Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
File: L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json)
Hash identifier: any3218fTMDdZ9FyD9x09ejfvegVhwbHCkvQiCSHNgQ=
Subject key identifier: 67:20:1F:31:14:84:CC:8B:15:D6:8F:90:A2:28:67:FB:F3:24:56:EF
Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
Certificate issuer: /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Certificate serial: 019655384434729E3970916531DFF8DB33A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
Manifest number: 045B
Signing time: Sun 20 Apr 2025 22:01:12 +0000
Manifest this update: Sun 20 Apr 2025 22:01:12 +0000
Manifest next update: Mon 21 Apr 2025 22:01:12 +0000
Files and hashes: 1: JnNHu3mBlI4S34lBG5gMe1SKldU.roa (hash: kmsxUGCHTVtHjCmc68XKFbTUU312Q88Sy/CYV55BiQs=)
2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: lOC6ZJ/XNXHWUr7ZX3PXVovyBv/qtqTVB2kQREMQGWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:44:34:72:9e:39:70:91:65:31:df:f8:db:33:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Validity
Not Before: Apr 20 22:01:12 2025 GMT
Not After : Apr 21 22:01:12 2025 GMT
Subject: CN=67201f311484cc8b15d68f90a22867fbf32456ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:de:78:4c:b9:80:92:ce:cc:27:79:73:a4:
07:c6:31:09:ae:25:fc:d2:08:4e:5f:80:2f:34:77:
37:8d:73:e8:c8:0b:af:42:38:81:df:99:bb:4d:86:
b3:68:5d:ba:0e:9f:89:19:25:eb:fa:ba:9d:a8:8d:
d1:4f:c0:a8:4c:c4:1e:33:99:2b:cd:37:dc:13:83:
e1:49:50:7e:23:60:35:90:18:5f:22:35:3a:b6:1f:
cd:ff:9e:73:d6:21:c7:5d:56:fb:af:27:cb:35:87:
8d:d8:ff:94:dc:77:e0:26:28:c7:5e:17:70:e4:f4:
55:4a:20:ab:b7:35:31:fe:93:38:69:5a:10:05:0d:
61:bb:3c:46:32:ac:ea:a5:30:87:81:95:58:15:c1:
c9:5b:ac:c8:20:b8:f1:0c:00:61:cd:c2:35:f7:2a:
67:28:37:e9:79:cb:e4:ba:10:6d:3d:11:6f:64:8c:
d9:77:9b:6b:87:15:e9:d9:e3:9c:56:7b:08:e1:46:
77:1b:fe:39:8d:d2:1a:e7:a5:db:3e:35:51:0e:6c:
a8:09:18:ff:23:70:c4:7e:5c:32:19:cd:72:de:7b:
1d:16:fb:06:3a:cf:6e:90:8a:a9:90:93:d0:92:01:
6d:1e:22:d7:91:ea:2b:df:ad:6e:c3:3c:3a:cf:b6:
92:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:20:1F:31:14:84:CC:8B:15:D6:8F:90:A2:28:67:FB:F3:24:56:EF
X509v3 Authority Key Identifier:
keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3b:da:af:70:68:0a:47:6b:9d:65:46:49:d1:91:ed:64:62:
15:46:5b:54:b6:53:50:be:92:ca:28:cf:db:29:8b:a6:8e:bd:
1a:9a:a5:73:49:9a:1a:32:0b:30:98:9a:36:6d:1a:dd:b3:d5:
50:04:89:59:7f:8f:74:72:60:5c:f5:13:e2:73:18:84:5f:2e:
b0:37:21:33:e5:2c:79:41:38:9b:a8:c7:fa:e2:2f:05:d8:65:
8e:cb:b9:69:57:8a:b3:f0:bc:3a:44:14:e7:6d:e6:57:c1:53:
8f:87:4b:b5:d0:5e:55:81:6d:d2:18:84:3c:be:51:31:01:7e:
2a:5c:ac:34:53:52:83:5b:2a:0a:ec:3f:35:13:76:04:0e:b7:
e1:16:e8:fb:db:ce:fe:da:79:ef:db:51:65:26:d3:7f:b5:ae:
77:c4:41:3a:76:5e:00:db:a9:5f:fb:8f:c7:fa:67:54:2c:74:
db:04:b2:1a:cb:aa:0f:72:b0:03:53:ca:19:8a:22:f7:c2:b7:
d1:b5:ba:60:0d:97:55:66:79:e1:53:78:2a:49:14:fe:15:77:
b1:25:81:c4:35:35:49:d9:7b:01:0c:f3:67:5c:75:b4:19:52:
de:06:51:22:bf:b9:b9:b2:b3:ab:f2:45:9c:00:bb:fa:3d:97:
90:3f:7c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:59:43 2025 by rpki-client