:8A:73:A6:54:51
Authority key identifier: 2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
Certificate issuer: /CN=2f600d291d4823835af103aad39ede05bd12c9b6
Certificate serial: 01976C9907266E2BA31F0C723D270F656953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 04:00:57 +0000
Manifest this update: Sat 14 Jun 2025 04:00:57 +0000
Manifest next update: Sun 15 Jun 2025 04:00:57 +0000
Files and hashes: 1: L2ANKR1II4Na8QOq057eBb0SybY.crl (hash: qe1i8WpTmkKXnbD3akat1XFP5pBbitajCODz7COS25I=)
2: pqKGvQcYODMxijEGtk7mPTU_Tr0.roa (hash: ZlDmL3k6HQGAT39givBrII+8Db8zx8Fa+aDyGXQWZzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:07:26:6e:2b:a3:1f:0c:72:3d:27:0f:65:69:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f600d291d4823835af103aad39ede05bd12c9b6
Validity
Not Before: Jun 14 04:00:57 2025 GMT
Not After : Jun 15 04:00:57 2025 GMT
Subject: CN=ea5135a6e30f67c4d3666f1737768f8a73a65451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:03:4f:06:6e:0f:9b:c8:fd:11:1d:4b:50:
b2:1f:12:92:37:35:e7:c0:ab:a1:d5:b6:df:83:6b:
d5:33:01:23:32:68:0d:22:91:54:f1:22:4e:da:79:
3f:70:25:8b:60:1a:fa:1c:36:a3:d2:a6:e4:79:12:
cd:e6:f4:c0:f0:48:f0:c4:75:4e:57:38:ef:75:d5:
cb:5b:87:e8:d6:74:6c:ec:aa:2b:f0:60:3b:7f:1d:
0c:37:e6:4a:7e:98:ef:dc:a9:87:92:89:d3:53:b4:
71:ea:6e:bd:09:b0:65:ee:32:a4:b1:d0:db:61:02:
35:f7:59:42:3b:52:40:26:fc:26:a3:f8:6a:d3:c6:
7c:a0:b8:8f:c0:27:6c:94:a6:87:2a:21:45:4a:2c:
38:42:9f:a6:13:39:e6:db:6c:b0:14:4d:09:11:38:
79:7a:57:f3:2b:90:08:3f:b1:86:a7:5b:dd:a5:12:
a5:6e:6d:8a:04:39:3f:6d:22:65:09:aa:3e:11:20:
bd:00:4e:2d:e5:d7:84:80:15:7a:63:27:ed:f3:c7:
35:3d:ae:73:2b:44:6c:71:7a:d3:85:f4:e2:95:40:
ba:f3:78:35:d9:32:6f:b9:31:ed:b6:10:04:91:f3:
fd:9d:38:74:2c:76:97:19:8f:ba:89:88:02:f4:69:
c9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:51:35:A6:E3:0F:67:C4:D3:66:6F:17:37:76:8F:8A:73:A6:54:51
X509v3 Authority Key Identifier:
keyid:2F:60:0D:29:1D:48:23:83:5A:F1:03:AA:D3:9E:DE:05:BD:12:C9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2ANKR1II4Na8QOq057eBb0SybY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/054a71-8253-4089-b962-cbbf76f3533a/1/L2ANKR1II4Na8QOq057eBb0SybY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:1d:d1:96:43:9b:c5:b4:9f:2b:e7:34:36:9f:44:0f:6e:cd:
89:5e:99:93:3b:c2:da:4c:68:f6:39:ad:59:a7:2f:70:c2:8b:
ec:7b:77:9c:d4:44:06:b6:08:12:f3:74:dc:53:7b:a6:57:22:
a0:8e:c5:ad:79:94:ab:98:5c:19:58:01:6f:32:7d:f2:9d:b6:
cc:0b:0b:17:c8:c2:94:a7:a4:d4:1f:28:7d:07:9d:d8:cf:3c:
c7:e2:5c:e6:79:f1:9f:7e:f9:28:fe:64:22:af:94:d5:24:84:
aa:ff:f9:9e:cc:f5:9f:b8:96:f9:56:fb:1c:e6:b1:e7:e0:24:
6e:a9:32:77:c8:c5:b5:e1:eb:ea:3f:79:81:ba:aa:05:42:07:
1c:ea:d2:5e:bf:19:52:5b:07:ba:dd:c2:69:6c:4b:e1:f9:06:
70:e0:2d:1b:11:8d:c1:e3:83:4a:50:18:6c:8c:8c:d6:0a:b5:
3e:ae:e3:73:ba:9d:3c:dc:e8:ac:c9:16:48:0c:a5:73:8b:29:
81:ec:83:e1:2d:9e:fd:37:d3:d9:af:fd:c4:1a:03:82:a4:69:
f4:e6:95:6d:21:05:ca:28:21:26:45:b0:ee:ef:62:43:96:e5:
e7:35:e4:e8:8d:ad:1f:ed:8e:7b:84:8a:38:1a:da:38:e1:8d:
dd:73:dc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:03 2025 by rpki-client