Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: xuKZOBNRsOtrsxSVrVXiRNnQXfl0rzC0c6EeG1ztI3I=
Subject key identifier: 1D:A9:78:18:3A:FC:F1:54:0E:1E:51:51:24:B2:DB:C2:20:40:DB:02
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 0197B70F26B691D9D691AF6EEA04A1A4C405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 03FC
Signing time: Sat 28 Jun 2025 15:01:52 +0000
Manifest this update: Sat 28 Jun 2025 15:01:52 +0000
Manifest next update: Sun 29 Jun 2025 15:01:52 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: F497m5tAe2mL+MjcG7GTLM240IbzMa1+jpbe9583Lfo=)
2: WxBvM9AzXvcGUxLQO7mjVfKZ8SI.roa (hash: MlBmuxBYdT/UhZRE0mpsF297g9H8Aa5t6UDiR3XGbFU=)
3: hGYvey0NL7kedoZnW8NGK9NdHUE.roa (hash: j/gjt7b1AkCBiDU1S/YvmfcXT2lTvik+0pgkIhPCV+w=)
4: zhUAq4pe-9N-dxfCl2d78EjPTb0.roa (hash: uyxGbVsUozb8CGUZeB9rmoW8CVbBZTPJHf+JK7e+rn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:26:b6:91:d9:d6:91:af:6e:ea:04:a1:a4:c4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Jun 28 15:01:52 2025 GMT
Not After : Jun 29 15:01:52 2025 GMT
Subject: CN=1da978183afcf1540e1e515124b2dbc22040db02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:03:bb:e7:35:88:cc:05:73:af:e6:62:90:
5d:3f:85:22:58:a3:85:b5:f5:2f:df:94:f2:84:e1:
81:7d:5d:79:8c:6a:6e:4f:36:1a:8d:ba:a5:65:74:
d8:4d:ef:30:23:17:6a:3f:dd:22:4f:50:db:fb:f1:
e2:d8:81:92:bd:1e:0b:1d:10:59:53:6c:74:a1:88:
89:b4:0e:fd:31:8a:fb:d6:e1:c4:17:8e:85:29:10:
14:4f:6f:7b:1b:e3:81:90:00:27:a4:82:31:91:e4:
b6:40:28:5e:d9:5b:93:ea:d8:1a:98:20:eb:f5:60:
00:75:3e:89:d2:32:60:70:dc:5a:b0:66:80:0e:36:
25:52:0f:f6:43:dc:c3:53:35:3d:0d:99:b6:0a:6e:
e7:48:04:2c:d5:e7:f0:03:2a:af:16:5a:c3:00:13:
71:aa:64:70:3c:ec:34:97:70:3f:12:31:39:0e:66:
c9:7d:4a:16:28:d4:89:63:4b:5d:bd:52:26:79:98:
7a:e9:bd:7c:70:1c:56:f9:fa:d4:47:7c:09:04:2b:
4e:83:f5:fa:64:c0:2a:5c:9d:9e:6d:50:a4:be:9a:
ce:19:74:7f:c9:f5:55:8a:53:e6:f7:1e:6d:f5:0d:
b0:0b:89:a7:72:5f:37:03:77:67:c8:67:b8:5c:16:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A9:78:18:3A:FC:F1:54:0E:1E:51:51:24:B2:DB:C2:20:40:DB:02
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:30:5e:db:a8:81:4d:b8:48:60:a1:8f:d5:1b:91:69:61:1f:
a3:c6:db:53:26:12:e9:7a:ba:c6:07:00:02:31:72:fb:b6:41:
f4:2c:ab:a8:76:12:e4:60:b9:53:34:81:fc:46:81:ff:15:b7:
67:58:58:e0:9d:bf:e0:02:c4:4b:6d:88:bd:65:93:ea:40:b3:
18:ee:fa:00:27:cf:39:d6:92:b0:06:85:42:05:05:89:ac:8b:
49:06:ba:21:9a:55:d4:2c:44:16:09:e6:de:08:ed:70:49:3b:
7b:8c:85:cd:94:33:2c:a7:5a:d0:e0:91:63:5b:6b:79:99:72:
0a:b3:c0:d5:de:14:c8:a5:87:ad:d5:b7:92:f1:24:8e:ac:c6:
e4:0b:6f:d5:78:a2:c9:9d:56:34:f2:b2:bd:be:bb:67:be:fa:
ce:c1:eb:45:ca:64:fa:6f:73:c1:be:67:1f:4b:b1:c5:36:c3:
ff:76:8e:d5:a4:dc:cf:a7:49:cc:71:00:34:99:de:5a:81:4e:
fa:cb:fb:80:68:51:f8:57:24:c1:ed:4a:2d:41:96:85:de:d3:
55:89:62:9d:d5:52:bf:7d:2c:e3:bf:97:d8:02:69:e9:7b:ec:
66:dd:02:f3:d5:82:a8:67:ff:f9:c9:6b:1a:ba:99:a3:52:27:
6f:9b:65:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:43 2025 by rpki-client