
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
File: L0yd_nsacqVRu6FamZpsGTM__5Y.mft (raw, json)
Hash identifier: SsAapsnxpxRb6YyEkxuC63LwsLq7HmP/qD0XKafTW7s=
Subject key identifier: C2:13:13:1C:A7:E0:25:1F:67:86:B1:CA:C3:61:64:5D:47:12:83:8E
Authority key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
Certificate issuer: /CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Certificate serial: 01974E8E1C273431F431E58414EF8A8ABD05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
Manifest number: 12C1
Signing time: Sun 08 Jun 2025 08:00:25 +0000
Manifest this update: Sun 08 Jun 2025 08:00:25 +0000
Manifest next update: Mon 09 Jun 2025 08:00:25 +0000
Files and hashes: 1: L0yd_nsacqVRu6FamZpsGTM__5Y.crl (hash: 9fkdcmFolDrjMPfc0q52128y5YW7EXd6GV0rvF+naB0=)
2: _D7djxZolRxCx5AgywEsR673Vyc.roa (hash: lkosjygsw/gw6j4Ql0QUbhSbmAPEpo1du5WppRl3Xeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:1c:27:34:31:f4:31:e5:84:14:ef:8a:8a:bd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Validity
Not Before: Jun 8 08:00:25 2025 GMT
Not After : Jun 9 08:00:25 2025 GMT
Subject: CN=c213131ca7e0251f6786b1cac361645d4712838e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:86:97:1e:3c:9b:bb:71:f5:4a:94:76:b8:
3f:1b:51:dd:f9:6c:c0:24:55:74:39:56:07:1f:53:
0c:4b:f9:b3:27:d6:1a:52:3f:a7:89:0b:f1:ab:0a:
7c:18:83:42:67:0c:ec:f7:5b:50:95:23:3d:98:73:
2d:98:43:2f:96:aa:a2:c1:b3:52:de:e7:3c:ee:c4:
6c:02:65:77:c3:0f:44:01:2f:f3:02:35:9a:71:44:
b7:1b:0b:f3:66:7a:bb:c8:84:b5:0d:0c:4b:de:f9:
cd:98:0d:d0:9f:73:02:5d:f4:0d:15:81:9e:72:48:
49:58:2b:ff:ac:b9:f7:90:10:3d:9a:bd:fb:28:b6:
a7:d1:04:55:3f:70:21:d6:01:cf:0b:2a:71:86:89:
2b:8c:94:bb:34:e5:93:59:db:3b:87:39:c5:79:ea:
9e:2c:55:f5:51:9a:56:d6:64:c5:9f:21:d4:64:a2:
0c:29:72:ac:4c:b3:c7:fe:eb:03:d8:df:d4:ea:47:
a4:a7:07:11:1a:fd:ac:a7:22:9e:e5:a0:f7:d8:3c:
1c:8c:a7:b4:09:89:d8:50:e5:e7:2a:92:b6:86:f0:
fa:14:9e:e4:a3:b6:ec:b4:d2:3f:a3:46:94:54:29:
90:2a:d9:db:c7:7d:04:b9:87:bd:a6:7e:2b:57:25:
26:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:13:13:1C:A7:E0:25:1F:67:86:B1:CA:C3:61:64:5D:47:12:83:8E
X509v3 Authority Key Identifier:
keyid:2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:78:64:b6:32:31:81:ea:7e:6c:04:06:bb:67:c7:0c:7a:5a:
cf:2b:50:4a:6a:8a:bf:9e:16:d8:71:4e:39:3e:40:fc:c2:e1:
88:32:e5:1e:70:ab:c0:de:d7:70:f4:fe:ed:b8:0a:37:e0:01:
5e:97:c2:4a:fc:ae:bc:8d:88:4a:b0:ec:40:cf:59:67:ca:65:
e5:d7:61:1c:4b:bd:ff:d5:f2:39:21:17:f4:6c:8e:77:99:d7:
22:da:9d:49:fb:3b:12:e8:53:f9:7b:cf:19:39:6b:f7:d9:b4:
fe:c3:26:be:6c:fb:ad:4e:7c:79:8b:38:76:4c:f1:65:bd:2a:
6c:7d:89:2b:db:56:8e:4a:72:e3:ac:b7:00:a3:5d:90:31:32:
51:fb:5c:73:f7:d0:36:04:6f:56:8d:92:fe:26:45:1a:f9:ef:
52:79:89:44:34:47:3c:84:fa:55:08:d7:ca:6f:41:56:fa:af:
ca:0b:db:22:dd:59:81:30:e8:ec:cf:9e:d7:f8:e2:45:1e:7c:
37:ab:8d:f4:78:45:2e:65:d9:e3:22:dc:0e:4e:62:3e:a2:fb:
e3:b2:9f:2c:2b:b7:c1:a8:aa:45:97:b3:1a:23:4c:eb:2e:66:
57:fb:51:0f:1d:8f:79:7d:ad:2d:f6:4e:1e:a7:e1:8e:05:94:
0a:d3:c6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:39:15 2025 by rpki-client