Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
File: L821BdHaE20AniDvGzY7AuMyUZ8.mft (raw, json)
Hash identifier: 3CJkN2vrEwS8O8gM9P3vcp2Rhz100tFHk1ps72szix4=
Subject key identifier: 4E:34:42:97:2E:BC:71:45:AC:C4:3B:53:09:67:AF:02:36:F0:14:2B
Authority key identifier: 2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
Certificate issuer: /CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Certificate serial: 01976F629F8826483C106BEA609D5800B5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
Manifest number: 0D9C
Signing time: Sat 14 Jun 2025 17:00:23 +0000
Manifest this update: Sat 14 Jun 2025 17:00:23 +0000
Manifest next update: Sun 15 Jun 2025 17:00:23 +0000
Files and hashes: 1: L821BdHaE20AniDvGzY7AuMyUZ8.crl (hash: TLn2yYpTeTg6kccqu9g6HE0JUH0KnWwrEPu1NsDQmuk=)
2: vQoI-4y6Tfml573DLn2pCriBNl4.roa (hash: 3W+CArLvUD2GX28NdlGoBAxxfe8EMtX22dfil51a9Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:9f:88:26:48:3c:10:6b:ea:60:9d:58:00:b5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcdb505d1da136d009e20ef1b363b02e332519f
Validity
Not Before: Jun 14 17:00:23 2025 GMT
Not After : Jun 15 17:00:23 2025 GMT
Subject: CN=4e3442972ebc7145acc43b530967af0236f0142b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:47:c2:30:9b:06:15:bf:9f:94:79:8c:37:
eb:9a:48:53:a8:65:fc:cf:6f:80:28:b6:c6:58:6b:
ec:a6:b3:03:8a:b8:56:a7:ce:bc:60:52:f2:bd:e6:
58:b3:05:8c:c1:6f:6c:df:b6:3b:d8:51:b4:88:ae:
70:da:6e:70:e8:dd:19:8a:48:bc:2b:63:bc:3f:0b:
c4:88:aa:e1:c0:db:00:7a:da:19:e4:c7:d6:3e:92:
a3:2f:b5:15:ca:50:0d:b6:7b:00:11:6e:f2:be:69:
e5:9f:ef:d9:9c:fc:17:08:dc:f2:94:a9:8a:ab:43:
56:e4:1f:a9:0a:84:45:48:82:d6:6b:fe:a5:01:f4:
a9:a0:cd:86:f8:db:6a:68:84:66:88:f0:2b:51:79:
cc:35:05:7c:86:5a:00:32:77:51:b4:1a:48:d0:94:
7c:bf:21:42:1c:bb:09:9a:10:70:8c:92:3f:6a:06:
e6:65:63:d2:59:1d:9d:c6:49:84:91:1b:8b:84:09:
60:c3:90:3b:70:22:a5:5c:7f:b1:4a:6c:16:54:24:
07:a4:91:b1:cd:6c:9c:9c:c4:6f:f8:62:fa:8a:ee:
6c:d2:eb:13:c0:e9:19:bc:60:82:5b:4b:97:84:c3:
e8:1c:84:9c:c1:d9:e0:78:1e:f9:45:3b:cd:3c:81:
f9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:34:42:97:2E:BC:71:45:AC:C4:3B:53:09:67:AF:02:36:F0:14:2B
X509v3 Authority Key Identifier:
keyid:2F:CD:B5:05:D1:DA:13:6D:00:9E:20:EF:1B:36:3B:02:E3:32:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L821BdHaE20AniDvGzY7AuMyUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2a4bfe-7688-46a1-9aff-ceb0710a0751/1/L821BdHaE20AniDvGzY7AuMyUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:4c:37:15:1e:ca:5e:00:6f:50:6e:7f:2d:c7:16:8f:3e:2b:
76:6b:da:4e:5a:b3:1a:2a:e8:f5:ba:0b:21:18:4a:9f:c2:de:
ec:36:ca:38:7f:d4:9d:7b:fb:44:56:f7:ec:43:02:19:7a:04:
47:38:3c:2c:c1:53:0d:04:14:80:0e:bb:6e:4c:33:01:69:11:
50:5e:bd:8e:1d:cc:ea:8e:55:72:3f:79:62:ff:41:ed:c9:7b:
5e:43:40:91:a4:2a:ab:1c:dd:cf:98:91:eb:09:dd:4d:0e:25:
5e:e9:d9:e4:5e:83:36:da:8e:ed:59:c5:27:ad:85:ec:b4:aa:
81:80:34:5d:b0:47:db:55:59:30:3d:20:ef:ae:b5:f6:c5:76:
3f:52:dd:5f:2d:de:d6:c9:e3:29:40:30:d6:51:e5:46:09:ea:
5d:83:e6:11:37:a3:41:b6:b4:92:d0:22:43:ae:9e:7c:7d:82:
ad:91:12:0b:58:5d:75:11:f7:81:18:d3:b6:01:05:e4:47:ed:
0d:95:a8:2b:4c:93:21:f0:24:5c:62:36:ca:5d:f5:36:9e:b0:
30:53:8b:c2:ed:c5:90:f7:0f:6d:81:b7:d1:ec:2d:5b:e4:af:
08:20:28:32:df:c6:9a:ea:39:ba:13:4f:05:3a:fd:bc:33:3b:
7d:a6:f5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:49:11 2025 by rpki-client