Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: 2parKSADy8KiZ4ZBCSQfk90G6TFmegM3Kui4K+EWEvI=
Subject key identifier: EE:E5:D4:21:79:A6:85:23:60:B1:6A:40:F4:11:7C:6B:62:AD:DC:CE
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 0196A6F8D6CDB0FD283BA850D07B25B10EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 0C85
Signing time: Tue 06 May 2025 19:00:47 +0000
Manifest this update: Tue 06 May 2025 19:00:47 +0000
Manifest next update: Wed 07 May 2025 19:00:47 +0000
Files and hashes: 1: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: pe+QKz/gBFmsovQllv56hNXy/pcT8FM2GN7Iqe20ZMc=)
2: afVgxjAetRHf-32SfxI2xSGcZNY.roa (hash: 5+vaYR6gRkTLd8FndMtKaBU448DVyxpRSJ1taqs3pZY=)
3: qxyxQlVHUvofNzmf_XqptKckrdE.roa (hash: cKnrJAob0FIV4Kpod3nX7eoqdSn57f3LQGAcTD4ltHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:f8:d6:cd:b0:fd:28:3b:a8:50:d0:7b:25:b1:0e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: May 6 19:00:47 2025 GMT
Not After : May 7 19:00:47 2025 GMT
Subject: CN=eee5d42179a6852360b16a40f4117c6b62addcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:c5:0a:fe:a3:f9:37:c2:83:e8:a6:2e:5e:
ab:80:c1:96:9a:e7:a6:16:92:e5:70:b3:d7:ad:af:
87:e9:f1:56:d4:21:32:15:24:af:ee:50:2b:8a:82:
77:78:06:53:8e:01:5c:16:fc:20:99:b0:fa:83:a4:
31:8a:7d:d3:81:30:b0:65:cf:5c:c8:4b:cf:e8:23:
d2:22:ad:d2:66:30:d6:42:6b:e8:30:db:c7:02:b7:
67:50:48:4b:df:7b:3c:17:38:f7:4e:b1:6b:2e:89:
e4:71:fb:03:32:d0:0b:a6:d7:30:47:a5:77:71:85:
36:d5:be:70:1d:8d:79:c2:92:31:0d:ba:75:07:30:
10:c8:22:55:f0:3e:47:c0:b0:75:14:87:ff:86:80:
d0:68:7d:67:90:22:f7:5d:6d:d1:0a:95:ec:f1:40:
1d:88:7e:aa:80:91:9d:69:5f:41:2c:48:8d:7f:6a:
f7:7e:b7:0c:a4:1e:23:65:cb:7d:d0:3e:d1:7e:1f:
3e:84:c8:31:4a:fd:1c:a2:5c:0e:91:a4:32:4f:66:
81:b0:da:68:0c:d4:c5:ee:f3:69:96:42:0d:a0:71:
c6:88:b3:c4:38:02:ef:b0:2c:d4:75:33:02:85:ca:
fe:7e:20:b7:e9:04:73:e7:15:02:61:84:43:41:a2:
e1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E5:D4:21:79:A6:85:23:60:B1:6A:40:F4:11:7C:6B:62:AD:DC:CE
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:67:31:ef:b2:39:2a:33:96:f9:a2:e5:ec:23:ec:41:55:4d:
b2:66:31:ae:15:c8:58:2e:50:76:a9:ea:0a:20:5c:b4:70:d9:
03:e4:c7:6c:25:bf:d4:8c:b0:27:af:22:36:4e:84:03:28:10:
ea:14:2f:9f:bd:9c:a4:79:f1:fc:f3:9d:00:0f:78:2a:19:a8:
4a:7f:c6:3c:ca:8e:ee:a1:b2:50:70:e6:13:c1:2e:87:77:01:
d8:5b:56:1b:f0:ca:34:1f:e9:90:50:62:bf:e5:2c:0f:2b:9f:
79:f9:31:e5:3c:83:08:02:3f:e3:0e:7d:2b:15:14:63:82:16:
0a:82:2b:e8:73:26:fb:da:d8:93:87:38:fe:75:af:69:93:04:
1d:b0:4b:b7:60:c5:28:d6:44:b6:f8:ce:58:53:c3:40:4f:eb:
df:ad:ba:55:5a:12:32:c5:51:53:80:d8:64:30:b0:e1:7f:a1:
bc:f5:2d:3b:56:27:1d:e9:4d:3f:5c:9e:45:d4:ee:e9:13:0c:
64:c3:81:11:07:c4:70:2f:9c:35:a1:12:05:7f:6b:0c:bb:9f:
c8:8d:0d:d6:73:5a:45:c4:bc:76:75:0d:54:86:2e:09:18:46:
2c:06:54:fd:cc:8c:20:ad:48:8f:aa:98:fa:b0:77:0f:9f:0e:
c5:f4:a6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:00:54 2025 by rpki-client