Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: BeJ02uDtq93pDWH9XeKtA12hu5BjAnHimoxiH8T68M0=
Subject key identifier: 91:A5:85:1E:F9:98:9E:4F:50:B2:5D:71:91:CC:BB:5F:64:28:4F:B4
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 0198D6CD53CD07E274B780976DD42A061FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 0491
Signing time: Sat 23 Aug 2025 12:00:37 +0000
Manifest this update: Sat 23 Aug 2025 12:00:37 +0000
Manifest next update: Sun 24 Aug 2025 12:00:37 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: WsbJGpZDZdmSnwsoT+jah+BbR2pDm/PkVGaCybFnMwI=)
2: WxBvM9AzXvcGUxLQO7mjVfKZ8SI.roa (hash: MlBmuxBYdT/UhZRE0mpsF297g9H8Aa5t6UDiR3XGbFU=)
3: hGYvey0NL7kedoZnW8NGK9NdHUE.roa (hash: j/gjt7b1AkCBiDU1S/YvmfcXT2lTvik+0pgkIhPCV+w=)
4: zhUAq4pe-9N-dxfCl2d78EjPTb0.roa (hash: uyxGbVsUozb8CGUZeB9rmoW8CVbBZTPJHf+JK7e+rn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:53:cd:07:e2:74:b7:80:97:6d:d4:2a:06:1f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Aug 23 12:00:37 2025 GMT
Not After : Aug 24 12:00:37 2025 GMT
Subject: CN=91a5851ef9989e4f50b25d7191ccbb5f64284fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cc:c9:dc:59:9a:ee:d5:ef:c0:2a:3a:80:d4:
0d:f0:35:40:f9:91:d7:93:be:0c:68:b7:c3:bf:3e:
86:52:ce:f9:14:6e:c8:1c:80:8c:b7:d2:d9:b7:30:
c7:66:2b:2d:4b:0a:2f:d1:31:21:a3:b8:4a:e7:80:
a2:0e:62:b1:75:93:bf:91:6a:d0:6d:d8:06:d6:3d:
f3:bd:d7:8f:27:87:6c:2e:a0:54:6a:27:18:77:9b:
9c:e8:38:1b:d6:9a:86:19:a9:83:e2:08:f4:6b:e9:
1c:7b:e9:47:10:8e:66:83:91:1e:f4:6c:cd:70:36:
f3:80:0c:e1:6c:e3:45:a5:03:1f:2e:ff:4a:a2:79:
c5:28:09:2f:db:70:ac:d3:cc:35:88:1d:0f:b4:e3:
1f:9a:47:81:46:ad:f4:0c:5e:50:58:7c:15:91:32:
38:56:54:21:6d:7e:6c:e5:78:28:0d:a1:11:51:0f:
3c:6c:81:53:db:d3:23:be:2d:c1:90:63:af:4d:62:
74:32:9e:c6:a4:cb:04:12:c2:54:2e:da:c3:31:30:
51:3e:71:61:60:9e:e8:69:a1:d3:83:23:e7:8c:44:
80:df:20:fb:27:d8:4f:12:a1:83:15:ea:0a:f5:9b:
4e:95:0b:a3:83:89:21:aa:f5:97:5e:8a:7a:12:ab:
eb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A5:85:1E:F9:98:9E:4F:50:B2:5D:71:91:CC:BB:5F:64:28:4F:B4
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ef:95:e1:44:e4:8d:61:e6:67:aa:1a:89:96:84:8f:30:c1:
3a:a8:cd:e4:3c:a7:34:18:b7:f1:de:2e:48:ab:5a:a7:20:1d:
2f:2a:60:1e:4d:0d:cd:fd:4c:23:5d:28:70:bb:76:2f:a3:c1:
e3:a2:04:68:dc:bc:b6:62:d5:55:e6:e8:1c:c9:a0:58:4c:97:
de:6b:b5:3a:33:0f:e0:dd:46:d4:f4:85:5b:e5:6e:86:5f:ae:
95:03:63:e0:58:21:12:c2:1e:05:8f:d4:33:f6:de:d8:46:e7:
70:c0:cb:05:11:ba:1e:97:2c:ff:af:8f:72:f0:3f:4b:05:d3:
12:2e:9d:dc:ae:51:1b:83:04:59:07:ca:cb:88:c6:6c:6f:38:
13:a6:40:12:c3:bb:53:7f:bd:cc:71:63:5b:49:b4:7d:e9:8f:
77:51:ef:e6:bc:f5:95:cd:18:c0:cd:bf:ad:27:5d:5e:cd:f7:
dc:9b:56:00:53:7e:90:68:dc:cc:b2:cd:2f:78:29:72:fa:f3:
52:fd:0a:ee:90:9f:5a:51:2b:24:3c:20:dc:8c:a5:b7:1c:ba:
9e:04:4c:f5:3e:b0:b2:ac:a6:29:4e:79:03:dc:3b:97:a5:76:
20:70:35:24:60:79:45:47:7f:32:36:91:fc:40:3c:2d:4c:ca:
8a:d7:2a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:35:13 2025 by rpki-client