Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
File: L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft (raw, json)
Hash identifier: Mq1DQXcigr2nnWZ31xTzApjlGGQ7RH8kRqQnR8ihw+8=
Subject key identifier: 4F:87:5C:57:6C:94:CD:B9:DC:D8:27:DE:D4:23:7E:46:7A:69:8B:6D
Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Certificate serial: 01974968469772B8A016CEF86AB2316F4BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
Manifest number: 0B4F
Signing time: Sat 07 Jun 2025 08:00:59 +0000
Manifest this update: Sat 07 Jun 2025 08:00:59 +0000
Manifest next update: Sun 08 Jun 2025 08:00:59 +0000
Files and hashes: 1: E5z0sS7nvixPBFyRI_RWT9Plr0w.roa (hash: SNlFw+9uypuF2ztoEgq8hVfftlXP+FQlnrdAhrNkFGE=)
2: L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl (hash: dj0SvhkcRaQmC3dYFS/ee5AIeJok2nnnZ7PkfkCgBOs=)
3: OqOCQtZBHzCV5Z0xJrS8FJFSEWY.roa (hash: xZeH8Q+yxnCI5oid4Rq8ssEGEdCZgg6NEVRbko+oKkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:46:97:72:b8:a0:16:ce:f8:6a:b2:31:6f:4b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46
Validity
Not Before: Jun 7 08:00:59 2025 GMT
Not After : Jun 8 08:00:59 2025 GMT
Subject: CN=4f875c576c94cdb9dcd827ded4237e467a698b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:78:2e:bd:3d:54:8d:06:6e:7e:e2:06:20:63:
f5:97:a6:25:e2:a7:e7:a1:4d:5c:5f:b6:fd:0c:09:
68:7f:7c:4d:08:01:d7:25:1c:3c:85:f3:f1:98:5e:
76:56:d3:6e:0f:23:15:7f:bc:48:df:c1:7d:2e:46:
18:f0:3d:43:ea:c1:60:9e:ce:9b:9f:6c:e0:b7:6d:
d9:5a:cf:4d:23:2b:f3:dc:e3:53:f6:9b:a1:2d:d5:
d3:00:d4:fe:e0:84:ae:fd:26:50:f0:ad:ce:13:b0:
c0:f9:16:62:c3:6c:ab:c7:fe:6b:46:1a:ad:ec:36:
f2:7d:b9:d6:6b:6f:9a:1f:f0:3a:4a:80:12:34:6b:
13:89:94:54:95:80:dc:77:84:19:19:a4:fd:1d:d3:
75:17:a2:05:bf:fb:e8:3f:d0:a2:73:8d:d6:e2:24:
bc:e4:2b:a4:6b:65:ea:c9:44:49:aa:a0:44:f1:5c:
30:9c:f7:4e:c6:5e:bc:9e:5d:56:a6:66:a0:0a:69:
82:6c:b2:2d:06:8b:a9:86:1f:76:5c:ea:0b:1d:a7:
81:e8:b3:0d:74:0b:96:7d:32:b2:67:41:03:b4:0c:
b4:5e:ee:cb:51:cc:49:f3:d9:78:b3:11:9a:6e:76:
8e:00:af:89:ec:a9:52:98:27:cb:5c:f3:fd:98:c1:
cd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:87:5C:57:6C:94:CD:B9:DC:D8:27:DE:D4:23:7E:46:7A:69:8B:6D
X509v3 Authority Key Identifier:
keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:51:6a:9f:aa:c4:c8:47:0b:94:43:8f:9a:80:87:eb:28:d3:
50:83:1f:56:30:16:ed:59:3b:68:c5:d1:1c:52:24:16:5f:00:
f6:bc:0d:93:25:da:ce:b6:8b:12:80:56:4b:3e:cb:8b:9d:f0:
ee:3b:97:a5:7b:99:6c:05:a5:89:cf:9b:e1:c9:60:57:1a:2c:
a4:e9:e7:a5:c1:f4:a0:ad:45:22:5f:0f:56:7f:3f:55:7c:44:
fc:c0:c7:69:60:c4:97:60:84:b9:be:90:8f:1d:29:ac:05:2e:
31:d1:46:7f:84:8a:a9:09:96:20:44:55:35:b2:6d:8c:ae:b1:
67:17:30:c5:a4:41:bb:ba:83:ae:5d:12:ee:15:d2:c9:45:f2:
8d:b4:c9:c1:54:c9:d3:86:90:31:80:ea:de:cf:b5:db:12:2e:
6e:da:e1:45:d9:59:a1:d3:ea:7b:75:14:8b:03:78:ce:05:6d:
3b:0d:3b:7e:d6:94:63:da:19:2d:8c:56:4b:bb:d7:03:4d:88:
cf:76:ae:b4:34:7c:36:81:05:36:21:ac:c2:1e:62:63:ac:a7:
6c:bc:d0:e3:c7:7b:fe:ad:2a:f8:4e:cf:bb:e3:e6:e4:24:db:
0a:3e:6e:8e:be:e6:3d:ed:38:5c:4b:de:3f:25:28:3e:62:49:
dc:89:fe:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:10:33 2025 by rpki-client