Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
File: L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft (raw, json)
Hash identifier: /kgYr2mDldD+ZgO91JVmFpbIzIUgI47EMlIGpxW6eTs=
Subject key identifier: 06:48:C5:64:3E:93:97:9D:5C:65:FD:16:D5:12:94:66:E2:25:D5:9C
Authority key identifier: 2F:C5:15:B7:1F:91:C6:E5:6A:14:AF:B4:EE:FD:95:06:1D:EC:49:D4
Certificate issuer: /CN=2fc515b71f91c6e56a14afb4eefd95061dec49d4
Certificate serial: 01974E8E25FC44ED0B96CAE0AF8AB7F22B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
Manifest number: 0F94
Signing time: Sun 08 Jun 2025 08:00:28 +0000
Manifest this update: Sun 08 Jun 2025 08:00:28 +0000
Manifest next update: Mon 09 Jun 2025 08:00:28 +0000
Files and hashes: 1: DLJprIPgvCAnO7QSJdl3zR0anWU.roa (hash: G99IKFXpxSMbCkWEKl23+BBs+CPi7iUKXtQNR3AhKak=)
2: L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl (hash: B2Ca7htQCqPMxx1q3p2dVLgacYh3ZT0f3MJEulqj65k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:25:fc:44:ed:0b:96:ca:e0:af:8a:b7:f2:2b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc515b71f91c6e56a14afb4eefd95061dec49d4
Validity
Not Before: Jun 8 08:00:28 2025 GMT
Not After : Jun 9 08:00:28 2025 GMT
Subject: CN=0648c5643e93979d5c65fd16d5129466e225d59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:57:17:1b:37:ca:ee:f1:fb:62:f5:07:81:d5:
0e:77:b5:6d:0c:a2:34:65:22:64:ac:b4:93:56:a0:
84:85:1a:ff:48:a4:0b:61:0f:a0:f2:6c:ef:87:9b:
b4:57:36:e6:52:6b:b7:f0:cb:7c:ca:cb:c2:ed:08:
74:c5:48:7d:cd:5b:8b:f7:82:43:c1:68:5d:11:95:
38:3e:ab:96:7f:bb:5b:bf:63:a6:ce:df:8f:bf:d0:
dd:ac:a0:f0:7d:d8:28:88:ff:bf:3a:07:92:cb:c4:
41:bc:26:05:71:45:11:b7:5d:8c:78:39:56:83:9e:
94:c4:74:2c:27:5c:64:9d:35:4d:14:6c:87:96:14:
08:7e:7f:ff:cf:a3:20:c3:26:f4:5c:fd:b8:f7:b4:
82:1f:5d:a0:f9:65:2b:29:96:de:b4:6a:87:3c:9f:
1d:b6:22:ad:d2:a0:2d:d5:71:0e:7f:4b:1c:16:11:
c4:23:d5:43:b5:45:67:e7:60:79:52:bf:79:62:7b:
59:c4:03:42:d2:2d:74:41:85:71:a7:64:f7:b1:7f:
ff:7f:08:13:23:25:5c:dc:46:bd:f1:58:06:e6:aa:
b0:b2:d9:c8:63:6d:21:19:46:02:ef:23:fe:e0:50:
7f:6e:83:35:2a:13:62:27:59:2b:ed:08:8c:64:b9:
26:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:48:C5:64:3E:93:97:9D:5C:65:FD:16:D5:12:94:66:E2:25:D5:9C
X509v3 Authority Key Identifier:
keyid:2F:C5:15:B7:1F:91:C6:E5:6A:14:AF:B4:EE:FD:95:06:1D:EC:49:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:39:b5:26:32:23:9b:92:34:d2:1c:e0:20:d6:bc:d8:33:5e:
5f:05:7e:cb:89:1f:56:e4:54:f4:dd:b6:e3:24:b7:af:a4:e9:
97:dc:9e:40:f3:0c:65:dd:f8:25:91:be:4f:00:ed:4c:73:c7:
c0:06:72:18:1e:03:96:2e:2f:7e:95:8b:81:aa:ff:c9:51:03:
b4:12:62:f0:5b:aa:40:ce:ce:63:9f:5e:e7:b6:b3:01:93:24:
f8:13:a4:9e:12:d5:7a:48:4a:7e:3a:e9:8f:4b:ce:e9:39:65:
e2:0c:56:a3:5d:dd:35:c6:e0:b6:79:96:6a:6e:c0:1b:7a:1b:
7e:a4:ab:c4:45:ca:f4:74:28:b6:a6:52:34:97:46:61:56:1d:
80:91:51:70:5d:a2:fb:49:61:36:30:db:7e:df:28:b5:7e:ad:
4e:75:48:e0:92:72:30:3e:49:46:56:f0:07:8c:b0:88:52:ad:
d5:fe:39:f7:17:bd:e8:a8:1a:3c:f5:09:55:f2:d2:b6:37:4d:
1f:37:51:ba:5f:2e:f4:33:bb:d7:bf:f2:c5:a8:e1:54:fe:dd:
dc:8a:1c:d9:6b:71:a3:1f:98:0d:2e:18:d4:4d:e2:83:6d:4c:
04:d0:fa:8e:51:93:de:4e:45:8d:f2:8d:21:29:0e:b5:7c:c2:
51:d2:37:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:33:40 2025 by rpki-client