Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
File: L65BLP-oy1z7k7sxq16YkDh4TX8.mft (raw, json)
Hash identifier: vmcy7phpNSVCI1f40olQLLi7/8QLNN3UIdY+Zcj/CRY=
Subject key identifier: 98:A8:60:13:38:93:E2:81:B3:46:7E:63:AD:3B:C7:19:B2:FF:E7:A0
Authority key identifier: 2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
Certificate issuer: /CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Certificate serial: 0197504631AD0A9D485FEAF63D2022220E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
Manifest number: 04DD
Signing time: Sun 08 Jun 2025 16:01:06 +0000
Manifest this update: Sun 08 Jun 2025 16:01:06 +0000
Manifest next update: Mon 09 Jun 2025 16:01:06 +0000
Files and hashes: 1: JnNHu3mBlI4S34lBG5gMe1SKldU.roa (hash: kmsxUGCHTVtHjCmc68XKFbTUU312Q88Sy/CYV55BiQs=)
2: L65BLP-oy1z7k7sxq16YkDh4TX8.crl (hash: emp4W61/lWmFS/6TvdKTAhWLZqY9a/nhn56xP/Hg0dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:31:ad:0a:9d:48:5f:ea:f6:3d:20:22:22:0e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fae412cffa8cb5cfb93bb31ab5e989038784d7f
Validity
Not Before: Jun 8 16:01:06 2025 GMT
Not After : Jun 9 16:01:06 2025 GMT
Subject: CN=98a860133893e281b3467e63ad3bc719b2ffe7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6f:c1:93:dc:69:af:c7:ec:7b:00:c8:e3:66:
87:ec:d9:8d:2a:ca:9e:4a:8b:ab:10:85:3e:8c:63:
a5:97:2b:a3:84:40:42:47:5b:ea:08:da:98:8d:29:
54:36:0d:cc:52:d7:92:95:ab:ce:8e:fe:cc:4a:0b:
33:2b:a0:cb:a2:9c:a5:3e:d2:33:db:9d:1a:77:02:
20:de:86:98:ec:dc:81:9e:30:f7:5b:b4:dd:b9:f1:
4d:38:ee:cd:fd:fc:3f:7b:fa:66:53:8d:84:f6:58:
47:72:61:76:bb:14:12:cb:aa:98:a5:be:81:8b:b0:
75:7d:55:6a:8b:37:76:cb:91:17:ec:f9:77:3f:c5:
3c:02:54:14:b3:01:ba:c5:dc:56:58:f8:0b:04:b3:
b1:67:0c:4b:c4:1c:bd:fb:73:3a:b6:eb:e0:11:36:
57:a3:bb:b8:89:93:37:d8:e2:fd:ab:3d:21:f1:e3:
80:52:5f:33:8f:e4:dc:46:7c:7d:b3:3e:bf:f2:30:
af:75:b8:f7:7e:cb:06:f5:f9:d7:87:85:ac:b1:b3:
00:df:f2:fb:b4:2e:e9:8f:fd:9d:87:3c:37:ee:87:
ac:b5:32:9d:56:87:37:dd:a4:a8:cf:f7:c3:e3:20:
46:24:e6:7e:26:2a:62:35:3e:d4:e5:84:09:f9:b9:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A8:60:13:38:93:E2:81:B3:46:7E:63:AD:3B:C7:19:B2:FF:E7:A0
X509v3 Authority Key Identifier:
keyid:2F:AE:41:2C:FF:A8:CB:5C:FB:93:BB:31:AB:5E:98:90:38:78:4D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L65BLP-oy1z7k7sxq16YkDh4TX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/94d5a1-1cc3-48fc-99cc-830b22dd2dea/1/L65BLP-oy1z7k7sxq16YkDh4TX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:29:5c:ca:87:aa:06:ee:49:12:9e:7f:d0:55:9a:06:f6:72:
0d:37:a7:c8:71:4a:6c:e4:7b:5d:5f:e4:bc:50:69:ef:8e:69:
7f:63:53:13:26:54:e4:d5:30:5e:be:81:07:00:17:17:47:5f:
66:c7:7f:56:05:72:39:81:bb:24:2c:1b:a4:be:dd:a1:ac:8c:
1d:c9:2e:97:2c:ad:53:d4:99:c8:50:18:7a:d4:79:2c:65:56:
e9:76:86:48:fc:2d:b6:29:b1:30:60:04:c3:cf:46:17:b9:02:
a0:b3:76:f4:b0:c8:22:e0:11:e1:14:20:27:25:cc:f8:b6:8e:
64:27:a4:11:ae:70:22:6c:54:fe:8f:38:c8:7c:aa:de:df:a1:
e8:c7:05:5d:ce:1a:f2:e7:94:5b:90:b3:75:da:6a:21:11:5b:
73:52:fa:e2:9b:ac:ea:51:87:cb:82:81:af:87:dd:af:68:2c:
2c:8b:ad:89:80:83:e9:08:8f:35:93:5a:af:44:76:72:9d:e0:
01:be:91:9d:ec:00:19:b9:17:cc:b1:e8:a7:26:f7:59:40:d1:
bc:81:90:ad:97:e9:bc:de:56:9f:10:ba:3c:af:f2:42:1f:be:
14:00:74:7a:36:f5:ce:e9:60:98:72:87:ca:b8:fd:79:9d:33:
52:b7:e2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:31:29 2025 by rpki-client