Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
File: L6TocLw3rJcx_m_PloLrZX5QvKM.mft (raw, json)
Hash identifier: PZJscBBSwTyfAgqR3e8jkXTKYfoQ5BLWHfYfMHelNpQ=
Subject key identifier: 87:FE:FD:6F:36:F4:45:43:4D:2C:FD:90:7E:F3:4D:93:2C:31:78:FD
Authority key identifier: 2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
Certificate issuer: /CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Certificate serial: 019873068AF79DCDCB1E1FEC54A464F9B42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
Manifest number: 1134
Signing time: Mon 04 Aug 2025 03:01:05 +0000
Manifest this update: Mon 04 Aug 2025 03:01:05 +0000
Manifest next update: Tue 05 Aug 2025 03:01:05 +0000
Files and hashes: 1: L6TocLw3rJcx_m_PloLrZX5QvKM.crl (hash: WGwe1kK/E4AESi7+7sf8984S59X1l6+DnMogABELtVo=)
2: m7j41yWDEfLAx4I6fuINswAyiXA.roa (hash: dDqFpGebxjdBoXgviJqZBlxaNfM8q5rLJMGVfhQeHKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:8a:f7:9d:cd:cb:1e:1f:ec:54:a4:64:f9:b4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Validity
Not Before: Aug 4 03:01:05 2025 GMT
Not After : Aug 5 03:01:05 2025 GMT
Subject: CN=87fefd6f36f445434d2cfd907ef34d932c3178fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:5c:e7:f6:cb:cd:fe:34:0f:75:cd:bd:6f:
73:26:ff:64:0c:60:b9:77:d0:05:58:45:e5:26:fb:
e6:d3:4e:33:15:7d:37:fc:2b:6e:72:54:dd:d4:c6:
c4:28:58:f1:38:2c:ab:3d:d8:2b:c5:79:cd:04:65:
78:7b:65:cd:10:4c:99:0e:66:38:01:dc:95:78:f7:
5f:99:d7:25:d7:14:d3:e8:ab:0e:95:69:50:b7:87:
81:48:25:61:f8:10:48:e8:3d:48:b5:a9:83:14:cc:
68:9d:af:c4:65:b0:bc:eb:8a:ee:54:19:be:86:59:
58:ad:a2:04:77:7e:84:45:62:af:5e:de:c5:af:dc:
bd:5b:d8:7f:4b:bf:ec:45:be:45:d1:19:2a:2e:3b:
50:e1:a8:dc:4c:8f:f7:78:90:73:7a:1b:8e:d3:b2:
58:51:c7:f0:c3:ff:45:be:a5:4f:30:3b:a6:9a:fb:
cc:b9:23:64:59:87:7a:e2:90:14:46:89:a6:3d:3a:
fa:4f:1c:56:41:9e:2b:a2:66:65:28:13:26:a6:32:
c4:f2:ee:9a:c5:68:46:1e:75:cd:f1:d3:d0:dc:16:
8a:ce:f8:65:36:23:77:b3:96:68:1c:f4:2b:ff:55:
e0:95:1b:59:86:f4:b4:96:f8:4c:18:76:c8:c3:3c:
75:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FE:FD:6F:36:F4:45:43:4D:2C:FD:90:7E:F3:4D:93:2C:31:78:FD
X509v3 Authority Key Identifier:
keyid:2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fe:1f:4a:4d:e4:9b:77:88:aa:f6:52:64:05:ff:ab:d7:da:
a0:0c:e7:7d:0d:a2:b0:dd:26:5e:84:b5:b3:3c:8b:d0:ee:90:
56:35:15:cf:e9:41:af:a3:80:c2:bc:8c:3b:4a:92:75:aa:97:
89:3d:2a:a2:bd:02:a7:7a:8c:fe:71:e7:1a:8b:6e:8d:2e:09:
ee:dd:03:ff:3e:e1:dd:76:28:c6:15:b9:08:aa:d5:37:73:94:
80:17:4e:6f:06:68:ae:2c:60:37:c7:de:61:82:3f:71:8c:d6:
ec:bf:c6:0d:e8:f3:fd:03:80:c8:45:ed:51:bd:8a:b3:ce:a6:
10:4a:6f:77:2b:cd:09:db:71:45:35:01:c3:26:5d:cc:6c:e9:
fc:5b:65:f7:59:e8:31:1d:d7:7d:49:f4:eb:02:ee:02:37:f2:
23:16:fb:cc:87:09:50:84:f3:cc:84:e5:85:9d:b9:9a:b5:79:
c5:80:c6:64:5b:e1:7c:c0:c6:ac:4d:b0:86:d4:8d:ea:0c:f7:
9a:9f:4e:b3:e1:41:cd:1b:67:f3:1b:3b:9c:65:df:9f:9f:b1:
57:2d:86:ab:da:4c:00:1f:8d:9a:fa:2c:d2:51:d8:f1:57:ed:
99:2e:22:11:b0:34:28:b9:88:75:65:43:d4:f2:9f:40:cf:e2:
4f:c0:d9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:44 2025 by rpki-client