Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
File: L5FDTuFsYTNOwnDfVox3oLXeBSo.mft (raw, json)
Hash identifier: 9unFeMT3ADdUYTqKzOstLderVf+68IXw4yyklp5LQSI=
Subject key identifier: FC:0D:9D:4D:9D:1C:B2:B3:8C:BA:21:26:A4:BE:F2:18:1A:09:DA:A4
Authority key identifier: 2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A
Certificate issuer: /CN=2f91434ee16c61334ec270df568c77a0b5de052a
Certificate serial: 0197CA5E5BA70B2DADA36CFF003AA2566FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
Manifest number: 0CA4
Signing time: Wed 02 Jul 2025 09:01:10 +0000
Manifest this update: Wed 02 Jul 2025 09:01:10 +0000
Manifest next update: Thu 03 Jul 2025 09:01:10 +0000
Files and hashes: 1: L5FDTuFsYTNOwnDfVox3oLXeBSo.crl (hash: L7hptGoRB66z/LEwpX2+JtH44C6NvjbMpCakr990k4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:5b:a7:0b:2d:ad:a3:6c:ff:00:3a:a2:56:6f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f91434ee16c61334ec270df568c77a0b5de052a
Validity
Not Before: Jul 2 09:01:10 2025 GMT
Not After : Jul 3 09:01:10 2025 GMT
Subject: CN=fc0d9d4d9d1cb2b38cba2126a4bef2181a09daa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d4:76:27:da:ac:40:28:73:d3:a7:13:2e:a1:
8f:b2:8d:40:88:78:01:00:bf:05:55:11:db:e3:6f:
37:1d:4c:b5:ff:5e:9a:3b:46:11:56:b0:7c:55:07:
51:7c:48:93:64:02:cb:19:3d:21:93:89:98:21:ff:
e1:04:85:5e:c0:25:78:92:ad:a9:a0:a4:63:e1:61:
6f:93:97:4e:6a:6b:8f:a1:55:50:4e:43:c2:80:32:
87:fd:ff:e9:88:13:11:f8:d7:14:be:d0:ae:1a:63:
2b:0a:ab:ca:62:92:af:cd:36:13:4b:47:29:02:99:
4e:13:33:a7:30:4b:0a:21:d8:5f:47:8e:64:ff:9c:
cc:2a:7c:67:42:01:ad:ee:b0:25:9e:36:9c:d6:43:
5d:de:7f:31:4e:88:64:9a:e3:1e:2e:62:c6:74:82:
b9:c0:96:c2:44:c1:89:8f:80:9e:25:c4:d3:b0:97:
bb:ec:65:04:45:4b:2f:18:e9:cb:fa:aa:e2:96:62:
15:1c:48:fa:e3:3b:3c:7f:79:d7:8a:a1:63:23:38:
27:65:3f:c4:a8:f3:24:ce:ba:46:f6:67:07:06:79:
fc:80:ba:c5:58:a4:98:d0:5d:13:8e:86:4f:4a:2b:
c2:24:b9:8e:7b:ae:03:9e:bf:75:6f:dc:a3:7a:47:
89:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0D:9D:4D:9D:1C:B2:B3:8C:BA:21:26:A4:BE:F2:18:1A:09:DA:A4
X509v3 Authority Key Identifier:
keyid:2F:91:43:4E:E1:6C:61:33:4E:C2:70:DF:56:8C:77:A0:B5:DE:05:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5FDTuFsYTNOwnDfVox3oLXeBSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/cd41ba-2ea7-474f-8941-5fdb3228fe1f/1/L5FDTuFsYTNOwnDfVox3oLXeBSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:85:1c:98:a9:2e:62:db:e4:f7:83:b1:b1:b6:5f:3b:ec:9f:
