Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
File: L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft (raw, json)
Hash identifier: bbUTiLrLGaFqSB+opVyXhtiSJyhhBMdLiENJKJq8Xi4=
Subject key identifier: 72:F8:82:4A:F8:7F:B6:41:EF:1F:38:B9:63:A3:A3:EE:E3:64:45:0E
Authority key identifier: 2F:9C:C6:A3:F4:C2:38:19:30:BA:8D:1A:F0:D9:5A:BE:C0:96:81:E4
Certificate issuer: /CN=2f9cc6a3f4c2381930ba8d1af0d95abec09681e4
Certificate serial: 01974C9FB766B3CF184FB52FCB1168E8095A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 23:00:24 +0000
Manifest this update: Sat 07 Jun 2025 23:00:24 +0000
Manifest next update: Sun 08 Jun 2025 23:00:24 +0000
Files and hashes: 1: L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl (hash: Kk+N42lVSBVaBMKrQ9Q1le6h2Gk45azx76ctw4O0bIA=)
2: TYDdD2uxFpvnn7BeeyNRIhrYOWU.roa (hash: aAKeZOkxG98jWI5WqK0AaKLmvqEXTtJ8l1136XOUFDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:b7:66:b3:cf:18:4f:b5:2f:cb:11:68:e8:09:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f9cc6a3f4c2381930ba8d1af0d95abec09681e4
Validity
Not Before: Jun 7 23:00:24 2025 GMT
Not After : Jun 8 23:00:24 2025 GMT
Subject: CN=72f8824af87fb641ef1f38b963a3a3eee364450e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:44:ae:7b:e6:06:af:40:55:10:c1:2e:93:
84:37:47:91:9e:ff:71:8c:bc:67:cb:89:0d:b3:c0:
d6:74:87:eb:6b:68:4d:62:ed:b5:6e:a1:bc:c7:08:
05:a6:be:84:52:f4:a1:7b:3a:8f:a0:a4:8a:3a:b3:
e6:a3:d0:fe:d9:ec:55:d0:23:95:d2:fd:e9:4d:f1:
c6:fb:28:99:09:00:77:e6:48:e1:87:3d:b9:00:b6:
bd:8c:39:54:1e:01:82:bf:d5:39:75:94:6d:d3:28:
c9:02:30:16:1a:77:8d:dc:2f:54:2d:08:7a:8c:cf:
6c:50:c7:dc:c1:cd:9d:fc:dd:c0:ee:a0:11:71:a4:
0a:5b:1b:9a:07:37:7e:d9:28:ad:03:8d:ef:e6:e6:
8c:2d:a8:6e:0b:cc:6c:28:61:d5:2d:ad:c1:2e:b1:
42:94:4f:3b:78:f0:90:17:c6:9b:12:41:ca:9b:b8:
f7:29:ea:75:d9:d8:de:8d:12:93:28:7d:0a:6e:27:
b2:91:a0:f1:35:68:8c:49:e1:d6:4a:c7:96:2a:41:
25:17:81:31:3f:3e:3e:8d:23:15:6a:c4:ba:99:6d:
85:30:53:a7:b3:8d:47:e8:fd:de:0d:ab:a9:1e:20:
df:01:2a:f5:33:70:27:99:d3:40:88:c8:a7:73:8d:
30:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F8:82:4A:F8:7F:B6:41:EF:1F:38:B9:63:A3:A3:EE:E3:64:45:0E
X509v3 Authority Key Identifier:
keyid:2F:9C:C6:A3:F4:C2:38:19:30:BA:8D:1A:F0:D9:5A:BE:C0:96:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5zGo_TCOBkwuo0a8NlavsCWgeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/424dcb-1221-4e42-ba0e-a4dc5559d449/1/L5zGo_TCOBkwuo0a8NlavsCWgeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:38:0c:01:d3:66:28:d4:fe:78:7e:e6:af:cd:52:c5:14:37:
b7:4f:73:50:42:43:55:fd:42:f4:c9:e4:39:14:e2:3f:d8:2c:
15:7e:ae:84:9c:9b:8e:fe:89:22:ca:a4:5a:3a:1b:bd:cb:7a:
23:b7:8d:f4:49:e1:d7:79:c2:1a:64:c3:19:b5:e5:b7:66:db:
26:5e:03:da:99:1b:6e:30:1b:0b:3a:b9:12:d9:4f:b6:98:ea:
45:35:3e:99:03:b3:1d:69:5b:4b:57:74:86:cf:1a:4c:4f:80:
4e:d8:4f:55:7e:f3:b2:92:9c:e3:8c:54:d5:15:b5:50:23:72:
f9:e3:9d:de:25:6d:b7:36:04:72:40:76:fd:ff:5e:e5:3e:b0:
cb:27:31:e4:e8:b6:39:ad:8c:4d:2a:4f:49:c4:cd:d1:d7:38:
2a:1a:4e:a0:d6:a1:73:49:ee:28:64:b2:3a:04:58:79:5e:32:
a1:33:52:57:f3:e8:0f:22:b3:42:3d:ed:91:a2:77:63:11:0d:
a2:05:8c:85:7a:bd:bb:9c:3c:2b:6a:30:b7:ac:10:a1:b8:2e:
e0:bd:09:e3:93:37:92:d1:27:e7:e3:14:c9:7a:76:5a:ba:ad:
ec:96:c6:f6:0c:3d:e0:8a:bb:f5:03:fc:c3:56:3d:b8:6f:54:
00:1b:3f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:46:23 2025 by rpki-client