Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: SLavhIUw8Yohdvwbkx3anz79DFkeJdIEe7wd1PYI56g=
Subject key identifier: 92:AA:1E:0A:C1:8A:2A:A9:10:D0:4C:C2:23:C2:65:24:D8:10:C4:4D
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 0197474299FA497710338BF9568FA2EA9613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 0CD8
Signing time: Fri 06 Jun 2025 22:00:36 +0000
Manifest this update: Fri 06 Jun 2025 22:00:36 +0000
Manifest next update: Sat 07 Jun 2025 22:00:36 +0000
Files and hashes: 1: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: 9Qsd/1RX952F0Ti4cCAAF/XjVvsL8zW2uiA9Ri3BxWs=)
2: afVgxjAetRHf-32SfxI2xSGcZNY.roa (hash: 5+vaYR6gRkTLd8FndMtKaBU448DVyxpRSJ1taqs3pZY=)
3: qxyxQlVHUvofNzmf_XqptKckrdE.roa (hash: cKnrJAob0FIV4Kpod3nX7eoqdSn57f3LQGAcTD4ltHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:99:fa:49:77:10:33:8b:f9:56:8f:a2:ea:96:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Jun 6 22:00:36 2025 GMT
Not After : Jun 7 22:00:36 2025 GMT
Subject: CN=92aa1e0ac18a2aa910d04cc223c26524d810c44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:c9:22:84:11:ab:97:4b:cf:7d:e8:81:15:
e1:f9:57:d1:27:6e:d8:ac:1d:fc:43:bf:60:90:bd:
4b:41:65:f0:78:02:a8:7a:81:de:64:b0:39:17:e2:
97:dc:80:bb:95:0b:a9:d5:25:e8:a0:84:f7:23:cf:
9d:32:b7:8e:34:24:af:b5:09:89:a0:16:ba:fa:81:
aa:48:98:df:2b:99:ba:9f:bb:be:6e:13:4a:83:af:
71:d5:be:57:60:cf:26:03:3f:64:07:e0:34:88:7e:
a8:9f:f5:d5:c0:f2:b1:5e:0e:a5:89:ec:c9:ce:41:
58:d4:49:14:c7:6c:db:65:1d:4f:a9:39:71:0f:3a:
5c:f6:30:83:16:fb:00:f8:5e:a8:64:dd:b5:bc:0a:
f9:9f:b3:98:e2:64:1a:22:0b:b0:a9:89:d5:3a:47:
43:03:94:1b:f6:d6:b0:ce:6c:86:14:e0:0d:f4:34:
4e:c4:cc:47:0f:9d:dc:34:43:a3:96:f0:c4:19:16:
dd:d0:87:7a:34:b5:df:73:ea:b3:83:45:84:45:46:
ba:12:4b:d8:0d:b1:e6:75:43:83:c8:9f:c6:cc:4d:
1f:08:4d:b4:0b:11:ed:66:33:ad:cf:0d:59:83:47:
b6:c3:c2:fd:66:b7:f1:f3:86:60:c7:bd:7d:64:a6:
39:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AA:1E:0A:C1:8A:2A:A9:10:D0:4C:C2:23:C2:65:24:D8:10:C4:4D
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:56:83:ea:67:7c:4b:35:36:b7:7b:df:73:2b:97:a3:a9:9b:
97:36:3b:4e:61:21:cf:45:f0:28:1b:dd:c1:95:31:dd:65:7b:
2c:bd:2f:0f:dd:0c:ea:9e:1e:b5:57:f7:26:cf:87:f6:11:d1:
34:53:b4:f1:b7:44:54:ab:48:c2:b8:d0:d5:a7:41:ec:36:6a:
3e:33:92:cb:e6:25:39:0d:01:dd:e6:19:94:ba:c5:3c:d4:00:
80:df:21:f1:8b:df:df:41:87:9b:11:09:99:9b:22:dc:4c:d6:
db:72:89:c3:a3:e0:8e:03:55:46:f7:de:39:f5:35:69:cc:b9:
c7:96:e5:91:d2:b4:14:93:bc:be:38:2e:f6:c2:ec:ee:d6:df:
01:42:33:44:73:77:50:8f:60:1f:7d:10:0b:d7:bc:2a:53:18:
3b:8b:fa:90:97:4f:d0:f4:b2:a9:c2:3d:c1:66:22:15:32:ea:
f0:14:3a:0a:d3:ee:19:64:27:e6:8a:ef:20:19:e9:f8:9c:d0:
d4:c4:1b:bb:ca:70:3a:06:d3:40:19:3f:63:9b:5d:54:00:2f:
e0:81:f2:ba:18:13:69:db:11:98:2b:fd:7c:5e:25:c9:b2:51:
b0:9b:a5:80:ea:f5:4a:76:8b:09:42:63:42:af:0d:ec:2c:75:
ad:8e:65:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:13 2025 by rpki-client