Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
File: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft (raw, json)
Hash identifier: RFPTyyb9fLBAcI+XqZQzWfUQmhiqNawOr204b9X2uBg=
Subject key identifier: 75:19:9B:24:78:17:6B:CC:D7:8E:19:EB:D9:05:1A:AF:D8:01:1D:4E
Authority key identifier: 2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4
Certificate issuer: /CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
Certificate serial: 0198D515C13E2A3EDF608107C071777254E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
Manifest number: 06F7
Signing time: Sat 23 Aug 2025 04:00:29 +0000
Manifest this update: Sat 23 Aug 2025 04:00:29 +0000
Manifest next update: Sun 24 Aug 2025 04:00:29 +0000
Files and hashes: 1: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl (hash: 4ZL0rywAEJ3OXEepoin+7L5KAIMhCbIT7ipVMy1n6M0=)
2: upvfUH_YjoaPJNTn3nKwVUkJlqc.roa (hash: GMdb4SO6ufP1WGhwXYRzniR/Z7eY9kD3nmj07BQxDnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c1:3e:2a:3e:df:60:81:07:c0:71:77:72:54:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
Validity
Not Before: Aug 23 04:00:29 2025 GMT
Not After : Aug 24 04:00:29 2025 GMT
Subject: CN=75199b2478176bccd78e19ebd9051aafd8011d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:b9:e1:c3:9a:39:fb:33:54:21:27:16:5e:
37:e8:d9:64:d2:c3:64:6c:41:c5:50:22:2a:cb:b0:
87:b7:5a:3e:22:56:5f:cb:2b:f1:e2:8e:be:1e:e6:
8f:8e:40:e2:f3:fb:43:38:d2:96:5e:72:dc:39:c9:
76:c3:13:b3:05:fb:2c:d5:59:42:0d:9e:4b:86:03:
eb:7f:30:c4:8c:ac:eb:e6:9f:2d:2c:e2:11:ce:35:
e9:dc:6e:6a:70:88:de:87:bf:f8:8c:0e:8d:84:30:
9d:72:08:45:28:8a:72:93:3f:ee:f5:9d:57:cf:29:
21:d3:6a:0d:52:3a:4d:47:4c:f8:61:fa:fc:81:95:
93:fa:b7:51:0d:bc:8c:e7:ac:69:d0:9b:14:b9:c1:
70:0a:0f:39:6b:21:54:62:99:9f:7f:50:78:34:d4:
7a:77:91:10:b0:df:ec:bf:f4:55:28:32:7f:58:40:
55:ae:64:7a:d1:7f:5b:2a:cf:ae:a2:df:a7:f4:e0:
b7:62:06:48:0b:76:bc:76:b7:8d:d0:fd:32:54:b3:
51:b5:77:1e:b2:78:85:c8:c1:35:ac:53:9c:91:f7:
81:0d:25:03:35:37:6e:a5:23:7d:de:6e:75:63:f0:
8a:3c:8d:82:f3:87:2f:4d:34:79:4e:c0:c4:58:51:
ec:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:19:9B:24:78:17:6B:CC:D7:8E:19:EB:D9:05:1A:AF:D8:01:1D:4E
X509v3 Authority Key Identifier:
keyid:2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ba:05:03:7b:a6:3d:1b:11:b8:aa:24:f8:de:94:fd:98:a9:
96:13:be:ea:c7:b0:55:49:21:38:eb:3f:81:01:8c:54:bd:75:
0e:5e:cc:25:e8:dd:d4:3c:07:08:0a:d8:04:31:84:e2:35:d7:
be:a2:65:b8:9f:2c:0a:42:e7:04:0d:3f:d5:1c:bd:0a:2c:61:
88:2f:9a:7e:ee:aa:bc:30:fa:3a:0d:a2:73:8a:0a:94:ed:44:
6d:8e:3a:59:eb:40:94:91:73:69:6e:f7:1c:a6:db:36:71:a9:
d4:1f:98:a7:69:c2:04:2a:f4:de:f9:28:57:f3:9c:f9:50:67:
92:55:a5:71:da:97:bd:96:42:54:14:21:d6:b9:a5:3c:39:1f:
f7:e9:68:cf:21:66:34:09:c0:cc:f6:23:1c:e4:63:b1:65:f2:
23:8e:65:44:59:01:ee:47:de:99:41:e2:9b:10:62:62:75:a8:
1b:36:fc:a4:24:de:d6:fe:7b:8d:a7:27:ca:c1:9a:7c:e6:23:
1a:40:7d:35:4b:18:04:9a:3e:ca:9c:9b:04:71:30:99:f6:96:
6e:a1:c0:9d:29:c2:dd:db:5d:4e:57:20:04:ed:a8:41:93:66:
5f:67:19:d5:c1:40:db:47:be:03:9b:f3:9f:3e:f9:62:b7:43:
2c:8b:9f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:49 2025 by rpki-client