Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
File: L6TocLw3rJcx_m_PloLrZX5QvKM.mft (raw, json)
Hash identifier: mqTZAmJXUv61JPBmDT1atmLuPEcqTg7+ul8gFjhKgKs=
Subject key identifier: 77:E2:01:87:B3:80:C1:E0:A4:B6:96:8D:5A:CA:04:11:AD:ED:0F:E0
Authority key identifier: 2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
Certificate issuer: /CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Certificate serial: 0198353A01272D9E7BFAD1E5D19B440AD46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
Manifest number: 1114
Signing time: Wed 23 Jul 2025 03:00:50 +0000
Manifest this update: Wed 23 Jul 2025 03:00:50 +0000
Manifest next update: Thu 24 Jul 2025 03:00:50 +0000
Files and hashes: 1: L6TocLw3rJcx_m_PloLrZX5QvKM.crl (hash: eT2o13ZCYynMzwhXa4vXT05/EkNdNMgMRTpWpQYxy/0=)
2: m7j41yWDEfLAx4I6fuINswAyiXA.roa (hash: dDqFpGebxjdBoXgviJqZBlxaNfM8q5rLJMGVfhQeHKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:3a:01:27:2d:9e:7b:fa:d1:e5:d1:9b:44:0a:d4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Validity
Not Before: Jul 23 03:00:50 2025 GMT
Not After : Jul 24 03:00:50 2025 GMT
Subject: CN=77e20187b380c1e0a4b6968d5aca0411aded0fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:46:42:93:1a:53:40:ea:58:35:2c:52:d5:
a4:2f:cb:08:0e:ca:00:24:7b:98:8a:ef:64:af:cc:
29:5f:62:ea:90:0c:2b:9c:ae:07:16:0d:3a:ad:26:
85:cd:c5:0d:94:00:55:47:a7:b4:1f:3d:bd:ee:9c:
f8:39:08:29:88:d1:84:33:a6:4e:50:79:28:51:d8:
7b:23:83:03:80:5f:23:88:fe:23:ba:8a:34:53:6f:
85:16:86:ee:95:0e:f1:07:2a:d5:44:0e:85:2c:3f:
c9:73:02:bd:15:e5:bb:c6:4e:cf:88:2f:91:44:3a:
6a:32:4d:df:18:4c:79:bc:bb:c7:d5:ce:3f:29:9e:
b7:85:f1:b0:a1:16:1f:90:c2:62:89:0c:a7:21:31:
01:d6:d8:dc:7e:3f:66:31:25:57:15:ea:6a:56:57:
32:64:9c:d8:e2:fc:f4:73:ec:63:85:03:fc:ec:8c:
b7:2a:33:a0:b2:7f:88:f3:01:82:f7:d9:5c:9d:37:
de:b8:eb:34:d5:06:64:91:dc:f8:99:fb:ce:ee:5e:
5e:40:b9:d9:2f:e0:7d:6e:9b:b4:d9:36:87:dc:b5:
b1:7f:dc:b2:b2:8d:c8:f6:69:7f:44:40:3c:a2:e4:
a8:c7:ff:cb:f0:dd:d9:e6:8d:da:2d:80:16:8e:7e:
56:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E2:01:87:B3:80:C1:E0:A4:B6:96:8D:5A:CA:04:11:AD:ED:0F:E0
X509v3 Authority Key Identifier:
keyid:2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cb:94:bf:22:06:26:15:90:df:a2:f0:a2:db:d6:3d:3b:03:
53:d9:9c:4a:c5:02:ba:5d:b2:8b:a9:9f:2b:44:22:a8:f9:a8:
2f:4d:35:46:a6:36:39:fd:fa:dd:64:75:a0:3d:e7:98:a2:11:
f9:62:0e:c5:34:d5:12:bc:b8:db:3a:da:a5:4f:3f:28:2c:35:
08:32:37:ca:e2:b0:93:95:55:ce:ae:bb:80:39:1e:7c:bf:7b:
65:17:52:67:59:5d:5c:eb:de:a3:4e:ea:b3:da:88:cb:c4:30:
6f:ae:32:67:bd:98:12:c3:ba:e6:d0:ca:0f:e5:ff:52:5a:cf:
1a:67:e9:0f:c4:43:06:90:a0:77:c6:80:4a:26:c7:82:37:48:
68:6c:26:b4:e8:4b:05:6d:e5:60:38:8b:28:eb:39:1a:9f:56:
52:dd:cc:7b:75:56:1c:7c:46:e7:65:b2:a3:bd:01:7d:e7:19:
96:bf:39:8b:15:c4:67:07:c5:1a:51:2d:9e:6e:c2:b1:67:00:
f5:4f:1f:25:3a:e0:c2:c1:1e:ff:6b:45:72:ae:f8:59:e7:d3:
d3:b3:ed:b2:bb:58:af:f3:9f:f0:99:4d:c2:19:8e:74:8f:d3:
24:4b:a4:1b:f1:a4:de:42:e0:d0:0c:16:33:f7:de:b2:28:7c:
5b:18:21:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:02:21 2025 by rpki-client