Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: HQnyAiQHHXF+n0NUkTzQLF6TcUu3c9MsC6SiPwJH8BY=
Subject key identifier: DD:A4:77:B8:A4:63:13:60:F5:79:3C:4C:BA:14:A5:D2:1A:08:9A:61
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 01974AE893482F5A213A965921FBD9A815AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 03C4
Signing time: Sat 07 Jun 2025 15:00:45 +0000
Manifest this update: Sat 07 Jun 2025 15:00:45 +0000
Manifest next update: Sun 08 Jun 2025 15:00:45 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: jtVASlEtxGKxJlTPIEf5nZl0087C0FYHnaq13i0FJu0=)
2: WxBvM9AzXvcGUxLQO7mjVfKZ8SI.roa (hash: MlBmuxBYdT/UhZRE0mpsF297g9H8Aa5t6UDiR3XGbFU=)
3: hGYvey0NL7kedoZnW8NGK9NdHUE.roa (hash: j/gjt7b1AkCBiDU1S/YvmfcXT2lTvik+0pgkIhPCV+w=)
4: zhUAq4pe-9N-dxfCl2d78EjPTb0.roa (hash: uyxGbVsUozb8CGUZeB9rmoW8CVbBZTPJHf+JK7e+rn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:93:48:2f:5a:21:3a:96:59:21:fb:d9:a8:15:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Jun 7 15:00:45 2025 GMT
Not After : Jun 8 15:00:45 2025 GMT
Subject: CN=dda477b8a4631360f5793c4cba14a5d21a089a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d7:a5:82:f4:df:58:3f:19:21:e0:b2:b2:26:
ed:00:b4:ba:67:7f:9d:a0:ca:39:97:6a:bb:a4:fc:
2b:68:1f:62:92:3b:e6:99:24:49:9f:47:c8:8f:19:
40:03:75:1e:9f:03:58:6a:97:01:89:de:71:04:05:
8f:0e:fc:c0:6b:53:15:f2:be:43:ec:fd:68:b0:b3:
59:be:21:be:29:9c:a3:fa:74:b6:41:5c:1d:97:3a:
cd:e4:7d:ae:8b:da:9b:9a:ac:78:50:9e:69:a9:92:
5b:77:92:00:ab:f2:be:87:ff:59:47:44:a2:c4:61:
84:b6:64:6d:ff:04:25:bc:61:f0:ef:56:c9:0c:2f:
ec:b4:e0:76:ae:63:fa:bf:30:60:d7:c6:a5:d5:99:
69:11:ff:5d:3d:9f:7b:4e:2a:ad:c5:8d:e5:ae:76:
1c:7e:35:64:3c:f0:eb:38:33:f8:0d:7f:6a:ee:9c:
d5:a2:d6:06:ea:30:f6:e8:7d:09:3d:7c:42:19:74:
66:c6:0b:43:18:0d:35:83:33:2b:69:c6:49:29:81:
1a:12:21:ff:cc:2b:ea:27:1c:5e:19:26:f2:23:f3:
5c:83:0d:e4:64:c7:6b:23:29:41:41:c0:75:7a:5a:
72:64:f4:41:4d:92:3b:6b:16:19:1c:7f:be:a8:25:
20:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A4:77:B8:A4:63:13:60:F5:79:3C:4C:BA:14:A5:D2:1A:08:9A:61
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e4:e6:04:25:f7:7f:9f:b0:76:52:0a:2e:dc:0e:ca:f5:ad:
f2:03:f3:2a:18:c3:6b:0c:01:d0:09:8c:af:d3:ff:06:30:83:
d2:a4:2b:49:89:67:58:ca:17:93:35:25:a3:dc:74:c8:94:dc:
c1:02:26:db:ea:2a:fd:6c:ee:49:e7:ed:6f:14:1b:45:09:16:
40:fb:f5:0a:06:23:bd:42:f3:ac:d4:e1:18:dd:62:3d:f0:b0:
d9:79:e1:0f:e9:60:5f:f7:83:5a:d7:dd:c4:a2:7c:7d:ce:6d:
bc:8e:16:bf:6f:fe:2d:1a:5b:32:11:5e:50:92:3b:a2:a4:fa:
cc:10:c4:13:9d:a3:a4:1d:5a:14:f0:0e:b0:b8:9d:a7:47:f5:
1d:52:0a:98:73:b9:5b:37:72:58:b1:e8:d0:e1:df:c7:60:59:
31:78:66:00:58:d8:26:86:91:33:cc:66:7f:bc:05:f4:bc:37:
03:15:3c:72:8c:4b:d5:b0:f4:5a:f7:e9:ba:c7:79:d4:12:2d:
74:f7:62:9a:83:71:bb:1c:14:a2:ea:a4:db:e4:07:01:7d:a8:
5c:7f:2c:e9:1c:be:b7:65:8c:a7:ae:67:50:02:e1:49:ab:5d:
a7:57:6b:b7:04:d9:c7:33:59:2d:16:c1:5f:25:4e:c3:d7:d9:
0a:f9:fe:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:42 2025 by rpki-client