a3:04:11:bd:33:54:62:11:d4:69:d6:f8:77:07:33:13:d8:4a:
cf:aa:95:a3:ed:08:51:bb:d5:25:2a:2e:c6:6f:e6:93:2e:51:
a4:b0:55:5f:61:ff:ab:9f:31:28:41:33:98:5d:13:3f:68:98:
d9:4a:3c:25:41:08:36:d0:90:98:de:4a:6f:de:c2:48:01:dd:
3b:4c:12:fd:57:bf:0d:8e:11:02:ba:7f:ba:69:47:6e:a0:05:
f2:33:be:9f:08:ef:22:98:e4:7f:be:34:c5:ad:f4:3d:f6:a8:
15:79:f4:00:f7:5c:ba:c9:a2:0e:81:11:c5:f3:f8:c2:ec:d0:
95:7f:5b:45:cb:a1:1d:15:ee:b5:34:a2:4c:58:9a:50:a3:43:
ca:50:26:18:7a:b2:7c:20:23:28:cd:a3:b6:62:cd:7b:58:c4:
cc:d1:e2:4c:89:04:d4:49:cb:54:71:04:c4:58:cb:b9:b3:4d:
1f:68:cd:eb:fb:d2:00:e7:c1:61:e2:33:2f:54:a1:1a:c8:03:
73:b7:ac:59:f7:87:4f:eb:f4:38:fc:26:36:13:86:15:d5:1c:
c1:21:e4:37:22:cd:7b:3c:fa:4a:df:05:e7:03:f8:06:98:bf:
71:c0:26:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKXlunCy2to2z/ADqiVm/iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTE0MzRlZTE2YzYxMzM0ZWMyNzBkZjU2OGM3N2EwYjVk
ZTA1MmEwHhcNMjUwNzAyMDkwMTEwWhcNMjUwNzAzMDkwMTEwWjAzMTEwLwYDVQQD
EyhmYzBkOWQ0ZDlkMWNiMmIzOGNiYTIxMjZhNGJlZjIxODFhMDlkYWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdR2J9qsQChz06cTLqGPso1AiHgB
AL8FVRHb4283HUy1/16aO0YRVrB8VQdRfEiTZALLGT0hk4mYIf/hBIVewCV4kq2p
oKRj4WFvk5dOamuPoVVQTkPCgDKH/f/piBMR+NcUvtCuGmMrCqvKYpKvzTYTS0cp
AplOEzOnMEsKIdhfR45k/5zMKnxnQgGt7rAlnjac1kNd3n8xTohkmuMeLmLGdIK5
wJbCRMGJj4CeJcTTsJe77GUERUsvGOnL+qrilmIVHEj64zs8f3nXiqFjIzgnZT/E
qPMkzrpG9mcHBnn8gLrFWKSY0F0TjoZPSivCJLmOe64Dnr91b9yjekeJlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwNnU2dHLKzjLohJqS+8hgaCdqkMB8GA1UdIwQY
MBaAFC+RQ07hbGEzTsJw31aMd6C13gUqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVGRFR1RnNZVE5Pd25EZlZveDNvTFhlQlNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9jZDQxYmEtMmVhNy00NzRmLTg5NDEt
NWZkYjMyMjhmZTFmLzEvTDVGRFR1RnNZVE5Pd25EZlZveDNvTFhlQlNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9jZDQxYmEtMmVhNy00NzRmLTg5NDEtNWZkYjMyMjhmZTFm
LzEvTDVGRFR1RnNZVE5Pd25EZlZveDNvTFhlQlNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYUcmKku
Ytvk94OxsbZfO+yfowQRvTNUYhHUadb4dwczE9hKz6qVo+0IUbvVJSouxm/mky5R
pLBVX2H/q58xKEEzmF0TP2iY2Uo8JUEINtCQmN5Kb97CSAHdO0wS/Ve/DY4RArp/
umlHbqAF8jO+nwjvIpjkf740xa30PfaoFXn0APdcusmiDoERxfP4wuzQlX9bRcuh
HRXutTSiTFiaUKNDylAmGHqyfCAjKM2jtmLNe1jEzNHiTIkE1EnLVHEExFjLubNN
H2jN6/vSAOfBYeIzL1ShGsgDc7esWfeHT+v0OPwmNhOGFdUcwSHkNyLNezz6St8F
5wP4Bpi/ccAmvg==
-----END CERTIFICATE-----
Generated at Wed Jul 2 12:03:02 2025 by rpki-client