Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
File: L28OoBJ6bjkhlWljgL5bsEdLAd8.mft (raw, json)
Hash identifier: VJ2Lo5EfFusVh+Q6N1lg7QTrRdFgPShLJY98hUKtBjo=
Subject key identifier: 67:4B:71:86:D8:01:9F:26:2D:B4:D8:B1:D8:3A:AD:D2:D7:07:71:E8
Authority key identifier: 2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
Certificate issuer: /CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Certificate serial: 0196BC37059C4DA1A875263116DBFCCE1D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 22:00:44 +0000
Manifest this update: Sat 10 May 2025 22:00:44 +0000
Manifest next update: Sun 11 May 2025 22:00:44 +0000
Files and hashes: 1: L28OoBJ6bjkhlWljgL5bsEdLAd8.crl (hash: BZ2W3Fo2RnQDEC7pKcGQuRktxLWyP5KNiboxfCEPWYA=)
2: vqiF7KHwgC4hKANJve3WilTtCaA.roa (hash: ViWg/cb4ZOWXmU8DGPzhe6lMZyYPSAoJx2DnUl9cMUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:05:9c:4d:a1:a8:75:26:31:16:db:fc:ce:1d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Validity
Not Before: May 10 22:00:44 2025 GMT
Not After : May 11 22:00:44 2025 GMT
Subject: CN=674b7186d8019f262db4d8b1d83aadd2d70771e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7b:bd:c0:dc:d8:fd:a9:e1:c9:f2:f2:3a:7e:
30:92:4f:fc:e4:45:56:b1:c6:8e:75:60:db:b9:c4:
cf:fd:91:ae:11:b8:63:de:9f:31:ac:df:32:1b:d5:
9e:63:22:5f:60:e0:28:46:62:98:5c:19:35:08:94:
8e:f1:2a:8f:f5:46:3d:32:60:2b:88:cc:85:f6:22:
a3:0e:be:72:30:bc:f9:e3:47:08:c0:dd:6f:66:75:
a1:62:3d:e9:6b:1f:bb:29:f6:55:ed:f1:b7:ef:96:
a3:6b:6e:aa:c3:a8:58:29:93:5e:fb:8c:5d:b7:6c:
a2:90:fb:ea:25:6e:39:80:7b:6a:a9:3f:f8:89:ce:
e5:39:a5:e6:79:d1:6b:2b:08:42:23:01:17:07:e3:
51:15:08:03:6b:d3:8a:39:64:a0:38:23:37:f2:41:
6d:4b:80:6c:ec:5d:c5:40:e3:ae:b5:6c:ed:48:32:
b4:49:66:71:cd:69:d3:52:10:13:e0:2a:6a:c1:51:
84:77:64:3f:4b:e1:56:a3:b1:a5:e1:2b:f3:51:d9:
1b:74:2e:71:9a:31:e1:61:8b:c4:1d:8e:e6:43:d5:
b5:2b:8a:5a:8b:22:7b:e9:aa:06:35:79:37:c0:b7:
09:02:a4:3c:30:f6:2e:f1:e0:88:18:22:65:ac:a7:
75:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4B:71:86:D8:01:9F:26:2D:B4:D8:B1:D8:3A:AD:D2:D7:07:71:E8
X509v3 Authority Key Identifier:
keyid:2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2f:cc:e2:dd:55:bb:ee:1f:8f:a9:e5:b1:c5:9a:be:4a:eb:
bc:cf:e3:1f:3d:bc:72:6a:90:94:34:c5:c3:d8:d9:4d:b1:1c:
34:9f:8d:cc:2c:77:9b:ee:7e:c9:9a:91:65:a2:5f:a5:92:b7:
10:2c:0a:60:08:35:b9:15:69:77:63:41:a8:a2:41:a8:0b:85:
f2:18:f0:21:a7:fe:dc:26:50:cf:86:18:fd:95:bb:24:a3:f8:
78:20:64:60:39:3e:53:5e:4e:cf:32:84:a2:7d:5e:fb:ef:73:
ed:2a:13:7b:d1:48:a8:bd:e3:1c:cb:32:0b:7a:9b:e0:16:c2:
6a:7b:b3:50:29:8d:83:ca:7d:ef:83:90:e5:45:f9:c5:b3:b0:
1b:fd:13:26:a1:8c:13:21:ad:0b:ae:26:13:aa:a1:46:cb:f2:
3a:47:5f:02:66:f4:45:c5:6c:53:9c:7d:b7:03:16:81:a6:79:
61:26:e1:94:9b:e7:ff:4c:c5:4b:84:4a:fa:ec:bd:1a:f2:08:
81:99:5e:87:5b:0f:d5:16:b2:99:76:98:4c:95:f6:19:90:9a:
56:b3:1e:89:ce:23:b1:c4:ca:88:56:74:90:e6:a7:cd:04:b3:
2b:62:ce:6b:aa:b6:5b:ce:c2:a1:72:02:53:4d:e5:5a:08:7f:
9f:99:b7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:59:37 2025 by rpki-client