Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
File: L3W8c3nxFbBnFVLJuvK-2FvegYk.mft (raw, json)
Hash identifier: 0yf2op2PpUvStW9tKuDtnDJKRLw7kIP+WU9tZx0g3To=
Subject key identifier: D4:2F:36:BC:57:58:BD:22:19:D7:41:17:38:57:EE:47:26:02:2F:94
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 0197B745A1FDAD163E0C6CB9B773EDF939BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
Manifest number: 0D12
Signing time: Sat 28 Jun 2025 16:01:23 +0000
Manifest this update: Sat 28 Jun 2025 16:01:23 +0000
Manifest next update: Sun 29 Jun 2025 16:01:23 +0000
Files and hashes: 1: L3W8c3nxFbBnFVLJuvK-2FvegYk.crl (hash: S1Zk6jBU76eq4qCHkTCoG1zDusJosLfm/V51RJqjHKE=)
2: afVgxjAetRHf-32SfxI2xSGcZNY.roa (hash: 5+vaYR6gRkTLd8FndMtKaBU448DVyxpRSJ1taqs3pZY=)
3: qxyxQlVHUvofNzmf_XqptKckrdE.roa (hash: cKnrJAob0FIV4Kpod3nX7eoqdSn57f3LQGAcTD4ltHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a1:fd:ad:16:3e:0c:6c:b9:b7:73:ed:f9:39:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Jun 28 16:01:23 2025 GMT
Not After : Jun 29 16:01:23 2025 GMT
Subject: CN=d42f36bc5758bd2219d741173857ee4726022f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:ca:0e:04:95:e1:76:09:9f:ca:2c:24:c9:
61:52:f9:50:59:c5:fa:f3:38:c5:12:f6:1d:ab:6c:
9b:4b:cb:7a:a9:99:7b:39:c4:85:9e:93:01:09:b3:
8a:dc:76:27:9b:15:86:cc:7b:09:ac:68:1b:4a:49:
67:eb:5b:5a:98:4b:6f:1d:55:c3:bd:e9:fd:ab:ef:
44:13:40:a4:40:9d:11:83:65:9a:2e:1e:07:fc:f3:
2f:1e:0a:09:f6:7d:d2:16:3a:f9:6b:fd:5d:47:64:
66:72:ce:49:b5:d6:f4:78:f8:89:3e:96:91:69:55:
fb:8e:3b:b5:6b:ed:f9:da:e6:c1:66:f2:67:2f:d5:
52:dd:1d:ab:50:38:d9:73:be:8b:7e:12:40:0e:1b:
a6:e4:1d:60:8e:d5:72:17:01:86:f9:49:42:46:c7:
a4:ea:f6:12:d7:31:36:99:19:36:97:7f:9e:28:83:
8c:fb:93:df:a7:a8:08:fc:8f:24:da:40:74:ea:7c:
57:0c:82:12:e6:c2:b3:2b:5c:26:ec:45:98:f1:88:
1e:4b:d7:bc:34:32:06:c9:9d:d2:b1:1e:ce:68:37:
30:50:fd:a3:b3:8b:35:19:5b:9f:70:3c:64:a3:bf:
d1:5e:ad:0e:30:00:6b:1b:b6:26:99:0b:7d:2d:c2:
45:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2F:36:BC:57:58:BD:22:19:D7:41:17:38:57:EE:47:26:02:2F:94
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2c:d8:67:a3:19:82:4b:5a:7b:c9:42:7f:97:34:ef:04:25:
55:51:b2:f9:ef:33:51:09:a6:16:e7:1b:ec:d8:51:54:56:88:
51:8a:93:59:9a:9b:4b:95:c2:68:2e:dd:d5:3b:14:3b:2b:d7:
bd:a7:59:9c:e6:4b:a4:a6:95:14:90:94:ea:14:49:87:18:48:
ba:ca:d0:f8:ab:52:73:85:38:2f:63:8c:b4:e4:3d:d3:e4:68:
56:b9:a5:39:76:9e:1e:7e:25:37:ef:ac:26:26:4a:b4:7a:14:
98:de:db:1b:b5:3f:f4:26:bf:71:64:e3:7d:5d:10:5f:18:dc:
ca:a6:40:bb:bc:56:4f:6b:c1:31:14:41:44:f9:d5:f1:fa:fb:
08:e6:c3:aa:7c:e5:26:92:20:83:eb:60:10:eb:96:f4:b1:d3:
a4:3f:99:ba:28:45:f8:7e:cb:f1:c4:94:01:45:47:a8:5d:97:
7b:23:ed:53:91:58:d8:2a:1f:44:cb:64:78:68:79:6d:15:ae:
86:04:e0:3c:69:1f:16:57:94:1d:6e:e1:5c:b0:6b:7c:74:98:
02:e9:b0:bb:9e:fc:96:98:6b:ff:76:53:f3:20:fb:ba:4b:d9:
c3:c4:cd:17:9c:c5:c0:f0:ac:28:b5:17:8d:b5:6d:bf:0b:84:
c3:58:75:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:39:26 2025 by rpki-client