Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
File: L5INmRKzpyi5SBgYjvPj5X-NP5w.mft (raw, json)
Hash identifier: wP+pqK39aLaHuJfLbK6HF1U4cMOajSVqUrQk5yKdCjE=
Subject key identifier: 68:C7:D7:90:8D:01:6E:1D:D9:0A:1F:58:28:E1:04:59:C6:4C:BC:49
Authority key identifier: 2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
Certificate issuer: /CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Certificate serial: 01984A4178729A039A5B8D28145217F0E768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
Manifest number: 133D
Signing time: Sun 27 Jul 2025 05:01:01 +0000
Manifest this update: Sun 27 Jul 2025 05:01:01 +0000
Manifest next update: Mon 28 Jul 2025 05:01:01 +0000
Files and hashes: 1: L5INmRKzpyi5SBgYjvPj5X-NP5w.crl (hash: ZTJ+7lveVs1BURJbI3kLTyp1TU44CSVqSX+335D17Cw=)
2: UHmcnjZPkdlcmPvf9kU9gEvRzu8.roa (hash: o/ZBiu0sM0QxdL8NohBvSpb6XFjAawutUac+NbV8PeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:78:72:9a:03:9a:5b:8d:28:14:52:17:f0:e7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Validity
Not Before: Jul 27 05:01:01 2025 GMT
Not After : Jul 28 05:01:01 2025 GMT
Subject: CN=68c7d7908d016e1dd90a1f5828e10459c64cbc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a4:40:c4:79:d0:ec:bc:2a:35:4c:33:ec:da:
e4:8a:bf:84:68:81:1c:71:d2:01:27:b8:c2:75:32:
e7:2d:d8:64:4f:4c:51:79:3d:65:ec:ce:bd:c6:11:
0d:89:76:bb:b2:4c:6c:60:c9:42:55:14:2c:4c:b7:
95:85:71:c4:7c:ba:b7:cb:c7:e3:3d:88:1a:45:50:
97:6b:81:99:1a:bb:ca:bd:90:90:33:3b:65:0d:3f:
77:c3:ff:af:d6:86:cb:86:70:d5:e2:41:df:01:50:
65:aa:3f:d8:dd:2d:85:74:07:cd:04:6c:5b:e7:e4:
53:06:0f:4f:35:3a:ea:7c:59:af:64:ea:1d:ee:ee:
1c:ff:23:6c:13:d7:7c:a0:4e:ba:90:cf:a9:b1:b9:
f4:a5:39:df:81:45:ba:02:79:a4:b2:54:c6:d8:66:
97:3b:e5:d7:45:43:ff:b1:4d:42:48:52:47:a1:be:
a5:b4:bf:92:15:69:c1:a8:d0:93:b2:f4:12:d7:4c:
88:cb:d2:ab:54:b5:eb:d3:79:ee:ae:0a:6a:29:79:
be:9d:ca:79:f8:da:20:4a:cd:45:7c:94:3a:d9:0a:
48:43:3b:42:92:81:6c:41:74:2b:d7:9b:b2:a7:d9:
c4:a2:20:ab:40:94:e9:25:f2:78:ac:ba:1b:f1:4f:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C7:D7:90:8D:01:6E:1D:D9:0A:1F:58:28:E1:04:59:C6:4C:BC:49
X509v3 Authority Key Identifier:
keyid:2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:cc:bd:6b:70:e8:cb:6d:24:99:fc:9a:55:58:28:bf:c2:6f:
7c:32:c2:88:48:b5:bd:9c:57:a1:7d:fc:8c:ee:6d:3f:19:ad:
d1:d3:f7:41:43:c2:68:09:9a:24:6b:f8:ef:3e:ba:a4:02:3d:
b4:4f:8c:29:8b:a8:44:9d:27:16:5a:6f:9d:5f:76:a2:24:a5:
d6:f4:f6:00:ce:df:b0:72:f5:46:af:b0:ed:bd:57:e9:e6:25:
2d:15:17:53:a7:e7:5a:18:ae:47:bb:4b:d3:e8:b2:47:07:72:
b8:dc:8b:4d:ae:d9:6c:91:4c:a6:8c:79:c9:6d:3f:fb:c1:bd:
76:49:27:7b:29:4e:2a:bb:21:62:7a:41:ea:bc:ef:1d:e2:e5:
e7:f8:b2:86:8f:2d:c0:5e:b4:91:5a:f2:ae:af:5e:35:1a:2b:
da:9a:05:25:e0:44:ec:2e:ac:73:10:3b:29:e8:dd:d8:98:0b:
d7:0a:42:c3:f6:7a:9b:ce:40:53:01:13:46:fc:c0:0f:a3:85:
c8:02:6c:57:2b:cb:aa:0d:ac:a9:3b:c2:fa:76:16:0b:72:14:
31:87:66:ff:54:37:48:01:e1:9b:ec:3e:58:42:2d:bf:c9:2a:
b1:56:85:e5:db:26:57:4f:b9:60:80:6c:5a:1c:db:7e:18:d7:
d9:bc:c1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:14:45 2025 by rpki-client