Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
File: l2umIpxFnXaV01KbEgfiwpsIQrE.mft (raw, json)
Hash identifier: 33Prwjd3rzXYaostXLt887WbGe4beZkTmZTi10OrA0c=
Subject key identifier: 4B:7B:D7:8B:4B:42:2E:15:CD:48:96:5C:B7:DB:CB:47:AD:3D:99:EC
Authority key identifier: 97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
Certificate issuer: /CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Certificate serial: 0197469DC82509D5C02D76AF70EDA850EAD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 19:00:34 +0000
Manifest this update: Fri 06 Jun 2025 19:00:34 +0000
Manifest next update: Sat 07 Jun 2025 19:00:34 +0000
Files and hashes: 1: 8i_tvPtWf70i2EmSEMpvUHFIlh0.roa (hash: 5i+xKeAIrkPv9y5KV9LM5WC3PSC5H7SyU1nhMQB9nho=)
2: l2umIpxFnXaV01KbEgfiwpsIQrE.crl (hash: NjAhD0+T4qI4DyzRdewaYBKus+fhHWq7ITOM6pvIXp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:c8:25:09:d5:c0:2d:76:af:70:ed:a8:50:ea:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=976ba6229c459d7695d3529b1207e2c29b0842b1
Validity
Not Before: Jun 6 19:00:34 2025 GMT
Not After : Jun 7 19:00:34 2025 GMT
Subject: CN=4b7bd78b4b422e15cd48965cb7dbcb47ad3d99ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:cc:ba:85:ef:34:b5:e7:fe:9e:66:4a:fa:
77:5b:f7:cb:19:47:4c:ec:49:58:b1:30:72:7b:44:
14:16:18:62:11:c8:09:fa:fe:90:2f:3d:10:4a:b4:
fd:2e:3d:3f:87:1a:9d:c7:8b:f9:9f:80:1b:92:bf:
f6:7b:c3:46:7f:f4:ba:46:15:bf:42:4d:d1:fe:30:
ca:68:be:d5:00:04:b3:a8:e5:0e:6f:65:70:67:a2:
a7:43:ec:3d:86:6b:fc:ad:62:30:7f:8f:b1:7c:56:
a0:87:3f:33:d3:b8:64:b2:36:24:c1:66:28:37:bf:
07:e6:6c:f6:1f:25:a2:fa:90:ea:e9:fb:6a:40:a0:
02:c9:8e:2b:ee:04:25:ef:14:e8:3c:dd:17:a0:71:
b2:2a:39:2b:4e:fc:1b:40:47:fd:ec:87:33:a4:30:
07:6d:c6:d3:03:6d:85:f9:be:40:0c:1f:04:33:d0:
fb:18:8e:7c:0f:18:64:83:92:7b:02:31:fc:de:9c:
13:59:3c:3e:e6:d1:43:81:21:09:bb:ea:46:bf:4a:
5b:49:5f:fc:d4:a7:af:e7:92:7c:be:17:2b:bc:1b:
90:e3:8e:8f:62:7e:1c:2a:98:1e:41:ca:14:a7:4b:
36:61:b6:0a:7f:20:59:f5:4a:2e:dd:bd:87:0f:9a:
0f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7B:D7:8B:4B:42:2E:15:CD:48:96:5C:B7:DB:CB:47:AD:3D:99:EC
X509v3 Authority Key Identifier:
keyid:97:6B:A6:22:9C:45:9D:76:95:D3:52:9B:12:07:E2:C2:9B:08:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2umIpxFnXaV01KbEgfiwpsIQrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d95f15-2a2d-465b-a822-c8ee46648dbf/1/l2umIpxFnXaV01KbEgfiwpsIQrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0f:a0:f9:d5:8d:b6:dc:87:1b:cb:25:1e:cf:7b:38:c0:31:
5c:54:72:e3:7b:bf:54:0a:bd:26:e4:87:9a:c2:79:c5:20:55:
99:f1:40:fa:bf:fe:f0:a2:c6:76:ab:07:42:7b:e7:37:ea:de:
8a:8b:5b:0a:5c:e1:0d:b7:5e:16:34:2a:a9:7a:f6:5a:94:16:
94:cd:d3:74:82:3c:e7:02:5f:77:e4:86:92:6c:4f:43:5d:f3:
53:6a:28:4b:60:dc:55:f1:15:ad:76:50:b0:68:f5:e7:b2:f4:
26:f9:61:72:5d:49:c9:a1:a1:64:5a:f8:42:a4:a1:b3:77:38:
04:9e:b0:ef:c5:96:53:99:41:16:df:96:99:b2:80:84:83:a9:
0c:3a:cb:96:fd:4c:2e:14:44:bf:eb:ad:c8:f0:cf:cc:39:31:
da:06:2d:ba:0e:9f:e6:52:0b:6f:3c:04:a1:7a:2c:7b:f6:a1:
cb:8a:0c:dc:35:a7:e7:3d:e3:3d:57:ce:92:84:c7:6e:ee:b3:
38:9f:f7:b7:96:0a:94:56:7c:c4:0d:df:3c:7c:ea:31:69:7a:
3f:43:1b:6a:4e:21:12:b1:33:37:05:c5:05:32:fc:6f:13:6d:
fb:43:f7:60:8e:35:4e:d8:4e:26:40:8d:1e:c7:fc:f0:82:16:
7b:e4:bb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:50:22 2025 by rpki-client