Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
File: L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft (raw, json)
Hash identifier: UPHBqPtcmuWnoJu70YxUWV0ljdrqcrSSVNTjUJhRJ28=
Subject key identifier: 0F:32:5F:80:14:8E:B9:96:4E:33:ED:FF:A1:B6:22:DD:BD:9D:03:82
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Certificate issuer: /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial: 0197470B7446F418E9EC83A5D5ACD1F66573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
Manifest number: 1590
Signing time: Fri 06 Jun 2025 21:00:22 +0000
Manifest this update: Fri 06 Jun 2025 21:00:22 +0000
Manifest next update: Sat 07 Jun 2025 21:00:22 +0000
Files and hashes: 1: L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl (hash: ys+nzmqAjscobWL/n0j6uGq2IMx2uSFJeK9Yd92sMDo=)
2: bRCOse-YwXmlb0_TSMXc_qYW3rA.roa (hash: WyPtlgmhHmNvXP6MvNpXQnH3k3dVLs2cy4XeQO/f/1I=)
3: kU21zPj_cDfQp59eNGbfgPnOKEw.roa (hash: KKCABhY5ZDh0u6CmKvmilt9DAebFs3J5DYDRFE17Ifo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:74:46:f4:18:e9:ec:83:a5:d5:ac:d1:f6:65:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Validity
Not Before: Jun 6 21:00:22 2025 GMT
Not After : Jun 7 21:00:22 2025 GMT
Subject: CN=0f325f80148eb9964e33edffa1b622ddbd9d0382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:67:91:8d:b7:cb:ce:17:b7:04:68:7e:3a:
85:32:f8:8c:3c:d1:5d:b6:bb:91:26:fb:54:f9:e6:
06:07:24:0a:9e:01:23:b8:92:90:b7:e2:4c:77:64:
74:0b:af:74:cd:a1:26:9e:6c:96:d3:67:c2:c4:85:
e0:60:4f:43:18:88:28:15:0d:46:f2:31:80:d1:8b:
f5:7b:26:7a:c6:69:00:8b:5e:a6:40:2f:95:e0:ed:
b8:d8:5a:f2:64:50:73:ca:23:17:2e:63:3f:50:b5:
f2:d1:20:13:37:82:eb:fe:e3:0c:e5:67:4e:cd:1f:
b3:9c:d3:26:56:bf:1b:98:da:8d:42:f8:3b:f6:e1:
92:a4:ac:c7:58:ad:6c:8a:b9:59:99:4c:3a:af:aa:
74:64:b0:5c:d7:92:0e:55:d0:64:44:af:83:34:3d:
00:aa:a3:ef:54:8e:f7:eb:5b:db:b8:09:ed:a4:26:
27:e7:3e:c1:f7:65:82:02:3f:b3:53:42:40:35:a6:
d5:cc:ca:03:80:7e:06:f5:95:a9:95:5c:f3:42:c8:
6d:bc:17:9f:7f:4c:09:98:44:1d:3b:b2:4f:38:48:
5e:a2:33:a8:bc:30:d2:11:95:cc:32:65:aa:0f:78:
f9:ce:b5:95:ac:b4:c8:25:0d:53:c5:de:ab:35:b6:
9d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:32:5F:80:14:8E:B9:96:4E:33:ED:FF:A1:B6:22:DD:BD:9D:03:82
X509v3 Authority Key Identifier:
keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:8b:14:74:ed:1a:63:2e:cb:d5:8a:b1:fa:27:3d:6a:b0:1a:
44:04:15:40:5b:5d:bc:f9:e9:da:a1:b4:f7:3c:47:69:62:eb:
f1:ca:d6:31:26:c1:79:1a:e0:a5:c1:31:74:da:ca:37:00:f1:
e2:46:f8:0b:0e:86:2b:c0:56:fa:b3:3d:91:da:89:ce:6e:3a:
72:d5:ac:d5:c4:5b:c9:04:a7:9b:42:19:9b:1a:17:40:17:90:
cb:78:33:a3:73:bc:c4:47:ad:26:fe:da:f0:6b:82:f9:22:25:
94:32:a9:ad:62:1a:67:0e:47:12:d2:2b:b6:71:57:70:01:28:
a0:df:a5:06:37:32:6c:d8:ad:33:f4:a1:65:bf:4d:b5:5b:68:
f0:ac:0e:0e:f7:14:91:76:0d:33:87:20:8b:44:3e:db:9d:b6:
2a:a0:b9:dc:de:e1:58:98:0e:5f:f6:83:1d:df:de:e8:7e:77:
24:76:c0:7e:b7:03:9c:b8:7c:9d:71:67:cb:70:cb:7f:51:7d:
33:65:5f:ab:ca:5d:4e:43:3c:08:a2:b8:b1:5f:c1:ae:cd:09:
0b:86:4f:b0:47:ec:c3:0e:9d:fc:eb:29:18:41:f3:c3:1e:dd:
0a:87:9d:d7:a6:51:5f:c4:a6:33:2f:a5:18:ba:e3:8e:d3:0f:
cf:6e:6e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:35 2025 by rpki-client